In accordance with the Personal Data Protection Law No. 6698 and the European Union Data Protection Regulation (together referred to as the “Data Protection Legislation”) regarding the processing of personal data, with this Data Protection Notice, GÖZEN HAVACILIK ve TİCARET A.Ş. (“Gözen Air Services”) herein referred as the “Representative”, with the registered address of Çobançeşme Mah. Sanayi Cad. Simetri Ofis No:60 Kat:4-8 34197 Bahçelievler – İstanbul / Turkey, hereby declares that;
the API and PNR data of passengers processed by the Corporate Customer, (herein referred to as “the Carrier”) with the trade name given on the Disclaimer: Protection of Personal Data below, will be transferred including but not limited to the Directorate General of Migration Management of the Republic of Turkey, authorized administrative institutions, handling service providers for the purposes of representation, surveillance and management activities, and upon request to security service providers in order to assist the Carrier in fulfilling the legal obligations. The personal data transfer shall be carried out in compliance with the Data Protection Legislation and by taking the necessary security measures.

You may submit your legal inquiries regarding your personal data processed in accordance with the Data Protection Legislation, through the contact information below.

Gözen Air Services – Data Protection Officer
dpo@gozenair.com

This Disclaimer on the Protection of Personal Data, within the scope of the existing commercial relationship between [Gözen Havacılık ve Ticaret A.Ş] (“the Representative”) and [.] (“the Carrier”), includes commitments by the Carrier to comply primarily with European Union Data Protection Regulation and the Personal Data Protection Law No. 6698 and other applicable legal regulations on data protection (“Data Protection Legislation”)

The Carrier hereby accepts, declares, and undertakes that all personal data processing activities, including personal data transfer will comply with the Data Protection Legislation, under the legal relationship of the Representative and the Carrier.

The Carrier further accepts, declares, and undertakes that the personal data to be transferred to the Representative shall be carried out in compliance with the Data Protection Legislation, and the data subjects have been informed before or at the time throughout the duration of data processing, -if necessary- with the explicit consent. The Carrier shall take all necessary technical and organisational security measures to meet the legal obligations of the Data Protection Legislation.

The Carrier accepts, declares, and undertakes that all personal data transferred to the Representative shall be correct and up-to-date, and is obtained in accordance with the applicable legislation, and consent to the data subjects regarding the processing and transfer of the API and PNR data by the Representative. The Carrier shall be solely and fully responsible including but not limited to the data transfer to the Representative within the required time period as specified by the Representative and for any legal, administrative, and criminal liabilities, sanctions that may arise as a result of the processing of such information to the relevant authorities and data subject.