I consent to receiving commercial electronic communications containing marketing content, including campaigns, advertisements, promotions, discounts, events and similar content, by SMS, email and telephone, and to the processing of my contact details for this purpose.I hereby give my explicit consent to photographs and video recordings taken in connection with the activities of Sunset Grill & Bar being shared, for the purpose of promoting the business, on Sunset Grill & Bar's Instagram account, other social media accounts, website and similar digital channels and, because the server infrastructure used by such platforms (including Instagram and Gmail) is located abroad, to the transfer of such data, as a technical necessity, to the servers located abroad of the relevant service providers.For the purposes of receiving, creating, updating and managing my reservation requests, communicating with me in connection with the reservation process and providing customer services, I consent to my name and surname, contact details, reservation information and any other personal data I provide in this context being transferred to the servers located abroad of the relevant service providers, and processed in this connection, as a result of the use of communication, email, calendar, cloud storage and similar services provided by WhatsApp and Google.4. Delivery of Printed and Digital Content (Magazines, etc.)I consent to the processing of my personal data for the purpose of preparing the restaurant's magazines, newsletters and similar printed or digital content and delivering such content to me.I consent to the analysis of my personal data and its processing for profiling purposes in order to provide me with personalised content, events and offers based on my preferences, interests, order history and dining habits.

a) Data Controller
Pursuant to the Law No. 6698 on the Protection of Personal Data (“Law”), the data controller of your personal data processed within the scope of reservation transactions carried out through this screen is the restaurant/hotel where you wish to make a reservation.

The reservation infrastructure is provided by Rezervem Teknoloji Hizmetleri Anonim Şirketi, and within this scope, Rezervem acts as a data processor.

b) Purposes of Processing Personal Data
Your personal data is processed for the purposes of receiving and managing reservation requests, planning table/capacity, sending mandatory notifications regarding the reservation, managing customer relations and operational processes, and fulfilling legal obligations.

c) Methods and Legal Grounds for Collecting Personal Data
Your personal data is collected electronically through online reservation forms and communication channels, and is processed based on the legal grounds set forth in Article 5/2 of the Law, including:

• Establishment and performance of the reservation and service relationship between the guest and the restaurant/hotel,
• Fulfillment of the legal obligations of the data controller

d) Data Categories and Sample Data Types

• Identity Information; name, surname
• Contact Information; email address, phone number
• Reservation Information; date, time, number of guests, special requests

e) Recipients and Purposes of Transfer of Personal Data
Your personal data may be transferred, for the purposes of carrying out and managing the reservation, to the relevant restaurant/hotel and to Rezervem Teknoloji Hizmetleri Anonim Şirketi (data processor) for providing the reservation infrastructure, in accordance with Article 8 of the Law, by taking the necessary technical and administrative measures.

Within the scope of the establishment and performance of reservation processes, in order to send mandatory notifications related to the reservation (such as reservation confirmations, reminders, payment or prepayment notifications, cancellation and change notifications), your contact information may be processed through messaging, email, and communication service providers located in Turkey or abroad (such as WhatsApp and similar platforms), and within this scope, may be transferred abroad.

h) Your Rights as a Data Subject under Article 11 of the Law
Within the scope of Article 11 of the Law, you have the right to learn whether your personal data is processed, request information, learn the purpose of processing and whether it is used in accordance with its purpose, know the third parties to whom it is transferred, request correction if it is incomplete or incorrectly processed, request deletion or destruction, and request compensation for damages.

You may submit your requests regarding these rights to the restaurant/hotel acting as the data controller.

By Ulus Turistik Tesisler Ve Yatırım Ticaret Anonim Şirketi; in accordance with the Law No. 6563 on the Regulation of Electronic Commerce, the relevant regulations, and the Law No. 6698 on the Protection of Personal Data (“KVKK”), I acknowledge that I have given my consent to receive commercial electronic messages via SMS, email, telephone, WhatsApp, and similar communication channels for the purposes of campaigns, promotions, events, announcements, advertising activities, and customer satisfaction and evaluation studies, using my name, surname, and contact information that I have provided to the Company.

Within this scope, I accept that, for the purpose of sending commercial electronic messages, my contact information may be processed through email, messaging, and communication service providers located in Turkey or abroad (such as WhatsApp, Brevo, Mailchimp and similar service providers), and therefore may be transferred abroad, and that I have given my explicit consent in this regard.

I acknowledge, declare, and undertake that I am aware that I may withdraw my consent to receive commercial electronic messages at any time, free of charge, by using the opt-out methods included in the messages sent to me, through the relevant communication channel, or via the Message Management System (İYS), and that I can view and modify my consent status through İYS.

