Personal Data Protection Notice

This Notice has been prepared by Premium Lounge Club(the "Company"), acting as data controller, to inform you about the processing of your personal data.

The data controller, Premium Lounge Club, is established in Türkiye and the processing described here is subject to the Turkish Personal Data Protection Law No. 6698 ("KVKK"). For customers resident in the European Union or the European Economic Area, the General Data Protection Regulation (EU) 2016/679 ("GDPR") also applies to this processing; the additional rights arising from it are set out in section 8 below.

1. Data Controller

Premium Lounge Club
Address: Maslak Mah. AOS 55. Sokak 42 B Blok Sitesi No:4 Sarıyer/İstanbul
Email: info@premiumloungeclub.com
Phone (WhatsApp): +90 552 373 67 50

2. Personal Data Processed

The following personal data is processed as part of booking and service processes:

• Identity data: first name, last name and passenger details
• Contact data: phone number and email address
• Travel data: flight date, flight number, departure and arrival points
• Transaction data: booking number, service and payment status records
• Transaction security data: IP address, browser and device information, cookie records
• Usage and behaviour data: the pages you view on our website, the steps you complete in the booking form, the time spent between those steps, the actions you take on the payment page (for example selecting a payment method or viewing account details) and the stage at which you complete or abandon the process

Usage and behaviour data is collected via a temporary session ID assigned to your browser. If you fill in the booking form, these records may be linked to your booking so that the service can be delivered and support can be provided; records of visitors who do not fill in the form are not linked to an identified person. These records are never sold to third parties for advertising or profiling purposes.

Payments are collected through contracted payment institutions; your card details are not stored in the Company's systems.

3. Purposes of Processing

• Creating, managing and delivering your lounge booking
• Issuing your lounge entry pass and delivering it to you
• Running payment processes and keeping accounting records
• Responding to your requests and complaints, providing support
• Fulfilling legal obligations and informing competent authorities
• Monitoring the operation of the website and booking flow, detecting errors, improving user experience and service quality
• Identifying incomplete bookings and offering support upon your request
• Marketing and measurement activities, where you have given explicit consent

4. Legal Grounds for Processing

Your personal data is processed on the legal grounds set out in Article 5 of the KVKK:

• Processing being directly related to the conclusion or performance of a contract,
• Processing being necessary for the data controller to fulfil its legal obligations,
• Legitimate interest, provided it does not harm your fundamental rights and freedoms,
• Explicit consent, where given.

5. Transfer of Personal Data

Your personal data may be transferred, in accordance with Articles 8 and 9 of the KVKK, to contracted lounge operators for the performance of the service, to payment institutions, to communication (WhatsApp/email) infrastructure providers, to hosting and database infrastructure providers located abroad, and to competent public authorities where legally required.

For ad-measurement activities, and only where you have given explicit consent, your contact details may be sent to advertising platforms — never in plain form, but only irreversibly encrypted (one-way hashed). The purpose of this transfer is to measure the outcome of the ads shown.

6. Retention Period

Your personal data is retained for as long as the processing purposes require and, in any case, for the limitation periods prescribed by applicable legislation; at the end of these periods it is deleted, destroyed or anonymised.

7. Your Rights Under the KVKK

Under Article 11 of the KVKK, you have the right to:

• Learn whether your personal data is being processed,
• Request information if it has been processed,
• Learn the purpose of processing and whether it is used in line with that purpose,
• Know the third parties to whom it is transferred, in Türkiye or abroad,
• Request correction if it is incomplete or inaccurate,
• Request deletion or destruction under the conditions set out in the KVKK,
• Request that these actions be notified to third parties to whom data was transferred,
• Object to a result arising against you from analysis carried out exclusively by automated systems,
• Claim compensation if you suffer damage due to unlawful processing.

8. Additional Rights (Customers Resident in the EU/EEA)

If you are resident in the European Union or the European Economic Area, the GDPR grants you the following rights in addition to those listed above:

• The right of access to your personal data (Article 15),
• The right to rectification of inaccurate or incomplete data (Article 16),
• The right to erasure (Article 17),
• The right to restriction of processing (Article 18),
• The right to data portability (Article 20),
• The right to object to processing (Article 21),
• The right to lodge a complaint with a supervisory authority in your country of residence (Article 77).

9. How to Apply

You can submit requests regarding your rights by emailing info@premiumloungeclub.com or via our support line at +90 552 373 67 50. Applications are concluded within 30 (thirty) days at the latest, in accordance with Article 13 of the KVKK.

Note: This document is an English translation provided for convenience. In case of any discrepancy, the Turkish version published on this website is the legally binding text.