In accordance with the European Union General Data Protection Regulation (GDPR) and the Personal Data Protection Law numbered 6698 (KVKK), your personal data will be collected, processed, stored, updated, transferred, and/or classified by our Company as the Data Controller, within the framework explained below for business purposes. In this context, our Company aims to protect privacy, prioritizing "the confidentiality of private life," and respecting individuals' fundamental rights and freedoms by ensuring the confidentiality of personal data and taking all necessary technical and administrative measures to prevent the unlawful processing, access, and preservation of personal data within the framework of KVKK.

The target audience of our company policy consists of all real and legal persons whose personal data is processed by our Company, excluding our company employees and/or applicants for employment.

1.Data Controller

In accordance with KVKK, as the data controller, your personal data will be collected and processed by our Company within the scope described below. As the data controller, the following matters are addressed regarding the processed personal data, which is not limited to the ones listed here: Name-surname, Turkish Republic identification number, address, phone number, email address, signature, physical space security camera recordings, call center service quality voice recordings, bank account number, cookie records.

2.Purposes of Processing Personal Data

Your personal data, such as identity information, contact information, customer information, customer transaction information, transaction security information, legal transaction and compliance information, and marketing sales information, may be collected from parties such as current and potential customers, employees, business partners, and suppliers by our Company.

Your personal data shared with (by you) our Company will be processed within the scope of the purposes listed below, including but not limited to:

Conducting necessary studies for benefiting you and/or the institutions and organizations you represent from the products and services offered by our Company, determining and implementing the commercial and business strategies of our Company, conducting marketing activities, and carrying out business development and planning activities, including but not limited to these,

Conducting administrative operations related to communication,

Ensuring the physical security and control of the areas used by our Company,

Establishment of business partner/customer/supplier (authorized or employees) relations,

Fulfillment of contract requirements and financial reconciliation regarding the products and services offered together with our business partners, suppliers, or other third parties,

Execution of human resources policies of our Company,

Conducting traffic measurement, statistical analysis, profiling/segmentation, and CRM studies for sales and marketing activities,

Management of financial operations, communication, market research, and social responsibility activities, purchase operations (request, offer, evaluation, order, budgeting) within the framework of the purposes of processing personal data set forth in Articles 5 and 6 of KVKK,

Calling our call center or using the internet page of our Company, and/or

Reviewing, evaluating, and responding to requests from official authorities or from you, and/or participating in the trainings, seminars, or organizations organized by our Company.

3.Method of Collecting and Storing Personal Data

Your personal data shared with our Company may be collected automatically or non-automatically by means of offices, branches, call centers, websites, social media channels, mobile applications, and similar tools, orally, in writing, or electronically.

Your personal data will be stored in electronic and/or physical environments. In order to ensure that the personal data provided and stored by our Company are not subject to unauthorized access, manipulation, loss, or damage in the environments where they are stored, necessary business processes are designed and technical security infrastructure improvements are applied.

Your personal data will be processed, stored, and processed during the legal storage period or, if such a period is not envisaged, for the period required by the processing purpose, provided that they are not used for purposes other than the notified purposes and within the framework of the necessary information security measures.

Once this period has expired, your personal data will be deleted, destroyed, or anonymized by means of methods such as deletion, destruction, or anonymization from our Company's data flows.

4.Transfer of Personal Data

Your personal data collected by our Company may be transferred to;

KONTROLMATİK Technology, Energy, and Engineering Inc. and Group companies,

Companies acting on behalf of and for the account of our Company, representatives,

Persons or organizations authorized by the Turkish Commercial Code, Turkish Code of Obligations, and other laws and regulations,

Authorized regulatory and supervisory public institutions and organizations, administrative and legal authorities authorized to explicitly request personal data in their laws,

Real and legal persons, including business partners, service providers, or collaborating third parties domestically and internationally, within the scope of the purposes specified above, in compliance with the Personal Data Processing Conditions and Purposes specified in Articles 8 and 9 of KVKK.

5.Rights of the Data Subject

In accordance with Article 11 of KVKK, you have the right to apply to our Company to learn whether your personal data is processed, request information if your personal data has been processed, learn the purpose of processing, and whether it is used for its purpose, know the third parties to whom your personal data has been transferred domestically or abroad, request correction if your personal data is incomplete or incorrectly processed, request the deletion or destruction of your personal data within the framework of the conditions specified in Article 7 of KVKK, and request notification of the transactions made to third parties in this context, object to the emergence of a result against you by analyzing your processed data exclusively through automated systems, and request the compensation of the damage in case you suffer damage due to the unlawful processing of your personal data.

6.Notification Method

In accordance with Article 13/1 of KVKK, you can forward your requests regarding the use of the rights specified above to our Company in writing or by other methods determined by the Personal Data Protection Board.

You can submit your requests to exercise your above-mentioned rights to our Company by delivering your request in person with necessary identification information, by filling out and sending the form, through a Notary Public, or by sending it to [email protected] address with a secure electronic signature. Data Subjects can address their questions, opinions, or requests through the following contact channels:

Email: [email protected]

Phone: +90 (212) 279 22 03

Our Company may respond to your requests with reasoned explanations and, provided that it responds within 30 days, may provide its positive/negative response in writing or digitally. The transactions related to the requests are free of charge as a principle. However, if the transactions require a cost; our Company reserves the right to demand a fee. These fees are determined based on the tariff set by the Personal Data Protection Board, in accordance with Article 13 of KVKK.