As KOMETYAY YAY SAN. TIC. LTD. STI., we show maximum sensitivity to the security of your personal data.

With this awareness, as the Company, we attach great importance to the processing and preservation of all kinds of personal data belonging to all persons related to the Company in accordance with the Personal Data Protection Law No. 6698 ("KVKK"). With the full understanding of this responsibility, we process your personal data as explained below and within the limits ordered by the legislation, as the "Data Controller" defined within the scope of KVKK.

In this clarification text;

• Personal Data: Any information related to an identified or identifiable natural person,
• Personal Data Protection Law ("KVKK"): The Law on the Protection of Personal Data No. 6698, which entered into force in the Official Gazette on 07.04.2016,
• Data Controller: Real or legal person who determines the purposes and means of processing personal data and who is responsible for the establishment and management of the data recording system,
• Data Processor: Refers to the natural or legal person who processes Personal data on behalf of the Data Controller based on the authority granted by him.

Data Controller

Pursuant to the KVKK, your personal data that you share as addressee, supplier, customer, employee, intern, visitor, etc. will be evaluated by the legal entity of KOMETYAY YAY SAN. TIC. LTD. STI. within the scope specified below. [cite: 89, 128]

Collection, Processing and Business Purposes of Personal Data

Although your personal data may vary depending on the relationship between you and our Company; it can be collected verbally, in writing or electronically through automatic or non-automatic methods, our Company's units, website, social media channels, mobile applications and similar means. Your personal data will be created as long as your relationship with our Company continues, and may be updated and processed.

Your collected personal data is processed in accordance with Articles 5 and 6 of the KVKK for the purposes of carrying out the necessary work for you to benefit from our Company's services by the relevant business units, ensuring the legal and commercial security of our Company and the persons who have a business relationship with our Company, determining and implementing our Company's strategies and ensuring the execution of our Company's human resources policies. In accordance with the conditions and purposes of processing personal data specified in the articles,

• In accordance with the law and honesty rules,
• Accurate and up-to-date when necessary,
• For specific, explicit, and legitimate purposes,
• Relevant, limited and measured for the purpose for which they are processed,
• To be stored for the period stipulated in the relevant legislation or required for the purpose for which they are processed,

it will be processed in accordance with the rules.

To Whom and For What Purpose Processed Personal Data Can Be Transferred

Your collected personal data; for the purposes of carrying out the necessary work for you to benefit from the services of our Company by the relevant business units, ensuring the legal and commercial security of our Company and the persons who have a business relationship with our Company, determining and implementing the commercial and business strategies of our Company and ensuring the execution of our Company's human resources policies, our business partners, suppliers, legally authorized public institutions and private persons can be transferred within the framework of the personal data processing conditions and purposes specified in Articles 8 and 9 of the KVKK.

Method and Legal Reason for Collecting Personal Data

Your personal data is obtained in all kinds of verbal, written or electronic media in order to provide our services in line with the above-mentioned purposes and to fulfill our Company's contractual and legal responsibilities completely and accurately in this context. Your personal data collected for this legal reason can also be processed and transferred for the purposes specified in articles (1) and (2) of this text within the scope of the personal data processing conditions and purposes specified in Articles 5 and 6 of the KVKK.

Rights of the Personal Data Owner Listed in Article 11 of the KVKK

As personal data owners, if you submit your requests regarding your rights to our Company through the methods set out below, our Company will conclude them free of charge within 30 days at the latest, depending on the nature of the request. However, if a fee is stipulated by the Personal Data Protection Board, the fee in the tariff determined by our Company will be charged. In this context, personal data owners have the right;

• To learn whether personal data is processed,
• If personal data has been processed, to request information about it,
• To learn the purpose of processing personal data and whether they are used in accordance with their purpose,
• To know the third parties to whom personal data is transferred at home and abroad,
• To request correction of personal data in case of incomplete or incorrect processing,
• To request the deletion or destruction of personal data within the framework of the conditions stipulated in Article 7 of the KVKK,
• To request notification of the transactions carried out pursuant to the correction, deletion or destruction requests to third parties to whom personal data has been transferred,
• To object to the emergence of a result against the person himself by analyzing the processed data exclusively through automated systems,
• In case of damage due to unlawful processing of personal data, to request compensation for the damage.

Pursuant to paragraph 1 of Article 13 of the KVKK, you can submit your request to our Company regarding the exercise of your above-mentioned rights in writing or by other methods determined by the Personal Data Protection Board. Since the Personal Data Protection Board has not determined any method at this stage, you must submit your application to our Company in writing in accordance with the KVKK.

In this context, the channels and procedures through which you will submit your written application to our Company within the scope of Article 11 of the KVKK are explained below:

To exercise your above-mentioned rights and to use the necessary information to identify you, you can submit your request, which includes your explanations regarding the right you request to exercise from the rights specified in Article 11 of the KVKK, in a clear and understandable manner and by attaching documents identifying identity and address information, in writing and with a wet signature, by hand, by mail or through a notary public.