Welcome to Geccele's privacy policy. At Geccele we know that booking online requires a lot of trust on your part. The privacy policy aims to provide information about how Geccele collects and processes your personal data through your use of this website, including data you may provide through this website when you sign up for our newsletter, purchase a product or service, or participate in a competition. It is important that you read this privacy policy together with any other privacy policies or fair dealing policies we may provide in certain circumstances when collecting or processing personal data about you so that you can fully understand how and why we use your data. This privacy policy supplements and is not intended to override any other notices and privacy policies. CONTROLLER Geccele is the controller and responsible for your personal data (referred to as “we”, “us” or “our” in this privacy policy). We have designated a data protection officer (DPO) who is responsible for monitoring questions regarding this privacy policy. If you have any questions about this privacy policy, including requests to exercise your statutory privacy rights, please contact VKG using the information provided below. CONTACT DETAILS If you have any questions about this privacy policy or our privacy practices, please contact VKG in the following ways: Full name of legal entity: Geccele . E-mail address: info Postal address: Altınova Sinan Mah. 245_1 Sk. Sperta No:1, İç Kapı No:10 Kepez / Antalya, Telephone number: +90 850 242 07 99 Personal information, Turkey's supervisory authority on data protection issues, at any time You have the right to file a complaint with the Data Protection Authority (KVKK) (https://sikayet.kvkk.gov.tr/). However, we would love to engage with you to address your concerns before you contact KVKK, so please contact us first. PRIVACY POLICY CHANGES AND YOUR DUTY TO KEEP US INFORMED OF CHANGES We review our privacy policy regularly. This version was last updated on April 1, 2024. It is important that the personal information we hold about you is accurate and up to date. Please inform us if your personal data changes during your relationship with us. THIRD-PARTY LINKS This website may contain links to third-party websites, plug-ins and applications. Clicking or enabling these links may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements. When you leave our website, we recommend that you read the privacy policy of every website you visit. 2. DATA WE COLLECT ABOUT YOU Personal data or personal information means any information about an individual that identifies that individual. It does not include data from which identifiers have been removed (anonymous data). We may collect, use, store and transfer different personal information that we have grouped about you as follows: - Identity Data includes first name, maiden name, last name, username or similar identifier, marital status, title, date of birth and gender. - Contact Data includes billing address, shipping address, email address and telephone numbers. - Financial Data includes bank account and payment card information. - Transaction Data includes details of payments to and from you and other details of products and services you have purchased from us. - Technical Data includes internet protocol (IP) address, login information, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technological products on the devices you use to access this website. - Profile Data includes your username and password, any purchases or orders you make, your interests, preferences, feedback and survey responses. - Usage Data includes information about how you use our website, products and services. - Marketing and Communications Data includes your preferences in receiving marketing and communication preferences from us and our third parties.

We also collect, use and share Aggregated Data, such as statistical or demographic data, for any purpose. Aggregated Data may be derived from your personal data, but is not legally considered personal data as it will not directly or indirectly reveal your identity. For example, we may collect your Usage Data to calculate the percentage of users who access a particular website feature. However, if we combine or link Aggregated Data with your personal data and thus directly or indirectly identify you, we treat the combined data as personal data to be used in accordance with this privacy policy. We do not collect any Special Categories of Personal Data about you (this includes details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, information about your health and genetic and biometric data). We also do not collect any information about criminal convictions and crimes. IF YOU CANNOT PROVIDE YOUR PERSONAL DATA If we are required to collect personal data by law or under the terms of a contract we have with you and you fail to provide that data when you request it, we may not be able to perform the contract we have or are trying to enter into with you (for example, to provide you with goods or services). In this case, we will contact you if we need to cancel a product or service you have purchased from us. 3. HOW IS YOUR PERSONAL DATA COLLECTED? We use different methods to collect data from and about you, including: - Direct interaction. You may provide us with your Identity, Contact and Financial Data by filling in forms or writing to us by post, telephone, email or otherwise. This includes personal data you provide when: - you book and/or purchase and/or express interest in our products or services; - when you create an account on our website; - when you subscribe to our service or publications; - when you want us to reach you through marketing methods; - you enter a competition, promotion or survey; or - when you give us feedback, leave a review or contact us. - Automated technologies or interactions. When you interact with our website, we automatically collect Technical Data about your hardware, browser movements and patterns. We collect this personal data using cookies, server logs and similar technologies. If you visit other websites that use our cookies, we may also receive Technical Data about you. Please see our cookies policy for more information. - Third parties or publicly available sources. We will receive personal information about you from third parties and public sources in the following ways: Technical Data from the following parties: (a) analytics providers outside the EU such as Google, Facebook, Instagram, Twitter, LinkedIn; (b) advertising networks such as Criteo within the EU and Taboola, Facebook, Google, Sojern, Tripadvisor outside the EU; and (c) Google, Yahoo, MSN or other similar information search providers outside the EU. (d) Contact, Financial and Transaction Data from providers of technical, payment and delivery services such as WorldPay, Wirecard, Ingenico, Adyen, PaYU, Iyizico within OR outside the EU. 4. HOW WE USE YOUR PERSONAL DATA We will only use your personal data when permitted by law. We will use your personal data most frequently in the following situations: Where we need to perform a contract we are about to enter into or have entered into with you, for example, using your data to provide accommodation and to enable other service - providers to book the service you have requested; Where it is necessary for our legitimate interests (or the interests of a third party) and your interests and fundamental rights do not override those interests. When we need to comply with a legal obligation. To learn more about the legal basis for processing your personal data, see section 10 under “Glossary - Legal Basis”. Generally, we do not consider obtaining consent as a legal basis for processing your personal data, but we will obtain your consent before sending direct marketing communications to a third party via email or text message. You have the right to withdraw marketing consent at any time by contacting us.

