1Data Controller and Representative

Under the KVKK, your personal data will be processed by Karavan Tourism Travel and Transportation Inc. ("Our Company") as the data controller, as explained below and within the legal framework.

2Purposes of Processing Personal Data

Your personal data may be processed by our Company in accordance with Articles 5 and 6 of the KVKK for the following purposes:

• Compliance with legal regulations
• Execution of financial and accounting processes
• Management of company/product/service loyalty programs
• Legal process tracking and management
• Execution of communication activities
• Conducting business activities and audits
• Execution of purchasing and sales processes for goods/services
• Execution of after-sales support services for goods/services
• Conducting production and operational processes for goods/services
• Carrying out customer satisfaction activities
• Organization and event management
• Conducting marketing and analysis activities
• Execution of advertising/campaign/promotion processes
• Conducting storage and archiving activities
• Management of contract processes
• Tracking requests and complaints
• Execution of product/service marketing processes
• Providing information to authorized persons, institutions, and organizations
• Management of administrative activities
• Fulfilling legal or contractual obligations regarding the institutions we serve

3Transfer of Processed Personal Data

Your processed personal data may be transferred to our business partners, suppliers, affiliates, legally authorized public institutions, and private entities both domestically and internationally in accordance with Articles 8 and 9 of the KVKK, for the purposes specified in Section 2.

4Method and Legal Basis for Collecting Personal Data

Your personal data are collected based on your explicit consent, or if explicit consent is not required by law, only when necessary for our legitimate interests in a way that does not harm your fundamental rights and freedoms. Your data are collected in a limited and proportionate manner for the stated purposes.

5Rights of the Personal Data Owner under Article 11 of the KVKK

As a personal data owner, you can submit your requests regarding your rights to our Company. In such a case, we will process your request free of charge as soon as possible and no later than thirty days, depending on the nature of the request. However, if processing the request incurs a cost, a fee may be charged according to the tariff determined by the Personal Data Protection Board.

You have the right to:

• Learn whether your personal data is processed
• Request information if your personal data has been processed
• Learn the purpose of processing your personal data and whether it is used in line with that purpose
• Know the third parties to whom your personal data is transferred, domestically or internationally
• Request correction of incomplete or incorrect personal data
• Request deletion or destruction of your personal data if the reasons requiring processing no longer exist, even if it has been processed in compliance with KVKK and other relevant laws
• Object to any outcome that is to your detriment due to automated data processing
• Request compensation if you suffer damage due to the unlawful processing of your personal data

6Methods for Exercising Your Rights under Article 11 of the KVKK

To exercise your rights regarding your personal data, you can submit a written request to our Company by completing the Personal Data Protection Request Form and sending a signed copy, along with identification documents, to the following address:

Alternatively, you may submit your request via notary public, or send it electronically with a secure electronic signature to karavanturizmas@hs01.kep.tr or through the email address registered in our company records.