Personal Data Protection Law

In accordance with the Law on the Protection of Personal Data No. 6698 (KVKK), your personal data will be processed by our Company, as the Data Controller, by using, recording, storing, updating, transferring and/or classifying them within the framework explained below, depending on business purposes. In this context, in accordance with the Laws and Regulations issued by our Company to protect the fundamental rights and freedoms of individuals, especially the right to privacy, and to protect personal data, our Company takes all technical and administrative measures to ensure the appropriate level of security in order to prevent the unlawful processing of your personal data, to prevent unlawful access and to ensure its preservation.

The target audience of this text is all real persons whose personal data are processed by our Company, other than our Company employees or job candidates who have applied to our Company.

Personal data processed as the data controller are listed below, but not limited to those specified herein;

Name, surname, Turkish identity number, address, telephone number, e-mail address, signature, physical location/security image recording, call center/service quality voice recording, bank account number, cookie records

Purposes and legal reasons for processing personal data; Your personal data shared by you;

• Carrying out the necessary work, including but not limited to determining and implementing our Company's commercial and business strategies, conducting marketing activities, and carrying out business development and planning activities, in order to enable you and/or the institutions and organizations you represent to benefit from the products and services offered by our Company,
• Carrying out administrative operations regarding communication carried out by our company,
• Ensuring the physical security and control of the locations in use by our company,
• Establishing business partner/customer/supplier (authorized or employees) relationships,
• Ensuring contractual requirements and financial agreements regarding products and services offered with our business partners, suppliers or other third parties,
• Execution of our company's human resources policies,
• Calling our company's call center or using our website

and/or

• It will be processed for the purpose of participation in training, seminars or organizations organized by our company.

The method of collecting and storing personal data; Your personal data that you share with our Company may be collected verbally, in writing or electronically, by automatic or non-automatic methods, through offices, branches, call centers, websites, social media channels, mobile applications and similar means. Your personal data will be stored in electronic and/or physical environments. In order for your personal data provided and stored by our Company not to be exposed to unauthorized access, manipulation, loss or damage in the environments where they are stored, the necessary business process design and technical security infrastructure developments are implemented.

Your personal data will be processed by taking all necessary information security measures, provided that it is not used for purposes other than those notified to you, and will be stored and processed for the legal retention period or, if no such period is foreseen, for the period required by the purpose of processing. Once this period expires, your personal data will be removed from our Company's data flows by means of deletion, destruction or anonymization.

Transfer of Personal Data;

Your personal data, within the scope of the Laws and other legislation and for the purposes described;

• To Turkish Telecommunications Inc. and Turkish Telecommunications group companies,
• To our authorized companies and representatives operating on behalf of our Company,
• Regulatory and supervisory authorities, public institutions or organizations that are expressly authorized to request your personal data under their laws,
• Within the scope of the specified purposes, business partnerships, supplier and contractor companies, banks, credit risk and financial institutions and other real or legal persons,
• It may be transferred to tax and similar consultants, persons required for legal follow-up processes, institutions and organizations, and third parties from whom we receive consultancy, including auditors, and, without limitation, to business partners, third parties from whom services are received, authorized persons and organizations for the above-mentioned purposes, both domestically and abroad.

Your rights pursuant to Article 11 of the KVKK; By applying to our Company, your personal data;

1. To find out whether it is processed or not,
2. Requesting information if it has been processed,
3. To learn the purpose of processing and whether it is used in accordance with its purpose,
4. Knowing the third parties to whom the data is transferred domestically / abroad,
5. Request correction if it is processed incompletely/incorrectly,
6. Request deletion/destruction within the framework of the conditions set forth in Article 7 of the KVKK,
7. Requesting notification of the transactions made pursuant to clauses (e) and (f) above to third parties to whom the data was transferred,
8. To object to a result that is to your detriment due to analysis by exclusively automated systems,
9. If you suffer damage due to unlawful processing, you have the right to demand compensation for the damage.

In accordance with the first paragraph of Article 13 of the Personal Data Protection Law, you can submit your request to exercise your rights specified above to our Company in writing or through other methods determined by the Personal Data Protection Board.

In order to exercise your rights specified above, you can personally deliver your petition with the necessary information to identify you, send it through a notary or other methods determined by the Personal Data Protection Board, or send it with a secure electronic signature.