JOIN THE WORLD OF MERIT

Personal Data Protection Notice

Pursuant to the Law No. 6698 on the Protection of Personal Data ("Law"), Merit Travel Tourism and Travel Inc. ("Merit") acts as the Data Controller with respect to the processing of your personal data.

In accordance with Article 10 of the Law, titled "Obligation to Inform," data controllers are required to inform individuals whose personal data they process about certain matters relating to such processing.

This Personal Data Protection Notice has been prepared by Merit to fulfill its obligation to inform under the Law and to ensure transparency and accountability regarding the processing of your personal data.

Data Subject

As you visit the website of Merit Travel Tourism and Travel Inc., you act in the capacity of a Website Visitor. Accordingly, with respect to the personal data processed during your use of the website, you are considered the Data Subject under the Law.

Data Controller

The Data Controller responsible for determining the purposes and means of processing your personal data and for establishing and managing the data filing system is Merit Travel Tourism and Travel Inc.

Personal Data Processed | Purposes of Processing | Legal Basis for Processing

Recipients of Personal Data and Purposes of Transfer

Merit Travel Tourism and Travel Inc. may transfer Users' personal data, as well as any additional data derived from such personal data or voluntarily provided by Users through the website, to third parties for the following purposes:

• responding to contact requests;
• fulfilling our legal obligations;
• improving the user experience;
• ensuring the security of users;
• creating and maintaining records and documents required for processing activities in electronic or physical form;
• complying with legal obligations relating to data retention, reporting, and disclosure as required by applicable legislation and competent authorities;
• providing the requested products and services;
• implementing our corporate governance policies;
• verifying users' identities; and
• improving system performance.

For these purposes, personal data may be shared with service providers such as call center providers, complaint management service providers, and software providers supporting security services, as well as with competent public institutions, authorities, administrative bodies, and judicial authorities where required by applicable law.

Merit Travel Tourism and Travel Inc. may transfer personal data to third parties located within Türkiye, limited to and proportionate with the purposes described above. Where the legal requirements are satisfied, personal data may also be transferred abroad in accordance with the applicable provisions of the Law.

Methods of Collecting Personal Data

Your personal data are collected automatically through electronic means when you use our website.

Your Rights Regarding Your Personal Data

Under the Law, data subjects are required to submit their requests concerning their personal data to the Data Controller before filing a complaint with the Personal Data Protection Board. Pursuant to Article 14 of the Law, complaints cannot be submitted directly to the Personal Data Protection Board.

Within the scope of the Law, you have the right to:

• learn whether your personal data are being processed;
• request information regarding the processing of your personal data;
• learn the purposes of processing and whether your personal data are used in accordance with those purposes;
• know the third parties to whom your personal data have been transferred, whether within Türkiye or abroad;
• request the rectification of incomplete or inaccurate personal data;
• request the erasure or destruction of your personal data where the reasons requiring processing no longer exist;
• request that third parties to whom your personal data have been transferred be notified of any rectification, erasure, or destruction carried out pursuant to the above rights;
• object to any outcome that is detrimental to you resulting exclusively from the automated processing of your personal data; and
• request compensation for damages incurred due to the unlawful processing of your personal data.

How to Submit Your Request

You may submit your request by:

• sending a written application to 19 Mayıs Mah. 19 Mayıs Cd. No:13 Net Plaza, Şişli / İstanbul, Türkiye;
• sending a message from your registered electronic mail (KEP) address to [email protected];
• using a secure electronic signature or mobile signature; or
• if your email address is registered in our systems, sending an email from that address to [email protected].

Your application must include:

• your full name and, if the application is submitted in writing, your signature;
• your Turkish Identification Number (for citizens of the Republic of Türkiye and the Turkish Republic of Northern Cyprus), or if you are a foreign national, your nationality, passport number, or other identification number, if any;
• your residential or business address for notification purposes;
• your email address, telephone number, and fax number, if any;
• the subject matter of your request.

Any information and documents supporting your request should also be attached where applicable.

Merit Travel Tourism and Travel Inc. reserves the right to verify your identity before processing your request.

For further information regarding the procedures and principles governing applications to the Data Controller, please refer to the Communiqué on the Procedures and Principles for Application to the Data Controller issued by the Personal Data Protection Authority.

