Processing Of Personal Data Informative Document

Our Company, Bugece Turizm ve Organizasyon, demands a number of your personal data (name, surname, TRIN, age, date of birth, your city, address, gender, password of your account, e-mail address, invoice address, credit card or debit card, cell phone number, information of event preferred) in order to perform its obligations under the legislation including but not limited to Turkish Penal Code no. 5237 and the Law on Protection of Personal Data no. 6698, and to make collections, to issue invoices, to perform services, to make new event notifications, to make announcements of publicity, information or campaign, to remind before the event, determining use /member preferences and/or to carry out membership registration processes. Your personal data aforementioned is processed and protected in an environment which is not open to the public, in accordance with your explicit consent and the purposes stated in this informative document.

PURPOSES FOR PROCESSING OF PERSONAL DATA



Personal data can be processed in order for planning and execution of commercial activities, informing the authorized institutions and organizations from the legislation, in matters not included in our field getting payment services, performing services, carrying out transactions of returns and changes, collecting, creating your membership registration, making new event notifications, making campaign announcements, making reminders before the event, sending the event bulletin, determining user/member preferences, making special event announcements for user/member, recommending events, creating the user/ customer satisfaction, faithfulness and loyalty, improving user/member experience, providing special promotion, opportunity or benefit by analyzing member/customer preferences, likes and needs, issuing invoices, resolving user/member complaints, sending commercial electronic messages if you explicitly permit, planning and execution of the necessary audit activities and in accordance with the relevant legislation, planning of corporate sustainability activities execution, conducting activities to protect the reputation of our company, management of demand and complaint processes, planning and execution of corporate governance and communication activities, in accordance to rules of law and good faith and related, limited and restrained to the purpose of processing, with the principles stipulated in the applicable legislation or for the period required for the purpose for its’ processing.

Your personal data wholly or partially, whether automatic or non-automated can be processed through collection, saving, protection, amendment, storing, readjustment etc. Your personal data collected are not shard with third parties, used for any commercial purposes or sold with any non-operating reason.

TRANSFER OF YOUR PERSONAL DATA



Your personal data is shared in accordance with the law and good faith, accurate and, where necessary, up to date, specific, clear and legitimate purposes, linked to the purpose for which it is processed, limited and measured, in accordance with the principles of retention for the time required by the applicable legislation or for the purpose for which it was processed. Your personal data might be transferred to Ministry of Commerce, domestic/international/foreign/ international, public/private institutions and organizations, companies, consultants, or solution partners of our company and consultants or solution partners and other group companies, other authorized institutions and organizations, suppliers or subcontractors, the other person or organizations allowed by Turkish Commercial Code and other relevant legislation, may be shared with legal authorities, public and/or private law legal persons and other persons or organizations that are authorized or required by the provisions of other legislation, upon official request.

Your personal data can be transferred to third parties without your explicit consent pursuant to Articles 5 and 8 of Law on Protection of Personal Data.

METHOD OF PERSONAL DATA COLLECTION



Your personal data is collected in all verbal, written or electronically through our stores or website.

DELETION, DESTRUCTION, AND ANONYMIZATION OF PERSONAL DATA



Pursuant to Article 7 of the KVKK, although personal data are processed in accordance with the relevant legislation, personal data are deleted, destroyed or made anonymized by the Company upon the request of the person or automatically in case the reasons requiring processing are eliminated.

The procedures and principles regarding this matter shall be fulfilled in accordance with the KVKK and the Regulation on the Deletion, Destruction or Anonymization of Personal Data published in the Official Gazette dated 28 October 2017 and numbered 30224.

Personal data is deleted, destroyed or made anonymous within 3 (three) months of the date when our obligation to delete, destroy or anonymize personal data arises.

When you contact our Company and request that your personal data to be deleted or destroyed;

a) all conditions for processing personal data have been removed; Your personal data subject to the request will be deleted, destroyed or made anonymous. Your request will be finalized within thirty (30) days at the latest and you will be notified.

b) notifies the third parties if all the data processing conditions have been removed and the personal data subject to the request has been transferred to third parties; It is ensured that necessary transactions are carried out within the scope of the Regulation.

c) If the conditions for processing personal data have not been completely removed, your request may be rejected and explained in accordance with the third paragraph of Article 13 of the KVKK and you will be notified in writing or electronically within thirty days (30) at the latest.

YOUR RIGHTS PURSUANT TO THE TURKISH LAW ON PROTECTION OF PERSONAL DATA NO. 6698



As a data subject, you have right to;

a) Obtain as to whether or not personal data concerning you are being processed;

b) Request information as to processing if personal data have been processed;

c) Know the purpose of processing of the personal data and whether data are used in accordance with their purpose;

d) Know the third parties in the country or abroad to whom personal data have been transferred;

e) Request rectification in case personal data are processed incompletely or inaccurately;

f) Request the deletion, destruction or anonymization of personal data

g) in the event of deletion, destruction or anonymization of personal data; request notification to third parties to whom personal data have been transferred

h) Object to occurrence of any result that is to her/his detriment by means of analysis of personal data exclusively through automated systems

I) Request compensation for the damages in case the person incurs damages due to unlawful processing of personal data

You can exercise these rights via contact information (e-mail, call center etc.) in website.

E-mail address: [email protected]



Telephone Number of the Call Center: 0850 340 4323



Non-personal data is the data of that you cannot be recognized. These data can be processed for all kind of purposes and shared with third parties without your consent.