Odeon Turizm İşletmeciliği Anonim Şirketi (hereinafter referred to as "Odeon Turizm") attaches great importance to the security of your personal data processed by us in our capacity of a data controller as defined under Law No. 6698 on the Protection of Personal Data ("KVKK"), and therefore wishes to inform you about your personal data that we process.

Which personal data are processed, and what are the purposes of their processing, the legal grounds and the methods of collection?

Within the scope of carrying out the vehicle tracking process, your location data (information on the vehicle's location, vehicle tracking system data) as well as visual and audio records (video and audio recordings) collected through vehicle tracking devices as well as visual and audio recording devices, are processed for the limited purposes of ensuring the lawful conduct of activities stipulated under paragraph 2 of article 5 of the KVKK, providing information to authorized persons, institutions and organizations, and carrying out audit / ethics activities, on the following legal grounds: where it is explicitly prescribed by law and where it is mandatory for the data controller to fulfil its legal obligations. The aforementioned data are also processed for limited purposes in order to conduct and supervise business activities, provide management of customer relations, ensure the security of movable property and resources, carry out logistics activities, and ensure the security of the data controller's operations, on the following legal ground: the processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject.

To whom and for what purposes can your personal data be transferred?

Your personal data may be transferred in accordance with the rules specified in article 8 of the KVKK regarding domestic data transfers and subject to the implementation of necessary technical and administrative measures:

The personal data are transferred only to the extent necessary to achieve relevant purposes.

What are your rights with regard to your personal data as a data subject?

Regarding your personal data, you are entitled to:

How can you exercise your rights?

You may submit your applications and requests regarding your personal data through the Data Subject Application Form available on our website by the following methods:

In accordance with the Regulation on the procedures and principles of application to the data controller, the application of the data subject must include the following information: name, surname, signature (if the application is in writing), Turkish ID number (if the applicant is a foreign national, his/her nationality, passport number, or ID number (if any)), residence or workplace address for official notifications, e-mail address, phone number and fax number (if any) for notifications, and information regarding the subject of the request.

In the application submitted to exercise the above-mentioned rights, the data subject must clearly and comprehensibly specify the request and provide explanations regarding the right invoked. Any information and documents related to the application must be attached.

The subject of the request must be personally related to the applicant. If acting on behalf of someone else, the applicant must be authorized to do so, and this authority must be documented (power of attorney). If the application covers sensitive personal data, the applicant must be specifically authorized for this purpose, in accordance with article 10 of the Regulation on personal health data. Furthermore, the application must include identity and address information, and documents confirming identity must be attached.

Requests submitted by unauthorized third parties on behalf of someone else will not be considered.

How long will it take to respond to your requests regarding the processing of your personal data?

Your requests regarding your personal data will be evaluated and responded to as soon as possible and, in any case, no later than 30 days from the date of receipt by us. If your request is accepted or rejected with a justified explanation, our response will be delivered to you by post or e-mail to the address specified in your application, and, if possible, using the same method by which the request was submitted. If the evaluation and decision-making process requires additional costs, the fee determined in accordance with the tariff set by the Personal Data Protection Board shall apply.