Personal data protection and processing policy

As data controller, Rezervem Teknoloji Hizmetleri A.Ş. (“Rezervem”) processes personal data within Guest Network in accordance with Law No. 6698 (“PDPL”). This notice summarises what data is processed for which purposes during Site visits, partner applications, contact and public reservation/checkout. Server-side technical operations via Rezervem Partner API (availability, hold/confirm/finalise, etc.) depend on venue and partner configuration; API credentials are not collected through the Site.

• Partner applications: category (e.g. influencer, concierge, corporate), identity/contact, company or venue details, email verification records including OTP.
• Guest reservations: name, phone, email, party size, additional fields required by the venue (e.g. area selection, gender mix under venue policy), special requests.
• Contact and marketing: contact form contents; commercial electronic message preferences based on explicit consent.
• Security and audit: abuse prevention, logs and access records (under legitimate interest or legal obligation).

Personal data is any information relating to an identified or identifiable person, including name, surname, address, phone and email. Information you provide by phone, in writing or electronically is processed under the PDPL.

We process data to:

• Perform obligations arising from services you receive or will receive;
• Track and manage reservations;
• Deliver and improve services within our field of activity;
• Carry out sales, marketing, promotion and advertising;
• Inform you of campaigns, news and benefits;
• Inform you of content, opportunities and news relating to supporters and partners;
• Provide you with the best possible service;

We collect, record, store, retain, update, organise, transfer and process your information where at least one PDPL Article 5 condition applies (including explicit consent, performance of a contract, legal obligation, data made public by you, establishment/use/defence of legal claims, legitimate interests compatible with fundamental rights, and other statutory grounds), proportionate to these purposes.

Personal data may be transferred to the relevant venue and necessary technical infrastructure providers for reservation performance, to competent public authorities where legally required, and to contracted partners for limited purposes, in line with PDPL Articles 8 and 9. Retention follows contract duration, legal limitation periods and venue/reservation law; when the purpose ends, data is erased, destroyed or anonymised.

Under Article 11 PDPL you may:

• Learn whether personal data is processed;
• Request information if processed;
• Learn the purpose of processing and whether use is consistent with that purpose;
• Know third parties to whom data is transferred domestically or abroad;
• Request rectification if incomplete or inaccurate;
• Request erasure or destruction under Article 7 conditions;
• Request notification of rectification/erasure to third-party recipients;
• Object to outcomes solely from automated processing that produce legal or similar significant effects;
• Request compensation for unlawful processing.

You may submit requests using contact details on www.rezervem.com.tr, in writing or via info@rezervem.com.tr, following the Communiqué on the Procedures and Principles of Application to the Data Controller. Written applications should include name and surname, signature if on paper, identity details (for Turkish citizens, national ID number; for others, passport or ID number), address for service, optional notification email, phone and fax, and the subject of the request as required by Article 5 of the Communiqué.

For more detail see Law No. 6698 and www.kvkk.gov.tr.

Rezervem Teknoloji Hizmetleri A.Ş. — Address: Merkez Mah. Hasat Sk. No: 52/1 Şişli, Istanbul — Phone: +90 (212) 211 86 44 — Email: info@rezervem.com.tr