KVKK Information Text

INFORMATION NOTICE REGARDING THE COLLECTION AND PROCESSING OF PERSONAL DATA

1. INTRODUCTION

As YATED Fuarcılık A.Ş. (“Company” or “YATED”), we exercise utmost diligence to ensure that the personal data belonging to our visitors and Association members are processed and protected in accordance with the Law on the Protection of Personal Data No. 6698 and its secondary legislation (“Data Protection Legislation”) when you visit the official website of the Bosphorus Boat Show Marine Fair that we organize, namely bosphorusboatshow.com.

Within the scope of our obligation to inform arising from the Data Protection Legislation, we would like to inform you, our bosphorusboatshow.com visitors, with this Bosphorus Boat Show Website Data Protection Information Notice (“Information Notice”).

2. PERSONAL DATA

2.1. Definition of Personal Data

Pursuant to Article 3/I(d) of the Law on the Protection of Personal Data (“Law” or “KVKK”), “personal data” refers to any information relating to an identified or identifiable natural person. In this context, anonymous information, anonymized data and other data that cannot be associated with a specific person shall not be considered personal data within the scope of this Policy.

2.2. General Principles for the Processing of Personal Data

In accordance with Article 3/I(e) of the Law, any operation performed on personal data such as obtaining, recording, storing, retaining, altering, reorganizing, disclosing, transferring, taking over, making available, classifying or preventing its use, wholly or partially by automatic means or by non-automatic means provided that it forms part of a data recording system, shall be considered as “data processing.”

The Company processes Personal Data in compliance with the following principles:

• Processing in compliance with the law and the rules of good faith
• Being accurate and, where necessary, up to date
• Processing for specific, explicit and legitimate purposes
• Being relevant, limited and proportionate to the purpose for which they are processed
• Being retained for the period stipulated in the relevant legislation or required for the purpose for which they are processed

2.3. Personal Data Processed by YATED

When you visit the website bosphorusboatshow.com, your personal data—primarily your traffic data—may be processed by our Company in accordance with the Data Protection Legislation, in electronic or physical environments, by automatic or non-automatic means, in a written form, in connection with, limited to and proportionate to the purposes explained below.

2.4. Purposes of Processing Personal Data

The Company may process personal data for the purposes specified below and may retain such data for the duration required by these purposes and, in any case, for the periods prescribed by applicable legislation:

• Processing online visitor data in accordance with applicable legislation
• Execution of ticket purchase transactions by visitors through the Website
• Execution of ticket purchase transactions, negotiation, establishment and performance of contracts executed/to be executed
• Improving the services offered through the Website, developing new services and providing related information
• With respect to Customers who have granted consent for commercial electronic communications, analyzing Customer/Member preferences, likes and needs within the scope of the Distance Ticket Sales Agreement executed with the Customer and providing special promotions, opportunities and benefits
• Within the scope of the contractual relationship, and for Customers who have commercial electronic communication consent; direct marketing, digital marketing, remarketing, targeting, profiling and analysis activities, and promotion and marketing of applications, events and services in line with Customer/Member preferences
• Resolving customer problems and complaints
• Contacting the Customer based on consent for commercial electronic communications and improving Customer experience on the Website
• Ensuring Customer/Visitor satisfaction, loyalty and commitment
• Following accounting and purchasing transactions
• Ensuring the security of the Company’s Website and other electronic systems, social media accounts and physical environments
• Legal processes and compliance with legislation
• Responding to requests for information from administrative and judicial authorities
• Ensuring information and transaction security and prevention of misuse
• Conducting recruitment processes within the scope of human resources policies
• Carrying out necessary arrangements to ensure that processed data is accurate and up-to-date and carrying out all activities related to such processes
• Fulfilling storage obligations arising from law and other legislation

2.3. Transfer of Personal Data

YATED may transfer the personal data obtained to third parties in line with the purposes set out in this Policy, subject to compliance with the general principles stipulated in the KVKK and the conditions set forth in Articles 8 and 9 of the KVKK, and provided that necessary security measures are taken. Personal data may be processed and stored on servers or other electronic media located within Turkey.

