Explicit Consent Text

REGARDING PERSONAL DATA BELONGING TO CUSTOMERS

KVKK INFORMATION NOTICE

Our Company carries out personal data processing activities, for the purposes specified below, regarding the personal data of our employees, employee candidates, company stakeholders, company officials, customers, prospective customers, business partners, customers of the company and group companies, employees of supplier companies, personnel and representatives of our prospective customers, and visitors to our locations. These data processing activities cover all real person personal data subjects whose personal data is processed by automated means or by non-automated means provided that it forms part of any data recording system. In the processing and retention of your personal data, our Company acts in compliance with the Constitution and the “Law on the Protection of Personal Data” No. 6698, and takes the highest level of security measures by showing utmost sensitivity to ensure the security of your personal data. With this text, it is aimed to fulfill our obligation to inform you, arising from Article 10 of the “Law on the Protection of Personal Data” No. 6698, regarding the purposes of processing your personal data, the legal grounds, and your rights.

1. Data Controller and Representative Pursuant to the Personal Data Protection Law No. 6698 (“KVKK”), your personal data shall be processed by Karavan Turizm Seyahat ve Nakliyat A.Ş. (“Our Company”), acting as the data controller, in the manner explained below and within the limits prescribed by the legislation.

2. For What Purpose Personal Data Will Be Processed Your personal data may be processed by our Company, within the scope of the personal data processing conditions set out in Articles 5 and 6 of the KVKK, for the following purposes: Ensuring Compliance with Legislation, Conducting Finance and Accounting Processes, Conducting Loyalty Processes Related to the Company / Products / Services, Following Up and Conducting Legal Affairs, Conducting Communication Activities, Conducting / Supervising Business Activities, Conducting Goods / Services Procurement and Sales Processes, Conducting After-Sales Support Services, Conducting Goods / Services Production and Operational Processes, Conducting Activities Aimed at Customer Satisfaction, Organization and Event Management, Conducting Marketing Analysis Studies, Conducting Advertising / Campaign / Promotion Processes, Conducting Storage and Archive Activities, Conducting Contract Processes, Following Up Requests / Complaints, Conducting Product / Service Marketing Processes, Providing Information to Authorized Persons, Institutions and Organizations, Conducting Management Activities, and Providing Information to the Institutions We Serve Within the Scope of Responsibilities Arising from Legislation or Contracts:

3. To Whom and For What Purpose Processed Personal Data May Be Transferred Your processed personal data may be transferred, for the purposes specified in Article (2), to our business partners, suppliers, affiliates, legally authorized public institutions and private persons, both domestically and abroad, within the framework of the personal data processing conditions and purposes specified in Articles 8 and 9 of the KVKK.

4. Method and Legal Basis of Collecting Personal Data Your personal data is collected by our Company, based on the legal grounds stated in Articles (2) and (3) above, by obtaining your explicit consent or, where your explicit consent is not required under the Law, within the scope of our legitimate interest provided that it does not harm your fundamental rights and freedoms, only to the extent necessary and in a limited, relevant, and proportionate manner to the purpose for which it is processed. In this process, your collected personal data may be collected verbally, physically and/or electronically directly from the relevant person, namely our employees, company stakeholders, company officials, customers, prospective customers, business partners, customers of the company and group companies, employees of supplier companies, personnel and representatives of our prospective customers, and visitors to our locations. Personal data collected through these methods may also be processed and transferred, within the scope of the personal data processing conditions and purposes specified in Articles 5 and 6 of the KVKK, for the purposes specified in Articles (2) and (3) of this text.

5. Rights of the Personal Data Subject Listed in Article 11 of the KVKK As personal data subjects, if you submit your requests regarding your rights to our Company through the methods set out below, our Company shall finalize your request free of charge as soon as possible and no later than thirty days, depending on the nature of the request, pursuant to paragraph 2 of Article 13 of the KVKK. However, if the process requires an additional cost, the fee in the tariff determined by the Personal Data Protection Board may be charged by our Company. In this context, personal data subjects have the right to; - Learn whether personal data is processed, - Request information if personal data has been processed, - Learn the purpose of processing personal data and whether it is used in accordance with that purpose,

- Know the third parties to whom personal data is transferred, domestically or abroad,

- Request the correction of personal data if it has been processed incompletely or inaccurately, and request that the transaction made in this context be notified to third parties to whom the personal data has been transferred,

- Request the deletion or destruction of personal data in the event that the reasons requiring its processing cease to exist, even though it has been processed in accordance with the KVKK and other relevant legal provisions, and request that the transaction made in this context be notified to third parties to whom the personal data has been transferred,

- Object to the emergence of a result against the person himself/herself through the exclusive analysis of processed data by automated systems,

- Request compensation for the damage in case of loss due to the unlawful processing of personal data.

Pursuant to paragraph 1 of Article 13 of the KVKK, you may submit your request regarding the exercise of the above-mentioned rights to our Company in writing. In this framework, the channels and procedures through which you may submit your written applications to our Company within the scope of Article 11 of the KVKK are explained below:

In order to exercise your above-mentioned rights, you may submit your request, including the necessary information identifying your identity and your explanations regarding the right you request to exercise among the rights specified in Article 11 of the KVKK, by filling out the Personal Data Protection form and delivering a signed copy of the form in person together with documents identifying your identity to Halaskargazi Cad., 112 Floor:7 34373 Şişli / Istanbul, by sending it through a notary public or by other methods specified in the KVKK, or by sending the relevant form electronically to karavanturizmas@hs01.kep.tr with a secure electronic signature or via the email address registered in our company records.