Türkiye Privacy Supplement

This Türkiye Privacy Supplement (“Supplement”) is prepared in order to inform the data subjects located in Türkiye whose personal data will be collected and processed by Airbnb Ireland Unlimited Company (Airbnb) acting as data controller in accordance with Turkish Law no. 6698 on the Protection of Personal Data (the “Law”) and to fulfill Airbnb’s information obligation set forth under Article 10 of the Law and the Communiqué on the Procedures and Principles for Fulfillment of the Information Obligation. In the event of any conflicting terms between this Supplement, the Privacy Policy, and the Outside the United States Supplement, this Supplement shall take precedence.

Identity of the Data Controller and its representative. The data controller is Airbnb Ireland Unlimited Company (the “Data Controller”), a company duly organized and validly existing under the laws of Republic of Ireland, having its registered offices at 25 North Wall Quay, Dublin, 1, D01 H104, Ireland, having company number 511825.

The local data controller representative of Airbnb in Türkiye is ATG Sınai Mülkiyet Hizmetleri Limited Şirketi, a Turkish limited company, having its registered offices at Akat Mah. Ebulula Mardin Cad. Maya Meridien İş Merkezi Blok No: 16 İç Kapı No: 16 Beşiktaş / Istanbul – Türkiye.

Method and Legal Basis of Processing. Please refer to the Privacy Policy, and the Outside the United States Supplement.

Processed Data and Processing Purposes. Please refer to the Privacy Policy, and the Outside the United States Supplement.

To Whom and For What Purpose Your Data Can Be Transferred. Please refer to the Privacy Policy.

Rights of the Data Subjects. Save for the exceptions provided under Article 28 of the Law, as a data subject you have the following rights under Article 11 of the Law:

• to learn whether your personal data is being processed;
• to request information as to the processing;
• to learn the purposes for which your data is processed and whether the data is used in accordance with these purposes;
• to be informed of the third parties, in Türkiye or abroad, to whom your data is transferred;
• to request that your personal data be rectified if it is incomplete or inaccurate;
• to request that your personal data be deleted or destroyed where there is no longer any ground for its processing;
• to request that the rectification, deletion and destruction operations mentioned above be notified to any third party to whom your data has been transferred;
• to object to any result to your detriment reached by the analysis of your personal data exclusively through automated means; and
• to request compensation for any damages incurred due to the unlawful processing of your personal data.

To exercise the above rights, please apply to the Data Controller by emailing us at dpo@airbnb.com. We will answer your request as promptly as possible and in any case within no more than 30 days.