GALATAPORT İSTANBUL LİMAN İŞLETMECİLİĞİ VE YATIRIMLARI A.Ş. PRIVACY NOTICE 

As the Data Controller, your personal data may be processed by Galataport İstanbul Liman İşletmeciliği ve Yatırımları A.Ş. (“Galataport”, the “Company”, or the “Data Controller”) within the scope described below, in accordance with the Law No. 6698 on the Protection of Personal Data (“Law No. 6698”). 

For any inquiries regarding the Law No. 6698: 

E-mail address: KVKK@galataportistanbul.com 

Categories of Processed Personal Data and Purposes of Processing Personal Data 

Your communication data including your name, surname, phone number, and e-mail address in the event that you submit your requests and complaints to the Info Desk located at Galataport or visit Galataport’s website (www.galataport.com) and utilize the chatbot, or contact Galataport via the info@galataportistanbul.com e-mail address or the call center at 444 52 66; and your IT process data including your IP address processed within the scope of Law No. 5651 during your use of the visitor wireless internet network (Guest WI-FI) or your visit to the website, may be processed for the purposes set forth below (“Purposes”), within the framework of the personal data processing conditions specified in Article 5 of Law No. 6698. 

Your personal data may be processed by the Company for the purposes of ensuring the proper functioning of the website, improving website performance and user experience, conducting marketing and promotional activities, carrying out targeted and personalized campaign and advertising activities, measuring the performance of advertising banners, managing information security processes, receiving and concluding requests and complaints; managing and executing customer relations, including recording such data into the CRM (Customer Relationship Management) system; ensuring customer satisfaction and conducting corporate communication activities; ensuring the security of Company operations; providing information to authorized persons, institutions, and organizations; and fulfilling legal obligations within the scope of relevant legislation regarding the conduct and follow-up of business activities. 

Method and Legal Basis for Personal Data Collection 

Your personal data is collected by the Company during your visit to the website through various channels and based on different legal grounds; within the framework of Article 5 of Law No. 6698 and for the fulfillment of the Purposes, in the event that; (i) cookies and behavioral analysis tools are utilized, (ii) you submit your requests and complaints to the Info Desk located at Galataport, (iii) you establish communication via the chatbot, call center mobile line, or the e-mail address available on the website, and (iv) you utilize the visitor wireless internet network (Guest WI-FI) or conduct a visit to the website. 

Transfer of Personal Data and Purpose of Transfer 

Any kind of personal data may be transferred, to the extent relevant, to (i) the Company’s business partners, shareholders, affiliates, customer contact centers utilized for communication management specifically for business purposes, suppliers, support consulting firms, and financial institutions; (ii) third parties (Microsoft Azure) from whom the Company receives support in fields such as storage, archiving, and hosting (server, hosting, software, cloud computing) with servers located in Germany and the Netherlands, by means of executing Standard Contractual Clauses pursuant to Article 9 of Law No. 6698 and for the purpose of conducting the Company's information security processes; and (iii) authorized public institutions and organizations, as well as private legal entities, in order to fulfill regulatory obligations or requests; all for the purpose of enabling employees to perform the activities included in their job descriptions during their employment and in line with the Purposes stated in this Privacy Notice. 

Rights of the Data Subject Enumerated in Article 11 of Law No. 6698 

As a data subject, if you submit your requests regarding your rights to the Company via the e-mail address “KVKK@galataportistanbul.com”, the Company will conclude your request free of charge, depending on the nature of the request, as soon as possible and within 30 (thirty) days at the latest. However, if the transaction requires an additional cost, the fee in the tariff determined by the Personal Data Protection Board may be charged by the Company. In this context, as a data subject, pursuant to Article 11 of Law No. 6698, you have the right to: 

• Learn whether your personal data is being processed, 

• Request information if your personal data has been processed, 

• Learn the purpose of processing your personal data and whether they are used in accordance with their purpose, • Know the third parties to whom personal data are transferred domestically or abroad, 

• Request rectification of personal data if it is processed incompletely or inaccurately and request notification of this correction to the third parties to whom the personal data has been transferred, 

• Request the erasure or destruction of personal data in the event that the reasons requiring its processing cease to exist, despite having been processed in accordance with Law No. 6698 and other relevant legal provisions, and request notification of this operation to the third parties to whom the personal data has been transferred, 

• Object to the occurrence of a result against you by analyzing the processed data exclusively through automated systems, 

• Request compensation for damages in case of loss due to unlawful processing of personal data. 

You may exercise your rights regarding data subject requests by filling out the information and documents in the Application Form available on our website in full and submitting them to the Data Controller through the methods specified in the Application Form, in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller. 

In addition to this Privacy Notice regarding the processing of your personal data by our Company, you may access detailed information about our general principles and policies through the Personal Data Protection Policy available on our website. 

Maintenance of Personal Data as Accurate and Up-to-Date 

The data subject, whose personal data we process, declares and acknowledges that ensuring the accuracy and up-to-dateness of the personal data shared via the request and complaint form and/or personally provided, is crucial for exercising the data subject rights in accordance with Law No. 6698 and other relevant legislation. In this context, any responsibility arising from the sharing of incomplete or inaccurate information shall rest solely with the data subject who shared the data.