PURPOSE OF THE PERSONAL DATA PROTECTION AND PROCESSING POLICY

Gekas Turizm ve Sağlık A.Ş. (“Company”), as the Data Controller under Law No. 6698 on the Protection of Personal Data (“KVKK”), has prepared this “Informative” letter to provide you with information regarding:

• The purposes for processing your personal data,
• To whom and for what purposes your personal data may be transferred,
• The method and legal basis for collecting your personal data,
• Your rights under Article 11 of the KVKK.

As the Data Controller, we process, record, transfer, share, and store your personal data within the limits imposed by applicable legislation. Our company reserves the right to update this “Personal Data Protection Information Text” at any time in accordance with changes in the applicable legislation.

COLLECTION, PROCESSING, AND PURPOSES OF PROCESSING PERSONAL DATA:

Our company, which operates in the fields specified in its Articles of Association, collects and processes your personal data verbally, in writing, or electronically due to relevant activities, regulations of the Tourism and Tax Administration, and concluded contracts.

Your data is used for:

• Providing and improving our services,
• Executing our sales, marketing, and other activities,
• Fulfilling obligations for information storage and reporting,
• Improving the quality of services we offer through customer relationship management applications.

Your personal data will not be used for purposes other than those stated above without your consent and will not be shared with third parties except for legal obligations and official authorities.

COLLECTION OF PERSONAL DATA – LEGAL BASIS:

Your personal data is collected through any verbal, written, or electronic means in accordance with legal requirements and our contractual obligations. Your data is processed under Articles 5 and 6 of the KVKK.

PROCESSING OF SPECIAL CATEGORIES OF PERSONAL DATA:

According to the KVKK, personal data concerning race, political opinions, religion, health, criminal records, etc., are considered sensitive. Our company takes appropriate security measures and processes them only with your consent.

RIGHTS OF DATA SUBJECTS:

Data subjects have the following rights under Article 11 of the KVKK:

• To learn whether their personal data is being processed,
• To request information regarding the processing of their personal data,
• To know the purposes for processing their personal data and whether they are used for such purposes,
• To know the third parties to whom personal data is transferred,
• To request correction of incomplete or incorrect data,
• To request deletion or destruction of their personal data if the reasons for processing no longer apply,
• To object to the analysis of data through automated systems,
• To request compensation for damages arising from the unlawful processing of their personal data.

Our company will respond to your requests within 30 days, considering the nature of the request.

For any inquiries or requests, you can contact us via email at info@gekasturizm.com.tr.