This Information Notice has been prepared in accordance with Article 10 of the Law on the Protection of Personal Data No. 6698 ("KVKK") and the Communiqué on the Principles and Procedures to be Followed in Fulfillment of the Obligation to Inform.

The following tables set out which categories of personal data of the data subjects listed below are processed, the purposes of processing, legal grounds, and collection methods.

Data Controller:
Safaraq Travel Tourism and Organization Limited Company
Ziya Gökalp Mah. Süleyman Demirel Blvd. The Office Block No: 7e, Inner Door No: 67, Başakşehir / Istanbul

As Safaraq Travel Tourism and Organization Limited Company (“Safaraq”), we have prepared this Privacy Notice in order to inform you about the processing, storage, and transfer of your personal data within the scope of the Personal Data Protection Law No. 6698 (“KVKK”) and the relevant legislation.

Data Subjects:

• Employee

• Employee Candidate

• Intern

• Intern Candidate

• Potential Customers

• Natural Person Customers / Authorized Representatives of Legal Entity Customers

• Potential Natural Person Business Partners / Authorized Representatives of Legal Entity Business Partners

• Business Partner / Authorized Representative of Business Partner

Which Personal Data of Yours Are Processed and For What Purposes Are They Processed?

Employee
Detailed information regarding the personal data processed concerning employees is provided in a manner accessible only to our employees.
If you are a former employee of Safaraq, you may exercise your rights regarding your personal data that has been processed by choosing one of the application methods listed in this Privacy Notice.

Intern / Intern Candidate

Identity Information

Processed Personal Data

• Full Name

• Date of Birth

• Place of Birth

• Gender

• Turkish ID Number

• Photograph

• Signature

Purposes of Processing Personal Data
Execution of communication activities, execution of employee candidate/intern selection and placement processes, monitoring and execution of legal affairs, conducting activities in compliance with legislation, providing information to authorized persons, institutions, and organizations.

Legal Grounds for Processing Personal Data

• Where processing of personal data belonging to the parties of a contract is necessary, provided that it is directly related to the establishment or performance of a contract,

• Where data processing is mandatory for the data controller to fulfill its legal obligations,

• Where data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject.

Methods of Collecting Personal Data
Your identity information is collected through printed/electronic application forms, interviews, and documents provided by you.

Contact Information

Processed Personal Data

• E-mail Address

• Mobile Phone Number

• Address

Purposes of Processing Personal Data
Execution of communication activities, execution of employee candidate/intern selection and placement processes, monitoring and execution of legal affairs, conducting activities in compliance with legislation, providing information to authorized persons, institutions, and organizations.

Legal Grounds for Processing Personal Data
Same as above (identity information).

Methods of Collecting Personal Data
Your contact information is collected through application forms, CVs, and documents provided by you.

Financial Information

Processed Personal Data

• Bank Account Information

• IBAN

• Payroll Information (if applicable)

Purposes of Processing Personal Data
Execution of financial and accounting processes, conducting activities in compliance with legislation, monitoring and execution of legal affairs, providing information to authorized persons, institutions, and organizations.

Legal Grounds for Processing Personal Data

• Contract necessity (if internship agreement is established),

• Legal obligation,

• Legitimate interest of the data controller.

Methods of Collecting Personal Data
Collected through contracts, payrolls, bank account documents provided by you.

Professional Experience Information

Processed Personal Data

• Education Information

• Diploma Information

• Course Information

• Certificate Information

• Previous Internship Details

• Foreign Language Knowledge

• Computer Skills

• Competency Information

Purposes of Processing Personal Data
Execution of employee candidate/intern selection and placement processes, execution of application processes, planning of human resources processes, monitoring and execution of legal affairs, conducting activities in compliance with legislation, providing information to authorized persons, institutions, and organizations.

Legal Grounds for Processing Personal Data

• Contract necessity,

• Legitimate interest of the data controller.

Methods of Collecting Personal Data
Collected through CVs, application forms, interviews, and career platforms.

Physical Space Security Information

Processed Personal Data

• Camera Records

• Entrance/Exit Records

Purposes of Processing Personal Data
Ensuring the security of physical spaces, monitoring and execution of legal affairs, conducting activities in compliance with legislation, providing information to authorized persons, institutions, and organizations.

Legal Grounds for Processing Personal Data

• Legal obligation,

• Legitimate interest of the data controller.

