Purpose of the Privacy/Personal Data Protection Policy

This Privacy/Personal Data Protection Policy;

Explains what types of personal data are collected by www.namila.com (Namila), a commercial platform owned by Efef Turizm Seyahat Özel Sağlık Hiz. ve İletişim. Ltd. Şti.,

• A. How these personal data are used,
• B. With whom Namila may share your personal data,
• C. What your rights are regarding the personal data processed by Namila and how you can exercise these rights,
• D. How you can change your positive or negative preferences regarding receiving commercial electronic messages.

Your Processed Personal Data and the Purpose and Legal Basis of Processing

Namila, the online sales platform of Efef Turizm Seyahat Özel Sağlık Hiz. ve İletişim. Ltd. Şti., requests your personal data in order to provide better services to its members and within the framework of legal obligations arising from relevant legislation, including Law No. 5651 on Regulation of Internet Publications, Law No. 6563 on Regulation of Electronic Commerce, Turkish Penal Code No. 5237, and the Personal Data Protection Law No. 6698, as well as to fulfill said purposes and legal obligations, to provide better service to you, and to enable statistical studies.

These personal data include (but are not limited to):

• First name, last name
• Date of birth
• Mobile phone number
• Landline phone number
• Email address
• Gender
• Address information
• Information that the member has consented to share through social media accounts when connected via those channels

These personal data will be processed and stored based on your explicit consent, for the purpose of enabling you to benefit from "www.namila.com" services, with information security measures in place, and will not be used outside the purposes and scope determined by this Privacy/Personal Data Protection Policy and Communication Consent.

Your Rights Regarding Personal Data

You may send an email to [email protected] to learn what personal data is being processed, whether it is being used in accordance with the processing purpose, to find out about third parties to whom personal data is transferred domestically or abroad, to change, update, and/or delete your personal data if there are incomplete or incorrectly processed personal data or any changes, and to request that this situation be notified to third parties to whom your personal data has been transferred.

Your other rights under Article 11 of the Personal Data Protection Law No. 6698 are reserved.

Personal Data Retention Period

In accordance with Law No. 6563 on Regulation of Electronic Commerce;

• Records regarding the withdrawal of consent shall be stored for 1 year from that date
• The content of commercial electronic messages and all other records relating to the dispatch shall be stored for 3 years to be submitted to the relevant ministry when required

After the expiration of these periods, your personal data will be deleted, destroyed, or anonymized by our company or upon your request.

Measures Regarding the Protection of Personal Data

The protection of personal data is an important matter for Namila. Namila takes the necessary measures to protect personal data against unauthorized access, loss, misuse, disclosure, alteration, or destruction.

Namila uses generally accepted security technology standards such as firewalls and Secure Socket Layer (SSL) encryption when storing personal data. In addition, when you send your personal data to www.namila.com through the website/mobile application/mobile site, this data is transferred using SSL.

Namila is committed to keeping your personal data confidential, taking all necessary technical and administrative measures for ensuring privacy and security, and exercising due care. Despite Namila taking the necessary information security measures, in the event that personal data is damaged or obtained by third parties as a result of attacks on the website and system, Namila will immediately notify you and the Personal Data Protection Board and take the necessary measures.

Changes to the Privacy/Personal Data Protection Policy and Communication Consent

Namila may make changes to this Privacy/Personal Data Protection Policy and Communication Consent at any time. These changes become effective immediately upon the posting of the amended Privacy/Personal Data Protection Policy and Communication Consent on the "www.namila.com" website. You, our members, will be informed of changes to this Privacy/Personal Data Protection Policy and Communication Consent.

Users may update their Membership/Personal information and communication preferences at any time. You can submit your requests by sending an email to [email protected]. Your request will be evaluated within 30 (thirty) days and you will be informed in writing about the result. Additionally, users may submit any requests regarding the "Privacy/Personal Data Protection Policy and Communication Consent" by sending an email to [email protected].

Applicable Law, Competent Courts and Enforcement Offices

This Privacy/Personal Data Protection Policy and Communication Consent is subject to the laws of the Republic of Turkey. Antalya (Central) Courts and Enforcement Offices are authorized for the resolution of any disputes arising from the application of the Privacy/Personal Data Protection Policy and Communication Consent.

Communication Consent

By accepting this Privacy/Personal Data Protection Policy and Communication Consent, you have given your consent for your personal data, which you have agreed to share with us, to be collected, stored, processed, used, and transferred to third parties with whom Namila has a contractual relationship, for the purpose of providing various advantages to you and conducting all types of electronic communication including promotions, advertisements, sales, marketing, surveys and similar purposes via telephone, SMS, email, and similar means.