PERSONAL DATA PROTECTION LAW (KVKK) CLARIFICATION TEXT

Data Controller: Over Blue Resort Yamaçtepe Yolu Caddesi No:190, Alleben Göleti, Gaziantep/Şahinbey Email: info@overblueresort.com Phone: 0 (549) 392 27 27

1. Purpose of Processing Personal Data Your personal data is processed for the purposes of carrying out membership procedures, reservation and appointment tracking, sports training and academy registrations, contact form requests, campaign and announcement notifications, and fulfilling legal obligations.

2. Categories of Processed Personal Data Name, surname, phone number, email address, date of birth, invoice and payment information, and data regarding your use of our facility are processed.

3. Transfer of Personal Data Your personal data is shared with authorized public institutions and organizations within the scope of legal obligations, and with business partners and suppliers from whom we receive services, only to the extent necessary.

4. Method and Legal Basis for Collecting Personal Data Your data is collected through the website, mobile application, contact forms, face-to-face applications, and contract processes. Processing activities are carried out within the scope of Articles 5 and 6 of the KVKK No. 6698.

5. Rights of the Personal Data Owner In accordance with Article 11 of the KVKK, you have the following rights:

• To learn whether your personal data is being processed,

• To request information if it has been processed,

• To learn the purpose of the processing and whether the data is used in accordance with its purpose,

• To know the third parties to whom your personal data is transferred domestically or abroad,

• To request the correction of your personal data if it is incomplete or incorrectly processed,

• To request the deletion or destruction of your personal data,

• To object to the occurrence of a result against you by analyzing the processed data exclusively through automated systems.