OUR PURPOSES OF USING YOUR PERSONAL DATA We have given a description of all the reasons and legal bases for which we plan to use your personal data in tabular form below. We have stated what our legitimate interests are where appropriate. Note that we may process your personal data for more than one legal basis, depending on the purposes for which we use your data. If you need details about the bases we use to process your personal data, where more than one legal basis is given in the table, please contact us. Purpose/Activity #1 To register as a new customer Type of data (a) Identity (b) Contact Legal bases for processing, including grounds of legitimate interest Performing a contract with you Purpose/Activity #2 To process and ship your order, including: (a) To manage payments, fees and charges (b) To collect and collect monies we are owed Type of data (a) Identity (b) Contact (c) Financial (d) Transaction (e) Marketing and Communications Including bases of legitimate interest legal bases for processing (a) Performing a contract with you (b) Necessary for our legitimate interests (to collect debts owed to us) Purpose/Activity #3 To manage our relationship including: (a) To inform you about changes to our terms or privacy policy (b) To inform you about changes to our terms or privacy policy asking you to leave a review or take a survey Type of data (a) Identity (b) Contact (c) Profile (d) Marketing and Communications Legal bases for processing, including grounds of legitimate interest (a) Performance of a contract with you (b) Compliance with a legal obligation (c) Necessary for our legitimate interests (to keep our records up to date and to review how our customers use our products/services) Purpose/Activity #4 To enter a prize draw, competition, or complete a survey Type of data (a) Identity (b) Contact (c) Profile (d) Use (e) Marketing and Communications Legal bases for processing, including grounds of legitimate interest (a) Performing a contract with you (b) Necessary for our legitimate interests (to study how our customers use our products/services and grow our business) Purpose/Activity #5 To administer and protect our business and this website (including troubleshooting, data analysis, testing, system maintenance, support, reporting and data hosting) Type of data (a) Identity (b) Contact (c) Technical Legitimate bases of interest Legal bases for processing, including (a) Necessary for our legitimate interests (to run our business, provide administration and IT services, network security, for fraud prevention and in the context of business restructuring or group restructuring exercises) (b) To comply with a legal obligation required Purpose/Activity #6 To deliver relevant website content and advertisements and to measure or understand the effectiveness of the advertisements we serve Type of data (a) Identity (b) Contact (c) Profile (d) Usage (e) Marketing and Communication (f) Technical Legitimate Legal bases for processing, including bases of interest Necessary for our legitimate interests (to study and develop how customers use our products/services, grow our business and inform our marketing strategy) Purpose/Activity #7 We operate our website, products/services, marketing, customer relationships and experiences Use data analytics to improve Data type (a) Technical (b) Use Legal bases for processing, including legitimate interest bases Necessary for our legitimate interests (to identify types of customers for our products and services, to keep our website up to date and relevant, to develop our business and marketing to inform our strategy) Purpose/Activity #8 To make suggestions and recommendations regarding goods or services that may be of interest to you Data type (a) Identity (b) Contact (c) Technical (d) Usage (e) Profile (f) Marketing and Communication Legitimate interest bases also Legal bases for processing including Necessary for our legitimate interests (to study how our customers use our products/services and to grow our business) MARKETING We seek to provide you with choices regarding certain uses of personal data, particularly for marketing and advertising. OUR PROMOTIONAL OFFERS We may use your Identity, Contact, Technical, Usage and Profile Data to provide you with ideas about things we think you want or need or that may be of interest to you. This is how we decide which products, services and offers will be suitable for you (we call this marketing).

