……………………………………….COMPANY
EXPLANATION TEXT ON THE PROCESSING OF PERSONAL DATA

This Clarification Text has been issued by the ……………………………….. Company (“”Company”) to the Personal Data Protection Law No. 6698 (“Company”) of the Company's customers. >Law") for the purpose of clarifying the processing of personal data by the Company.

For detailed information regarding the processing of your personal data within the scope of this Clarification Text, the ……………………………..Company at [www…………………….com] You can access the Personal Data Protection and Processing Policy.

1. a) Methods of Obtaining Personal Data and Legal Reasons

Your personal data is collected electronically or physically. Your personal data collected for legal reasons specified in this Clarification Text can be processed and shared within the framework of the personal data processing conditions specified in Articles 5 and 6 of the Law.

1. b) Purposes of Processing Personal Data

Your personal data, within the framework of the personal data processing conditions set forth in Articles 5 and 6 of the Law, are customized for the products and services offered by the Company according to the tastes, usage habits and needs of the persons concerned, and for recommending and promoting them to the relevant persons. for the planning and execution of the necessary activities, for the business units to make the necessary work to benefit the related persons from the products and services offered by the Company and for the execution of the relevant business processes, for the realization of the commercial activities carried out by the Company carrying out the necessary work by the relevant business units and executing the related business processes, planning and executing the commercial and/or business strategies of the Company and the Company and Company< It is processed for the purposes of ensuring the legal, technical and commercial-occupational security of the persons who have a business relationship with /strong>.

1. c) Parties and Purposes of Sharing Personal Data

Providing your personal data, products and services offered by the Company according to the tastes, usage habits and needs of the persons concerned, within the framework of the personal data processing conditions and purposes specified in Articles 8 and 9 of the Law, and recommending them to the relevant persons Planning and execution of the activities necessary for the promotion and promotion of the company, carrying out the necessary work by the business units to benefit the related persons from the products and services offered by the Company, and executing the relevant business processes, carrying out the necessary work by the relevant business units to carry out the activities and conducting the related business processes, planning and executing the commercial and/or business strategies of the Company and the Company and >Business partners and suppliers of the Company, legally authorized institutions and organizations and legally authorized private law firms, within the scope of ensuring the legal, technical and commercial-occupational security of the persons who have a business relationship with the >Company may be shared with legal entities.

1. d) Rights of Data Owners and the Use of These Rights

As personal data owners, if you submit your requests regarding your rights stated below to the Company through the methods specified under the Exercise of Rights by Data Owners heading, your requests will be made by our Company as soon as possible and within 30 (thirty) days in any case. will be evaluated and finalized.

According to Article 11 of the Law personal data owner You have the following rights:

• Learning whether your personal data is processed,
• If your personal data has been processed, request information about it,
• Learning the purpose of processing your personal data and whether they are used in accordance with the purpose,
• Knowing the third parties to whom your personal data is transferred, at home or abroad,
• Requesting correction of your personal data in case of incomplete or incorrect processing and requesting notification of the transaction made within this scope to the third parties to whom the personal data has been transferred,
• Demanding the deletion or destruction of your personal data in the event that the reasons requiring its processing cease to exist, despite the fact that it has been processed in accordance with the provisions of the law and other relevant laws, and requesting that the transaction carried out in this context be notified to the third parties to whom the personal data has been transferred,
• Objecting to the emergence of a result against the person by analyzing your processed data exclusively through automated systems,
• Demanding the removal of the damage in case of loss due to unlawful processing of your personal data.
• Paragraph 2 of Article 28 of the Law has listed the cases where data owners do not have the right to demand, and in this context;
• Personal data processing is necessary for the prevention of crime or for criminal investigation,
• Processing of personal data made public by the person concerned,
• Personal data processing is necessary for the execution of supervisory or regulatory duties and for disciplinary investigation or prosecution by authorized and authorized public institutions and organizations and professional organizations in the nature of public institution, based on the authority given by the law,
• Personal data processing is necessary for the protection of the economic and financial interests of the State with regard to budget, tax and financial matters,
In such cases, the above-mentioned rights cannot be used for the data.
• According to the first paragraph of Article 28 of the Law, since the data will be outside the scope of the Law in the following cases, the requests of the data owners will not be processed in terms of these data either:
• The processing of personal data by real persons within the scope of activities related to themselves or their family members living in the same residence, provided that they are not given to third parties and that the obligations regarding data security are complied with.
• Processing personal data for purposes such as research, planning and statistics by making them anonymous with official statistics.
• Processing personal data for art, history, literature or scientific purposes or within the scope of freedom of expression, provided that they do not violate national defense, national security, public security, public order, economic security, privacy of private life or personal rights or constitute a crime.
• Processing personal data within the scope of preventive, protective and intelligence activities carried out by public institutions and organizations authorized by law to ensure national defense, national security, public safety, public order or economic security.
• Processing of personal data by judicial authorities or execution authorities in relation to investigation, prosecution, trial or execution proceedings.

Exercise of Rights by Data Owners

• Data owners will be able to use the "form _ Applications to be Made by the Personal Data Owner to the Data Controller" at the link [ww……………..………..com] to exercise the above-mentioned rights.
• Applications shall be made by one of the following methods, together with documents that will identify the relevant data owner:
• To fill in the form and send the wet signed copy by hand, via a notary public or by registered letter with return receipt to the address [……………………………..-Turkey],
• The form is secure electronically regulated under the Electronic Signature Law No. 5070 signature by signing […… ………………..@hs02].E-mail registered to kep.tr send with
• Following a method prescribed by the Personal Data Protection Board.
• The Company responds to data owners who want to exercise such rights within the limits set forth in the Law, within a maximum of thirty (30) days, as stipulated in the Law. In order for third parties to apply on behalf of personal data owners, a special power of attorney issued by the data owner through a notary public on behalf of the person to apply.
• As a rule, data owner applications are processed free of charge, however, a fee may be charged over the fee schedule set by the Personal Data Protection Board[1].
• The Company may request information from the data subject in order to determine whether the applicant is the owner of personal data, and may ask a question about the application of the personal data owner in order to clarify the issues stated in the application.

[1] In accordance with the "Communiqué on the Procedures and Principles of Application to the Data Controller" published in the Official Gazette dated 10.03.2018 and numbered 30356, if the application of the data owners will be answered in writing , up to ten pages are free of charge. A transaction fee of 1 Turkish Lira may be charged for each page over ten pages. If the response to the application is given in a recording medium such as CD, flash memory, the fee that may be requested by the Institution cannot exceed the cost of the recording medium.