Customer KVKK Clarification Text

Entrance

(referred to as "Royal Park Travel Agency", "Company" or "We"), we take utmost care to ensure the confidentiality of your personal data and to process your data in accordance with the legislation while performing the services we offer to our guests. Within the scope of this clarification text prepared in accordance with Article 10 of the Law on the Protection of Personal Data No. 6698 (“Law”), we would like to inform you about the following issues:

1. How can we obtain your personal data?
2. Which personal data do we process?
3. For what purposes and on what legal grounds do we process your personal data?
4. For what purposes and with whom may we share your personal data?
5. What are your rights regarding your personal data and how can you use these rights?

How can we obtain your personal data?

As Royal Park Travel Agency, we can contact you, our guests, through many channels. For example

• During your visit to our agencies or branches,
• When you call our call center and leave your information,
• During your visit to our website or when you become a member and make a reservation;

   You can share your personal data with us during communications with our customer service or other Royal Park Travel Agency employees via e-mail. In addition, if your relationship with our company is realized through an intermediary institution, we may also obtain your personal data through these intermediary institutions.

Which personal data do we process?

• As Royal Park Travel Agency, we can process your personal data in different categories within the scope of the services we offer to our valued guests.
• Your identity and contact information; Name, surname, TCKN, passport, etc. your information and e-mail address, telephone number, mobile phone number, information contained in your identity, address information
• Your audio and visual recordings; Your photo, your call center records
• Your financial information; your financial records or payment information regarding the services you have received from our company
• Your current and past transaction information; your hotel or package tour preferences or travel information regarding your current or past reservation.
• Your request and complaint information; Written or verbal records of your requests and complaints regarding the services offered by Royal Park Travel Agency, or your special requests regarding an existing reservation.
• Your insurance information; Details on your travel insurance policy
• Your personal data of special nature; In case you have a health condition that may cause you to have special needs during your travel or if you request a reservation change or cancellation due to your illness, we may process your health information, which is in the nature of sensitive personal data.

For what purposes do we process your personal data?

As Royal Park Travel Agency, we may process your personal data for the following purposes and for legal reasons:

• In order to provide you with the products and services you have requested in the best way, we process it on the basis of the legal reason 'it is directly necessary or relevant for the establishment and performance of the contract' in subparagraph c of the 2nd paragraph of Article 5 of the Law. As Royal Park Travel Agency, we bring you many products and services, especially tour reservations. We process your personal data such as your identity, contact, request or financial information so that we can offer you the products and services you request or to make your membership through our website, and in this way, we monitor the making of your reservations, the operation process and your membership process. For example, we make hotel reservations for a package tour of your choice, buy your flight tickets on your behalf, inform the people who will meet you, and provide you with informative communications about your trip. If it is necessary to process your special data during the reservation process, we will process your data by requesting your explicit consent.
• In order to improve our product and service quality, the 'legitimate interest of the data controller' in clause f of paragraph 2 of Article 5 of the Law and from time to time the 'data subject has been made public by himself/herself in clause d of paragraph 2 of Article 5 of the Law' We are processing based on legal reason. As Royal Park Travel Agency, we are always looking for ways to provide better service to our guests. We carry out business development activities and analyzes for purposes such as increasing the quality of our products and services, measuring the satisfaction of our guests, getting to know our customers and their preferences better, and creating more efficient business strategies. We process your personal data in order to carry out these business processes. Or, we may process your personal information in the feedback you have given publicly on social media for the purpose of improving our products and services and measuring customer satisfaction.

