Prime Travel and Tourism Limited Company takes the highest level of security measures to ensure the lawful collection, storage, and sharing of your personal data and to protect your privacy.

Our goal is to transparently inform you about the ways your personal data is collected, the purposes of processing, the parties with whom it is shared, the legal reasons, and your rights in accordance with Article 10 of the Personal Data Protection Law No. 6698 and in line with your satisfaction.

a) Data Controller

In accordance with the Personal Data Protection Law No. 6698, your personal data will be collected and processed by Prime Travel and Tourism Limited Company ("COMPANY") as the data controller, as described below.

b) Purpose of Processing Personal Data

The COMPANY may collect personal data in categories such as identity information, contact information, customer information, customer transaction information, transaction security information, legal transaction and compliance information, and marketing sales information from parties such as customers, employees, potential customers, job candidates, business partners, and suppliers.

Your collected personal data will be processed for the following purposes:

1. To provide COMPANY products and services to you, fulfill our obligations towards you, organize records and documents, comply with local and international legal regulations, reporting, informing, taxation, and other obligations,
2. To conduct personalized advertising, campaigns, benefits, and other advantages for sales and marketing activities aimed at improving the quality of products and services,
3. To manage infrastructure and commercial activities, including audit, finance, accounting, billing, collection, information systems, data and website hosting, business continuity, and records, document, and print management, in accordance with internal policies and procedures,
4. To communicate for information technology requirements, system structure, necessity of received information technology support services, and transfer necessary information about these services and products,
5. To conduct traffic measurement, statistical analysis, segmentation/profiling, and CRM studies for sales and marketing activities,
6. To measure and increase customer satisfaction, manage complaints, receive your opinions and suggestions about new products and services, receive error notifications, provide information about products and services, and manage orders, payment transactions, logistics collaborations, and product shipments,
7. To prevent money laundering and comply with laws and regulatory obligations, to comply with legal proceedings, and to review, evaluate, and respond to requests from official and government authorities, all within the scope of the personal data processing conditions and purposes specified in Articles 5 and 6 of Law No. 6698.

c) Recipients and Purposes of Transferring Personal Data

Your collected personal data may be transferred to COMPANY's business partners, suppliers, shareholders, Yıldız Holding and its subsidiaries, individuals or organizations permitted by the Tax Procedure Law, Social Security Institution legislation, Court of Accounts, Law on Preventing Money Laundering, Law on Prevention of Laundering Proceeds of Crime, Turkish Commercial Code, Turkish Code of Obligations, and other legislation, authorized public institutions and organizations, administrative authorities, legal authorities, foreign companies, individuals and organizations we receive services from, collaborate with, and kargo companies delivering your orders, within the scope of achieving the above-mentioned purposes.

d) Method of Collecting Personal Data and Legal Basis

Your personal data is collected by the COMPANY through various channels, including COMPANY Headquarters, applications made through affiliated websites, individuals and/or legal entities with whom transactions are carried out within the scope of any legislation or contract, our website and mobile application, call centers, and social media accounts, in verbal, written, or electronic form or through other channels that may be established/formed in the future.

Your personal data is collected within the legal framework by the COMPANY for the purposes mentioned above, including the performance of the contract.

e) Rights of the Personal Data Subject according to Article 11 of Law No. 6698

As personal data owners, you have the right to:

1. Learn whether personal data is processed,
2. Request information if personal data has been processed,
3. Learn the purpose of processing personal data and whether they are used in accordance with their purpose,
4. Know the third parties to whom personal data is transferred, whether domestically or abroad,
5. Request correction of personal data if it is incomplete or incorrectly processed, and request notification of the transaction made within this scope to third parties to whom personal data has been transferred,
6. Request the deletion or destruction of personal data in the event that the reasons requiring its processing disappear, despite being processed in accordance with Law No. 6698 and other relevant laws, and request notification of the transaction made within this scope to third parties to whom personal data has been transferred,
7. Object to the occurrence of a result against the person by analyzing the processed data exclusively through automated systems,
8. In case of damage due to the unlawful processing of personal data, demand the compensation of the damages.

In this context, you can submit your requests regarding the exercise of your rights by using the methods regulated below, and the COMPANY will conclude the request as soon as possible, and at the latest within thirty days, depending on the nature of the request. In the response to be given, no fee will be charged for up to ten pages. An operation fee of 1 Turkish Lira will be charged for each page above ten pages. The fee that may be requested by our company if the response is given in a recording medium such as CD or flash memory will not exceed the cost of the recording medium.

Personal data owners can submit their requests regarding their rights through the following methods, as regulated in Article 13 of Law No. 6698 and the Communique on the Procedures and Principles of Application to the Data Controller:

Turkish and in writing or registered electronic mail (KEP) address, secure electronic signature, mobile signature, or using the electronic mail address previously notified to the COMPANY and registered in our system. The right to verify your identity before responding is reserved for the COMPANY.