Methods of Collecting Personal Data
Collected through security cameras and entry/exit records.

Special Categories of Personal Data

Processed Personal Data

• Health Information

• Criminal Record Information (if required)

Purposes of Processing Personal Data
Execution of employee candidate/intern selection and placement processes, execution of application processes, conducting activities in compliance with legislation, monitoring and execution of legal affairs, providing information to authorized persons, institutions, and organizations.

Legal Grounds for Processing Personal Data

• Explicitly stipulated in laws,

• Protection of public health, medical diagnosis, treatment and care, managed by persons under confidentiality obligation,

• Contract necessity,

• Legitimate interest of the data controller.

Methods of Collecting Personal Data
Collected through health reports, criminal record certificates, and official documents provided by you.

Student / Student Candidate

Identity Information

(Same structure as Intern/Intern Candidate – omitted for brevity)

Contact Information

(Same structure as Intern/Intern Candidate)

Financial Information

(Same structure as Intern/Intern Candidate)

Professional Experience Information

Processed Personal Data

• Education Information

• Profession Information

• Level of Education

• Diploma Details

• Course Information

• Certificate Information

• Previous Internship Details

• Foreign Language Test Results

• Computer Skills

• SRC Certificate Information

• Competency Information

(Purposes, legal grounds, and collection methods similar to intern’s)

Physical Space Security Information

(Same as Intern/Intern Candidate)

Special Categories of Personal Data

(Same as Intern/Intern Candidate, with health and criminal record details)

Business Partner / Supplier / Supplier Employee / Supplier Official

Identity Information

Processed Personal Data

• Full Name

• Date of Birth

• Place of Birth

• Gender

• Turkish ID Number

• Passport Number

• Photograph

• Nationality

• Marital Status

• Signature

Purposes of Processing Personal Data
Execution of communication activities, execution of contract processes, monitoring and execution of legal affairs, conducting activities in compliance with legislation, providing information to authorized persons, institutions, and organizations, supplier relationship management, logistics, operational processes, financial/accounting processes, and execution of business activities.

Legal Grounds for Processing Personal Data

• Contract necessity,

• Legal obligation,

• Legitimate interest.

Methods of Collecting Personal Data
Contracts, invoices, delivery notes, waybills, and information systems.

Contact Information

Processed Personal Data

• E-mail Address

• Work Phone Number

• Mobile Phone Number

• Residential/Postal Address

(Purposes, legal grounds, collection methods same as above)

Financial Information

Processed Personal Data

• Bank Account Information

• IBAN

• Invoice Information

• Payroll Information

• Financial Transaction Information

(Purposes, legal grounds, collection methods same as above)

Professional Experience Information

Processed Personal Data

• Education Information

• Diploma Information

• Certificate Information

• Professional Qualification Information

• Work Experience Information

• Job Title/Position Information

(Purposes, legal grounds, collection methods same as above)

Physical Space Security Information

Processed Personal Data

• Camera Records

• Entrance/Exit Records

(Purposes, legal grounds, collection methods same as above)

Special Categories of Personal Data

Processed Personal Data

• Criminal Record Information

• Health Information (if legally required)

Purposes of Processing Personal Data
Execution of contract processes, monitoring and execution of legal affairs, conducting activities in compliance with legislation, providing information to authorized persons, institutions, and organizations.

Legal Grounds for Processing Personal Data

• Explicit legal requirement,

• Protection of a right,

• Legal obligation,

• Legitimate interest.

Methods of Collecting Personal Data
Collected through official records, health and criminal record certificates, and security systems.

Purposes of Processing Personal Data

Execution of Activities in Compliance with Legislation, Follow-up and Execution of Legal Affairs, Provision of Information to Authorized Persons, Institutions and Organizations, Execution/Audit of Business Activities, Execution of Business Continuity Activities, Execution of Goods/Services Sales Processes, Execution of Contract Processes, Execution of Customer Relationship Management Processes, Execution of Activities Aimed at Customer Satisfaction, Execution of Communication Activities, Execution of Internal Audit/Investigation/Intelligence Activities, Execution of Goods/Services Production and Operation Processes, Execution of Logistics Activities, Execution of After-Sales Support Services for Goods/Services, Execution of Strategic Planning Activities, Execution of Finance and Accounting Affairs, Execution of Marketing Processes of Products/Services, Execution of Wage Policy, Organization and Event Management, Execution of Storage and Archiving Activities.

