This Notice has been prepared by us as the "data controller" in accordance with the Personal Data Protection Law No. 6698 ("KVKK") and related legislation. Security measures for the protection of your personal data are implemented at an appropriate level against potential risks, taking into account the most up-to-date technological capabilities.

As the data controller under the KVKK and related legislation, we process the following personal data you share with us through digital platforms (website, mobile applications, etc.), social media channels (Facebook, Instagram, LinkedIn, etc.), and online communication channels (contact forms, support centers, live chat, video calls, etc.):

• Identity Data: Name, surname, T.R. identity number (if required).
• Contact Data: Phone number, email address, physical address.
• Customer Transaction and Marketing Data: Product/service preferences, purchase history, campaign participation, survey responses.
• Transaction Security Data: IP address, device information, cookies.

Purposes of Processing Your Personal Data

Your personal data listed above is processed for the following purposes:

• Responding to your requests and suggestions and offering tailored solutions.
• Providing information about our products, services, and projects and communicating with you.
• Managing pre-sale, sale, and post-sale/support processes.
• Managing production and operational processes (e.g., demand management, survey activities).
• Conducting marketing activities (e.g., personalized offers, campaigns, and sending informative commercial electronic messages).
• Fulfilling obligations arising from legal regulations.

Transfer of Your Personal Data

Your personal data may be transferred to our business partners, suppliers (e.g., agencies, technology infrastructure providers, live support platforms, digital platforms), and affiliated group companies for the purposes mentioned above and in accordance with the conditions stipulated by the KVKK. Your personal data may be processed and stored on servers or other electronic environments located domestically or abroad, provided that necessary security measures are taken.

Legal Bases for Collecting Personal Data

Your personal data is collected and processed based on the legal bases specified in Article 5, Paragraph 2 of the KVKK:

• Establishment and Performance of a Contract: When it is directly related to the establishment or performance of a contract (e.g., offer preparation, contract processes).
• Legitimate Interest: The legitimate interest of the data controller (e.g., managing business processes, operational efficiency).
• Explicit Consent: For specific processes such as marketing activities, where your explicit consent is obtained.

Your personal data is retained for the duration required by the relevant legal basis, the periods stipulated by applicable legislation, or the duration for which your explicit consent remains valid.

Your Rights as a Data Subject

You may submit your requests regarding your rights under Article 11 of the KVKK in writing or through other methods specified in the KVKK, in accordance with the "Communiqué on the Procedures and Principles of Application to the Data Controller." Your request will be evaluated and finalized as soon as possible, and within thirty (30) days at the latest.

Your rights include:

• Learning whether your personal data is being processed.
• Requesting information about your processed personal data.
• Learning the purpose of processing your personal data and whether they are used in accordance with that purpose.
• Knowing the third parties to whom your personal data is transferred, domestically or abroad.
• Requesting correction of your personal data if it is incomplete or inaccurate.
• Requesting the deletion or destruction of your personal data under the conditions set forth in Article 7 of the KVKK.
• Requesting notification of the actions taken pursuant to Articles 11(d) and 11(e) of the KVKK to third parties to whom your personal data has been transferred.
• Objecting to any adverse outcome resulting from the analysis of your personal data exclusively through automated systems.
• Requesting compensation for damages incurred due to the unlawful processing of your personal data.