Privacy Notice (KVKK)

English courtesy translation. The Turkish text below it is the legally binding one, and the one your registration is concluded under.

Protection of Personal Data

HELİZ TURİZM GIDA TİCARET VE SANAYİ LİMİTED ŞİRKETİ — Notice on the Protection and Processing of Personal Data

Personal Data

Your personal data is the data by which you can be identified and distinguished from other individuals. Sharing personal data is a necessity of the legal and human relationships we form in social life. In this notice we, as Heliz Event, aim to explain why we need your personal data, how we obtain it and how we process it.

Whose Personal Data Do We Collect?

Besides our own staff, suppliers and business partners, we collect the personal data of you, our customers.

From customers who register for events through our websites we produce documents evidencing performance of the contract, such as invoices and receipts, using the data provided to us in the registration form. For that purpose we request our customers' name and surname, contact details and a declaration of the city they live in.

We retain the data given to us so that sales-contract-based requests such as refunds or defective goods can be handled more easily.

We retain the personal data of customers registering through our website in order to conclude the distance sales agreement, to complete the registration, to follow up matters relating to the event registered for and to contact you about changes; and we share it with the financial institutions that intermediate the payment and with the domestic courier companies we work with.

Data on our customers' age, gender and preferred event is used as input in our sales analyses and various statistical studies, so that we can serve our customers better and identify trends in the market we operate in. Unauthorised personnel have no access to customer data.

Within Heliz Event, no transfer of customer data abroad takes place in the course of data processing activities.

If you give your consent, we send commercial messages to the contact address you provide, so that you are informed of current campaigns, event dates and event details and can benefit from offers made specially to you. To deliver those messages we pass your contact address to the third-party companies we have agreements with.

Server Access Logs

Visits to our website are recorded automatically on the server the site runs on. These records consist of the visitor's IP address, the date and time of access, the address viewed, the size of the response and browser information; they are independent of the registration form and are kept for visitors who do not register as well. We process these records solely to keep the site secure, to detect misuse and attack attempts and to investigate technical faults and unusual data traffic; we do not use them for marketing, do not share them with third parties and do not transfer them abroad. They are kept for at most 30 days and are deleted automatically at the end of that period.

Security of the Data

Heliz Event does not transfer the data it obtains from data subjects abroad. It does not share that data with business and solution partners unless the data processing activity requires it. The data collected is stored and processed on servers within Heliz Event or at the solution partners resident in Türkiye that we have data storage agreements with.

Your personal data is accessible to our authorised personnel working within Heliz Event in connection with the purpose for which it was collected. Heliz Event personnel do not carry out any data processing activity outside the scope of the personal data processing policy.

Our guiding principles in processing data:

• Heliz Event processes data in connection with the relationship and the purpose that gave rise to the processing.
• It carries out data processing in compliance with the legislation.
• It does not process data for any purpose other than those explained in this notice.
• It actively verifies that the personal data collected is accurate and up to date.
• It processes data within the purpose that gave rise to the processing and limited to the period connected with that purpose; once the purpose has been achieved it removes the data by anonymising it.

Rights of the Data Subject

Heliz Event respects the rights of data subjects under Law No. 6698 on the Protection of Personal Data and the related legislation. Those rights include: to learn whether your personal data is being processed; to request information if it has been processed; to learn the purpose of the processing and whether the data is used in accordance with that purpose; to know the third parties in Türkiye to whom it has been transferred; to request correction if it has been processed incompletely or incorrectly; to request erasure or destruction of your data once the purpose of the processing has been achieved; to request that such corrections be notified to third parties; to object to a result to your detriment arising from analysis by automated systems; and to claim compensation if you suffer loss because the data has been processed unlawfully.