Ulus Turistik Tesisler ve Yatırım Ticaret Anonim Şirketi ("Sunset Grill & Bar") is committed to protecting the personal data of its customers with due care and, in its capacity as data controller, to fulfilling its obligations in accordance with Law No. 6698 on the Protection of Personal Data (the "Law") and other applicable legislation. This Privacy Notice explains the scope in which our customers' personal data may be processed and the rights available to our customers in relation to such processing.
1- Your Personal Data and How We Obtain It
For the purposes of the Law, "personal data" means any information relating to an identified or identifiable natural person, including your name, surname, Turkish ID number, telephone number, address, email address, security camera recordings and food order preferences ("Personal Data"). "Special categories of personal data", as a special category of personal data, include data relating to race, ethnic origin, political opinion, philosophical belief, religion, religious sect or other beliefs, appearance and dress, membership of an association, foundation or trade union, health, sexual life, criminal convictions and security measures, as well as biometric and genetic data ("Special Categories of Personal Data"). References to Personal Data in this Privacy Notice also include Special Categories of Personal Data.
2- How and on What Legal Grounds Do We Collect Your Personal Data?In all personal data processing activities carried out by us, we act in accordance with the obligations and principles prescribed by applicable legislation, in particular the Law, and take the necessary security measures to ensure that your Personal Data are processed securely. Pursuant to the Law, we collect your Personal Data through the channels listed below, as well as any other channels that may be added in the future, by automated or non-automated means, by voice, orally, in writing or electronically, and process such Personal Data under Articles 5 and 6 of the Law depending on the purpose of the processing:

• Through our call centre,
• By being provided directly by you, in writing or orally, during your visit to our establishment,
• By being provided by you through a QR code available at our restaurant or in our magazine,
• Through correspondence conducted via our email addresses ("Email"), short messages sent for other purposes relating to Sunset Grill & Bar and its activities ("SMS"), the WhatsApp application, our social media accounts and other communication methods, including all such means of communication ("Communication Channels"),
• Through third parties such as group companies to which we provide services or from which we receive services, business partners, manufacturers, and companies from which services/products are procured.

3- To Whom May Your Personal Data Be Transferred?Where a processing condition not requiring your explicit consent exists, or on the basis of your explicit consent, your Personal Data may be transferred to institutions or organisations permitted under the Law and other applicable legislation, including in particular public legal entities such as the Personal Data Protection Authority, judicial authorities, the Ministry of Health and the Directorate General of Security; our subsidiaries and affiliates; third parties from which we receive support for the purposes of carrying out security processes, creating and managing reservations, conducting customer relations processes, structuring and administering loyalty programmes, sending electronic communications within the scope of campaigns, advertising, promotion and information activities, and producing, distributing and organising Sunsetter magazine and similar printed content; group companies, agencies, business partners and banks with which we cooperate and/or from which we receive services; consultancy firms providing support in legal, tax and similar matters; official institutions and organisations associated with the Message Management System (İYS) for the purpose of carrying out message management processes; and other related parties and competent institutions and organisations to which transfer is necessary for the purposes specified above.For as long as your explicit consent or another condition for processing personal data applies, your Personal Data may be transferred to servers used by the service providers with which we cooperate and from which we receive services in connection with reservation and similar operations (including WhatsApp, Google and Instagram), which provide storage, archiving and information technology support (including server, hosting, software and cloud computing services) and are located in Türkiye or abroad, including in particular EU countries, the United States, the United Kingdom, OECD countries, India, China and Russia.4- Which Categories of Personal Data Do We Process?Examples of the Personal Data we process include:

• Identity information: your name and surname, Turkish ID number/tax number, photographs, video recordings and other data identifying you.
• Contact information: your telephone number, email address, business address, residential address and any other contact information enabling us to contact you.
• Security camera footage, voice recordings obtained through the call centre, and other Personal Data collected by automated means.

5- For What Purposes Do We Process Your Personal Data?We process your Personal Data under Articles 5 and 6 of the Law for the following purposes:

• Carrying out restaurant operations and providing services,
• Creating and managing reservation processes,
• Carrying out payment transactions and financial processes,
• Managing customer communications,
• Managing customer satisfaction processes, requests and complaints,
• Improving service quality and enhancing the customer experience,
• Establishing and administering loyalty programmes and providing related benefits,
• Carrying out marketing, analysis and targeting activities,
• Carrying out campaign, advertising, promotion and information activities,
• Sending commercial electronic communications and carrying out related legal compliance processes,
• Preparing and publishing the restaurant's magazine and similar printed/digital content and delivering such content to the relevant persons,
• Improving business processes, optimising costs and increasing efficiency,
• Carrying out accounting and finance processes,
• Following up and conducting legal affairs,
• Ensuring the safety of the life and property of our customers and other visitors, and carrying out occupational health and safety processes,
• Preventing and detecting security incidents and investigating them where necessary,
• Carrying out and auditing information security processes,
• Ensuring business continuity and carrying out operational activities,
• Fulfilling legal obligations,
• Ensuring the commercial and legal security of the Company and protecting its legitimate interests.