FOR HOTELS OWNED BY NET HOLDING COMPANY
FOR JOB APPLICATIONS MADE THROUGH THE WEBSITE
IN ACCORDANCE WITH THE LAW ON THE PROTECTION OF PERSONAL DATA
INFORMATION TEXT
Definitions:
Explicit consent: Consent given freely and based on informed knowledge regarding a specific matter,
Law: TRNC. Law No. 89/2007 on the Protection of Personal Data, Regulation on the Procedures and Principles to be Followed in Fulfilling the Obligation to Inform, Article 28 of the Law, and Law No. 6698 on the Protection of Personal Data (“Law”)
Personal data: Any information relating to an identified or identifiable natural person,
Processing of personal data: Any operation performed on data, such as obtaining, recording, storing, preserving, modifying, reorganizing, disclosing, transferring, acquiring, making available, classifying or preventing the use of personal data, whether wholly or partly automated or non-automated, provided that it is part of any data recording system,
Data processor: A natural or legal person who processes personal data on behalf of the data controller, based on the authority given by the data controller,
Data controller: A natural or legal person who determines the purposes and means of processing personal data and is responsible for the establishment and management of the data recording system. Net Holding Inc.: This disclosure statement and the job application data you share with us regarding your consent will be evaluated in terms of jobs at hotels affiliated with Net Holding Inc. Therefore, the data you have provided to us will be processed by these companies. This disclosure statement is effective from the date of publication, and information about hotels affiliated with this company can be found at https://www.merithotels.com/merit-lefkosa-hotel/
According to Article 10 of the Law regulating the Obligation to Inform, data controllers are obliged to inform the natural persons whose personal data they process about certain matters. Based on the personal data we obtain from individuals, the TRNC... In order to ensure that we act in accordance with the Law No. 89/2007 on the Protection of Personal Data, the Regulation on Procedures and Principles to be Followed in Fulfilling the Obligation to Inform, Article 28, and the Law No. 6698 on the Protection of Personal Data ("Law"), we present the following information to your attention within the scope of our obligation to inform.
As Net Holding Inc., we attach importance to the security of your personal data that we process as the data controller. Therefore, we would like to inform you about the processing of your personal data.
PURPOSE AND LEGAL BASIS OF PROCESSING YOUR PERSONAL DATA
Your personal data is processed in accordance with the Law No. 89/2007 on the Protection of Personal Data, the Regulation on Procedures and Principles to be Followed in Fulfilling the Obligation to Inform, Article 28, and the Law No. 6698 on the Protection of Personal Data ("Law"), and the Law No. 6698 on the Protection of Personal Data. In accordance with the Data Protection Law and secondary regulations, your personal data is processed within the framework of the purposes and legal grounds stated below:
In this context, your personal data is processed when you fill out the job application form or submit your job application form or CV in any way. Your personal data such as "Identity Information, Contact Information, Personality Analysis Information, Education Information, Family Information, Health Information, Criminal Conviction and Security Measures Information, Association-Foundation-Union Membership Information" and all other data you will provide to us in your application are processed for the purpose of evaluating your job application and determining the suitable candidate to be hired. Your personal data such as "Identity Information, Contact Information, Personality Analysis Information, Education Information, Family Information" are processed in line with the legitimate interests of the company within the scope of Article 5/2-f of Law No. 6698,
Special Categories of personal data such as "Health Information, Criminal Conviction and Security Measures Information, Association-Foundation-Union Membership Information" Your data will be processed in accordance with your explicit consent.
PURPOSES FOR WHICH PERSONAL DATA WILL BE PROCESSED
If you apply to the Company, we process your data for the following purposes in order to evaluate your job application, as it is necessary for the establishment of an employment contract within the framework of the legal relationship to be established between you and the Company:
- To evaluate your job application and to carry out other normal human resources activities,
- To contact you for job interviews and/or recruitment purposes and to carry out other employment-related processes,
- To verify how well you match the position and to record your resume information for future confirmation,
Finally, we have an obligation to share your personal data when we are requested to share your personal data through legal requests such as prosecutor's requests and court decisions in accordance with the law and procedure, and in accordance with the current legal regulations to which we are subject. In addition, if your personal data is the subject of a dispute in which we are also a party, we may use it to exercise our right of defense.