BESA VIP TURIZM OTOMATİV TAŞ. ORG. GID. BİLG. TEKS. TEM. İNŞ. TAAH. SAN. VE TİC. LTD. ŞTİ.

CUSTOMER INFORMATION TEXT ON THE PROTECTION AND PROCESSING OF PERSONAL DATA

Data Controller In accordance with the Personal Data Protection Law No. 6698 ("Law"), your personal data is of utmost importance to Besa Vıp Turizm Ltd. Şti. ("Company"), which acts as a data controller.

Purpose of Processing Personal Data Your collected personal data may be processed within the scope of the purposes ("Purposes") stated below and in accordance with the personal data processing conditions specified in Articles 5 and 6 of the Law for the following purposes:

Regarding our Besa Car Rental products and services:

• Ensuring you benefit from our hourly/daily/monthly car or tire rental service and fulfilling reservation or cancellation requests,
• Executing and performing rental agreements,
• Tracking your transition information within the scope of systems such as the fast pass system (HGS) associated with the vehicle allocated to you and managing related penalties,
• Conducting location tracking,
• Monitoring fuel levels,
• Recording destination location if vehicle sharing service is used.

For all our products and services:

• Performing verification and/or activation processes related to your registrations and transactions,
• Creating appointments and providing quotes,
• Opening sales records, conducting online/offline payment and billing activities,
• Establishing or performing the sales contract due to your purchase of our products and services,
• Conducting information and promotional activities about our products and services,
• Creating, tracking, or canceling memberships,
• Providing vehicle protection services,
• Ensuring the security of company operations and vehicles,
• Performing post-sales support services,
• Conducting accounting and finance processes,
• Performing financial risk assessments of customers,
• Receiving, evaluating, and resolving your requests, questions, complaints, and suggestions,
• Updating customer information,
• Ensuring compliance with the retention obligations stipulated in the legislation,
• Evaluating and concluding your applications regarding the use of your rights specified in Article 11 of the Law concerning your personal data processed by our company and performing the necessary operations in this framework,
• Retaining records during the general statute of limitations to provide evidence in case of possible future disputes,
• Planning and executing customer relationship management processes,
• Following and conducting legal affairs,
• Monitoring and developing service-related activities,
• Meeting official institution requests and providing information to authorized institutions as required by legislation,
• Conducting information security processes,
• Performing audit and ethical activities,
• Planning and executing customer satisfaction and corporate communication activities,
• Conducting sweepstakes, campaigns, competitions, promotions, or advertising activities,
• Providing additional benefits to loyalty program members,
• Processing your health data in case of an accident with your consent to provide post-sales support services,
• Processing your identity, contact, customer transaction, marketing, and vehicle-insurance data with your consent to customize our products and services according to your preferences, usage habits, and needs, and sending commercial electronic messages to your contact information for advertising, promotion, campaigns, and similar purposes.

To Whom and For What Purpose Processed Personal Data May Be Transferred Your collected personal data may be transferred to our business/solution partners, suppliers, legally authorized public institutions, and legally authorized private persons in accordance with the personal data processing conditions and purposes specified in Article 8 of the Law. You can access detailed information about the parties to whom your personal data is transferred from our Policy.

If you benefit from Besa car rental services and give your explicit consent:

• Your identity, contact, customer transaction, financial, and marketing data may be shared with Rmira Teknoloji Anonim Şirketi domiciled for the purposes of ensuring that you benefit from daily or monthly car rental services, making reservations, concluding and performing rental agreements, receiving and fulfilling cancellation requests, monitoring service-related activities, providing additional benefits to loyalty program members, and creating, tracking, or canceling memberships.
• Your identity, contact, customer transaction, financial, and marketing data may be shared with Rmira Teknoloji Anonim Şirketi domiciled for the purposes of monitoring and organizing service-related activities, performing performance measurements, calculating and conducting financial transactions related to Besa Oto license fees, receiving and fulfilling reservation and cancellation requests, creating, tracking, or canceling memberships, and reporting loyalty program activities, and providing car rental services and conducting membership activities if you wish to benefit from services abroad.

For all our products and services, if you give your explicit consent:

• Your identity, contact, financial, and marketing data may be shared with Rmira Teknoloji Anonim Şirketi domiciled for the purposes of customizing our products and services according to your preferences, usage habits, and needs and sending commercial electronic messages to your contact information for advertising, promotion, campaigns, and similar purposes.

