PERSONAL DATA PROTECTION POLICY

In accordance with the Personal Data Protection Law No. 6698 (KVKK), your personal data will be processed by our Company, as the Data Controller, by using, recording, storing, updating, transferring and/or classifying it within the framework explained below, depending on business purposes. In this context, in accordance with the Laws and Regulations issued by our Company to protect the fundamental rights and freedoms of individuals, especially the privacy of private life, and to protect personal data, our Company maintains the appropriate security level in order to prevent your personal data from being processed unlawfully, to prevent it from being accessed unlawfully, and to ensure its preservation. It takes all technical and administrative measures to ensure

The target audience of this text is all natural persons whose personal data are processed by our Company, other than our Company's employees or employee candidates who have applied for a job in our Company.

Personal data processed in the capacity of data controller are listed below, but not limited to those stated here;

Name, surname, TR ID number, address, telephone number, e-mail address, signature, physical location/security video recording, call center/service quality voice recording, bank account number, cookie records

Purposes and legal reasons for processing personal data ; Your personal data shared by you;

• Carrying out the necessary work, including but not limited to determining and implementing our Company's commercial and business strategies, conducting marketing activities, carrying out business development and planning activities, in order to benefit you and/or the institutions and organizations you represent from the products and services offered by our Company,
• Carrying out administrative operations regarding communication carried out by our company,
• Ensuring the physical security and control of the locations in use of our company,
• Establishing business partner/customer/supplier (officials or employees) relationships,
• Ensuring contractual requirements and financial reconciliation regarding the products and services offered with our business partners, suppliers or other third parties,
• Execution of our company's human resources policies,
• Calling our company's call center or using our website

and/or

• It will be processed for the purpose of participation in training, seminars or organizations organized by our company.

Method of collection and storage of personal data ; Your personal data that you share with our company may be collected verbally, in writing or electronically, by automatic or non-automatic methods, through offices, branches, call centers, websites, social media channels, mobile applications and similar means. Your personal data will be stored in electronic and/or physical media. In order to prevent your personal data provided and stored by our company from unauthorized access, manipulation, loss or damage in the environments where they are stored, necessary business process design and technical security infrastructure developments are implemented.

Your personal data will be processed by taking all necessary information security measures, provided that it is not used outside the purposes and scope notified to you, and will be stored and processed during the legal retention period or, if such a period is not foreseen, for the period required by the purpose of processing. When this period expires, your personal data will be removed from our Company's data flows by deletion, destruction or anonymization methods.

Transfer of Personal Data ;

Your personal data, within the scope of Laws and other legislation and for the stated purposes;

• Türk Telekomünikasyon A.Ş. and Turkish Telecommunication group companies,
• Companies that we have authorized and that operate on behalf of our Company, our representatives,
• Regulatory and supervisory authorities, public institutions or organizations that are expressly authorized to request your personal data under the laws to which they are subject,
• Business partnerships, supplier and contractor companies, banks, credit risk and financial institutions and other real or legal persons within the scope of the stated purposes,
• Tax and similar consultants, compulsory persons related to legal proceedings, institutions and organizations and third parties from whom we receive consultancy, including auditors, and including but not limited to business partners, third parties from whom services are received, authorized persons, domestically and abroad, for the above-mentioned purposes. and can be transferred to organizations.

Your rights in accordance with Article 11 of KVKK ; By applying to our company, your personal data;

1. Learning whether it is processed or not,
2. Requesting information if processed,
3. Learning the purpose of processing and whether it is used in accordance with its purpose,
4. Knowing the third parties to whom it is transferred domestically/abroad,
5. Requesting correction if it has been processed incompletely/incorrectly,
6. Requesting deletion/destruction within the framework of the conditions stipulated in Article 7 of the KVKK,
7. Requesting notification of the transactions made in accordance with paragraphs (e) and (f) above to third parties to whom it has been transferred,
8. Objecting to a result that is unfavorable to you due to being analyzed exclusively by automatic systems,
9. If you suffer damage due to illegal processing, you have the right to demand compensation for the damage.

In accordance with the 1st paragraph of Article 13 of the KVK Law, you can submit your request to exercise your above-mentioned rights to our Company in writing or by other methods determined by the Personal Data Protection Board.

In order to exercise your above-mentioned rights, you can personally hand-deliver your request with the necessary information that identifies your identity, send it through a notary or other methods determined by the Personal Data Protection Board, or You can send it with a secure electronic signature.