DPLAJ RESIDENCE

INFORMATION TEXT ON THE PROCESSING OF YOUR PERSONAL DATA

As Dplaj Rezidans, a subsidiary of Dirisa Turizm İnşaat Sanayi ve Ticaret A.Ş., we highly prioritize the security of your personal data.

In this regard, in accordance with the Personal Data Protection Law No. 6698 (“KVK Law”) and relevant legislation, we take the necessary measures to ensure an appropriate level of security to prevent the unlawful processing and access to your personal data and to ensure its protection during the processes of processing and transferring personal data within the scope of our hotel and tourism activities. With full awareness of this responsibility, as the Data Controller, we process your personal data as described below and within the limits prescribed by the legislation.

This information text prepared by our Company was updated on 19/08/2019. In case of renewal of the entire Information Text or specific clauses, the effective date and version of the Information Text will be updated accordingly. The Information Text is published on our Company’s website (www.dplajrezidans.com) and made available for access by relevant individuals.

DATA CONTROLLER: As the Data Controller, we are the legal entity responsible for determining the purposes and means of processing personal data and establishing and managing the data recording system. With your explicit consent or, in cases where your explicit consent is not required, after providing necessary information, Dirisa, as the Data Controller, will begin processing your personal data while ensuring data security. While processing your personal data, we may authorize one or more data processors to ensure the required security level and have them process your data accordingly.

LEGAL BASIS, PURPOSES, METHODS OF OBTAINING, AND TYPES OF YOUR PERSONAL DATA TO BE PROCESSED: Your personal data may vary depending on the service, product, or commercial activity provided by our Company and may be collected verbally, in writing, or electronically through automated or non-automated methods via the Sales Office, Reception, Website, social media platforms, and similar means. As long as you benefit from our Company’s services, your personal data may be created and updated.

Your personal data may be processed by our Company in accordance with Articles 5 and 6 of the KVK Law and the provisions of the Identity Notification Law and other relevant legislation to provide and enhance the quality of our services, fulfill activities prescribed by public authorities and exceptions, conduct the company’s sales and marketing activities, and comply with obligations related to information storage, reporting, and notification.

Additionally, your collected personal data may be processed for purposes such as conducting necessary work by our business units to enable you to benefit from the products and services offered by our Company, recommending products and services customized according to your preferences, usage habits, and needs, ensuring the legal and commercial security of our Company and its business relations (administrative operations for communication, ensuring the physical security and supervision of company locations, evaluation processes of business partners/customers/suppliers, legal compliance processes, financial affairs, etc.), communicating regarding the products and services you have received or will receive, utilizing them in marketing activities, offering product/service proposals, conducting modeling, reporting, scoring, risk monitoring, developing new or existing products, identifying potential customers, and ensuring the implementation of our Company’s human resources policies.

SHARING OF YOUR PERSONAL DATA: Your collected personal data may be transferred domestically to our Business Partners, Suppliers, Company Officials, Shareholders, and legally authorized public institutions and private individuals within the scope of the purposes outlined above, in accordance with the personal data processing conditions and purposes specified in Articles 8 and 9 of the KVK Law.

This Information Text is an annex and an integral part of any contract and service request you sign with our Company.

DESTRUCTION OF YOUR PERSONAL DATA: Our Company retains processed personal data for periods determined by legislation, and if no specific period is defined, it is retained as long as required for the services our Company provides. After this period, personal data is retained only for the time required to serve as evidence in potential legal disputes. Once these periods expire, the relevant personal data is deleted, destroyed, or anonymized in accordance with Article 7 of the KVK Law.

YOUR RIGHTS REGARDING THE PROCESSING OF YOUR PERSONAL DATA: Under Article 11 of the KVK Law, you may contact our Company to request the following:

• To learn whether your personal data is processed and to request information if it has been processed,
• To learn the purpose of processing your personal data and whether they are used in accordance with that purpose,
• To learn the third parties to whom your personal data is transferred domestically or abroad,
• To request correction of your personal data if it is incomplete or incorrectly processed,
• To request the deletion, destruction, or anonymization of your personal data if the reasons requiring its processing cease to exist, pursuant to Article 7 of the KVK Law,
• To request notification of the transactions made under (d) and (e) to third parties to whom your personal data has been transferred,
• To object to the emergence of a result against you due to the exclusive analysis of processed data by automated systems,
• To request compensation if you suffer damage due to the unlawful processing of your personal data.

You can exercise your rights above in compliance with the KVK Law and the Communiqué on the Procedures and Principles of Application to the Data Controller published on 10.03.2018 and other relevant legislation, by filling out the application form available at www.dplajrezidans.com and submitting it:

• For Dirisa Turizm İnşaat San. Ve Tic. A.Ş.: By personally delivering a wet-signed petition to (Dirmil Mah. Flipper Sok. No:9EA Yalıkavak – Bodrum / Muğla) or sending it via a notary,
• Via Registered Electronic Mail (KEP): By emailing dirisa@hs01.kep.tr or kvkk@dirisa.com.tr.

If an application is made on behalf of another person, a notarized special power of attorney issued by the relevant person must be submitted.

Requests submitted properly to our Company will be processed within thirty days. If processing your request incurs additional costs, a fee determined by the Personal Data Protection Board (“Board”) may be charged. If a response to your application is provided via CD, flash drive, or other storage media, a fee not exceeding the cost of the storage medium may be requested.

Our Company may request additional information to verify the identity of the applicant and may ask for clarification regarding the submitted request. Our Company may reject the request of an applicant, providing justification, in the following cases:

• If the request is rejected under Article 14 of the KVK Law, if the response is found insufficient, or if no response is provided within the required period, the personal data owner may file a complaint with the Board within thirty days from the date of learning of the response, and in any case, within sixty days from the date of application.