INFORMATION AND CONSENT LETTER REGARDING THE PERSONAL DATA PROTECTION

Anka Journey Sağlık Turizm Hizmetleri Anonim Şirketi (“Company”), has adopted some basic principles for the protection of our customer’s entire personal data. The Company, as a data controller, aims to keep the cumstomer’s trust by acting in accordance with these basic principles. In this respect, this letter firstly aims to inform you in relation to the Law on Protection of Personal Data (Law No. 6698) (“the Law”) which regulates the fundamental provisions in relation to the protection of your personal data; and then to obtain your consent on the below stated issues in accordance with the respective provisions of the Law:

Obligation of Disclosure

Within the scope of Law, Company acts as a data controller. Company, in data controller and company capacity, shall save, store and update your personal information in order to provide those to the public institutions upon their request. In cases permitted by the relevant legislation, Company shall classify and process your personal information as specified in the Law as well as share those its direct or indirect shareholders, group companies, subsidiaries or other third parties residing in Turkey or outside of Turkey.

Method of Personal Data Collection

Your personal data, in line with the requirements of the Company, may be collected in written, verbally, electronically or through other channels from your side in person or from private or public institutions or from the Company’s direct or indirect subsidiaries, group companies, shareholders or from the Company’s service providers or service receivers who are an individual or a legal entity or from other third parties.

Aims of Personal Data Process and Legal Reasons

Company shall process your personal data as specified in the Law with individuals, private or public institutions and organizations duly authorized by Turkish laws and those who are allowed to process information in accordance with the relevant laws and the Company’s direct or indirect shareholders, group companies and subsidiaries residing in Turkey or outside of Turkey as well as other individuals and organizations deemed appropriate by the Company in order to fulfil its obligations under the legislation.

Collection, Processing, Monitoring, Storage and Sharing of Personal Data with Third Parties and the Customer’s Consent on These

For the purpose of providing services and promotion by the company, the customer gives consent to the processing, monitoring, collection, periodic checking and updating, storage and sharing with third parties, residing either in Turkey or abroad, of his/her personal information (personal information means all kinds of personal data belonging to the customer including name and surname, phone number, address and other contact information, medical reports and any other similar information).

Customer’s personal information may be kept in the database of the Company’s direct or indirect shareholders, group companies and subsidiaries residing in Turkey or outside of Turkey or in the database of the Company’s service providers, or in any other database that may be deemed appropriate by the Company, such databases can be managed and monitored from a data processing center situated in Turkey or outside of Turkey. In this regard, the customer gives consent to the transfer of the above-mentioned personal data and databases to the direct or indirect group companies, shareholders and affiliates residing in Turkey or outside of Turkey, or to the service provider companies (situated in Turkey or outside of Turkey) in order to be kept, stored, processed, monitored, periodically checked and updated.

Rights of Customers within the scope of Article 11 of the Law

Contacting Company, you have the right to: a) learn whether or not your personal data has been processed; b) request information if your personal data has been processed; c) learn the purpose of processing your personal data and whether or not it is used for the purposes intended; d) know the third parties to whom your personal data has been transferred either in Turkey or abroad; e) request correction of your personal data if it is processed deficiently or incorrectly; f) request deletion or disposal of your personal data under the terms of Article 7 of the Law; g) ask for notification to the third parties to whom your personal data have been transferred of any transactions pursuant to the above-mentioned clauses (d) and(e); h) object to any result obtained against your favor due to the analysis of your personal data exclusively by automated systems; and i) ask for indemnification for any losses you have suffered if your personal data have been processed in violation of the laws.

Within the scope of the explanations and information provided above, in accordance with the Law on Personal Data Protection No. 6698, I hereby give consent for my personal data to be gathered, processed, monitored, periodically updated and checked, kept and stored in the database by the company [•]. My aforesaid personal data and databases may be shared with the relevant private and public institutions and organizations, direct or indirect shareholders, group companies and subsidiaries of [•] residing in Turkey or abroad, as well as its domestic or foreign service providers and other relevant individuals and legal entities and my personal data may be kept, stored, processed, monitored, periodically checked and updated by them in the same way.

This information note and consent letter include the explicit consent of the Customer for the processing, monitoring, storage and transfer of my personal data within the country or abroad.