You will receive marketing communications if you have requested information from us or purchased goods or services from us and have not opted out of receiving such marketing. THIRD PARTY MARKETING We will obtain your express consent before sharing your personal data with any third party for marketing purposes. OPT-OUT You can ask us or third parties to stop sending you marketing messages at any time by logging into the website to adjust your marketing preferences and checking or unchecking the relevant boxes or, where such options are not available, by following the unsubscribe links in any marketing message sent to you. When you opt out of receiving these marketing messages, this will not apply to personal data provided as a result of a product/service purchase, warranty registration, product/service experience or other transaction. COOKIES You can set your browser to refuse all or some browser cookies or to alert you when websites set or access cookies. If you disable or reject cookies, please note that some parts of this website may not be accessible or may not function properly. For more information about the cookies we use, please see our “Cookie Policy” section. Our website uses cookies to distinguish you from other users of our site. This helps us provide you with a good experience when you browse our website and also gives us the opportunity to improve our site. **A cookie is a small text file that we store in your browser or on your computer's hard drive if you accept it. *Cookies** may contain information that can then be read by a web server in the domain that sent you the cookie. Some cookies will only be used if you use certain features and some cookies are essential for the functioning of our platform, namely our website, emails and any other methods we use to deliver our services. We use cookies for different purposes on our platform: Mandatory Cookies: These cookies are used to ensure the full functionality of our website, which adapts itself to the platform and device used by our visitors, to ensure the proper functioning of the platform, to register or log in to an account, to make or manage a reservation. Mandatory cookies are necessary to provide all the features of our website. Functional Cookies: We also use functional cookies to remember your preferences and help you use our website in an efficient and user-friendly way. Functional cookies help us remember your searches for locations and properties, dates and guest numbers, currency, language and properties viewed. We also use cookies to remember your registered account so you can log in to your account without having to retype your credentials. These cookies are not essential for our platform to function, but are part of the user-friendly offerings we offer on our platform. Performance Cookies: Performance cookies show us how you use our platform. These cookies help us collect user acquisition channels, analyze and optimize their effectiveness, understand visitor behavior on the platform, including pages visited and actions taken, emails opened and clicked, and date and time stamp information. Performance cookies help understand visitor interaction with our platform, including mouse movements and scrolling activity, searches, filter selections, sorting and text entered in search boxes. Cookies for Marketing Purposes: We use cookies from third parties to analyze and optimize our online activities. These include tracking your visiting behavior on our platform after you have been shown an online advertisement. This includes retargeting ads that may show our ad based on your browser, which happens through an anonymous cookie ID and device ID. In short, we will use this information to make our website and the advertising displayed on it more relevant to your interests. We may also share this information with third parties for this purpose.

You will receive marketing communications if you have requested information from us or purchased goods or services from us and have not opted out of receiving such marketing. THIRD PARTY MARKETING We will obtain your express consent before sharing your personal data with any third party for marketing purposes. OPT-OUT You can ask us or third parties to stop sending you marketing messages at any time by logging into the website to adjust your marketing preferences and checking or unchecking the relevant boxes or, where such options are not available, by following the unsubscribe links in any marketing message sent to you. When you opt out of receiving these marketing messages, this will not apply to personal data provided as a result of a product/service purchase, warranty registration, product/service experience or other transaction. COOKIES You can set your browser to refuse all or some browser cookies or to alert you when websites set or access cookies. If you disable or reject cookies, please note that some parts of this website may not be accessible or may not function properly. For more information about the cookies we use, please see our “Cookie Policy” section. Our website uses cookies to distinguish you from other users of our site. This helps us provide you with a good experience when you browse our website and also gives us the opportunity to improve our site. **A cookie is a small text file that we store in your browser or on your computer's hard drive if you accept it. *Cookies** may contain information that can then be read by a web server in the domain that sent you the cookie. Some cookies will only be used if you use certain features and some cookies are essential for the functioning of our platform, namely our website, emails and any other methods we use to deliver our services. We use cookies for different purposes on our platform: Mandatory Cookies: These cookies are used to ensure the full functionality of our website, which adapts itself to the platform and device used by our visitors, to ensure the proper functioning of the platform, to register or log in to an account, to make or manage a reservation. Mandatory cookies are necessary to provide all the features of our website. Functional Cookies: We also use functional cookies to remember your preferences and help you use our website in an efficient and user-friendly way. Functional cookies help us remember your searches for locations and properties, dates and guest numbers, currency, language and properties viewed. We also use cookies to remember your registered account so you can log in to your account without having to retype your credentials. These cookies are not essential for our platform to function, but are part of the user-friendly offerings we offer on our platform. Performance Cookies: Performance cookies show us how you use our platform. These cookies help us collect user acquisition channels, analyze and optimize their effectiveness, understand visitor behavior on the platform, including pages visited and actions taken, emails opened and clicked, and date and time stamp information. Performance cookies help understand visitor interaction with our platform, including mouse movements and scrolling activity, searches, filter selections, sorting and text entered in search boxes. Cookies for Marketing Purposes: We use cookies from third parties to analyze and optimize our online activities. These include tracking your visiting behavior on our platform after you have been shown an online advertisement. This includes retargeting ads that may show our ad based on your browser, which happens through an anonymous cookie ID and device ID. In short, we will use this information to make our website and the advertising displayed on it more relevant to your interests. We may also share this information with third parties for this purpose.