Information Disclosure on Protection and Processing of Customers’ Personal Data

TAV EGE TERMİNAL YATIRIM YAPIM VE İŞLETME ANONİM ŞİRKETİ

PROTECTION AND PROCESSING OF CUSTOMERS' PERSONAL DATA INFORMATION DISCLOSURE

1. DATA CONTROLLER

Your personal data can be processed by TAV Ege Terminal Yatırım Yapım ve İşletme Anonim Şirketi (the “Company”), in the capacity of the data controller, in the context explained below, in accordance with the Personal Data Protection Law no. 6698 (the “Law”).

You can reach detailed information regarding the processing of your personal data by our Company in the TAV Ege Terminal Yatırım Yapım ve İşletme Anonim Şirketi, Policy on Protection and Processing of Personal Data, publicly available at the web address of [www.adnanmenderesairport.com].

2. PURPOSES OF PROCESSING YOUR PERSONAL DATA

Your personal data which shall be collected, can be processed for the purposes defined below (the “Purposes”) in accordance with the basic principles set forth in the Law and within the scope of the personal data processing terms and conditions set forth in articles 5 and 6 of the Law, for the purposes of, mainly managing customer relations, the establishment and execution of allocation agreements of commercial areas executed with our customers, carrying out payment and revenues, monitoring financial risks and carrying out necessary financial analysis studies in this context, finalizing your requests and complaints, monitoring the orders, agreement processes and lawsuits, fulfilling our legal, contractual obligations or our obligations relating to internal and external procedures which we are subject to; responding to requests which are legally binding and received from competent public and private institutions, conducting financial and accounting operations, establishing operations and information technology infrastructure for information security and its management, ensuring the physical and legal security of the premises being operated by our Company, fulfilling our legal, contractual or internal and external procedures to which we are subject, carrying out internal and external reporting activities with internal control and audit, recording and management of events occurring within the terminal, management of operations related to civil aviation processes, providing  parking and valet services and subscription procedures within this scope, emergency and incident management, general aviation, responding to requests from authorized official or private institutions which are legally binding,  conducting statistical and similar studies for the purpose of making evaluation, performance assessment and analyses relating to offered products and services, conducting business activities of our employees, event organization and customer relations management processes, conducting corporate communication activities and if you give your explicit consent, designing processes, campaign and competition activities, carrying out personal marketing and promotion activities; carrying out activities in relation to reputation management and customer satisfaction or experience, designing activities for customer acquisition in digital or other channels and value creation for existing customers, and conducting marketing-oriented data analysis activities :

• Making necessary studies/works, by our related business units, for the performance of commercial and/or operational activities carried out by our Company, and conducting the business processes in relation thereto,
• Planning and/or performing the activities required for recommending and promoting the products and services offered by our Company and/or on behalf of and in account of our Company, by customizing them according to taste, usage habits, and needs of related persons,
• Making necessary studies/works and conducting related business processes in order to provide related persons with the opportunity to benefit from the products and/or services offered by our Company and/or on behalf of and in account of our Company,
• Planning and/or performing the activities of ensuring legal and technical security of our Company and of related persons who have business relation with our Company

("Purposes")

3. PARTIES TO WHOM YOUR PERSONAL DATA SHALL BE TRANSFERRED AND THE PURPOSES OF TRANSFER

Your personal data which shall be collected may be disclosed to our business partners in Turkey and abroad, mainly our group companies listed at the web address of [www.tavhavalimanlari.com.tr], our shareholders, mainly the Aéroports de Paris Group, our suppliers, and legally authorized public authorities and competent private persons, in order to achieve the Purposes, in accordance with the personal data processing terms and conditions set forth in articles 8 and 9 of the Law.

4. METHOD AND LEGAL REASON FOR COLLECTING YOUR PERSONAL DATA

If you contact our Company, your personal data shall be collected in electronic and/or physical environment, by means of our Company Head Office, business cards, open internet sources, printed and online forms, fax, mail, e-mail, phone, communication center, website and corporate social media channels.

In addition, your personal data shall be collected based on the reasons for the fulfillment of the legal obligations set forth in articles 5 and 6 of the Law; legitimate interest; establishment and performance of a contract; establishment, use, and protection of a right; and receiving your explicit consent, if any.

5. AS A DATA SUBJECT, YOUR RIGHTS AS MENTIONED IN ARTICLE 11 OF THE LAW

We hereby notify that, as a data subject, you have the following rights according to article 11 of the Law:

• To learn whether your personal data are processed or not,
• If your personal data are processed, to request information in relation thereto,
• To learn the purpose of processing your personal data and whether they are used in compliance with the purpose,
• To know the third persons, to whom your personal data are transferred in Turkey and abroad,
• In case your personal data are processed incompletely or incorrectly, to request the correction thereof and to request that any operation carried out in this context is reported to the third persons, to whom your personal data is transferred,
• Despite being processed in compliance with the provisions of this Law and other relevant laws, to request that personal data shall be erased or destructed in the event that the reasons for the processing no longer exist and any operation carried out in this context is reported to the third persons, to whom your personal data is transferred,
• To object to the occurrence of a result against you, if any, by analyzing the data processed solely through automated systems,
• To claim compensation if you sustain damage due to unlawful processing of your personal data.

You can send, to our Company, your applications relating to your rights set forth above, by filling in the TAV Ege Terminal Yatırım Yapım ve İşletme Anonim Şirketi Data Owner Application Form which you can reach at the address of [www.adnanmenderesairport.com]. Depending on the nature of your demand, your application shall be concluded within the shortest time and at the latest within thirty days and free of charge; however, if the action requires an extra cost, you may be charged based on the tariff determined by the Personal Data Protection Board.