RAYTA AMUSEMENT CENTERS MANAGEMENT VISUAL ARTS COMMUNICATION AND ORGANIZATION INDUSTRY TRADE INC.
INFORMATION NOTICE ON THE PROCESSING OF PERSONAL DATA FOR AUTHORIZED PERSONS AND EMPLOYEES OF SUPPLIER COMPANIES

IDENTITY OF THE DATA CONTROLLER

This Information Notice has been prepared by RAYTA AMUSEMENT CENTERS MANAGEMENT VISUAL ARTS COMMUNICATION AND ORGANIZATION INDUSTRY TRADE INC. (“Company”) acting as the data controller, within the scope of Article 10 of the Personal Data Protection Law No. 6698 and the Communiqué on the Procedures and Principles to be Followed in Fulfillment of the Obligation to Inform. The purpose of this notice is to inform you about the methods of collecting your personal data, purposes of processing, transfer to third parties, legal grounds, and your rights.

MERSIS No: 0734-2552-7820-0001

Pursuant to Article 3 of Law No. 6698, personal data refers to any information relating to an identified or identifiable natural person. Our Company processes personal data by taking all necessary security measures, primarily to protect privacy and fundamental rights and freedoms.

PROCESSING OF PERSONAL DATA AND PURPOSES

Due to your status as an authorized person/employee of our supplier companies, your identity, contact, transaction security, physical space security data (camera recordings), financial, banking, bank/credit card, customer transaction and signature data are processed for the following purposes:

• Execution of goods and services procurement processes,
• Ensuring communication with the supplier company,
• Execution of contract processes,
• Ensuring physical premises security,
• Execution of finance and accounting operations,
• Execution of audit activities,
• Execution of occupational health and safety activities,
• Fulfillment of legal obligations arising from legislation,
• Follow-up and execution of legal affairs.

TRANSFER OF PERSONAL DATA

Your personal data may be transferred, limited to the purposes stated above, in accordance with Article 8 of Law No. 6698:

• To authorized public institutions and organizations,
• To contracted law offices and authorized public institutions for the follow-up of legal affairs,
• Your physical space security data (camera recordings) may be transferred to authorized public institutions upon request.

METHODS AND LEGAL BASIS FOR COLLECTING PERSONAL DATA

Your personal data is collected through documents provided by supplier companies, contracts, physical forms, electronic systems, and camera recording systems.

YOUR RIGHTS REGARDING PERSONAL DATA

Within the scope of Article 11 of Law No. 6698, you have the right to:

• Learn whether your personal data is processed,
• Request information if your personal data has been processed,
• Learn the purpose of processing and whether it is used appropriately,
• Know the third parties to whom data is transferred,
• Request correction of incomplete or inaccurate data,
• Request deletion or destruction of personal data,
• Object to results against you arising from automated processing,
• Request compensation in case of damage due to unlawful processing.

You may submit your requests in writing or electronically in accordance with the Communiqué on Application Procedures to the Data Controller via the “Data Subject Application Form” available at www.raytaparkordu.com.tr.

Written Applications:

You may send a signed copy of the form along with identification documents by hand, via proxy, notary, or registered mail to the Company address: ‘Nizamettin Mahallesi Boztepe Küme Evleri No:59 Altinordu / ORDU’.

Electronic Applications:

You may send the form signed with a secure electronic signature to raytaeglencemerkezleri@hs01.kep.tr or tuncay.karakas@raytapark.com.

Your requests will be concluded within 30 days at the latest.

Changes

The Company reserves the right to update this notice in line with legal amendments and decisions of the Personal Data Protection Board.