Personal Data Protection Law

Herein with this statement, we, E-Kent Geçiş Sistemleri ve Biletleme Teknolojileri A.Ş. (“the Company”) as data officer, would like to inform you on Personal Data Protection Law no. 6698 published in the Official Gazette no. 29677 dated 7/4/2016.

Purposes and Legal Grounds of Processing Your Personal Data

Your personal data are processed; for fulfillment of legal and administrative obligations by our company, registration of identity, communication and other necessary information for the determination of the information of the transaction owner, fulfillment of the requirements of the contracts concluded with you, sale of event tickets, delivery of the tickets depending on your preferred delivery method, ensuring your payment, invoice, refund and change transactions, to issue all records and documents that will be the basis of transactions with our Company through electronic channels and to keep them for the period stipulated in the legislation, to ensure compliance with Turkish and international legislation, fulfillment of information and document storage, reporting, information sharing and information obligations required by the competent authorities, efforts to increase customer satisfaction, ensuring security, conducting information researches and evaluations about the products and services of our Company, fulfillment of all our obligations to you regarding the transactions you perform with our Company.

Besides above mentioned purposes, your personal data may be processed for promotion, marketing and campaign activities upon your authorization for communication.

Situations that does not require content

Pursuant to paragraph 2 of Article 5 of the Law, The Company has the right to process personal data without explicit consent where it is necessary to process the personal data of the parties to the contract, and is directly related to the establishment or performance of a contract, provided that it is explicitly foreseen in the laws, and that it is obligatory for our Company to fulfill its legal obligation in the capacity of data responsible / data processor, in cases where it is compulsory to process data for the legitimate interests of our Company, without harming the basic rights and freedoms of the person concerned, it is generally available to the public by the person concerned, that it is obligatory to process data for the establishment, use or protection of a right.

In addition, there is no need to obtain explicit consent for the disclosure, use and transfer of data to be made to the persons / institutions who may request information due to legal obligations and / or to fulfill the legal obligations arising from the legislation that our Company is subject to.

Persons/Organizations to whom your personal data can be transferred

Your personal data may be limitedly transferred In cases where the legislation permits; to the persons or organizations that the provisions of the legislation allow/oblige to share information, to official institutions, to relevant banks depending on the payment method you prefer, to online payment systems, to the relevant distribution / cargo-courier companies depending on your delivery preference, to the project/program partner organizations we cooperate with in order to execute our activities, to domestic / international organizations, to organizations that we provide support and consultancy services, to the organization companies that organize the event where you buy your ticket.

Methods of Collecting Personal Data

Your personal data can be collected by verbal, written or electronically communication channels, through the Company's website, mobile sites and digital applications, call center, retail outlets, event venue box offices, audio and video recordings made for security purposes.

Your rights
You can apply to our company;

• a) To learn whether your personal data has been processed or not,
• b) If personal data is processed, requesting information about it,
• c) To learn the purpose of processing the personal data and whether they are used in accordance with their purpose,
• d) To know the third parties in which personal data is transmitted at home or abroad,
• e) To request correction of personal data in case of incomplete or incorrect processing,
• f) To request the deletion or destruction of personal data within the framework of the provisions of Article 7,
• g) To request that the transactions made in accordance with paragraphs (e) and (f) be notified to third parties in which personal data is transferred,
• h) To challenge the emergence of a result against you by analyzing the processed data exclusively through automated systems,
• i) To request to remedy the damages resulting from unlawful processing of personal data.

In order to fulfill your demands, the expenses to be incurred by our Company may be demanded to you according to the tariff stated in article 13 of the Law titled “Application to the Data Officer ”.