Legal Grounds for Processing Personal Data

Your identity information is processed by Safaraq in line with the realization of the purposes listed above, on the basis of the legal grounds specified in Article 5 of the KVKK:

• Provided that it is directly related to the establishment or performance of a contract, processing of personal data belonging to the parties of the contract is necessary,

• It is mandatory for the data controller to fulfill its legal obligation,

• Provided that it does not harm the fundamental rights and freedoms of the data subject, data processing is mandatory for the legitimate interests of the data controller.

Methods of Collecting Personal Data

Your identity information is collected through printed and electronic forms, company-owned software, call center calls, e-mails, statements by the data subject, telephone conversations, minutes, face-to-face meetings, and contracts.

Contact Information

Personal Data Processed

• Email Address

• Business Phone Number

• Mobile Phone Number

• Residential/Mailing Address

• Country of Residence

• Workplace Address

Purposes of Processing Personal Data
Execution of Activities in Compliance with Legislation, Follow-up and Execution of Legal Affairs, Provision of Information to Authorized Persons, Institutions and Organizations, Execution/Audit of Business Activities, Execution of Business Continuity Activities, Execution of Goods/Services Sales Processes, Execution of Contract Processes, Execution of Customer Relationship Management Processes, Execution of Activities Aimed at Customer Satisfaction, Execution of Communication Activities, Execution of Goods/Services Production and Operation Processes, Execution of Logistics Activities, Execution of After-Sales Support Services for Goods/Services, Execution of Strategic Planning Activities, Execution of Marketing Processes of Products/Services, Execution of Finance and Accounting Affairs, Execution of Wage Policy, Execution of Storage and Archiving Activities.

Legal Grounds for Processing Personal Data
Your contact information is processed by Safaraq in line with the realization of the purposes listed above, on the basis of the legal grounds specified in Article 5 of the KVKK:

• It is mandatory for the data controller to fulfill its legal obligation,

• Provided that it is directly related to the establishment or performance of a contract, processing of personal data belonging to the parties of the contract is necessary,

• Provided that it does not harm the fundamental rights and freedoms of the data subject, data processing is mandatory for the legitimate interests of the data controller.

Methods of Collecting Personal Data
Your contact information is collected through printed and electronic forms, company-owned software, call center calls, e-mails, statements by the data subject, telephone conversations, minutes, face-to-face meetings, and contracts.

Customer Transaction Information

Personal Data Processed

• Request Information

• Information about Products/Services of Interest

Purposes of Processing Personal Data
Execution/Audit of Business Activities, Execution of Business Continuity Activities, Execution of Customer Relationship Management Processes, Execution of Activities Aimed at Customer Satisfaction, Execution of Communication Activities, Execution of After-Sales Support Services for Goods/Services, Execution of Marketing Processes of Products/Services.

Legal Grounds for Processing Personal Data
Your customer transaction information is processed by Safaraq in line with the realization of the purposes listed above, on the basis of the legal grounds specified in Article 5 of the KVKK:

• Provided that it is directly related to the establishment or performance of a contract, processing of personal data belonging to the parties of the contract is necessary,

• Provided that it does not harm the fundamental rights and freedoms of the data subject, data processing is mandatory for the legitimate interests of the data controller.

Methods of Collecting Personal Data
Your customer transaction information is collected through printed forms, contracts, and statements by the data subject.

Legal Transaction Information

Personal Data Processed

• Contract Information

• Information in the Case File

Purposes of Processing Personal Data
Execution of Activities in Compliance with Legislation, Follow-up and Execution of Legal Affairs, Provision of Information to Authorized Persons, Institutions and Organizations, Execution of Contract Processes.

Legal Grounds for Processing Personal Data
Your legal transaction information is processed by Safaraq in line with the realization of the purposes listed above, on the basis of the legal grounds specified in Article 5 of the KVKK:

• Data processing is mandatory for the establishment, exercise, or protection of a right,

• It is mandatory for the data controller to fulfill its legal obligation.

Methods of Collecting Personal Data
Your legal transaction information is collected through printed forms, e-mails, statements by the data subject, and contracts.

Physical Space Security Information

Personal Data Processed

• CCTV Recording Information

Purposes of Processing Personal Data
Ensuring Physical Space Security, Execution of Activities in Compliance with Legislation, Follow-up and Execution of Legal Affairs, Provision of Information to Authorized Persons, Institutions and Organizations.

