KVKK Disclosure Notice

1. Identity of the Data Controller

This Disclosure Notice has been prepared by StayLine, acting in its capacity as data controller, pursuant to Article 10 of the Personal Data Protection Law No. 6698 ("KVKK").

StayLine is a technology platform that provides guest communication, operations management, and artificial intelligence-supported services developed for hotels and accommodation businesses.

For any questions, requests, and applications within the scope of the KVKK, you may contact us through the following communication channels:

• Email: info@stayline.net
• Website: www.stayline.net

2. Personal Data Processed

The personal data processed by StayLine may vary depending on the manner in which you use the services.

When you visit the website, request a demo, contact us, or become a platform user, your name and surname information, contact information, user account information, IP address, device and browser information, session records, technical log records, and other information shared by you with us may be processed.

In addition, with respect to platform users, user account information, authorization and role information, login records, and system usage records may also be processed.

3. Purposes of Processing Personal Data

Your personal data;

may be processed for the purposes of providing platform services, creating and managing user accounts, providing technical support services, ensuring system security, carrying out communication activities, evaluating your requests, improving service quality, enhancing user experience, fulfilling legal obligations, carrying out information security processes, and resolving potential disputes.

4. Legal Grounds for Processing Personal Data

Your personal data;

as set out in Article 5 of the KVKK;

• Being expressly provided for by law
• Being directly related to the establishment or performance of a contract
• Being mandatory for the data controller to fulfill its legal obligation
• Processing of data being mandatory for the establishment, exercise, or protection of a right
• The existence of legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject

is processed on the basis of these legal grounds.

In cases requiring explicit consent, the explicit consent of the data subject is obtained.

5. Transfer of Personal Data

Your personal data may be transferred to technical infrastructure providers, business partners, cloud service providers, authorized public institutions and organizations, and other persons or organizations permitted by the legislation, for the purpose of providing the services.

Within the scope of operating the platform, third-party service providers such as Meta Platforms, Anthropic, and data hosting service providers may be used.

6. Cross-Border Transfer of Data

Due to the technology infrastructures used and third-party service providers, your personal data may be processed or stored on servers located abroad.

Such data transfers are carried out by taking the necessary security measures within the framework of the relevant provisions of the KVKK and the applicable legislation.

7. Special Disclosure Regarding Guest Data

With respect to guest data transferred to the system by hotels using the StayLine platform, the data controller is the relevant hotel or accommodation business.

StayLine acts in its capacity as data processor with respect to this data and processes personal data only in accordance with the instructions of the relevant data controller.

Requests regarding access, correction, deletion, and similar matters concerning guest data should be directed primarily to the relevant hotel or accommodation business.

8. Rights of the Data Subject

Pursuant to Article 11 of the KVKK, data subjects;

have the right to learn whether their personal data is being processed, to request information regarding such processing if it has been processed, to learn the purpose of processing, to request the correction of data that has been processed incompletely or incorrectly, to request its deletion or destruction, and to exercise their other rights provided for by law.

You may submit your requests regarding these rights to info@stayline.net.

StayLine will evaluate and conclude applications within the periods provided for in the applicable legislation.