Personal Data Protection Disclosure Statement

NOKTA TURİZM SEYAHAT LTD. ŞTİ. / tourofistanbul.com

PERSONAL DATA PROCESSING DISCLOSURE STATEMENT

I. Subject and Explanation

At Nokta Turizm Ltd. Şti. (“Agency”), we place the utmost importance on the security of your personal data. As an Agency, we highly value the processing and safeguarding of all types of personal data belonging to individuals associated with the Agency, including our customers who benefit from our products and services, in accordance with the Personal Data Protection Law No. 6698 (“PDPL”). Fully aware of this responsibility, our company, as a “Data Controller” as defined in the PDPL, processes your personal data in accordance with the methods outlined below and within the legal boundaries specified by legislation.

II. Collection, Processing, and Purposes of Processing Personal Data

Your personal data may be collected through automatic or non-automatic means by our Agency, agencies with whom we have web system agreements, or via verbal, written, or electronic means through internet sites, social media platforms, mobile applications, and similar media. Surveys distributed by our Agency after tours, and information recorded during tour purchase processes, including voucher registration, are stored.

Your personal data may be recorded, stored, updated, periodically checked, reorganized, classified, retained for the necessary duration related to the purpose for which they were processed or as legally required, and shared with authorized public institutions and organizations, third-party real/legal entities located within or outside Turkey, service providers, suppliers, insurance companies, and subcontractors as required for legal or operational reasons. They may also be transferred abroad or processed to prevent their use when required for legal or operational needs.

While fulfilling tourism agency activities as per the provisions of the Law on Travel Agencies and the Travel Agencies Regulation, our Agency cooperates with third-party supplier companies and performs reservation registrations on your behalf for service provision. Accordingly, your necessary personal data may be shared with third-party suppliers, including accommodation firms, airlines, transportation companies (land, sea), car rental companies, insurance companies, transfer personnel, and other related individuals and institutions associated with the service provided.

Therefore, our Agency may process your personal data in accordance with the PDPL with authorized individuals, institutions, and entities and individuals and institutions permitted by tourism and consumer law legislation for data processing. This also includes our Web System Agencies, other related persons, and institutions for fulfilling our legal obligations and providing you with better service.

III. Method and Legal Basis for Collecting Personal Data

Your personal data may be obtained in any verbal, written, or electronic environment for the purposes outlined above, enabling our Company to provide its products and services within the designated legal framework. Your personal data collected based on the stated legal reason may be processed and transferred for the purposes listed in (I) above in line with the data processing conditions and objectives specified in Articles 5 and 6 of the PDPL.

IV. Rights of the Personal Data Owner under Article 11 of the PDPL

As customers and personal data owners, you may submit your requests regarding your rights under this Disclosure Statement to our Company using the methods outlined below, and our Company will process your request free of charge within a maximum of thirty days, depending on the nature of the request. However, if a fee is prescribed by the Personal Data Protection Board, the fee determined by our Agency's tariff will be charged.

In this regard, our customers have the right to:

• Learn if personal data has been processed,
• Request information if personal data has been processed,
• Learn the purpose of processing personal data and whether it has been used in line with that purpose,
• Know the third parties to whom personal data has been transferred domestically or abroad,
• Request correction of incomplete or incorrectly processed personal data,
• Request deletion or destruction of personal data within the framework of the conditions stipulated in Article 7 of the Law,
• Request notification of third parties to whom personal data has been transferred regarding the actions taken under Articles 5 and 6 above,
• Object to the occurrence of a result against the person by analyzing the processed data exclusively through automated systems,
• Demand compensation for damages incurred due to unlawful processing of personal data.

In accordance with Article 13, Paragraph 1 of the PDPL, you can submit your requests to exercise your rights listed above in writing or by other methods specified by the Personal Data Protection Board. Since the Personal Data Protection Board has not specified any methods at this stage, you need to submit your application to our Company in writing per the PDPL.

To exercise the above-mentioned rights, you can complete the form in the downloadable file from the link, include your identity verification information, specify the rights you wish to exercise per Article 11 of the PDPL, and submit a signed copy of the form in person to the address: “Ramada Kusadasi Resort and Golf Turkmen Mah. Gazi Begendi Boulevard No:42/1 09400 Kusadasi / Turkey,” or send it via notary, other methods stated in the PDPL, or with secure electronic signature to info@tourofistanbul.com.

Company Title: NOKTA TURİZM SEYAHAT ITH IHR LTD. ŞTİ.

Tel: +90 256 612 0935

Tax Office and Number: Kusadasi Tax Office 6310178486

Trade Registry Number: Kusadasi 4142

Mersis Number: 0631017848600015

Address: Ramada Kusadasi Resort and Golf Turkmen Mah. Gazi Begendi Boulevard No:42/1 09400 Kusadasi / Turkey