Processing of Personal Data

VAKKO HOTEL VISITOR CLARIFICATION TEXT ON THE PROCESSING OF PERSONAL DATA

DATA CONTROLLER

The main purpose of the Law No. 6698 on the Protection of Personal Data (“Law”), which was published in the Official Gazette on April 7, 2016, is to protect the fundamental rights and freedoms of individuals, especially the privacy of private life, in the processing of personal data.

Residence43 Otelcilik ve Turizm İşletmeleri Anonim Şirketi (“Company”), as the data controller, attaches utmost importance to the fundamental rights and freedoms of individuals and in the processing of all personal data relating to natural persons associated with the Company, including those who benefit from our products and services, in accordance with the Law and shows maximum sensitivity to ensure their privacy and safety.

COLLECTION METHOD OF YOUR PERSONAL DATA

Your personal data is collected electronically, through your internet access within our Company, through our Company's website at www.vakkohotel.com , the [●] application, and the information you provide to us via our WhatsApp line and the forms you fill in, if you choose to contact us via our WhatsApp line in line with your express consent and through the forms you fill in the physical environment, your identity document, your license plate information, orally or through closed circuit cameras in our hotel.

PURPOSE AND LEGAL REASONS FOR THE PROCESSING OF YOUR PERSONAL DATA

Your personal data may be processed for the purposes specified in the Visitor Clarification Text on the Processing of Personal Data (“Purposes”) in accordance with the relationship you have established with our Company. In all cases, our company processes your personal data in accordance with the principles in Article 4 of the Law, in connection with the purpose for which they are processed, in a limited and measured manner. The purposes and legal reasons for the processing of your personal data are as follows:

Based on the legal reason that it is necessary to process the personal data of the parties to the contract, provided that it is

•Processing your identity, contact and customer transaction data in order to fulfill the obligations arising from the service contract, •Processing your identity, contact, request and complaint and customer transaction data for the purpose of updating customer contact information,

•Processing your identity, contact and customer transaction data in order to carry out the necessary studies and related business processes to benefit from the products and services offered by the company.

Based on the legal reason that data processing is mandatory for the legitimate interests of the data controller, provided that it

Processing your identity, contact and audio/visual recording data in order to ensure the security of buildings and facilities and/or

facilities,

Creating and tracking visitor records, processing your identity and contact data,
Processing your identity, contact and audio/visual recording data in order to ensure the security of fixtures and/or resources,
Processing your identity and contact data for the purpose of technical and commercial job security,
Processing your identity, contact, customer transaction, transaction security data in order to ensure the security of company operations,
Processing your identity, contact, customer transaction and finance data for the purpose of monitoring finance and accounting works,• Processing your identity, contact, request and complaint data in order to manage customer relations, ensure customer satisfaction, perform corporate communication activities and fulfill obligations arising within this scope,
Processing your identity, contact, finance, customer transaction, transaction security, request and complaint data for the purpose offollowing and executing legal affairs,
Processing your identity and transaction security data in order to carry out information security processes,
Processing your audio/visual recording data in order to ensure the safety of those in our facilities by making use of video camera

(CCTV) images, and to establish, enforce or defend our legal rights by taking photographs into account,

Processing your identity, contact, request and complaint data in order to track customer requests and complaints.

Based on the legal reasons that it is mandatory for our Company to fulfill its legal obligation as a data controller and as it is

Processing your identity and contact data in order to inform the authorized institutions and organizations in accordance with the relevantarticles of the Identity Reporting Law No. 1774,
Processing your identity, contact, customer transaction, transaction security, legal transaction and financial data in order to fulfill officialinstitution requests,
Processing your identity, contact, transaction security data in order to ensure compliance with the storage obligations stipulated in thelegislation,
Processing your identity, contact, customer transaction, transaction security, legal transaction data in order to respond to the relatedperson applications in accordance with the legislation and to perform the necessary transactions,
Processing your audio/visual recording data to assist in the prevention, detection and prosecution of criminal offenses by making use ofvideo camera (CCTV) images.

Based on the legal reason that data processing is mandatory for the establishment, exercise or protection of a right;

Processing your identity, contact, request and complaint, finance, customer transaction data for the purpose of receiving, evaluating andfinalizing your requests and complaints,
Keeping your identity, contact, customer transaction, finance, request and complaint, transaction security data during the general statuteof limitations in order to constitute evidence in possible future disputes.