Method and Legal Reason for Collecting Personal Data Your personal data is collected by our company through electronic means such as our website, mobile applications, social media accounts, email, call center, and vehicle usage; physically through channels such as cargo/post, fax, face-to-face meetings based on the legal reasons specified in Articles 5 and 6 of the Law.

Based on the legal reason that it is necessary to process personal data of the parties to the contract, provided that it is directly related to the establishment or performance of a contract:

• Conducting vehicle sales,
• Conducting cash vehicle purchase services,
• Conducting vehicle purchase and sale processes by auction,
• Conducting second-hand vehicle sales,
• Ensuring you benefit from our hourly/daily/monthly car or tire rental service and fulfilling reservation or cancellation requests,
• Ensuring you benefit from our long-term car or tire rental service and fulfilling reservation or cancellation requests,
• Providing valet service,
• Providing vehicle maintenance services,
• Providing vehicle expertise service,
• Providing HGS / OGS,
• Conducting periodic vehicle maintenance processes,
• Providing additional services such as fleet vehicle rental insurance, accident and damage management upon your request,
• Concluding and performing rental agreements,
• Conducting vehicle spare parts and accessories sales,
• Calling tow truck in case of accident and breakdown, providing roadside assistance,
• Recording destination location if vehicle sharing service is used,
• Creating appointments and providing quotes,
• Opening sales records, conducting online/offline payment and billing activities,
• Establishing or performing the sales contract due to your purchase of our products and services,
• Updating customer information,
• Performing verification and/or activation processes related to your registrations and transactions,
• Creating, tracking, or canceling memberships,
• Providing vehicle protection services,

Based on the legal reason that it is clearly stipulated in the laws and is necessary for our company to fulfill its legal obligations:

• Meeting official institution requests and providing information to authorized institutions as required by legislation,
• Ensuring compliance with the retention obligations stipulated in the legislation,
• Evaluating and concluding your applications regarding the use of your rights specified in Article 11 of the Law concerning your personal data processed by our company and performing the necessary operations in this framework.

Based on the legal reason that it is necessary to process data for the establishment, exercise, or protection of a right:

• Receiving, evaluating, and resolving your requests, questions, complaints, and suggestions,
• Retaining records during the general statute of limitations to provide evidence in case of possible future disputes.

Based on the legal reason that it is necessary for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject:

• Conducting information and promotional activities about our products and services,
• Ensuring the security of company operations and vehicles,
• Tracking your transition information within the scope of systems such as the fast pass system (HGS) associated with the vehicle allocated to you and managing related penalties,
• Performing verification and/or activation processes related to your registrations and transactions,
• Conducting accounting and finance processes,
• Performing financial risk assessments of customers,
• Planning and executing customer relationship management processes,
• Following and conducting legal affairs,
• Conducting information security processes,
• Performing audit and ethical activities,
• Monitoring and developing service-related activities,
• Planning and executing customer satisfaction and corporate communication activities,
• Conducting sweepstakes, campaigns, competitions, promotions, or advertising activities,

If you give your explicit consent:

• Processing your identity, vehicle, location, customer transaction, and marketing data within the scope of ensuring you benefit from our services, providing you with a customized price offer for the insurance product based on your driving performance analysis and low-risk rating, and offering benefits based on driving scores and advantages,
• Processing your health data in case of an accident to provide post-sales support services,
• Processing your identity, contact, customer transaction, marketing, and vehicle-insurance data to customize our products and services according to your preferences, usage habits, and needs and sending commercial electronic messages to your contact information for advertising, promotion, campaigns, and similar purposes.

Rights of the Data Subject as Specified in Article 11 of the Law As a data subject, you have the following rights under Article 11 of the Law:

• To learn whether personal data is processed or not,
• To request information if personal data is processed,
• To learn the purpose of personal data processing and whether they are used in accordance with their purpose,
• To know the third parties to whom personal data is transferred domestically or abroad,
• To request the correction of personal data if it is incomplete or incorrectly processed and to request the notification of the transactions made in this context to the third parties to whom personal data is transferred,
• To request the deletion or destruction of personal data despite being processed in accordance with the provisions of the Law and other relevant laws, in case the reasons requiring its processing cease to exist, and to request the notification of the transactions made in this context to the third parties to whom personal data is transferred,
• To object to the occurrence of a result against the person by analyzing the processed data exclusively through automated systems,
• To request compensation for the damage in case of loss due to unlawful processing of personal data.