6- How Long Do We Process Your Personal Data?Your Personal Data shall be processed in accordance with the retention periods required by legislation concerning the protection of personal data, in particular the Law, and other applicable legislation, and in any event for as long as the legitimate purposes set out above continue to exist.7- Legal Grounds for Processing Your Personal Data
Your Personal Data are processed, for the purposes described above, on the basis of the following legal grounds set out in Articles 5 and 6 of Law No. 6698 on the Protection of Personal Data:• Explicit Consent: Your Personal Data may be processed on the basis of your explicit consent in connection with activities such as carrying out campaigns, advertising and promotional activities, sending commercial electronic communications, enrolling you in loyalty programmes and providing personalised benefits in this context, magazine subscription and distribution, managing social media accounts and making posts on such platforms.• Processing Directly Related to the Establishment or Performance of a Contract: Your Personal Data are processed in service-related processes such as providing restaurant services, creating and managing reservations, and carrying out payment transactions.• Processing Necessary for Compliance with the Data Controller's Legal Obligations:
Your Personal Data are processed for the purposes of fulfilling tax, accounting, finance and similar legal obligations, responding to requests from competent institutions and organisations, and complying with retention obligations arising under applicable legislation.• Processing Necessary for the Establishment, Exercise or Protection of a Right:
Your Personal Data may be processed for the purposes of constituting evidence in potential disputes, conducting legal proceedings and protecting the rights of our Company.• Processing Necessary for the Legitimate Interests of the Data Controller:
Your Personal Data may be processed for the purposes of improving service quality, ensuring customer satisfaction, improving business processes, increasing operational efficiency, ensuring information security and maintaining the sustainability of the Company's commercial activities.

8- Your Rights as a Data Subject
As provided under Article 11 of the Law, as a data subject you have the right to:

• Learn whether your Personal Data are processed,
• Request information if your Personal Data have been processed,
• Learn the purpose of processing your Personal Data and whether they are used in accordance with that purpose,
• Know the third parties in Türkiye or abroad to whom your Personal Data are transferred,
• Request the correction of your Personal Data if they have been processed incompletely or inaccurately,
• Request the deletion or destruction of your Personal Data within the framework of the conditions set out in Article 7 of the Law,
• Request that the actions taken pursuant to the two items above be notified to third parties to whom your Personal Data have been transferred,
• Object to the occurrence of a result against you through the analysis of your processed Personal Data exclusively by automated systems,
• Request compensation for any damage you suffer as a result of the unlawful processing of your Personal Data.

In this context, you must submit requests relating to these rights, together with documents establishing your identity, either with a wet-ink signature to our email address or postal address set out below, or through a notary public. Sunset Grill & Bar shall finalise your request free of charge as soon as possible and, in any event, within 30 (thirty) days at the latest from receipt of the relevant documents. Where fulfilling your request gives rise to a cost, we may charge only the fees set out in the tariff determined by the Personal Data Protection Board.Postal Address: Ulus Turistik Tesisler ve Yatırım Ticaret Anonim Şirketi - Kuruçeşme Mah. Yol Sok. No:2 Ulus Park, 34345, Ulus, Beşiktaş, İstanbul (Istanbul Trade Registry No.: 307603, MERSIS No.: 0889036435200019)Telephone : 0212 287 03 57
For further information, you may review Law No. 6698 on the Protection of Personal Data or visit www.kvkk.gov.tr.
Yours sincerely,
Ulus Turistik Tesisler ve Yatırım Ticaret Anonim Şirketi

Pursuant to the Law No. 6563 on the Regulation of Electronic Commerce, the relevant secondary legislation, and the Turkish Personal Data Protection Law No. 6698 (“KVKK”), I hereby acknowledge and consent that my name, surname, and contact information provided to Rezervem Teknoloji Hizmetleri A.Ş. (“Rezervem”) may be processed for the purposes of campaigns, promotions, marketing activities, events, announcements, advertising activities, and customer satisfaction and evaluation studies, and that commercial electronic messages may be sent to me via SMS, e-mail, telephone, WhatsApp, and similar communication channels.

Within this scope, I acknowledge and expressly consent that my contact information may be processed through e-mail, messaging, and communication service providers located domestically or abroad (including WhatsApp, Brevo, Mailchimp, and similar service providers), and that my personal data may therefore be transferred abroad, and that I have provided my explicit consent in this regard.

I acknowledge, declare, and undertake that I may withdraw my commercial electronic message consent at any time, free of charge, by using the opt-out methods included in the messages sent to me, through the relevant communication channel, or via the Message Management System (İleti Yönetim Sistemi – “İYS”), and that I may view and modify my consent status through the İYS.