Legal Grounds for Processing Personal Data
Your physical space security information is processed by İmtila Emlak in line with the realization of the purposes listed above, on the basis of the legal grounds specified in Article 5 of the KVKK:

• It is mandatory for the data controller to fulfill its legal obligation,

• Provided that it does not harm the fundamental rights and freedoms of the data subject, data processing is mandatory for the legitimate interests of the data controller.

Methods of Collecting Personal Data
Your physical space security information is collected through printed forms, e-mails, and closed-circuit camera systems (CCTV).

Financial Information

Personal Data Processed

• Bank Account Information

• IBAN Number

• Receipt Information

• Invoice Information

Purposes of Processing Personal Data
Execution of Activities in Compliance with Legislation, Follow-up and Execution of Legal Affairs, Provision of Information to Authorized Persons, Institutions and Organizations, Execution of Legal Affairs, Execution of Goods/Services Production and Operation Processes, Execution of Contract Processes, Execution of Finance and Accounting Affairs, Execution of Goods/Services Sales Processes, Execution of Customer Relationship Management Processes, Execution of Marketing Processes of Products/Services, Execution of Wage Policy.

Legal Grounds for Processing Personal Data
Your financial information is processed by Safaraq in line with the realization of the purposes listed above, on the basis of the legal grounds specified in Article 5 of the KVKK:

• Provided that it is directly related to the establishment or performance of a contract, processing of personal data belonging to the parties of the contract is necessary,

• It is mandatory for the data controller to fulfill its legal obligation,

• Provided that it does not harm the fundamental rights and freedoms of the data subject, data processing is mandatory for the legitimate interests of the data controller.

Methods of Collecting Personal Data
Your financial information is collected through printed forms, e-mails, statements by the data subject, contracts, telephone conversations, and information systems.

Visual and Audio Recording Information

Personal Data Processed

• Photograph

• Video Recordings

• Audio Recordings

Purposes of Processing Personal Data
Execution of Marketing Processes of Products/Services, Execution/Audit of Business Activities, Execution of Customer Relationship Management Processes, Execution of Activities Aimed at Customer Satisfaction.

Potential Natural Person Business Partner / Authorized Representative of Legal Entity Business Partner

Identity Information
Processed Personal Data

• Name, Surname

• Signature

Purposes of Processing Personal Data
Conducting activities in compliance with legislation, monitoring and execution of legal affairs, providing information to authorized persons, institutions, and organizations, conducting storage and archiving activities, execution of contract processes, implementation of remuneration policy.

Legal Grounds for Processing Personal Data
Your identity information is processed by Safaraq on the following legal grounds specified in Article 5 of the KVKK:

• Where it is necessary for the processing of personal data belonging to the parties of a contract, provided that it is directly related to the establishment or performance of the contract,

• Where it is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject.

Methods of Collecting Personal Data
Your identity information is collected through printed and electronic forms, e-mail, data subject declarations, and contracts.

Contact Information
Processed Personal Data

• E-mail Address

• Business Phone Number

• Mobile Phone Number

Purposes of Processing Personal Data
Conducting activities in compliance with legislation, monitoring and execution of legal affairs, providing information to authorized persons, institutions, and organizations, execution/supervision of business activities, conducting supply chain management processes, execution of contract processes, implementation of remuneration policy.

Legal Grounds for Processing Personal Data
Your contact information is processed by Safaraq on the following legal grounds specified in Article 5 of the KVKK:

• Where it is necessary for the processing of personal data belonging to the parties of a contract, provided that it is directly related to the establishment or performance of the contract,

• Where it is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject.

Methods of Collecting Personal Data
Your contact information is collected through printed and electronic forms, e-mail, data subject declarations, and contracts.

Personnel Information
Processed Personal Data

• Position/Title Information

• Workplace Information

• Information on Professional Chamber of Registration and Chamber Registration Number

Purposes of Processing Personal Data
Conducting communication activities, conducting and supervising business activities.

Legal Grounds for Processing Personal Data
Your personnel information is processed by Safaraq on the following legal grounds specified in Article 5 of the KVKK:

• Where it is necessary for the processing of personal data belonging to the parties of a contract, provided that it is directly related to the establishment or performance of the contract,

• Where it is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject.

Methods of Collecting Personal Data
Your personnel information is collected through printed forms and data subject declarations.

