I. Appendix-1: Clarification Text on the Personal Data Protection for Website Visitors

As Gözalan Özel Eğitim Öğretim Kurumları Öğrenci Barınma Hizmetleri Otelcilik ve Turizm A.Ş. (“Alan Suites”), we respect the personal data we process through the form filled by You who wish to visit our website and obtain information as we continue our operations and activities, and we show maximum sensitivity regarding the security of personal data within the framework of current legislation and universal values.

Accordingly, Gözalan Özel Eğitim Öğretim Kurumları Öğrenci Barınma Hizmetleri Otelcilik ve Turizm A.Ş., registered with Istanbul Trade Registry Office under registration no. 33354-5, holder of Mersis no. 0410071854500016, residing at the address Karayolları Mahallesi 563 Sk. No: 1A/1 Gaziosmanpaşa/İSTANBUL, carries out personal data processing activities in the capacity of the data controller in accordance with the provisions of the Personal Data Protection Law no. 6698 (“KVKK”).

Personal Data Processed

Your personal data primarily means all kinds of information that will enable you to be identified or to be identifiable, such as your name and last name, telephone number, e-mail address and your questions and requests.

Purposes of Processing Personal Data

Alan Suites processes personal data based on one or more of the personal data processing conditions specified in Article 5 of the KVKK, in accordance with the personal data processing principles set out in Article 4 of the KVKK. In this context, Alan Suites processes personal data:

• For purposes of handling the questions and requests of our website visitors based on the legal reason of establishment or performance of a contract;

• For purposes of responding to the requests of the data subject based on the legal reason that data processing is mandatory for the establishment, use and protection of a right; for purposes of allowing the Company to use its rights and fulfill its responsibility of burden of proof in case of any possible dispute including in relation to situations related to legal procedures or obtaining legal advice;

• For purposes of informing the website users about our services and campaigns by engaging in advertising and marketing activities based on the legal reason of explicit consent.

To Whom and For What Purposes the Processed Personal Data Can Be Transferred

For the purposes specified above, your personal data may be transferred to other members of Gözalan Group of Companies or other third parties from whom services are obtained in the capacity of the data processor for purposes such as entering into an accommodation contract, carrying our marketing activities, contacting you in order to respond to your information requests, providing you information regarding Alan Suites and fulfilling legal responsibilities as per relevant miscellaneous regulations. In addition, for purposes of ensuring the legal and commercial security of our Company and those with whom our Company has business relationships, and determining and implementing our Company’s commercial and business strategies, your personal data may be transferred to our business partners, our suppliers acting as data processors, legally authorized public institutions and private persons in accordance with the conditions and purposes of processing personal data as specified in Article 8 of the KVKK.

Method and Legal Reason for Collecting Your Personal Data

Personal data is collected electronically as you fill out the forms in the “Contact Us” and “Let Us Call You for Registration Period Opportunities” sections of Alan Suites website and based on the legal reasons specified.

Your personal data is collected and processed in accordance with the personal data processing conditions specified in Article 5 of the KVKK, (i) if data processing is compulsory for the establishment or performance of a contract; (ii) if data processing is mandatory for the establishment, use and protection of a right; and (iii) in compliance with the explicit consent requirements.

Rights of the Data Subject as Specified in Article 11 of the KVKK:

As the data subject, you can send a registered mail to the Company’s registered address indicated in Article 2 to send your written and signed requests and questions regarding your rights, including also your identity, telephone number and address to allow us to know and contact you, or you can send your application in person or e-mail it to kvkk@gozalan.com.tr. In case the procedure leads to an additional cost, we will charge the fee indicated in the tariff determined by the Personal Data Protection Board. The real persons whose personal data is processed have the following rights as per Article 11 of the KVKK: i. learn whether their personal data is processed; ii) if processed, request information on the processing of their data; iii) learn the purpose of processing of personal data and whether the data is used according to its purpose; iv) know the third parties to whom the personal data is transferred within the country or abroad; v) request for correction of their personal data if missing or inaccurate data is processed and request that the third parties to whom the personal data has been transferred are informed about the procedures done accordingly; vi) request for deletion or destruction of personal data in the event that the reasons requiring its processing have disappeared, although it has been processed in accordance with the provisions of the KVKK and other applicable laws, and request that the third parties to whom the personal data has been transferred are informed about the procedures done accordingly; vii) object to any result occurring against the User by analysis of the data processed exclusively through automatic systems; and viii) and demand compensation of damages incurred due to processing of personal data in violation of the Law.