In accordance with the Personal Data Protection Law No. 6698 ("KVKK") and the European Union General Data Protection Regulation ("GDPR"), your personal data will be processed by our Company, as the Data Controller, in connection with business purposes, to be used, recorded, stored, updated, transferred and/or classified as explained below. In this context, our Company takes all technical and administrative measures aimed at ensuring an appropriate level of security to prevent unlawful processing of your personal data, prevent unlawful access to them, and ensure their preservation, in order to protect the fundamental rights and freedoms of individuals, especially the privacy of private life, in accordance with the laws and regulations enacted for the protection of personal data.

Data Processing Purposes under GDPR

Our Company will process your personal data only with your explicit consent and for the specified purposes in accordance with GDPR and will take the security measures specified below. According to GDPR, we will act in accordance with the following principles when processing your data:

• • Lawfulness: Personal data is processed only on the basis of your explicit consent or other valid legal grounds.
• • Transparency: We inform you about the purpose of processing your personal data, how it will be processed, and with whom it will be shared.
• • Data minimization: Unnecessary personal data is not collected. Only the necessary data is processed.
• • Data security: Your personal data is protected with appropriate security measures.


• • Data access: Only authorized persons can access your data.


• • Data retention period: Personal data is retained only for as long as necessary and is subsequently deleted or anonymized.

Purposes and Legal Grounds for Processing Personal Data

Your personal data shared by you will be processed by our Company for the following purposes:

• • For you to benefit from the products and services offered by our Company,


• • Determining commercial and business strategies, conducting marketing activities,


• • Carrying out communication and administrative operations,


• • Ensuring physical security,


• • Managing relationships with business partners and suppliers,


• • Implementing human resources policies and more.

Method of Collection and Storage of Personal Data

Your personal data may be collected through various means such as offices, branches, call centers, websites, social media channels, mobile applications, by automated or non-automated methods. Your data will be stored securely in electronic or physical environments and will be used only for the specified purposes.

Transfer of Personal Data

Your personal data may be transferred to third parties under certain conditions in accordance with the provisions of KVKK and GDPR. These transfers will be carried out only in accordance with legal requirements and the purpose you have specified.

Your Rights According to GDPR

According to GDPR, you have the following rights regarding the processing of your personal data:

• • To learn whether your personal data is being processed,


• • To request information about processed data,


• • To request correction or deletion of data,


• • To request data portability,


• • To object to the processing of your personal data,


• • To object to the results against you resulting from the processing of data by automated systems,


• • To claim compensation for the unlawful processing of your personal data.

To exercise these rights, you can submit your application to our Company in writing or by other legal methods in accordance with KVKK and GDPR.

Data Retention and Deletion

Your personal data will be stored only for the purpose of processing and during the legal retention period, and at the end of the period, it will be deleted or anonymized.