KÖRFEZ APART CLARIFICATION TEXT ON THE PROTECTION AND PROCESSING OF PERSONAL DATA Data Controller: Körfez Apart / Mehmet Yılmaz Address: Karagözler Mah. Fevzi Çakmak Cad. No:21 48300 Fethiye - Muğla, Türkiye Phone: +90 530 413 61 68 Email: info@korfezapart.com In accordance with the Personal Data Protection Law No. 6698 ("KVKK"), Körfez Apart attaches great importance to the protection of the personal data of our guests, website visitors, and business partners. With this Clarification Text, we inform you about the methods of collecting your personal data, the purposes of processing, the legal reasons, and your rights. 1. Your Processed Personal Data Within the scope of receiving services from our property or using our website, the following personal data may be processed: Identity Information: Name, surname, national ID number, passport number, date of birth, signature. Contact Information: Phone number, email address, residential address. Customer Transaction Information: Reservation dates, accommodation history, room preferences, additional services received. Financial Information: Billing information, payment method details (credit/debit card details are transferred directly to secure payment institutions and are not stored by us). Visual and Audio Records: Camera recordings taken in the common areas of our property to ensure security. 2. Purposes of Processing Personal Data Your personal data is processed for the following purposes: Executing accommodation and reservation processes and performing the service, Making mandatory notifications to the General Directorate of Security systems (KBS) in accordance with the Identity Reporting Law No. 1774, Managing in-house operations via hotel management and automation software (e.g., ElektraWeb, etc.), Executing finance, accounting, and billing processes, Managing guest relations and tracking requests and complaints, Ensuring the physical space security of the property, guests, and employees. 3. Transfer of Personal Data Your personal data may be shared with authorized public institutions and organizations (General Directorate of Security, legal authorities) to fulfill our legal obligations, with banks and payment institutions to carry out financial processes, and with our service providers (hotel management software companies, financial advisors, etc.) who provide infrastructure for our operational processes, provided that necessary security measures are taken. 4. Method and Legal Reason for Collecting Personal Data Your personal data is collected through online reservations made via our website, communications made via email or phone, forms filled out during check-in, and property security cameras, through automatic or non-automatic methods. This data is processed based on the legal reasons specified in Article 5 of the KVKK: "It is expressly provided for by the laws", "It is necessary to process the personal data of parties of a contract, provided that the processing is directly related to the execution or performance of the contract", "It is mandatory for the data controller to be able to perform his legal obligations", and "Data processing is mandatory for the legitimate interests of the data controller, provided that this processing shall not violate the fundamental rights and freedoms of the data subject." 5. Your Rights Under Article 11 of the KVKK As a personal data owner, you have the right to learn whether your personal data is processed or not, request information if processed, learn the purpose of processing, know the third parties to whom it is transferred domestically or abroad, request correction if it is incomplete or incorrectly processed, and request its deletion or destruction within the framework of the conditions stipulated in the law. You can submit your requests regarding your rights in writing to us via the communication channels specified above.