CLARIFICATION TEXT ON THE LAW NO. 6698 ON THE PROTECTION OF PERSONAL DATA
 

This clarification text has been prepared for Cosmos Theatre by Galeri Kristal Turizm İnşaat Pazarlama ve Ticaret Anonim Şirketi, which is the data controller, in order to fulfil the Clarification obligation in accordance with Article 10 of the Personal Data Protection Law No. 6698.

Dear Customers,

Our Company carries out its activities to process personal data and personal data of special nature in accordance with the data processing conditions set forth in Articles 5 and 6 of the PDP Law.
 

We process your personal data for the following purposes:
 

For the sale of our products and services, to provide in full the products and services you purchase, and to meet additional demands and the collection of service fees, we process your name and surname, identity no., dietary habits, special requests, disability information, health information, voice recordings from your calls with our call centre, complaints, likes, suggestions, requests, date, day, time, country, expenditure information, open consent information, tax no., receipt, invoice, credit card slip, expenditure amount, account number, credit card information, payment information, license plate, and IP address; and we process court decision and consumer arbitration committee decision information for your cancellation and refund requests if you share them with us.
 

In order to carry out information security processes, all electronic communications between you and our company employees, and to ensure the security of our company communication network, are audited against viruses, harmful content and data leaks. For these purposes, we process your personal data consisting of Name and Surname, Identity No/Passport No, Date of Birth, Old E-Mail Data, IP Address, Log Records, Internet Activity, Source IP - Destination IP - Data Type - Data Size Records, Time, Room No., Username, Mac Address, Access Internet IP Address, Date, Time, Phone, E-Mail and the contents you share with us electronically.

In order to ensure the security of the physical space, your identity information is taken at the entrances and exits of the facility, and camera records are kept. For these purposes, we process your Name and Surname, Image Records, Vehicle License Plate, and Check-in and Check-out date.
 

We process your visual data with camera records to ensure security at the entrances and exits of the facility, in the parking lots, and in the common areas. You can visit our web page for our detailed camera lighting.

In order to resolve legal disputes, we process your Name and Surname, Identity No/Passport No., Date and Place of Birth, Mother and Father’s Name, Nationality, Marital Status, Serial No., Place of Civil Registry, Tax No., Gender, Case File, Religion, Invoice, Waybill, Check, Collection and Disbursement Receipt, Credit Card Slip, Accounting Record, Company Title, Phone, Address, E-Mail, Photo, Signature, Blood Type, and Movable and Immovable Property Information.

In order to carry out communication activities, we process your Name and Surname, Phone, WhatsApp Photo and WhatsApp Username information.

If you provide permission for advertising, campaigns and promotional processes to be carried out, we use your Name and Surname, Social Media Username, Photo, Image Recording, Video Recording, Phone, Address, and E-Mail information.

If you use the internet network of our facility, we record information regarding the internet addresses you access and the time at which they are accessed. By law, we are required to block access to sites containing publications on certain types of catalogue crimes. For this reason, we process your Name and Surname, Identity No./Passport No., Serial No., Date and Place of Birth, Mother and Father’s Name, Nationality, Marital Status, Place of Civil Registry, Entry and Exit Date, Agency, Spending Information, Amount of Expenditure, Signature, Internet Activity, Camera Records, Mac Address, IP Address, Access Internet IP Address, Username, Room No., Date, Time, Phone, and E-Mail.
 

When authorized institutions and bodies request information legally, or when we need to share this information to fulfil our legal obligations, we process your Name and Surname, Identity No. / Passport No., Serial No., Date and Place of Birth, Mother and Father’s Name, Nationality, Marital Status, Place of Civil Registry, Gender, Religion and Blood Type (from your old ID photocopy), Photo, Signature, IP Address, MAC Address, and Logs.

SHARING YOUR PERSONAL DATA WITH THIRD PARTIES
 

For the purpose of your security and the fulfilment of our Company's obligations under the law, your personal data are shared with:
 

Vendors from which we purchase local products and services and with our group companies in order to carry out information security processes,
 

Sonicwall, Trend Micro and McAfee abroad for analysis of the antivirus, data loss prevention and threat detection systems of the content you share with us electronically and the content we share with you.
 

Logo company for the execution of finance and accounting works,

WhatsApp abroad for the execution of communication activities,

Our domestic and international service providers and group companies that you have booked for the sale of our products and services, the complete provision of the products and services you have purchased to you, and the fulfilment of your requests,

Domestic and international Online Review Sites (Google, Booking, TripAdvisor, Foursquare),

Contracted Hospitals,

Overseas social media (Instagram, Facebook) and all social media users for the execution of advertising, campaign, promotion processes,

Sector associations (TURSAB, ATSO, TUROB, TUROFED), Judicial Authorities, Revenue Administration, Public Institutions and Organizations, and Law Enforcement Agencies due to legal obligations and the necessity of informing the authorized institutions.
 

Personal data transfers are carried out in accordance with the principle of being relevant, limited and proportionate to the purpose for which they are processed as stipulated in the Law on PDP, and the necessary administrative and technical measures are applied by our Company to prevent unauthorized and/or unlawful access to your personal data.
 

YOUR RIGHTS

Personal data owners who are defined as relevant persons hereinafter referred to as "Applicant") in the Law on PDP are granted the right to apply for the following issues regarding the processing of their personal data in accordance with Article 11 of the Law. Applicants have the right to:

Learn whether personal data is processed or not,

Request information on this matter if their personal data has been processed

Learn the purpose of processing personal data and whether the data are used in accordance with their purpose,

Know the third parties to whom personal data are transferred at home or abroad,
 

Request the correction of personal data if it is incomplete or incorrectly processed,
 

Request the deletion or destruction of personal data within the framework of the conditions stipulated in Article 7,

Request that the transactions carried out in accordance with subparagraphs (e) and (f) be notified to third parties to whom personal data are transferred,
 

Object to the occurrence of a result against the person themself via analysing the processed data exclusively by means of automated systems,
 

Request compensation for damage in case of harm due to unlawful processing of personal data.
 

In accordance with the first paragraph of Article 13 of the Law on PDP, the applications made to our Company, which is the data controller, regarding these rights must be submitted to us in writing or by other methods determined by the Personal Data Protection Board ("Board"). Within the scope of your above rights, you can send your applications to the [email protected] address by using the e-mail address previously notified to our Company and registered in our Company's system or by using your corporate e-mail address, or in writing to Güzeloba Mah. Yaşar Sobutay Bulvarı, Lara Cd. No:32, 07230 Muratpaşa/Antalya.
 

In the application to be made, it is required by the law to provide (i) name, surname and signature if the application is in writing, (ii) T.R. identity number for citizens of the Republic of Türkiye, and nationality, passport number or identity number, if any, for foreigners, (iii) the address of the place of residence or workplace based on the notification, (iv) the electronic mail address, telephone and fax number, if any, and (v) the subject of the request.
 

You hereby agree that you have been informed by our Company in accordance with the obligation to inform within the scope of the Article 10 of Law on PDP and that you understand the subjects stated in the text.