KVKK Information Text and Explicit Consent Statement

DEMO ACENTE TURİZM SEYAHAT ACENTASI TİCARET LİMİTED ŞİRKETİ PERSONAL DATA PROTECTION DISCLOSURE TEXT AND EXPLICIT CONSENT STATEMENT 1. DATA CONTROLLER Pursuant to Law No. 6698 on the Protection of Personal Data ("PDPL"), your personal data is being processed by DEMO ACENTE TURİZM SEYAHAT ACENTASI TİCARET LİMİTED ŞİRKETİ (TURSAB Certificate No: 1234) as the data controller, within the scope described below. Address : Hamitler Mh. Phone: 5550001122 Email: demo@bookops.com.tr 2. PROCESSED PERSONAL DATA The following data is processed to provide the package tour service: - Identity data: name and surname, Turkish National ID number or passport number and validity date, date of birth, nationality information - Contact data: phone number, email address, full address (including city/district) - Travel data: reservation records, flight/accommodation/transportation preferences, seat information - Financial data: payment amount and collection records - Special category data if required by the nature of the tour: information related to participation conditions such as health/allergy declarations 3. PROCESSING PURPOSES Your data is processed for the purpose of concluding and performing the package tour contract, conducting reservation and accommodation transactions, organizing transportation and transfer, establishing communication in emergency situations, fulfilling legal obligations (Law No. 1618, Law No. 6502 on Consumer Protection, tax legislation, law enforcement notification obligations), invoicing and maintaining accounting records. 4. LEGAL BASIS Identity, contact and travel data are processed under PDPL Article 5/2-c (conclusion and performance of contract) and Article 5/2-ç (legal obligation); special category health data is processed pursuant to PDPL Article 6/2 based on YOUR EXPLICIT CONSENT. 5. DATA TRANSFER Your data may be transferred to accommodation facilities, transportation companies, guides, insurance companies and authorized public institutions and organizations to the extent necessary for service provision. For international tours, transfer may be made to facilities and authorized authorities in the country of travel. 6. RETENTION PERIOD Your data is retained for the periods specified in the relevant legislation (minimum 10 years); upon expiration of the period, it will be deleted, destroyed or anonymized. 7. YOUR RIGHTS Pursuant to PDPL Article 11, you have the rights to learn whether your personal data is being processed, request information if it has been processed, learn the purpose of processing, know the third parties to whom it is transferred, request correction if processed incompletely or incorrectly, request deletion or destruction, object to processing and request compensation for your damage. You may submit your requests to the contact addresses above. 8. EXPLICIT CONSENT STATEMENT I have read and understood the disclosure text above. I hereby give explicit consent to the processing of my identity, contact, travel and (where required by the tour) health data for the purpose of providing the package tour service and to its transfer to the parties specified in the text. Name Surname : ____________ Turkish National ID / Passport No: ____________ Date : 12.10.2026