I hereby acknowledge that I have read and understood the Privacy and Protection of Personal Data Policy (the “Policy”) of Attaş Alarko Turistik Tesisler A.Ş. (the “Company”) on its website, all provisions stated below, as well as the rights stated in the Policy and granted to me by the Law No.6698 on the Protection of Personal Data (the “Law”) and that I know that I can apply to the Company as explained below regarding my rights.

Your Rights as the Subject

(a) Learn whether personal data has been processed, (b) if it has been processed, to ask for information on the process, (c) learn about the purpose of data processing, and whether it has been used to serve the initial purpose, (d) find out about the third persons the personal data was transferred to in the country and abroad, (e) ask for the correction of personal data if they have been processed incompletely or inaccurately, (f) ask for the deletion or destruction of personal data in line with the terms specified in Article 7 of the Law, (g) ask for the notification of third persons about the actions taken in response to requests under (e) and (f) above, (h) object to a conclusion against themselves reached through an analysis of the processed data carried out exclusively by automated systems, and (i) claim indemnification for losses should they incur a loss due to the unlawful processing of personal data.

Purpose and Legal Grounds of Processing Personal Data, Method of Transfer and Collection

Your personal data, considered within the scope of the Law will be processed in compliance with the laws by the Company and its call centers, affiliated companies, subsidiaries, and business partners acting on behalf of the Company, or through this website, as well as its social media accounts, hotel forms or any other written, oral or electronic channel not limited to these examples for any product-service promotion, advertising, communication, special offers, sales, marketing, and member registration, notification and execution purposes, as well as to provide services offered by the Company, respond to your questions, duly provide the accommodation service offered by the Company (such as obtaining and processing personal or private personal data in order to deliver services such as the selection of the location and type of the room, preference for food, bed and pillows, baby and child care services/activities and kids club), send to you marketing communications through your preferred channel of the content we think might be of interest to you such as newsletters, provide you with the opportunity to participate in surveys, lotteries, competitions and similar promotions (some of these activities might involve additional rules with more information on the way we use and disclose your personal data. Therefore, we recommend you read these said rules carefully.), complete your purchase, for instance, make your payment, ensure that your order is delivered to you, contact you about your purchase, provide the relevant customer service to you, for business purposes such as data analysis, audits, crime/fraud surveillance and prevention, security, new product development, testing, service development/improvement or change, identification of usage trends, assessment of the effectiveness of promotional campaigns, and execution and development of business activities, and for fulfilling accounting, billing, reconciliation, and collection procedures. With a view to realize all these, your personal and/or sensitive personal data will be saved and stored, updated, periodically reviewed, rearranged, classified, captured or processed in other ways as long as needed for the given purposes, and if needed, they will be shared with affiliated companies and its subsidiaries, as well as domestic and international business partners, third party service providers and suppliers for services such as web hosting, order processing, data analysis, provision of IT technologies and relevant infrastructure, payment transactions, customer services, credit card services, e-mailing, and auditing, and that it will be disclosed to the said parties, and transferred abroad. Your personal data will be processed within the scope of Articles 5 and 6 of the Law covering open consent, explicit requirement in the legislation, establishment and execution of a service agreement, establishment, use or protection of a right, protection of our legitimate interest as a Company and performing our legal obligations.

APPLICATION ADDRESS: Nisbetiye Caddesi, Ahular Sokak, No: 6, Etiler, Beşiktaş, Istanbul.

Unless a longer storage period is required or prohibited by law, we will store your personal data as long as needed for the purposes explained in this Policy. Your personal data will be stored for a maximum of twenty years.

Open Consent Text

As knowledgeable as to leave no doubt, I hereby give my open, informed consent as stipulated in Articles 5/1 and 6/2 of the Law that my personal data obtained by the Company can be saved and stored, as long as needed for the given purposes above, updated, periodically reviewed, rearranged, classified, captured or processed in other ways as long as needed for the given purposes for any product-service promotion, advertising, communication, special offers, sales, marketing, and member registration, notification and execution purposes, as well as the delivery of marketing communications and newsletters through the communication channel of my choice, for enabling me to participate in promotions such as surveys, lotteries and competitions, and for duly providing the accommodation service offered by the Company (such as obtaining and processing personal or private personal data in order to deliver services such as the selection of the location and type of the room, preference for food, bed and pillows, baby and child care services/activities and kids club), and that they can be shared with the Company’s affiliated companies and subsidiaries, as well as domestic and international business partners, third party service providers and suppliers for services such as web hosting, provision of IT technologies and relevant infrastructure, customer services and e-mailing, and that it can disclose this information to the said parties, and transfer it abroad.