• In order to carry out commercial communication activities, we process with your 'explicit consent' in accordance with the 1st paragraph of the 5th article of the Law. As Royal Park Travel Agency, we offer many products and services. We can send you notification content to introduce these products and services we offer and to inform you of innovations and opportunities that will excite you. It is entirely your choice to receive these notifications; You can give us permission to send these messages to you at any time, or you can withdraw your consent.
• In order to finalize your requests and complaints, based on the legal grounds of 'legitimate interest of the data controller' in clause f of paragraph 2 of Article 5 of the Law and 'fulfillment of the legal obligation of the data controller' in clause 3 of paragraph 2 of Article 5 of the Law. we are processing. Your requests and feedback are very important to us. We may process your personal data in order to evaluate your requests regarding how we can offer the services we offer you better and to solve the problems you experience or to take the necessary measures to prevent them from happening again.
• In order to create financial records, we process on the basis of the legal reason 'it is directly necessary or relevant for the establishment and performance of the contract' in subparagraph c of the 2nd paragraph of Article 5 of the Law. We may process your personal data while conducting the financial processes of our company. For example, your personal data may be processed during the issuance of invoices for the services we provide, the creation of financial records or the execution of financial audits.
• In order to carry out in-house activities, we process it on the basis of the legal reason 'legitimate interest of the data controller' in clause f of the 2nd paragraph of the 5th article of the Law. As in almost every company, we can process your personal data while conducting our business activities and creating records by conducting certain processes within the company. For example, we manage our information technology infrastructure, reward the performance of our employees or perform internal audit operations.
• In order to fulfill the legal obligations to which we are subject, we process it based on the legal grounds of 'fulfilling the legal obligation of the data controller' in paragraph 2 of paragraph 2 of the Law and "explicitly stipulated in the laws" in paragraph 2 of paragraph 2 of the Law. As a company, we are subject to many legal obligations. For example, we may process your personal data and share your information with authorized public or private institutions in order to fulfill certain obligations arising from regulations such as tourism, tax and insurance regulations. In particular, we may process your personal data in response to lawful information requests made by authorities such as judicial authorities, police forces, regulatory and supervisory authorities.

For what purposes and with whom may we share your personal data?

In certain circumstances, we may share your personal data with third parties. Below we summarize the parties with whom we may share your personal data and the reasons for sharing it. We would like to underline that, as Royal Park Travel Agency, we never share or open your personal data to unauthorized third parties for our own benefit.

The third parties with whom we may share your personal data and the reasons for sharing are as follows:

We may share your personal data with our business partners. We may share your personal information with our suppliers, such as hotels and similar accommodation service providers, companies that provide transportation services such as airlines or bus companies, insurance companies that provide travel insurance services, or companies that provide organization services, which enable us to offer you the products you receive within the scope of our package tour services. Our business partners, to whom we transfer your information, may be abroad, especially when you purchase tour packages that include international travel. In many cases, third parties to whom we transfer your personal data may also process your personal data as data controllers.

We may share your information with our suppliers. At some points where we communicate with you, we benefit from the services of third parties other than Royal Park Travel Agency. In this context, we receive services from suppliers in matters directly related to our services, such as sending commercial messages, managing our website, and providing our information technology infrastructure. However, we may share your personal data with lawyers in order to protect the legal and economic security of our Company. In these cases, we may transfer your personal data to suppliers.

We may transfer your information to financial institutions. We may share your personal data with banks or payment institutions to process payments for our services.

We may share your personal information with authorized public institutions or private individuals if legally requested. In accordance with our legal obligations to which we are subject, we may need to share your information with authorized public institutions or related institutions due to the insurance and tax legislation to which we are subject, routinely or upon request. For example, we may share your information with public institutions to respond to information requests submitted to us by the courts within the scope of criminal investigations or during tax audits.

What are your rights regarding your personal data and how can you exercise these rights?

As a personal data owner, you have many rights regarding your personal data in accordance with Article 11 of the Law. In this section, we would like to inform you about the rights you have and how you can exercise these rights.

The rights you have in accordance with Article 11 of the Law are as follows:

• You can learn whether your personal data is processed by us,
• If your personal data has been processed by us, you can request information about it from us,
• You can learn for what purposes we process your personal data and whether your personal data is used in accordance with these purposes,
• You can learn the third parties to whom we transfer your personal data in the country or abroad,
• If we have processed your personal data incompletely or incorrectly, you can request their correction and you can request that these corrections be forwarded to the third parties to whom we have transferred your personal data.
• Although we have processed your personal data in accordance with the Law and other relevant law provisions, in case the reasons requiring the processing of your personal data disappear, you can request the deletion or destruction of your personal data and you can request the corrections made in this context to be communicated to the third parties to whom we have transferred your personal data.
• If a result arises against you by analyzing the data we process exclusively through automated systems, you can object to this result,
• In case you suffer any damage due to unlawful processing of your personal data, you can request the compensation of the damage arising from unlawful data processing.
• You can exercise these rights by sending us your requests regarding your rights that we have listed above.