Personal Data Protection Clarification Text for Visitors

1. Data Controller Identity
In accordance with Law No. 6698 on the Protection of Personal Data (“KVKK”), Oligarch Tour (“the Company”) operates as the data controller. OUYA SEYAHAT ACENTASI DANISMANLIK VE TİCARET LIMITED SIRKETi

• Trade Registry No: 0649120181000001

• Website: www.oligarch.com

• Phone: + +90 546 250 85 95

• Email: admin@hagiasophiaticket.online

• Address: Yenidoğan Mh. Demirkapı Cd. Cumhuriyet İş Merkezi Blok no:34/36 İç Kapı No:1B10 Bayrampaşa-İSTANBUL

2. Categories of Personal Data Processed
We process the following categories of your personal data in a limited and measured manner:

• Identity Information: Name, Surname, Turkish ID Number, Citizenship.

• Contact Information: Telephone Number, Address, E-mail Address.

• Physical Security Data: Camera Recordings, Visitor Entry/Exit Logs.

3. Purposes of Processing Personal Data
Your personal data is processed for the following purposes, in line with the principles and conditions stipulated in Articles 5 and 6 of the KVKK:

• Ensuring the physical security and operational control of Company premises.

• Fulfilling legal obligations and responding to official requests from authorized public institutions.

• Managing visitor access and maintaining related records.

• Execating contractual processes and managing communication.

• Handling and resolving visitor requests and complaints.

• Pursuing legal rights and conducting necessary legal proceedings.

4. Transfer of Personal Data
Your personal data may be transferred to the following parties for the stated purposes, in compliance with Articles 8 and 9 of the KVKK:

• Legally authorized public institutions and organizations.

• Our direct/indirect group companies and affiliates.

• Third-party service providers for security, archiving, payment processing, and IT support.

• Our independent audit firms and financial advisors.

5. Method of Collection and Legal Basis
Your personal data is collected through both automated and non-automated methods, including verbal, written, and electronic channels (e.g., visitor registration systems, website forms, security cameras).

The legal bases for this processing are:

• Necessity for the establishment or performance of a contract.

• Compliance with a legal obligation to which the data controller is subject.

• Necessity for the legitimate interests of the data controller, provided such interests do not override your fundamental rights and freedoms.

• Necessity for the establishment, exercise, or protection of a legal right.

6. Your Rights Under Article 11 of the KVKK
As a data subject, you have the right to:

• Learn whether your personal data is being processed.

• Request information if your data has been processed.

• Learn the purpose of processing and whether it is used accordingly.

• Know the third parties to whom your data is transferred.

• Request rectification of incomplete or inaccurate data.

• Request deletion or destruction of your personal data under the conditions set forth by law.

• Object to any result against you that arises from the exclusive analysis of your data by automated systems.

• Claim compensation for damages arising from the unlawful processing of your data.

Application Procedure: You may submit your requests regarding these rights to our Company at the address above:

• In Person: By visiting our headquarters with a valid ID.

• Via Notary: Through a notary public.

• Online: By using the “Application Form to the Data Controller” available on our official website.

Your request will be finalized free of charge within 30 days at the latest. If the process incurs additional costs, the tariff determined by the Personal Data Protection Board will apply.

This clarification text may be updated in line with legal changes and Company policies.