If you have express consent,

Processing your identity, contact and customer transaction data for the purpose of planning and executing marketing and advertisingprocesses, conducting data analytics studies and special marketing activities for you.
Processing your identity and contact data in order for our company to communicate with you via SMS, e-mail, mobile application orphone for the purpose of promoting, reminding, informing and/or improving service campaigns.
In order to ensure that you can deliver all kinds of requests, complaints and requests to our Company via our WhatsApp line, in order forus to benefit from the functions of the WhatsApp platform, if you contact us on our WhatsApp line, transferring your identity, contact, request and complaint data to WhatsApp LLC residing abroad.

TO WHOM YOUR DATA MAY BE TRANSFERRED AND FOR WHAT PURPOSES

Your collected personal data can be transferred to;

Judicial authorities and similar legally authorized public/private institutions and organizations in order to inform the authorized institutionsand organizations in accordance with the relevant articles of the Identity Reporting Law No. 1774 and our other obligations arising from the legislation;
To our suppliers, from whom we receive services, for the purpose of communicating with you via SMS, e-mail, mobile application ortelephone for the purpose of promoting our Company's campaigns, reminding, informing and/or improving service, if you provide your explicit consent;
If you provide your explicit consent, your identity, communication, request and complaint data will be sent to WhatsApp LLC, residingabroad, in order to enable you to deliver all kinds of requests, complaints and requests to our Company through our WhatsApp line;

in accordance with the basic principles stipulated in the Law and in accordance with the rules regarding the transfer of personal data specified in Articles 8 and 9 of the Law, and the legal reasons for the processing of personal data stipulated in Article 5 of the Law.

YOUR RIGHTS STATED IN ARTICLE 11 OF THE LAW

to learn whether his/her personal data are processed or not,
to demand for information as to if his/her personal data have been processed,
to learn the purpose of the processing of his/her personal data and whether these personal • data are used in compliance with the purpose,
to know the third parties to whom his personal data are transferred in country or abroad,
to request the rectification of the incomplete or inaccurate data, if any, and to request the notification of the transaction made in thiscontext to the third parties to whom the personal data has been transferred
To request the deletion or destruction of your personal data in the event that the reasons requiring processing are eliminated, althoughit has been processed in accordance with the provisions of the law and other relevant laws, and to request the notification of the transaction made within this scope to the third parties to whom your personal data has been transferred,
to object to the occurrence of a result against the person himself/herself by analyzing the data processed solely through automatedsystems,
to claim compensation for the damage arising from the unlawful processing of his/her personal data.

The security of your personal data you have shared is ensured within the scope of the relevant legislation. You can send an e-mail to [kvkk@vakko.com.tr] to get information about your personal data and to exercise your rights pursuant to Law No. 6698 on the Protection of Personal Data and Article 11 of the Law, depending on the nature of your request, your applications will be concluded free of charge as soon as possible and within thirty days at the latest.

EXPRESS CONSENT FORM REGARDING THE PROCESSING OF PERSONAL DATA FOR MARKETING PURPOSES

Within the scope of the Visitor Clarification Text on the Processing of Personal Data; do you accept the processing of your identity, contact and customer transaction data for the purposes of planning and executing marketing and advertising processes, conducting data analytics studies and special marketing activities for you?

☐ I accept. ☐ I don’t accept.

COMMERCIAL ELECTRONIC MESSAGE SENDING CONFIRMATION FORM

Do you accept that our company communicates with you via SMS, e-mail, mobile application or phone for the purpose of promoting, reminding, informing and/or improving service campaigns, and sharing your data with our service suppliers, limited to the realization of these purposes?

☐ I accept. ☐ I don’t accept.

EXPRESS CONSENT FORM REGARDING THE TRANSFER OF PERSONAL DATA ABROAD

Pursuant to the Vakko Hotel Visitor Clarification Text on the Processing of Personal Data at the address

[https://www.vakkohotel.com/privacy-policy], do you agree to transfer your information to WhatsApp LLC residing abroad and to have your information obtained through this channel by Residence43 Otelcilik ve Turizm İşletmeleri Anonim Şirketi in order your personal data by

Residence43 Otelcilik ve Turizm İşletmeleri Anonim Şirketi, your identity, contact, request and complaint data can be sent to our Company through our WhatsApp line, all kinds of requests, complaints and requests, in order for us to make you benefit from the functions of the WhatsApp platform or in case you contact us on our WhatsApp line?

Answer "YES" to this message if you agree and want to continue the conversation via WhatsApp. If you do not agree, you can end the conversation and reach us via info@vakkohotel.com.