Depending on the nature and type of the relationship between the data subject and the Company (user/member relationship, business relationship, etc.), third parties to whom personal data may be transferred may vary, but in general, they are as follows:

(i) ED FUARCILIK, as Fair Organizer and Data Processor,
(ii) storage institutions, platform owners, data distribution companies, infrastructure providers, business partners, suppliers and subcontractors with whom YATED works,
(iii) all official authorities and institutions,
(iv) banks and/or authorized collection institutions for collection purposes and other relevant third parties for carrying out such activities.

2.4. Security and Supervision of Personal Data

Within the scope of Article 12 of the KVKK, YATED, as the “data controller”, takes necessary technical and administrative measures to prevent unlawful processing of personal data, prevent unauthorized access, and ensure the protection of personal data. For this purpose:

(i) The Company ensures that activities are conducted in accordance with internal policies and rules prepared for the protection of personal data,
(ii) necessary training and responsibilities regarding personal data legislation and related Company procedures are assigned to employees,
(iii) necessary confidentiality statements and undertakings are obtained from employees and persons/institutions processing data on behalf of the Company,
(iv) necessary information security measures are implemented to ensure the security of personal data within and outside the Company and to prevent unauthorized access,
(v) compliance with internal policies and rules is ensured,
(vi) adequacy of the measures taken is checked, new data security systems are obtained in line with needs and technological developments or existing systems are improved/updated and required audits are conducted.

2.5. Are your personal data transferred abroad?

Our Company does not transfer your personal data collected through the Website abroad.

2.6. Security and Disposal of Your Personal Data

Within the scope of Article 12 of the KVKK, YATED, as the data controller, takes necessary technical and administrative measures to prevent unlawful processing of personal data, to prevent unlawful access and to ensure secure storage.

The Company processes personal data belonging to its visitors as stated in this Information Notice and in accordance with the KVKK legislation, as well as the Company’s Personal Data Procedure and Personal Data Retention and Destruction Policy.

Your personal data are retained for the period required for the processing purposes specified in this Information Notice and, in any case, for the statutory limitation periods prescribed by the legislation. Upon expiration of such periods, YATED deletes, destroys or anonymizes your personal data in accordance with the Personal Data Retention and Destruction Policy.

In order to prevent unauthorized access, erroneous processing, disclosure, unlawful alteration/deletion of personal data and to ensure protection and security, our Company has taken the following technical and administrative measures in accordance with KVKK legislation:

• Authorization Matrix
• Authorization Control
• Access Logs
• User Account Management
• Network Security
• Application Security
• Encryption
• Penetration Testing
• Intrusion Detection and Prevention Systems
• Log Records
• Data Masking
• Data Loss Prevention Software
• Backup
• Firewalls
• Up-to-date Anti-Virus Systems
• Deletion, Destruction or Anonymization
• Key Management

Where required under KVKK legislation, YATED shall promptly notify you and the Personal Data Protection Board.

3. Your Right to Information

Within the scope of Article 11 of the KVKK, you may apply to our Company and request:

(i) information on whether your personal data has been processed,
(ii) information regarding such processing, the purpose of processing and whether they are used in accordance with such purpose,
(iii) information regarding third parties to whom personal data is transferred within or outside Turkey,
(iv) correction of incomplete or incorrect personal data,
(v) deletion or destruction of personal data under the conditions stipulated in Article 7 of the KVKK,
(vi) notification to third parties to whom personal data has been transferred regarding the correction, deletion or destruction of personal data under Article 7,
(vii) objection to any result against you arising solely through automated processing,
(viii) request compensation in case you suffer damage due to unlawful processing of data.

You may submit your requests via (bosphorusboatshow.com/bbs-kvkk-basvuru-formu), by sending an e-mail to [email protected]

or by written application to Marinturk İstanbul City Port 1st Floor D Block D:5 34890 Pendik/Istanbul/Turkey.

This Information Notice may be updated to ensure compliance with the KVKK legislation due to changes in our processes. We kindly request you to visit our website for possible updates.

YATED Fuarcılık A.Ş.