Financial Information
Processed Personal Data

• Invoice, Check, Promissory Note, Current Account Information

• Bank Account Information

Purposes of Processing Personal Data
Conducting activities in compliance with legislation, monitoring and execution of legal affairs, providing information to authorized persons, institutions, and organizations, conducting goods/services sales processes, execution of contract processes, implementation of remuneration policy.

Legal Grounds for Processing Personal Data
Your financial information is processed by Safaraq on the following legal ground specified in Article 5 of the KVKK:

• Where it is necessary for the processing of personal data belonging to the parties of a contract, provided that it is directly related to the establishment or performance of the contract.

Methods of Collecting Personal Data
Your financial information is collected through printed and electronic forms, e-mail, data subject declarations, and contracts.

Natural Person Business Partner / Authorized Representative of Legal Entity Business Partner

Identity Information
Processed Personal Data

• Name, Surname

• Signature

Purposes of Processing Personal Data
Conducting activities in compliance with legislation, conducting and supervising business activities, conducting logistics activities, execution of after-sales support services, organization and event management, conducting communication activities, conducting goods/services sales processes.

Legal Grounds for Processing Personal Data
Your identity information is processed by Safaraq on the following legal grounds specified in Article 5 of the KVKK:

• Where it is necessary for the processing of personal data belonging to the parties of a contract, provided that it is directly related to the establishment or performance of the contract,

• Where it is mandatory for the data controller to fulfill its legal obligations,

• Where it is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject.

Methods of Collecting Personal Data
Your identity information is collected through e-mail, contracts, face-to-face meetings, phone calls, printed forms, data subject declarations, and documents declared by the data subject.

Contact Information
Processed Personal Data

• E-mail Address

• Mobile Phone Number

• Business Phone Number

Purposes of Processing Personal Data
Conducting activities in compliance with legislation, conducting and supervising business activities, conducting logistics activities, execution of after-sales support services, organization and event management, conducting communication activities, execution of contract processes.

Legal Grounds for Processing Personal Data
Your contact information is processed by Safaraq on the following legal grounds specified in Article 5 of the KVKK:

• Where it is necessary for the processing of personal data belonging to the parties of a contract, provided that it is directly related to the establishment or performance of the contract,

• Where it is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject.

Methods of Collecting Personal Data
Your contact information is collected through printed forms, data subject declarations, e-mail, phone calls, and contracts.

Personnel Information
Processed Personal Data

• Position/Title Information

• Workplace Information

• Information on Professional Chamber of Registration and Chamber Registration Number

Purposes of Processing Personal Data
Conducting communication activities, conducting and supervising business activities.

Legal Grounds for Processing Personal Data
Your personnel information is processed by Safaraq on the following legal grounds specified in Article 5 of the KVKK:

• Where it is necessary for the processing of personal data belonging to the parties of a contract, provided that it is directly related to the establishment or performance of the contract,

• Where it is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject.

Methods of Collecting Personal Data
Your personnel information is collected through printed forms and data subject declarations.

Financial Information
Processed Personal Data

• Bank Account Information

• Invoice, Check, Promissory Note, Current Account Information

• Purposes of Processing Personal Data
  Organization and Event Management, Execution of Communication Activities, Execution of Finance and Accounting Affairs

• Legal Grounds for Processing Personal Data
  Your financial information is processed by Safaraq in line with the purposes mentioned above, pursuant to Article 5 of the Law on the Protection of Personal Data (KVKK), based on the following legal grounds:

• Processing of personal data belonging to the parties of a contract is necessary, provided that it is directly related to the establishment or performance of a contract.

• Processing of data is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject.

• Methods of Collecting Personal Data
  Your financial information is collected through printed forms and the statements of the data subject.

• To Whom and For What Purposes Your Personal Data May Be Transferred Within Turkey
  Your personal data may be shared in compliance with the KVKK and applicable legislation as follows:

• With persons explicitly authorized under legal regulations and applicable legislation, as well as with Authorized Persons or Public Institutions and Organizations upon a court order or a request from competent administrative authorities.

• With our Suppliers, limited to purposes such as execution of emergency management processes, assignment processes, communication activities, audit/ethical activities, occupational health and safety activities, compliance with legal obligations, logistics operations, execution/supervision of business activities, contract management, finance and accounting activities, handling of requests/complaints, supply chain management, legal affairs, procurement of goods/services, ensuring physical security, safeguarding movable assets and resources, execution of internal audit/investigation/intelligence activities, and provision of information to authorized persons, institutions, and organizations.

