In accordance with the Personal Data Protection Law No. 6698 (“GPDR”), your personal data will be processed by our Company, as the Data Controller, within the framework explained below, for purposes related to business operations, by being used, recorded, stored, updated, transferred, and/or classified. In this context, our Company takes all necessary technical and administrative measures to ensure an appropriate level of security in order to prevent the unlawful processing, unlawful access, and safeguarding of your personal data, in accordance with the laws and regulations established to protect the fundamental rights and freedoms of individuals, especially the privacy of private life.

This text is intended for all natural persons whose personal data are processed by our Company, excluding our Company's employees or job applicants.

The personal data processed as the data controller include, but are not limited to, the following;

Name, surname, Turkish ID number, address, phone number, email address, signature, physical location/security camera footage, call center/service quality voice recording, bank account number, cookie records

Purposes and legal reasons for processing personal data; The personal data you share;

• In order to benefit you and/or the institutions and organizations you represent from the products and services offered by our company, to determine and implement our company's commercial and business strategies, to carry out marketing activities, to carry out business development and planning activities, including but not limited to the necessary work being carried out,
• To carry out administrative operations for communication carried out by our company,
• To ensure the physical security and supervision of the locations used by our company,
• To establish business partner/customer/supplier (authorized or employees) relations,
• To ensure the contractual requirements and financial reconciliation regarding the products and services offered together with our business partners, suppliers, or other third parties,
• To conduct our company's human resources policies,
• To use our company's call center or website,

and/or

• To participate in training, seminars, or organizations organized by our company.

Method of collecting and storing personal data; The personal data you share with our company can be collected verbally, in writing, or electronically through automatic or non-automatic methods, offices, branches, call centers, websites, social media channels, mobile applications, and similar means. Your personal data will be stored in electronic and/or physical environments. To prevent unauthorized access, manipulation, loss, or damage to your personal data provided and stored by our company, necessary business processes and technical security infrastructure improvements are implemented.

Your personal data will be processed and stored with all necessary information security measures, provided that it is not used outside the purposes and scope notified to you, and for the period required by the processing purpose or for the period stipulated by the relevant legislation. When this period expires, your personal data will be removed from our company's data flows through deletion, destruction, or anonymization methods.

Transfer of personal data;

Your personal data, within the scope of the laws and other regulations and for the purposes stated;

• To the companies we have authorized to act on behalf and account of our company, our representatives,
• To regulatory and supervisory authorities, public institutions, or organizations that are authorized to request your personal data explicitly under the laws they are subject to,
• To business partners, suppliers, contractors, banks, credit risk and financial institutions, and other real or legal persons within the scope of the specified purposes,
• To tax and similar advisors, mandatory persons, institutions, and organizations related to legal follow-up processes, and auditors, including but not limited to, third parties from whom we receive consultancy services, and authorized persons and organizations, within the country and abroad for the purposes stated above,

Your rights under Article 11 of the GPDR; By applying to our company, regarding your personal data;

1. To learn whether it is processed or not,
2. If processed, to request information about it,
3. To learn the purpose of processing and whether it is used in accordance with its purpose,
4. To know the third parties to whom it is transferred within the country / abroad,
5. If it is processed incompletely / incorrectly, to request correction,
6. To request deletion / destruction within the framework of the conditions stipulated in Article 7 of the GPDR,
7. To request notification of the transactions made pursuant to subparagraphs (e) and (f) above to the third parties to whom it is transferred,
8. To object to the emergence of a result against you by analyzing exclusively through automated systems,
9. To demand compensation if you suffer damage due to unlawful processing,

In accordance with Article 13, paragraph 1 of the GPDR, you can submit your request to use your above-mentioned rights in writing or by other methods determined by the Personal Data Protection Board to our company.

To use your above-mentioned rights, you can personally hand in your request with the necessary information identifying your identity, send it via notary public, or by other methods determined by the Personal Data Protection Board, or send it securely signed to [email protected].