Text and Consent

EMPLOYEE PERSONAL DATA DİSCLOSURE TEXT AND CONSENT

GARDEN OF SUN HOTEL

As a leadingbrand in thetourism, hotel, andaccommodationsector in Turkey, Garden Of Sun Hotel, withinitsorganization, as a datacontroller, processesyourpersonal data in thescope of ourcommercialrelationsoremploymentrelationship;

• In a limitedandmeasuredmanner,relatedtothepurpose of processing,
• Includingpersonaldataprovidedbyyouorrequestedbyyouremployer,
• Withinthescoperequiredforprocessingpurposes;

Weherebynotifythatyourpersonaldatamay be recorded, stored, retained, reorganized, processed, sharedwithlegallyauthorizedinstitutions, andtransferredtodomesticorinternationalthirdpartiesundertheconditionsprescribedbythePersonal Data ProtectionLaw (KVKK). Yourdatamayalso be classifiedorprocessed in otherformsoutlined in KVKK.

PROCESSED PERSONAL DATA

Thepersonaldataweprocessregardingemployeesmayinclude, but are not limitedto, thefollowing:

• Identification Information: Name, surname, allidentityinformation, Turkish ID number, nationality, maritalstatus, date of birth, ID copy
• Contact Information: Phone number, fulladdress, emailaddress
• Financial Information:Salaryandfinancialdetails, bonuslists, debtfiles, bank information, Tax ID
• SensitivePersonal Data:Healthpolicies, disabilityreports, healthdeclarations, pregnancyinformation, occupationaldiseaserecords, pre-employmentmedicalforms, dailymedicalcomplaints, medications, clinicalhistory, lung X-ray, hearing test, eyeexam, bloodtype, criminalrecord, religion (from ID), bloodtype (fromdriver’slicense)
• Educational Information:Educationlevel, certificatesand diploma copies, skills, resume (CV) information
• Visual andAudio Data:Photos, audiorecordings of customerinteractions, CCTV footage, fingerprintrecordsforPersonnelTrackingSystem, facialrecognitionsystem, etc.
• EmployeePerformance&Career Development Data: Training participationforms, traininghoursandduration, examresults (ifany), internalpromotionevaluations, disciplinaryreports, transfer files, attendanceandperformancereports, meetingrecords, scorecardinformation, hiredate, weeklyworkinghours, login-logoutrecords, andotherpersonalinformationenteredbyemployeesintotheprofilesystem
• Family& Close Contact Information:Familynotificationforms
• Other:Vehicleinformation, workcomputer IP addressesand web activity, hobbies, exitinterviewreports, militarydischargedocuments, annualleavelogs, employmentterminationforms, socialsecurityregistrationnumbers, taxexemptionletters, visitorinformation

PURPOSES OF PROCESSING YOUR PERSONAL DATA

Yourpersonaldatamay be processedbytheCompanyforthefollowingpurposes, including but not limitedto:

• Fulfillingtheemploymentcontract, including:
  • Provingtheemploymentrelationship
  • Recordingsalaryandrelatedinformation
  • Trackingsickleaves
  • Managingpayrollprocesses
  • Monitoringattendance, workplaceruleviolations, andpreparingnecessarywarninglettersor legal proceedings
  • Monitoringcompliancewithcompany IT andcommunicationpolicieswithinemploymentlimits
• Compliancewithlaws, regulations, andrelatedauthorities, including:
  • Fulfilling legal reportingandinformationobligations
  • Executingcourtdecisions
  • Processingpersonaldatatofulfillsocialsecurityobligations
• Ensuringcompanysecurity, including:
  • CCTV monitoring of operationareas, lockers, emergencyexits, entrances/exits, andrestingareas
  • Protectingcompanytradesecrets
  • Safeguarding IT systemsagainstvirusesandotherthreats
• Fulfillingcustomer service obligations, including:
  • Recordingandreviewingcustomercallsfor service qualityandemployeetraining
• Companyadministrationandoperationalpurposes, including:
  • Employeeperformanceevaluationandpromotions
  • Payrollmanagement, mandatorydeductions
  • Authorizationforsoftwareand file access
  • Reportingandrecordkeeping
  • Managingrelationships, motivation, andefficiency
  • Managingshiftschedules, training, andworkplacesafety

Yourpersonaldatawill be retainedfor as long as requiredbyapplicablelawornecessaryforthepurposesforwhichtheywereprocessed.

SHARING PERSONAL DATA WITH THIRD PARTIES IN TURKEY

Toensureyoursecurityandfulfill legal obligations, yourpersonaldatamay be sharedwithauthorizedpublicinstitutions, including but not limitedto: Social Security Institution (SGK), Ministry of Finance, Ministry of CustomsandTrade, Ministry of LaborandSocial Security, TurkishEmploymentAgency (İŞKUR), Information andCommunication Technologies Authority (BTK), andotherlegallyauthorizedentities.

Yourpersonaldatamayalso be sharedwiththird-party service providers, HR consultancycompanies, IT companies, subcontractors, professionaladvisors, lawyers, accountants, occupationalhealthandsafetyinstitutions, andbusinesspartners of theCompany. Forexample, yourpersonaldatamay be sharedwith service providerstocreatecorporateemailaccountsorgrantaccesstoCompanysystems.

SHARING PERSONAL DATA WITH THIRD PARTIES ABROAD

Yourpersonaldatamayalso be transferredtocompanies, subsidiaries, andaffiliatesabroad, as well as tobusinesspartners, suppliers, service providers, shareholders, andlegallyauthorizedpublicinstitutions. Yourdatamay be processedbytheseentities in accordancewithapplicable data protectionlaws.

YOUR RIGHTS UNDER ARTICLE 11 OF KVKK

Youhavetherightto:

• LearnwhethertheCompanyprocessesyourpersonaldata, andrequestinformationif it does
• Learnthepurposes of processingandwhetheryourdata is used in accordancewiththesepurposes
• Learnifyourpersonaldata has beentransferreddomesticallyorabroadandtowhom
• Requestcorrection of inaccurateorincompletedata
• Requestdeletion, destruction, oranonymization of yourpersonaldataunderArticle 7 of KVKK
• Object toautomateddecision-makingprocesses
• Claim compensationfordamagesifyourpersonaldata is unlawfullyprocessed

Requestsmust be submittedtothe Human Resources Office at yourworkplace, andwill be processedfree of chargewithin 30 days. Ifadditionalcostsarerequired, feesmay be chargedaccordingto KVKK regulations.

You can alsonotifyupdatesorchangestoyourpersonaldata at any time viaemail at info@gardenofsun.com.tror in person at Garden Of Sun Hotel, Aydın, Didim.

DURATION OF PROCESSING YOUR PERSONAL DATA

Yourpersonaldatawill be deleted, destroyed, oranonymizedwhentheprocessingpurposeceasesorwhenretentionperiodsrequiredbylawexpire.

PROCESSING WITHOUT EXPLICIT CONSENT

AccordingtoArticle 5 of KVKK, theCompanymayprocesspersonaldatawithoutexplicitconsent in casessuch as:

• As explicitlyrequiredbylaw
• Whenconsentcannot be providedduetofactualimpossibility
• Whennecessarytoprotect life orbodilyintegrity
• Tofulfillcontractualobligations
• Tofulfill legal obligations
• Ifpersonaldata has beenmadepublicbythe data subject
• Toestablish, exercise, orprotect a right
• Forlegitimateinterests of theCompanywithoutharmingyourfundamentalrights

I havereadandapprovetheDisclosureText