INFORMATION ON THE PROCESSING OF YOUR PERSONAL DATA

This clarification text has been prepared in accordance with Article 10 of the Personal Data Protection Law No. 6698 ("KVKK") and Article 13 of the General Data Protection Regulation ("GDPR") to inform you about your personal data collected and processed by DINAMO ANTALYA Organization Trade and Industry Joint Stock Company.

The contact details of the Data Controller are provided below. Please reach out for any inquiries regarding the processing of your personal data:

DINAMO ANTALYA Organization Trade and Industry Joint Stock Company
 Address: Çağlayan Mah. 2009 Sok. Hüseyin Serdar Apt. No: 35 Kat:1 Daire: 4  Muratpaşa / Antalya 

Email: info@sunexpressgolfclub.com

Your personal data may be collected electronically or physically during processes such as registering for SunExpress Golf Club membership on our website and executing related transactions (e.g., payments, updates, communication requests).

Additionally, personal data may also be collected through the following means:

• By performing membership or other transactions via our mobile application;
• By submitting membership applications or conducting other transactions at SunExpress Golf Club offices, authorized representatives of our business partners, or sponsors;
• Through travel offices, travel agencies, tour operators, etc., where you obtain your travel arrangements;
• Via call centers, email, or other communication channels for membership applications, other transactions, or update requests;
• By sharing information in face-to-face settings such as events, organizations, or fairs.

Your personal data is processed in compliance with Article 4 of KVKK and Articles 5, 6 of the GDPR. These purposes include:

• Providing services under the SunExpress Golf Club membership (KVKK Article 5/2-c, GDPR Article 6/1-b);
• Communicating with you regarding non-marketing and non-promotional matters related to your SunExpress Golf Club membership (KVKK Article 5/2-c, GDPR Article 6/1-b);
• Coordinating with business partners, sponsors, etc., to deliver membership advantages (KVKK Article 5/2-c, GDPR Article 6/1-f);
• Subject to your explicit consent, contacting you for marketing and promotional activities via email, SMS, and other digital channels (KVKK Article 5/1, GDPR Article 6/1-a);
• Fulfilling legal obligations within the framework of applicable legislation (KVKK Article 5/2-ç, GDPR Article 6/1-c);
• Evaluating requests from personal data owners and responding within the statutory timeframe (KVKK Article 5/2-ç, GDPR Article 6/1-c);
• Enhancing the quality of services provided, offering maximum benefit, formulating service and product strategies, executing audit activities, and ensuring physical and online data security (KVKK Article 5/2-f, GDPR Article 6/1-f);
• Establishing, exercising, or protecting legal rights (KVKK Article 5/2-d, GDPR Article 6/1-f);
• Conducting audit and reporting processes related to program operations (KVKK Article 5/2-f, GDPR Article 6/1-f);
• Carrying out data backup and archiving processes within the scope of legal obligations (KVKK Article 5/2-f, GDPR Article 6/1-c);
• Monitoring and ensuring the security of membership payments (KVKK Article 5/2-c, GDPR Article 6/1-b).

The following personal data categories may be processed to achieve the above purposes:

Note: If data processing is based on your explicit consent, you have the right to withdraw your consent at any time. You may exercise this right by sending an email to the address specified in the "Introduction" section above. Withdrawal of consent will take effect prospectively and will not affect the lawfulness of prior data processing activities.

Addition for Explicit Consent:

DINAMO ANTALYA takes necessary legal, technical, and administrative measures to prevent unlawful data processing and access, ensuring the secure storage of personal data in compliance with the principles outlined in KVKK and GDPR.

Your personal data may be shared under the conditions specified in Articles 8 and 9 of KVKK and GDPR Articles 44 to 49 with Güneş Ekspres Havacılık A.Ş. (SunExpress) and other business partners, sponsors, travel offices, travel agencies, tour operators, and, when legally required, with competent authorities and judicial bodies.

When transferring personal data outside the Republic of Turkey, appropriate security measures are implemented as required by KVKK and GDPR international transfer regulations.

Under Article 11 of KVKK and GDPR Articles 15 to 22, personal data owners have the right to:

• Learn whether their personal data is processed;
• Request information if their personal data has been processed;
• Understand the purpose of processing and whether the data is used in line with this purpose;
• Learn about third parties to whom personal data is transferred domestically or internationally;
• Request correction if personal data is incomplete or inaccurate;
• Request deletion or destruction of personal data under the conditions set forth in Article 7 of KVKK and GDPR Article 17;
• Request notification of third parties to whom personal data has been transferred regarding the correction or deletion of such data;
• Object to outcomes against them derived solely from automated processing;
• Claim compensation for damages incurred due to unlawful processing of personal data.

You may submit your requests regarding these rights in writing to the address: Çağlayan Mah. 2009 Sok. Hüseyin Serdar Apt. No: 35 Kat:1 Daire: 4  Muratpaşa / Antalya / Turkey, or via email to info@sunexpressgolfclub.com, using the email address previously registered in DINAMO ANTALYA’s system, or through the methods specified in Article 5 of the Communiqué on the Procedures and Principles of Application to the Data Controller and GDPR guidance on data subject rights.