ONLINE PAYMENT SYSTEM PRIVACY NOTICE 1. IDENTITY OF THE DATA CONTROLLER Our company, SERENAS Uluslararası Turizm Kongre Organizasyon A.Ş. (“Serenas Group”), take great care to protect your personal data and act in compliance to applicable legislation in full awareness of our liabilities as a data controller and a data processor. With that respect, we would like to inform you on the processing of your personal data within our online payment system, in which are collected and processed in accordance with the provisions and principles regulated under Law No. 6698 on Protection of Personal Data. 2. THE SCOPE AND PURPOSES OF PROCESSING YOUR PERSONAL DATA We provide online payment services within the body of our organization services and relevant commercial activities. Thus, your personal data in which you had shared via the online payment form, consisting of identification data which as, your name and surname; communication data which as, phone number, e-mail address and address; occupation data which as, the organization and department you work, and profession; financial data which as, the price and type for the payment; and information security data, will be collected, stored and processed by Serenas Group as a data controller and a data processor, for the purposes of managing our sales and accounting operations, carrying out the processes for contracts, ensuring our information security, compliance to applicable legislation, and to conduct our declaration obligations to authorities. Your credit card information is processed through the infrastructure of the relevant bank or financial institution and is not collected, recorded, stored or processed by our Company. 3. THE GROUNDS AND PROCESSES TO COLLECT YOUR PERSONAL DATA Your personal data abovementioned are collected by electronic means via online payment forms which you have filled, and are processed due to being required by law, being required by our legal obligations, being necessary to conduct and execute the service contract subject to provide you our services and being mandatory for our legitimate interest as a data controller. 4. TRANSFERRING YOUR PERSONAL DATA Your personal data specified above, may be shared with our legal attorneys, consultants, other outsourced service provider real persons or legal entities, and authorised persons and institutions due to official requests, for the purposes of; internal audits, carrying out the processes relevant to our services provided, and to conduct legal affairs, accounting and information security matters. 5. YOUR RIGHTS AS A DATA SUBJECT We would like to inform you of your rights regulated under Article 11 of the Law No. 6698 Protection of Personal Data, and further state that you can submit your requests regarding your rights by duly applying through Serenas Group communication addresses set forth here. With that respect, you can send us your requests via your e-mail address registered on our system sending an e-mail to kvk@serenas.com.tr, or sending a return receipt letter or via a notary to our address; Hilal Mah. Cezayir Cad. No:13 06550 Yıldız, Çankaya/ANKARA.