Explicit Consent Statement

1. Data Controller

Pursuant to the Law No. 6698 on the Protection of Personal Data (“KVKK”), your personal data may be processed by Dünya Kruvaziyer ve Turizm Seyahat ve Nakliyat A.Ş., acting as the data controller, within the scope described in this text and in accordance with the limits set by the applicable legislation.

2. Scope of the Processing Activity

This notice applies to the processing of personal data relating to employees, employee candidates, company stakeholders, company officials, customers, prospective customers, business partners, customers of the company and group companies, supplier employees, the personnel and representatives of prospective customers, and visitors to company locations. It covers all personal data processed by automated means or by non-automated means provided that such processing forms part of a data recording system.

3. Purposes of Processing Personal Data

Your personal data may be processed, within the personal data processing conditions set out under Articles 5 and 6 of the KVKK, for purposes including but not limited to the conduct of activities in compliance with legislation, the performance of finance and accounting processes, the management of loyalty processes related to products and services, the follow-up and execution of legal affairs, the conduct of communication activities, the execution and supervision of business activities, the management of purchasing and sales processes, the provision of after-sales support services, the execution of production and operational processes relating to products and services, the conduct of customer satisfaction activities, organisation and event management, marketing analysis activities, advertising, campaign and promotion processes, storage and archiving activities, contract processes, the follow-up of requests and complaints, product and service marketing processes, the provision of information to authorised persons, institutions and organisations, management activities, and the fulfilment of legal or contractual obligations towards the institutions to which services are provided.

4. Transfer of Personal Data

Your personal data may be transferred, for the purposes listed above and within the scope of Articles 8 and 9 of the KVKK, to business partners, suppliers, affiliates, legally authorised public institutions, and private persons located either in Türkiye or abroad, provided that such transfer remains limited to the relevant legal conditions and processing purposes.

5. Method of Collection and Legal Basis

Your personal data may be collected verbally, physically, and/or electronically from the relevant individuals, including employees, stakeholders, company officials, customers, prospective customers, business partners, customers of the company and group companies, supplier employees, the personnel and representatives of prospective customers, and visitors to company locations. Such data may be collected on the basis of your explicit consent where required, or, where explicit consent is not required under the law, on the basis of legitimate interest provided that your fundamental rights and freedoms are not adversely affected and that the processing remains limited, relevant, and proportionate to the purpose for which the data is processed.

6. Rights of the Data Subject

In accordance with Article 11 of the KVKK, data subjects have the right to learn whether personal data is being processed, request information regarding such processing, learn the purpose of processing and whether the data is used in accordance with that purpose, learn the third parties to whom personal data is transferred domestically or abroad, request the correction of incomplete or inaccurate data, request the deletion or destruction of personal data where the legal grounds for processing cease to exist, request that third parties to whom the data has been transferred be informed of such correction, deletion, or destruction, object to the occurrence of a result against the person by means of analysis of processed data exclusively through automated systems, and request compensation for damages arising from unlawful processing.

7. Application Procedure

If you wish to exercise your rights under Article 11 of the KVKK, you may submit your request in writing together with the documents necessary to verify your identity. Applications may be delivered by hand to Bağdat Cad. 401 / 1 Cemile Apt. D:21, Suadiye, Kadıköy, Istanbul, Türkiye, sent through a notary public, submitted by other methods permitted under the KVKK, or transmitted electronically through a secure electronic signature or via your e-mail address already registered in the company’s systems to dunyakruvaziyer@hs01.kep.tr.

8. Explicit Consent

Where explicit consent is required under the applicable legislation, the data subject accepts and consents to the collection, recording, storage, updating, processing, and transfer of personal data within the scope, purposes, legal grounds, and transfer conditions described in this text, provided that all such activities remain in compliance with Law No. 6698 and the relevant secondary legislation.