Clarification Text on the Processing of Personal Data

In accordance with Law No. 6698 on the Protection of Personal Data (“KVKK”), your personal data will be processed by OUYA SEYAHAT ACENTASI DANISMANLIK VE TİCARET LİMİTED ŞİRKETİ (“the Company”), acting in the capacity of Data Controller, within the scope described below.

a) Purposes of Processing Personal Data
Your collected personal data may be processed for the purposes of ensuring the legal, technical, and commercial security of the Company and its business partners, and for conducting the necessary operational activities to provide you with the services you request. This processing is carried out in compliance with the personal data processing conditions and purposes set forth in Articles 5 and 6 of the KVKK.

b) Transfer of Processed Personal Data
In line with the achievement of the purposes stated above, your personal data may be transferred to our business partners, shareholders, suppliers, legally authorized public institutions, and private individuals or organizations, within the framework of the personal data processing conditions and purposes specified in Articles 8 and 9 of the KVKK.

c) Method and Legal Basis for Personal Data Collection
Your personal data is collected through electronic media, such as our website, during the process of providing you with internet access and services. The collection is based on the legal grounds stipulated in Articles 5 and 6 of the KVKK. Your data is processed and transferred for the purposes explicitly stated in this clarification text.

d) Rights of the Data Subject under Article 11 of the KVKK
As a data subject, you have the following rights:

• To learn whether your personal data is being processed.

• To request information if your personal data has been processed.

• To learn the purpose of the processing and whether it is used in accordance with its purpose.

• To know the third parties to whom your personal data is transferred, domestically or abroad.

• To request the correction of personal data in case of incomplete or incorrect processing and to request that third parties to whom the data has been transferred be notified of this action.

• To request the deletion or destruction of your personal data if the reasons for its processing cease to exist, despite having been processed in line with the KVKK and other relevant laws, and to request that third parties to whom the data has been transferred be notified of this action.

• To object to any unfavorable result arising from the analysis of your processed data by automated systems.

• To claim compensation for any damages arising from the unlawful processing of your personal data.

You may submit your requests regarding these rights by completing the Data Subject Application Form available on our website and forwarding it to our Company via the specified channels. Depending on the nature of your request, it will be finalized free of charge as soon as possible and within thirty days at the latest. Should the process incur an additional cost, the fee tariff determined by the Personal Data Protection Board will apply.

Please Note: https://www.iyzico.com, which provides the virtual POS infrastructure, acts solely as a service provider for payment processing. Your payments are securely finalized through your bank’s virtual POS system.