SUPERYACHT SHOW TURKEY CLARIFICATION TEXT ON THE PROCESSING OF PERSONAL DATA The Personal Data Protection Law No. 6698 came into effect on 07.04.2016 after being published in the Official Gazette No. 29677. Prepared in consideration of international documents, comparative law practices, and the needs of our country, the Law aims to ensure that personal data is processed and protected according to contemporary standards. In this context, the purpose of the Law is to regulate the conditions for processing personal data, protect individuals' fundamental rights and freedoms in the processing of personal data, and define the obligations and procedures that real and legal persons processing personal data must adhere to. Our company is obligated to comply with the Personal Data Protection Law No. 6698, and all personal data processed within our operational processes are covered by this Law. As Superyacht Show Turkey, we act as the data controller and take necessary measures to ensure the protection of personal data. General Principles for Processing Personal Data Our company adheres to the general principles set forth by Law No. 6698 in the processing of personal data. These general principles are: Processing in accordance with the law and principles of honesty, Ensuring accuracy and updating when necessary, Processing for specific, clear, and legitimate purposes, Being relevant, limited, and proportionate to the purposes for which they are processed, Retaining data only for the period required by relevant legislation or for the purpose for which they are processed. Your personal data may vary depending on the services, products, or commercial activities offered by our company and may be collected verbally, in writing, or electronically via automatic or non-automatic methods through our offices, branches, dealers, call centers, websites, social media channels, mobile applications, and similar means. Additionally, your personal data may be processed when you call our call center intending to use our services, visit our website, or participate in training sessions, seminars, events, and meetings organized by our company. Legal Basis for Collecting Personal Data Your personal data is obtained for the purpose of ensuring that the products and services we offer are provided within the legal framework and that our company fulfills its obligations arising from contracts and laws completely and accurately. The personal data collected on this legal basis may also be processed and shared within the scope of the personal data processing conditions and purposes specified in Articles 5 and 6 of the Personal Data Protection Law and for the purposes mentioned in this text. Purpose of Processing Personal Data Personal data processed by our company may be used for the following purposes: Improving the services offered, developing new services, and providing related information, Promoting and marketing campaigns and services for customers and prospective customers who have provided commercial electronic communication consent, Resolving customer problems and complaints, Conducting statistical evaluations and market research, Defining and implementing commercial and business strategies of the company, Managing relationships with member businesses and business partners, Monitoring accounting and payment transactions, Ensuring legal compliance and managing legal processes, Responding to requests for information from administrative and judicial authorities, Planning internal reporting and business development activities, Conducting financial control and reporting, and fulfilling legal notifications, Managing internal control and audit activities, Ensuring information and transaction security and preventing misuse, Ensuring the accuracy and currency of processed data by making necessary adjustments. Transfer of Processed Personal Data Our company may share your personal data with our business partners, member businesses, banks, financial institutions, independent audit firms, and other parties permitted by the Payment and Securities Settlement Systems, Payment Services, and Electronic Money Institutions Law and other legislative provisions. Stored data may be transferred under the personal data processing conditions and purposes specified in Articles 8 and 9 of the Personal Data Protection Law. Records and documents related to the transactions conducted with our customers are retained for a specified period in compliance with legal regulations. If you request the deletion of your personal data, this request will only be fulfilled after the legally specified retention period. During this process, your personal data will not be processed or shared with third parties except as required by legal regulations. Rights of the Personal Data Owner Under Article 11 of the Personal Data Protection Law As personal data owners, you may submit your requests regarding your rights as specified in Article 11 of the Law to our company, and we will resolve the request free of charge within thirty days at the latest, depending on the nature of the request. However, if a fee is determined by the Personal Data Protection Board, our company will charge the tariffed fee. In this context, personal data owners have the following rights: To learn whether personal data is being processed, To request information if personal data has been processed, To learn the purpose of processing personal data and whether it is being used appropriately, To know the third parties to whom personal data is transferred domestically or abroad, To request correction of personal data if it is incomplete or inaccurate and to request notification of these corrections to third parties to whom personal data has been transferred, To request the deletion or destruction of personal data if the reasons for processing no longer exist, even if it has been processed in compliance with the Law and other relevant laws, and to request notification of this action to third parties to whom personal data has been transferred, To object to the occurrence of a result against themselves by analyzing processed data exclusively through automated systems, To request compensation if they suffer damage due to the unlawful processing of personal data. Under Article 13 of the Personal Data Protection Law, you may submit your requests regarding your rights in writing or through other methods determined by the Personal Data Protection Board. Currently, as the Board has not determined any methods, you must submit your request in writing as per the Law. The channels and methods to submit your written requests are explained below. To exercise your rights, you can fill out the form available at https://www.superyachtshowturkiye.com/kvkk-aydinlatma-metni.doc, and submit a signed copy of the form, along with documents identifying your identity, in person to the address "Göcek Mahallesi, Süleymanağa Caddesi 14/A Fethiye-Muğla," send it via registered mail, use a notary public, or send it via secure electronic signature to info@superyachtshowturkiye.com.