In accordance with the Personal Data Protection Law No. 6698 (“PDPL”), by our company, acting as the Data Controller, your personal data will be processed by being used, recorded, stored, updated, transferred, and/or classified for business purposes as explained below. In this context, our company takes all necessary technical and administrative measures to ensure an appropriate level of security to protect the fundamental rights and freedoms of individuals, especially the privacy of private life, and to prevent your personal data from being processed unlawfully, to prevent unlawful access, and to ensure its preservation, in accordance with the Law and Regulations arranged for the protection of personal data.

The target audience of this text includes all real persons whose personal data are processed by our company, including employees of our company or candidates who have applied for a job to our company.

Personal data processed as a data controller includes, but is not limited to, the following:

Name, surname, Turkish ID number, address, telephone number, email address, signature, physical location/security camera recording, call center/service quality audio recording, bank account number, cookie records.

Your IP address is recorded when you visit our website and give consent by reading the PDPL clarification text. Due to criminal laws and the Law No. 5651 on Regulating Broadcasting in the Internet and Combating Crimes Committed through Internet Broadcasting, the recording is done digitally. By consenting to the PDPL clarification text, the online visitor's IP address is processed.

Your personal data shared by you;

• Will be processed for the purpose of benefiting you and/or the institutions and organizations you represent from the products and services provided by our company, carrying out the necessary work for the determination and implementation of the commercial and business strategies of our company, conducting marketing activities, business development and planning activities, including but not limited to these,
• Conducting administrative operations related to communication by our company,
• Ensuring the physical security and control of the locations in use by our company,
• Establishing relations with business partners/customers/suppliers (authorized or employees),
• Ensuring the contract requirements and financial reconciliation related to products and services offered together with our business partners, suppliers, or other third parties,
• Executing our company's human resources policies,
• Calling our company's call center or using the internet page,
• Participation in training, seminars, or events organized by our company.

Your personal data shared with our company can be collected automatically or non-automatically, verbally, in writing, or electronically through offices, branches, call centers, websites, social media channels, mobile applications, and similar means. Your personal data will be stored in electronic and/or physical environments. Our company implements the design of business processes and technical security infrastructure developments to prevent your personal data stored and maintained by our company from unauthorized access, manipulation, loss, and damage.

Your personal data will be processed and stored for the duration of the legal retention period or, if such a period is not envisaged, for the duration required by the processing purpose, provided that it is not used for purposes and scope other than those notified to you, and with all necessary information security measures taken. At the end of this period, your personal data will be removed from our company's data flows by deletion, destruction, or anonymization methods.

Your personal data, within the scope of the Laws and other legislations and for the disclosed purposes;

• To companies, group companies, representatives authorized and acting on behalf of our company,
• Regulatory and supervisory institutions, public institutions or organizations authorized to explicitly request your personal data by the laws to which they are subject,
• Real or legal persons such as business partnerships, supplier and contractor companies, banks, credit risk and financial institutions, and others,
• Including tax and similar consultants, mandatory persons, institutions and organizations related to legal follow-up processes, and auditors, including third parties we receive consultancy from, without being limited to these, can be transferred to business partners, third-party service providers, authorized persons and organizations within and outside the country, for the purposes specified above.

By applying to our company, you have the right to;

• Find out if your personal data has been processed,
• If processed, request information about it,
• Learn the purpose of processing and whether it is used for its purpose,
• Know the third parties to whom it is transferred domestically/abroad,
• Request correction if processed incompletely/incorrectly,
• Request deletion/destruction within the framework of the conditions stipulated in Article 7 of PDPL,
• Request notification of the processes carried out according to the above clauses (e) and (f) to the third parties to whom it is transferred,
• Object to a result arising against you due to exclusively automated analysis of the processed data,
• Request compensation for the damage in case of suffering loss due to unlawful processing.

For your information.

“Users / Visitors, within the framework of the rights /powers granted to them by the KVK Law, by applying to the company about themselves:

• To learn whether personal data is processed or not,
• If personal data has been processed, requesting information about it,
• To learn the purpose of processing personal data and whether they are used in accordance with their purpose,
• To know the third parties to whom personal data are transferred at home or abroad,
• To request correction of personal data in case of incomplete or incorrect processing of personal data,
• Requesting deletion or destruction of personal data within the framework of the conditions stipulated in the relevant legislation,
• To request that the correction, deletion and destruction operations carried out in accordance with the relevant legislation be notified to the third parties to whom the personal data are transferred,
• Objecting to the occurrence of a result against the person himself by analyzing the processed data exclusively through automated systems,
• They have the right to request compensation of the damage if they suffer damage due to the unlawful processing of personal data.

Users / visitors with personal data may apply to the company by means of the Application Form regarding the above requests in accordance with the KVK Law. Applications, in accordance with paragraph 2 of Article 13 of the KVK Law, according to the nature of the request, your request will be answered within thirty days from the date of receipt by us. However, if the transaction requires an additional cost, the fee in the tariff determined by the Board may be charged by the company from the data owner.

In accordance with the KVK Law, the company may accept the request or reject it by explaining its justification and notify the relevant person of its response in writing or electronically. If the request contained in the application is accepted, it will be fulfilled by the company as required. In accordance with the KVK Law, if the application is caused by the error of the data controller, the fee received will be refunded to the relevant person.

The Visitor / User undertakes that the information provided to the company in accordance with the KVK Law is complete, accurate and up-to-date, and in the event of a situation that contradicts this commitment, all responsibility will belong to the user / visitors, and the company will not have any responsibility.”