"……………………………… ………. COMPANY
PRIVACY DATA PROCEDURE INFORMATION METHOD

This Clarification Text Has been prepared by the Company .......................(the ""Company"") for the purpose of clarifying the processing of the Company's personal data by the Company under the Personal Data Protection Law No. 6698 (the ""Law"").

Detailed information regarding the processing of your personal data within the scope of this Disclosure Text can be found in the..................... Company Personal Data Protection and Processing Policy located at [www………………… .com].

a) Methods of Obtaining Personal Data and Legal Reasons

Your personal data is collected electronically or physically. Your personal data collected for legal reasons specified in this Disclosure Text can be processed and shared within the framework of the personal data processing conditions specified in Articles 5 and 6 of the Law.

b) Purposes of Processing Personal Data

Your personal data is processed for the purposes of planning and executing the activities necessary for recommending and introducing the products and services offered by the Company to the relevant persons by customizing them according to their likes, usage habits and needs within the framework of the personal data processing conditions specified in Articles 5 and 6 of the Law, carrying out the necessary works by the business units and carrying out the relevant business processes, carrying out the necessary works by the relevant business units for the realization of the commercial activities carried out by the Company and carrying out the related business processes, planning and executing the commercial and/or business strategies of the Company and ensuring the legal, technical and commercial-employment security of the Company and the relevant persons in business relationship with the Company.

c) Parties to which Personal Data can be Shared and Purposes of Sharing

Your personal data may be shared with business partners and suppliers of the Company and legally authorized institutions and organizations and legally authorized private legal entities within the framework of the personal data processing conditions and purposes specified in Articles 8 and 9 of the Law, the planning and execution of the activities required to recommend and promote the products and services offered by the Company to the relevant persons by customizing them according to the likes, usage habits and needs of the relevant persons, carrying out the necessary works by the relevant business units for the execution of the relevant business processes, the carrying out of the related business processes, the planning and execution of the commercial and/or business strategies of the Company and ensuring the legal, technical and commercial-employment safety of the relevant persons who are in a business relationship with the Company.

d) Rights of Data Subjects and Exercise of These Rights

If you submit your requests for the following rights as personal data subjects to the Company with the methods specified under the title Exercise of Rights by Data Subjects, your requests will be evaluated and concluded by our Company as soon as possible and in any case within 30 (thirty) days.

Pursuant to Article 11 of the Law, you have the following rights as the personal data owner:

To learn whether your personal data has been processed,

to request information if your personal data has been processed,

to learn the purpose of processing your personal data and whether it has been used in accordance with its purpose,

to know the third parties to whom your personal data has been transferred at home or abroad,

to request their correction if your personal data has been processed incompletely or incorrectly, and to request that the transaction carried out within this scope be notified to the third parties to whom your personal data has been transferred,

to request the deletion or destruction of your personal data if the reasons for processing have disappeared despite being processed in accordance with the provisions of the Law and other relevant law, and to request the notification of the
 transaction carried out within this scope to the third parties to whom your personal data has been transferred, 

to object to the occurrence of a result against the person by analyzing your processed data exclusively through automated systems,

to request the compensation of the damage if your personal data is damaged due to unlawful processing.

Paragraph 2 of Article 28 of the Law lists the cases where data owners do not have the right to request and within this scope;

Processing of personal data is necessary for the prevention of crime or criminal investigation,

Processing of personal data made public by the person concerned,

Processing of personal data is necessary for disciplinary investigation or prosecution by official and authorized public institutions and organizations and professional organizations that are public institutions based on the authority given by the law,

Processing of personal data is necessary for the protection of the economic and financial interests of the State in relation to budget, tax and financial matters,

the rights set forth above shall not be exercised for the data mentioned above.

According to Article 28 (1) of the Law, since the data will be outside the scope of the Law in the following cases, the requests of the data owners will not be processed in terms of these data:

Processing of personal data by natural persons within the scope of activities related to themselves or family members living in the same housing, provided that they are not given to third parties and the obligations regarding data security are complied with.

Processing of personal data for purposes such as research, planning and statistics by making them anonymous with official statistics.

Processing of personal data for art, history, literature or scientific purposes or within the scope of freedom of expression, provided that it does not violate or constitute a crime against national defence, national security, public security, public order, economic security, privacy or personal rights.

Processing of personal data within the scope of preventive, protective and intelligence activities carried out by public institutions and organizations authorized by law to ensure national defense, national security, public security, public order or economic security.

Processing of personal data by judicial authorities or enforcement authorities in relation to investigations, prosecutions, proceedings or executions.

Exercise of Rights by Data Subjects

Data subjects will be able to use the ""Form for Applications by the Personal Data Subject to the Data Controller"" on the link [ww………..……..com] to exercise the aforementioned rights.

Applications, together with documents identifying the data subject concerned, shall be made by one of the following methods:

Completing the form and forwarding the wet signed copy to […………………………………………………….. - Turkey] address by hand, notary public or registered letter, 

signing the form with a secure electronic signature issued within the scope of the Electronic Signature Law No. 5070 and sending it to [………………..@hs02] .kep.tr address by registered e-mail,

following a method stipulated by the Personal Data Protection Board.

The Company responds to the data subjects who wish to exercise these rights within the limits stipulated in the Law within a maximum of thirty (30) days as stipulated in the Law. In order for third parties to request an application on behalf of personal data subjects, a special power of attorney issued by the data subject through a notary public should be available on behalf of the person who will apply.

Although data subject applications are processed free of charge as a rule, a fee may be charged on the tariff stipulated by the Personal Data Protection Board [1].

The Company may request information from the person concerned in order to determine whether the applicant is the owner of personal data and may ask the personal data owner questions about his/her application in order to clarify the issues specified in the application.

[1] In accordance with the ""Communiqué on the Procedures and Principles of Application to the Data Supervisor"" published in the Official Gazette dated 10.03.2018 and numbered 30356, if the application of the data owners is to be answered in writing, no fee is charged up to ten pages. A transaction fee of 1 Turkish Lira may be charged for each page over ten pages. If the answer to the application is given in a recording medium such as CD, flash drive, the fee that can be requested by the Institution cannot exceed the cost of the recording environment."