SELAM TEKNOLOJİ TURİZM YATIRIM A.Ş. (hereafter referred to as Salam Booking) values the protection of your personal data and confidential information. Therefore, we take all necessary care and effort to process and store the personal data of individuals associated with Salam Booking in accordance with the Personal Data Protection Law No. 6698. As the data controller, Salam Booking takes administrative and technical measures to protect your personal data in all operations and processes your personal data within the limits prescribed by the GDPR and the legislation.

Personal information recorded during visits to our website is processed under the legislation on the Protection of Personal Data. Please refer to our Privacy Policy, which can also be found on our website. However, please note that Salam Booking cannot guarantee the data security of other websites linked to from our website. The data security policy of the relevant page should be carefully examined in this regard.

1 .Legal Nature and Scope

Article 10 of the Personal Data Protection Law No. 6698 has required data subjects to be informed when obtaining their consent. The title of the article is "Obligation to Inform the Data Controller". SELAM TEKNOLOJİ TURİZM YATIRIM A.Ş.. is the "Data Controller" under the provisions of the GDPR. In this context, the obligation to inform requires data controllers to inform data subjects about the identity of the data controller, the purposes of processing personal data, the persons and purposes to whom the personal data is transferred, the legal reasons for collecting personal data, the methods and recipients of transfer, and the rights of data subjects as listed in Article 11 of the GDPR, such as updating, deleting or anonymizing personal data. As the Data Controller, Salam Booking informs and enlightens data subjects with the Personal Data Processing Information Document in accordance with Article 10 of the GDPR, regarding the processing of personal data within the limits and conditions prescribed by the legislation.

2 . Identity of the Data Controller

According to Article 3/1(i) of the GDPR, the data controller is defined as "real or legal persons who determine the purposes and means of processing personal data and are responsible for the establishment and management of the data recording system." In this context, the data controller for Salam Booking, which you visit on the internet, is

Company Name: SELAM TEKNOLOJİ TURİZM YATIRIM A.Ş

Company Address: Çukur Mah. Halepli Bekir Sok. No:2-8 Kapı No: 30 Beyoğlu – İstanbul -Türkiye

Company e-mail: salam@salambooking.com

Company Tel:: +90 212 7025128

3 . Data Processor

A natural or legal person who processes personal data on behalf of the data controller based on the authorization given by the data controller is defined as the "Data Processor" in Article 3 of the GDPR.

4 . Processing Purposes of Your Personal Data

Your personal data are processed in line with the principles of the GDPR for the following purposes:

a) To inform you about the products and services offered by Salam Booking, and to better serve you;

b) To improve the quality of the products/services offered by Salam Booking, and to customize the presentation and recommendations of the products/services according to the needs, preferences, and usage habits of our customers;

c) To inform you about our services and to enlighten you when necessary;

d) To plan and implement our human resources policies in the best way possible, to plan and execute our commercial partnerships and strategies correctly, to ensure the legal, commercial, and physical security of our company and business partners, to ensure the corporate functioning of our company, and to work towards providing you the best benefit from the products and services offered by our company;

e) To ensure the highest level of data security, to create databases, to develop the services offered on our company’s website, to contact those who submit requests and complaints to us, to fix any errors that occur on our company’s website, and to ensure compliance with the provisions of the Privacy Policy shared on our website;

f) Your personal data are processed in the scope of the personal data processing conditions specified in Articles 5 and 6 of the GDPR to determine the strategies belonging to our company.

5 . Our Principles Regarding Personal Data Processing

As Salam Booking, we have adopted the principles of processing personal data in accordance with the law and honesty rules, ensuring accuracy and currency, processing for specific, clear, and legitimate purposes, limiting and proportionate processing in relation to the purposes for which they were processed, and preserving them for the period prescribed by relevant legislation or necessary for the purposes for which they were processed.

6 . Methods of Processing Personal Data

Your data will only be kept and processed at Salam Booking with your consent or in the presence of one of the legality conditions set by the law.

7 . To Whom and for What Purposes Personal Data Can Be Transferred

Your personal data collected and processed in compliance with the Law on Protection of Personal Data (GDPR) can only be transferred to Salam Booking’s solution partners and companies in the position of performance assistants to perform the job and within the framework of confidentiality agreements.

8 . Method and Legal Basis for Collecting Your Personal Data

Your personal data may vary depending on the service, product, or commercial activity provided by our company, and can be collected verbally, in writing, or electronically via offices, call centers, websites, social media channels, mobile applications, and similar means in compliance with Articles 4, 5, and 6 of the GDPR. Your personal data is collected to provide the products and/or services offered by our company in a legal framework and fulfill our company’s contractual and legal obligations accurately and completely. Personal data collected for this legal reason can be processed and transferred within the scope of personal data processing conditions and purposes specified in Articles 5 and 6 of the GDPR, including the purposes specified in this Information Text.

9 . How Do We Protect?

Necessary technical and administrative measures are taken to protect personal data collected by Salam Booking from unauthorized access and to prevent any harm to our customers and potential customers. In this regard, software is designed to meet standards, third parties are carefully selected, and our company’s Privacy Policy is adhered to internally.

10 . Rights of the Personal Data Owner and Application

As personal data owners, if you submit requests regarding your rights stated in Article 11 of the Law on Protection of Personal Data to our Company using the methods specified in this Disclosure Text, our Company, depending on its nature, will respond to your request within thirty days free of charge. However, if the Personal Data Protection Board foresees a fee, the fee determined by our Company will be charged. Furthermore, as required by current legislation, applications regarding personal data must be made by the data owner themselves, and only the part related to you will be answered. Applications made on behalf of your spouse, relative, or friend will not be accepted. Within this scope, as a personal data owner, by applying to our Company, which is announced on our website, regarding yourself:

a) You can learn whether personal data is processed or not,

b) You can request information if your personal data has been processed,

c) You can learn the purpose of processing personal data and whether they are used in accordance with their purpose,

d) You can learn the third parties to whom personal data is transferred, domestically or abroad,

e) You can request the correction of personal data that is incomplete or incorrect, and the notification of this correction to third parties to whom the personal data has been transferred,

f) You can request the deletion or destruction of personal data if the reasons requiring their processing have disappeared, despite their being processed in compliance with the Law on the Protection of Personal Data and other relevant legislation, and the notification of this deletion or destruction to third parties to whom the personal data has been transferred,

g) You can object to a result that is against you that arises from the exclusive analysis of processed data through automatic systems,

h) You have the right to request compensation for any damages incurred as a result of the unlawful processing of personal data.

11 . Making an Application.

According to Article 13, paragraph 1 of the GDPR Law, you can submit your request to exercise the rights specified in Article 11 of the same law by using the registered electronic mail (KEP) address or the electronic mail address that you previously notified our company and is registered in our system, by sending it to salam@salambooking.com or by submitting it in writing in person, through a notary, or by registered mail with return receipt requested. You can access the application and information request form with the necessary explanations via the link.

Your application should include:

a) Your name, surname, and signature if the application is in writing,

b) If you are a Turkish citizen, your Turkish ID number; if you are a foreign national, your nationality, passport number, or ID number if available,

c) Your residence or workplace address for notification,

d) If available, your electronic mail address, phone, and fax number,

e) Your request subject must be specified, and information and documents related to the subject must be attached to the application.

Date of Publication: 01/04/2023