PDPL Express Consent Statement

Altunizade Hotel Management TİC. LTD. ŞTİ.

STATEMENT OF EXPLICIT CONSENT UNDER THE LAW ON THE PROTECTION OF PERSONAL DATA

In accordance with the General Information Notice on the Protection of Personal Data presented to you by Altunizade Hotel Management TİC. LTD. ŞTİ. (the “Company”) in compliance with the relevant provisions of the Law on the Protection of Personal Data No. 6698 (“PDP Law”) and within the framework of the Company’s Regulation on the Protection and Processing of Personal Data,

I hereby acknowledge and declare that my personal data, including identity information, address details, contact information, and other personal data related to the Company’s ability to provide its products and services to its customers under the best conditions, to ensure the reliable and uninterrupted provision of these products or services, to maximize customer satisfaction, to process payments, to carry out various procedures related to the aforementioned services, to manage and improve operations, to conduct promotional, marketing, advertising, and campaign activities for the mentioned products and services or other products and services, to inform customers about opportunities, campaigns, and other services, and to fulfill the obligations under contracts entered into with customers, may be processed by the Company in its capacity as a data controller, or by data processors authorized by the Company, provided that they take the necessary security measures; and that these data may be processed in compliance with the general principles set out in Article 4 of the PDP Law, particularly the principle of storing them for the period prescribed by law or as required for the purpose for which they were processed.

I acknowledge and declare that my personal data may be obtained, recorded, processed, securely stored physically or electronically for the appropriate period for the purpose of processing, preserved, modified, rearranged, disclosed, transferred in accordance with the law, taken over, classified, processed, or prevented from being used, and that I have been informed by the Company regarding the above-mentioned matters, and that I give my explicit consent within the framework of the PDP Law.

I also acknowledge and declare that, for the purposes mentioned above and in connection with these purposes, my personal data may be transferred by the Company to Company employees, representatives, group companies (the Company and/or its business partners, shareholders), legally authorized public institutions and organizations, independent audit companies within the scope of legal obligations and limitations, survey companies, business partners, and service providers with whom the Company collaborates or from whom it receives services in order to carry out the services and/or activities to be provided to me, and that I give my explicit consent to this.

Additionally, in accordance with Article 11 of the PDP Law and related regulations, I acknowledge that I have the right to apply to the Company to:

• Learn whether personal data related to me is being processed,
• Request information if my personal data has been processed,
• Learn the purpose of the processing of personal data and whether it is being used in accordance with its purpose,
• Know the third parties to whom personal data is transferred domestically or abroad,
• Request the correction of personal data if it has been processed incompletely or incorrectly,
• Request the deletion or destruction of personal data if the reasons for processing no longer exist,
• Request notification of the correction or deletion of personal data to third parties to whom the data has been transferred,
• Object to any negative consequences arising from the exclusive analysis of processed data through automated systems,
• Request compensation if I suffer damage due to the unlawful processing of personal data.

Furthermore, I confirm that the personal data I have shared with the Company is accurate and up to date, and I undertake to notify the Company of any changes in this information.

I give my explicit consent to the processing, use, and sharing of my personal data, including special categories of personal data as defined by the PDP Law, within the scope of the relevant process and limited to the purpose of processing, and to the storage of such data for the necessary duration. I acknowledge that I have been informed accordingly, and I undertake that I have read and understood this text, the Company’s Regulation on the Protection and Processing of Personal Data, and the Information Notice.