In accordance with Law No. 6698 on the Protection of Personal Data ("KVKK"), our Company, acting as the Data Controller, will process your personal data for business purposes, by using, recording, storing, updating, transferring, and/or classifying it as described below. In this context, in accordance with the Laws and Regulations issued by our Company to protect the fundamental rights and freedoms of individuals, especially the right to privacy, and to protect personal data, our Company takes all technical and administrative measures to ensure an appropriate level of security to prevent the unlawful processing of your personal data, to prevent unlawful access, and to ensure its safekeeping.

The target audience of this text is all natural persons whose personal data are processed by our Company, other than our Company employees or job candidates who have applied for a job at our Company.

Personal data processed as the data controller are listed below, but not limited to those specified here;

Name, surname, Turkish ID number, address, telephone number, e-mail address, signature, physical location/security image recording, call center/service quality voice recording, bank account number, cookie records

Purposes and legal reasons for processing personal data ; Your personal data shared by you;

• Carrying out the necessary work, including but not limited to, determining and implementing our Company's commercial and business strategies, carrying out marketing activities, and carrying out business development and planning activities, in order to ensure that you and/or the institutions and organizations you represent benefit from the products and services offered by our Company.
• Carrying out administrative operations related to communication carried out by our company,
• Ensuring the physical security and control of the locations used by our company,
• Establishing business partner/customer/supplier (authorized or employees) relationships,
• Ensuring contractual requirements and financial agreements regarding products and services offered with our business partners, suppliers or other third parties,
• Execution of our company's human resources policies,
• Calling our company's call center or using the website

and/or

• It will be processed for the purpose of participation in training, seminars or organizations organized by our company.

Personal Data Collection and Storage Methods : The personal data you share with our Company may be collected verbally, in writing, or electronically, through automated or non-automated methods, including through offices, branches, call centers, websites, social media platforms, mobile applications, and similar means. Your personal data will be stored in electronic and/or physical environments. Necessary business process design and technical security infrastructure improvements are implemented to ensure that your personal data, provided and stored by our Company, is protected from unauthorized access, manipulation, loss, or damage in the environments where it is stored.

Your personal data will be processed, provided that it is not used for purposes other than those specified and within the scope specified, and will be stored and processed for the legal retention period or, if no such period is stipulated, for the period required by the purpose of processing. After this period, your personal data will be removed from our Company's data flows through deletion, destruction, or anonymization.

Transfer of Personal Data ;

Your personal data will be processed within the scope of the Laws and other legislation and for the purposes stated below;

• Türk Telekomünikasyon A.Ş. and Türk Telekomünikasyon group companies,
• To the companies and representatives that we have authorized and that operate on behalf of our Company,
• Regulatory and supervisory authorities, public institutions or organizations that are expressly authorized to request your personal data under their laws,
• Business partnerships, supplier and contractor companies, banks, credit risk and financial institutions and other real or legal persons within the scope of the specified purposes,
• It may be transferred to tax and similar consultants, persons required for legal follow-up processes, institutions and organizations, and third parties from whom we receive consultancy, including auditors, and, without limitation, to business partners, third parties from whom we receive services, authorized persons and organizations for the above-mentioned purposes, both domestically and abroad.

Your rights pursuant to Article 11 of the KVKK ; By applying to our Company, your personal data;

1. To find out whether it has been processed or not,
2. Requesting information if it has been processed,
3. To learn the purpose of processing and whether it is used in accordance with its purpose,
4. Knowing the third parties to whom the data was transferred, both domestically and abroad,
5. Request correction if it is processed incompletely/incorrectly,
6. Request deletion/destruction within the framework of the conditions stipulated in Article 7 of the KVKK,
7. Requesting notification of the transactions made in accordance with clauses (e) and (f) above to third parties to whom the data was transferred,
8. To object to a result that is detrimental to you due to analysis by exclusively automated systems,
9. If you suffer damage due to unlawful processing, you have the right to demand compensation for the damage.

In accordance with Article 13, paragraph 1 of the Personal Data Protection Law, you may submit your request to exercise your above-mentioned rights to our Company in writing or through other methods determined by the Personal Data Protection Board.

To exercise your rights specified above, you can personally deliver your petition with the necessary information to establish your identity, send it through a notary or other methods determined by the Personal Data Protection Board, or forward it to our address.