Purpose of the Personal Data Protection and Processing Policy:

As San-Tur Turizm Anonim Şirketi (Megasaray Hotels), we show utmost care and sensitivity regarding the security of your personal data. With this awareness, we attach great importance to the processing, recording, transferring, sharing, and storing of all kinds of personal data belonging to all individuals associated with our Company, including individuals who benefit from our products and services, in compliance with the Personal Data Protection Law No. 6698 (PDPL). The protection of personal data is one of the fundamental policies of our Company, and we have prioritized the confidentiality of personal data throughout the existence of our company, adopted this as a working principle, and instructed our employees to work in line with this principle.

As San-Tur Turizm Anonim Şirketi (Megasaray Hotels), our Personal Data Protection and Processing Policy aims to protect the data of our customers, prospective customers, employees, and employees of companies with whom we engage for business purposes, as well as other third parties whose data we obtain automatically. Our Company accepts and undertakes to comply with all responsibilities brought by the PDPL. With full awareness of this responsibility and in the capacity of Data Controller, we process, record, transfer, share, and store your personal data within the limits prescribed by official legislation as explained below. For all requests regarding the Personal Data Processing and Disclosure Statement, you can use the contact information below:

San-Tur Turizm Anonim Şirketi (Megasaray Hotels)
Kadriye Mah. Üçkum Tepesi Caddesi No: 8 /1 Belek / ANTALYA, Türkiye
Email: info@megasarayhotels.com

Our Company reserves the right to amend this Personal Data Protection and Processing Disclosure Statement at any time within the framework of changes that may be made in the official legislation.

Collection, Processing, Purpose, and Core Principles of Personal Data:

San-Tur Turizm Anonim Şirketi (Megasaray Hotels) attaches great importance to obtaining data collected or received from other companies in accordance with the law.

1. Always Based on Accurate and True Information: We ensure that all data within the Company is accurate, does not contain incorrect information, and is always kept up to date.
2. Limited Processing of Data: Data of individuals is processed only to the extent required for service and business purposes. Data is not processed or used outside the scope of business and service needs.
3. Retention of Data for Periods Specified in Laws: San-Tur Turizm Anonim Şirketi (Megasaray Hotels) retains data originating from contracts for legally specified periods. When these periods expire, the data is deleted or anonymized.

The Personal Data Protection and Confidentiality Policy of San-Tur Turizm Anonim Şirketi (Megasaray Hotels) has been prepared in accordance with the PDPL. In this context, your personal data may be collected by our Company through verbal, written, or electronic means, such as offices, branches, dealers, call centers, websites, social media channels, mobile applications, and similar tools, depending on the services, products, or commercial activities provided by our Company. As long as you benefit from the services of our Company, your personal data will continue to be processed and updated.



Furthermore, your personal data is processed by San-Tur Turizm Anonim Şirketi (Megasaray Hotels) to enable you to benefit more effectively from the products and services we offer and to reshape our services according to your preferences and needs. The processing of your personal data may also serve purposes related to the determination of our Company's commercial and business strategies, the management of human resources policies, legal compliance processes, financial affairs, and ensuring the legal and commercial security of individuals in business relations with our Company.

Method and Legal Basis for Collecting Personal Data:

Your personal data may be collected in any verbal, written, or electronic form within the framework of the above-mentioned purposes to provide our products and services as specified by law. The personal data collected on this legal basis is processed, recorded, transferred, shared, and stored in accordance with the personal data processing conditions and purposes specified in Articles 5 and 6 of the PDPL, as detailed in the relevant section of this document.

Processing of Special Category Personal Data:

According to the law, data such as an individual's race, ethnic origin, political opinion, religious, sectarian, or other beliefs are considered special category personal data. San-Tur Turizm Anonim Şirketi (Megasaray Hotels) takes sufficient precautions determined by the Board in addition to obtaining the consent of the relevant person when processing special category personal data.

To Whom and For What Purpose Processed Personal Data May Be Transferred:

Your collected personal data may be transferred to Şahinler Holding, group companies affiliated with San-Tur Turizm Anonim Şirketi (Megasaray Hotels), our shareholders, business partners, suppliers, legally authorized public institutions, and private individuals for the purposes specified in section (B) and within the framework of the personal data processing conditions and purposes specified in Articles 8 and 9 of the PDPL.

Rights of the Personal Data Owner Under Article 11 of the PDPL:

Under the PDPL, the relevant person has the right to be informed and to give consent before their personal data is processed, and after processing, they have the right to determine the fate of their data. If you submit your requests regarding your rights as a personal data owner through the methods specified in the "Personal Data Processing Disclosure Statement," your request will be finalized free of charge within thirty days at the latest.

Data Retention Periods:

In compliance with the PDPL, your personal data processed for the purposes specified in this “Personal Data Processing Disclosure Statement” will be deleted, destroyed, or anonymized when the purpose requiring processing no longer exists and/or the statutory retention periods expire.

Situations Where San-Tur Turizm Anonim Şirketi (Megasaray Hotels) May Process Your Personal Data Without Your Explicit Consent:

Pursuant to Article 5 of the PDPL, in certain situations, San-Tur Turizm Anonim Şirketi (Megasaray Hotels) may process your personal data without your explicit consent. These situations include cases stipulated by law, protection of public health or life, and legitimate interests, among others.

How to Make Requests Under the Personal Data Protection Law:

Pursuant to Article 13 of the PDPL, you may submit your request regarding the exercise of your rights by the method(s) determined by the Personal Data Protection Board. Alternatively, you may submit your request in writing. To do so, please complete the sample form available at www.megasarayhotels.com, sign a copy, and send it via registered mail or through a notary to the address of San-Tur Turizm Anonim Şirketi (Megasaray Hotels). You may also send the completed form and your identification documents securely via electronic signature to info@megasarayhotels.com or santur@hs02.kep.tr.