• With our Shareholders, limited to purposes such as execution of internal audit/investigation/intelligence activities, audit/ethical processes, HR planning, risk management, contract management, handling of requests/complaints, finance and accounting, supervision of business activities, legal affairs, sales of goods/services, production and operational processes, performance evaluation, strategic planning, and management activities.

• With Natural or Legal Persons of Private Law, limited to ensuring legal compliance, legal affairs, business activity supervision, contract management, customer relationship management, and customer satisfaction activities.

• With Customers, limited to supervision of business activities, contract management, sales of goods/services, and production and operation processes.

• With Imtilak Group Companies, limited to HR planning, recruitment of employees/interns/students, business activity supervision, ensuring business continuity, contract management, recruitment processes, sales of goods/services, production and operations, customer relationship management, customer satisfaction, handling of requests/complaints, finance and accounting, ensuring physical security, and occupational health and safety activities.

• With our Business Partners, limited to emergency management, internal audit/investigation/intelligence activities, business continuity, HR planning, recruitment of employees/interns/students, recruitment processes, production and operations, contract management, and management of employee benefits and entitlements.

• Do We Transfer Your Personal Data Abroad?

• Your personal data may be shared with Suppliers residing abroad for purposes such as storage and archiving, information security, communication, business activity execution/supervision, ensuring business continuity, performance evaluation, audit/ethical activities, HR planning, recruitment processes, sales of goods/services, production and operation processes, contract management, and payroll management.

• Your personal data may be shared publicly in open platforms for communication and corporate recognition purposes. This includes social media accounts such as Instagram, YouTube, Facebook, Twitter, and LinkedIn, which use infrastructure and storage systems located abroad. Please refer to the privacy policies of these platforms for details on the processing of your data.

• Your personal data may also be transferred to platforms whose servers are abroad, such as WhatsApp, Telegram, and Microsoft Exchange-based email services, based on your “explicit consent” under KVKK Art. 9/1, for purposes including business activity execution/supervision, audits, HR planning, assignment processes, contract management, storage, and archiving. For further details, please review the Privacy Policies and Terms of these platforms.

• How Long Are Your Personal Data Retained?
  If a specific period for data retention is determined in laws or related regulations, your personal data must be stored for at least that period. If no period is defined, your personal data will be retained for a reasonable period, provided that it is connected, limited, and proportionate to the purposes of processing.

• Your Rights Regarding Your Personal Data
  You have the right to:

• Learn whether your personal data has been processed,

• Request information if your personal data has been processed,

• Learn the purpose of processing and whether it is used for its intended purpose,

• Know the third parties to whom your personal data is transferred domestically or abroad,

• Request correction of incomplete or inaccurate data,

• Request the deletion or destruction of your personal data within the framework of KVKK,

• Request notification to third parties in case of correction, deletion, or destruction,

• Object to decisions made solely by automated systems that produce unfavorable outcomes for you,

• Demand compensation if you suffer damage due to unlawful processing of your personal data.

• How Can You Exercise Your Rights?
  You may submit your applications and requests regarding your personal data through the “Data Subject Application Form” by:

• Sending an email to [email protected],

• Applying in person with a valid ID/passport,

• Sending by mail with a wet signature and a copy of ID/passport to Mall of Istanbul, Office Block, Floor 11, No: 91 Başakşehir / Istanbul,

• Signing with a mobile signature or secure electronic signature and sending to [email protected],

• Sending via registered electronic mail (KEP) address with a secure electronic signature or mobile signature to [email protected].

• According to the Communiqué on the Procedures and Principles of Application to the Data Controller, your application must include your name, surname, signature (if written), Turkish ID number (or nationality, passport number, or ID number if foreign), residential or workplace address, email (if provided for notification), phone number, fax number, and the subject of your request. Applications must clearly state the requested right and include supporting documents.

• If the application concerns another person, authorization and documentation (power of attorney) are required. For applications involving special categories of personal data, special authorization under the Regulation on Personal Health Data is required. Unauthorized third-party applications will not be considered.

• How Long Will It Take to Respond to Your Requests?
  Your requests regarding your personal data will be evaluated and responded to within 30 days at the latest from the date Safaraq receives them. The response will be delivered via the method used in your application, primarily by post or email, unless otherwise possible.