Personal Data Protection Policy

Data Controller: Fabay Turizm Yatırımları İnşaat İmalat Anonim Şirketi Saray Mah. Dr. Adnan Büyükdeniz Cad. 2 Blok No: 4 İç Kapı No: 9 Ümraniye/ İstanbul

This disclosure text has been prepared to inform you about the processing, storage, and transfer of personal data we obtain from you within the scope of communication activities carried out by Fabay Turizm Yatırımları İnşaat İmalat Anonim Şirketi (hereinafter referred to as “FABAY”), in accordance with the Personal Data Protection Law No. 6698 (“KVKK”), relevant legislation, and legal regulations.

Which of Your Personal Data Are Processed, and What Are the Purposes, Legal Grounds, and Collection Methods for Processing Your Personal Data?

Your identity (Name, Surname) and contact (Phone Number, Email Address) data, within the scope of communication activities, will be processed for the purposes of conducting communication activities, tracking requests/complaints, performing necessary research/examinations for providing support services regarding the subject of the request, and offering information and support services to you. This processing is limited to these purposes and is based on the legal grounds that it is directly related to the establishment or performance of a contract, making it necessary to process the personal data of the parties to the contract, pursuant to Article 5, paragraph 2, subparagraph (a) of the Law, and the legitimate interest of the data controller, pursuant to Article 5, paragraph 2, subparagraph (f) of the Law.

FABAY obtains your personal data through electronic forms available on social media accounts.

To Whom and For What Purposes May Your Personal Data Be Transferred?

FABAY may transfer your personal data, processed in line with the above-mentioned purposes and legal grounds, to:

● Authorized Public Institutions and Organizations, limited to the purpose of ensuring compliance with legislation and providing information to authorized public institutions and organizations upon a court order or request from authorized administrative authorities, in accordance with legal regulations and the legislation we are subject to, and
● Social Media Platforms whose servers are located abroad, for the purpose of carrying out storage and archiving activities.

Such transfers will only be made to the extent necessary for the realization of the relevant purpose, in compliance with the rules set forth in Article 8 regarding Transfer or Article 9 regarding Transfer Abroad of the KVKK, and by taking the necessary technical and administrative measures.

During the use of social media accounts, detailed information regarding your processed personal data can be accessed through the privacy policies of the respective social media platforms.

What Are Your Rights as a Data Subject?

Regarding your personal data, you have the right to:

● Learn whether your personal data is being processed,
● Request information if your personal data has been processed,
● Learn the purpose of processing personal data and whether it is used in accordance with its purpose,
● Know the third parties to whom your personal data is transferred, domestically or abroad,
● Request correction of your personal data if it is incomplete or incorrectly processed,
● Request the deletion or destruction of your personal data within the framework of the conditions stipulated in the KVKK legislation,
● Request that the third parties to whom your personal data has been transferred be notified of the correction of incomplete or incorrect data and the deletion or destruction of your personal data,
● Object to the emergence of a result against you by analyzing the processed data exclusively through automated systems, and
● Demand compensation for damages if you suffer damage due to unlawful processing of your personal data.

you have the right to.

How Can You Exercise Your Rights?

You can submit your applications and requests regarding your personal data, if you wish, by using the Data Subject Application Form:

● By sending it with a wet signature and identity-verifying documents to “Saray Mah. Dr. Adnan Büyükdeniz Cad. 2 Blok No: 4 İç Kapı No: 9 Ümraniye/ İstanbul”,
● By applying in person to FABAY with a valid identity document,
● By sending an email to the registered electronic mail address fabayturizm@hs01.kep.tr using a registered electronic mail (KEP) address and a secure electronic signature or mobile signature,
● By sending an email to kvkkbasvuru@fabay.com.tr using a secure electronic signature or mobile signature,
● By sending an email to kvkkbasvuru@fabay.com.tr from the electronic mail address previously notified and registered in our system.

You can submit it to FABAY.

In accordance with the Communiqué on the Procedures and Principles for Application to the Data Controller (“Communiqué”), your application must include your name, surname, signature if the application is written, Turkish ID number (passport number if the applicant is a foreign national), residential or business address for notification, email address for notification if available, phone number, fax number, and information regarding the subject of the request.

The application must be made to exercise the rights specified above and must contain explanations regarding the right requested to be exercised, clearly and understandably stating the matter requested in the application. Information and documents related to the application must be attached to the application.

While the subject of the request must relate to the applicant personally, if acting on behalf of another, the applicant must be authorized to do so and this authorization must be documented (power of attorney). If the application involves special categories of personal data, the applicant must be specifically authorized in this regard in accordance with Article 10 of the Regulation on Personal Health Data. Furthermore, the application must include identity and address information, and identity-verifying documents must be attached to the application.

Requests made by unauthorized third parties on behalf of others will not be evaluated.

How Soon Will Your Requests Regarding the Processing of Your Personal Data Be Answered?

Your requests regarding your personal data rights will be evaluated and concluded free of charge as soon as possible, and within 30 days at the latest; however, if the process requires an additional cost, a fee may be requested from you based on the principles specified in the Communiqué. Our response to your application will be sent to you primarily via email or postal mail to the address you provided in your application, and if possible, through the same method by which the request was made.

FABAY TURİZM YATIRIMLARI İNŞAAT İMALAT ANONİM ŞİRKETİ ELECTRONIC COMMERCIAL COMMUNICATION RULES AND DISCLOSURE TEXT

As Fabay Turizm Yatırımları İnşaat İmalat Anonim Şirketi (“FABAY”), we have prepared this Electronic Commercial Communication Rules and Disclosure Text to inform you about the sending of commercial electronic communications and the processing, storage, and transfer of your personal data within the scope of the Electronic Communication Law No. 5809, the Law on Regulation of Electronic Commerce No. 6563, and the Personal Data Protection Law No. 6698 (“KVKK”) and related legislation.

In this context, your contact information shared through electronic forms on social media accounts, if you give your consent, will be processed for marketing communication purposes; specifically, for conducting communication within marketing activities, planning and executing marketing processes, performing marketing analysis studies; and sending commercial electronic messages such as services, promotions, announcements, surveys, events, advertisements, etc., through channels for which you have given consent, including social media accounts, phone, SMS, and email. This processing is based on the condition of commercial electronic communication consent as per Article 6 of the Law on Regulation of Electronic Commerce No. 6563, and on the legal ground of explicit consent as per Article 5, paragraph 1 of the KVKK.

You may withdraw your explicit consent at any time; if you withdraw your consent for sending electronic commercial communications, it will be considered that you have withdrawn your explicit consent.

Your personal data/data will be used by FABAY directly or through data processors, and will be shared with FABAY’s business partners and suppliers for the realization of the stated purposes.

As data subjects, within the scope of Article 11 of the KVKK, you have the right to: You can submit your requests regarding your rights listed in Article [missing article number in source] according to the “Communiqué on the Procedures and Principles for Application to the Data Controller” through the channels specified in the Disclosure Text.