Disclosure Text

PRIVACY POLICY AND PERSONAL DATA

Disclosure Text

This clarification text has been prepared in accordance with Article 10 of the Law on the Protection of Personal Data No. 6698 ("Law") in order to inform real persons ("Data Subject") about the principles regarding the processing, storage, protection and destruction of their personal data and their legal rights as data owners, in cases where Etiya Information Technologies Software Industry and Trade Inc. acts as a data controller.

Detailed information regarding the processing of your personal data can be found in the "Etiya Privacy Policy" ("Policy") on the Etiya website. Click here to access the Policy. Etiya reserves the right to update the clarification text it has put into practice pursuant to this Personal Data Protection Law at any time within the framework of the amendments that may be made in the current legislation.

Our Purposes of Processing Your Personal Data:

As the Data Controller, we process your personal data in accordance with the relevant articles of the Law and for the following purposes:

• Negotiating, signing and performing contracts,

• Provision of products and services,

• Making user definitions to the systems for the products and services offered,

• Announcing products, services and campaigns, carrying out sales and marketing activities,

• Conducting market research,

• Statistics and analysis of products and services,

• Collection of product, service and service fees, selection of collection method,

• Providing communication with customer end users,

• Conducting commercial relations with Business Partners, suppliers, subcontractors,

• Reporting within the framework of commercial cooperation,

• Planning and Developing the company's commercial strategies,

• Communicating for satisfaction measurement surveys,

• Creating participant records in conducted events and trainings, issuing certificates,

• Fulfilment of legal obligations in accordance with legal regulations, resolution of legal disputes and management of judicial/administrative processes

• Responding to requests from public institutions,

• Execution of investor relations,

• Execution of recruitment processes, evaluation of job applications,

• Establishment, execution and termination of the business relationship/contract,

• Benefiting from the rights and fringe benefits arising from employment contracts of company employees,

• Evaluation of the performance and work of the employees,

• Opening a user account, giving an in-house ID and meal card to employees,

• Ensuring the transportation organization of the company's employees,

• Creating a participant registration in case of participation in an organization on behalf of the company,

• Participation of employees in trainings and creation of certificate records,

• Creation and follow-up of visitor records,

• Ensuring the security of the Company's Website and Applications,

• Ensuring the safety of the company's building, facility and environment,

• Analysis of the use of the Website,

• Creation of personal data inventory,

• Evaluating and responding to all questions, requests, suggestions, complaints and applications submitted in writing, verbally or electronically regarding personal data.

Your Processed Personal Data can be transferred to whom and For What Purpose:

Your personal data may be transferred to the following third parties in the country or abroad within the scope of the above-mentioned purposes and in accordance with the provisions of the Law and other legislation in force regarding personal data:

• Consultants

• Audit Firms

• Suppliers

• Subcontractors

• Resellers

• Service Providers

• Collaborating Companies

• Etiya Group Companies

• Customers

• Shareholders

• Company Officials

• Technopark Management

• Banks and Financial Institutions

• Judicial Authorities and Public Authorities

Our Personal Data Collection Methods and Legal Reasons:

We can collect and process Your Personal Data through face-to-face meetings, written, verbal, electronic means, video/audio recordings in accordance with the regulations of the Policy, the Law and other relevant legislation.

Our data collection process; i) through the Website, mobile applications, e-mail, digital channels including recruitment portals or software; ii) through contracts, applications, forms, remote support, sales and marketing unit, cookies on the Websites, business cards, telephones; or iii) through face-to-face interviews with the Data Owner.

Your Rights as a Data Subject:

You have the following rights and use your rights by applying to our Company as a Data Subject; Pursuant to the relevant article of the Law:

• To learn whether your data is processed or not,

• If your data has been processed, requesting information about it,

• To learn the purpose of processing the data and whether they are used in accordance with their purpose,

• To learn the third parties to whom the data is transferred in the country or abroad,

• Requesting correction of the data in case of incomplete or incorrect processing and notification of the transaction made within this scope to the third parties to whom the data has been transferred,

• Although it has been processed in accordance with the provisions of the law and other relevant legislation, requesting the deletion or destruction of the Data in the event that the reasons requiring its processing disappear and the notification of the transaction made within this scope to the third parties to whom the Data has been transferred,

• Objecting to the occurrence of a result against the person himself by analyzing the Processed Data exclusively through automated systems,

• Requesting the compensation of the damage in case you suffer damage due to unlawful processing of the data.

If you want to exercise your rights, you can submit your requests to our Company in writing or via registered e-mail, secure electronic signature, mobile signature or your e-mail address previously notified to our Company by you and registered in our Company's system.

Your requests will be answered free of charge as soon as possible and within thirty days at the latest, depending on the nature of the request. However, if the transaction requires an additional cost, the fee in the tariff determined by the Board may be charged.

We may have difficulty in meeting your requests and there may be delays in the research process in cases such as incomplete or incorrect sharing of information, the request is not expressed in a clear and understandable manner, the documents supporting the request are not submitted at all or as required, and the copy of the power of attorney is not attached to the applications made by proxy in your application. For this reason, it is important that you comply with these issues in the exercise of your rights. Otherwise, our company will not be responsible for any delays. Our company's legal rights are reserved in the face of erroneous, untrue/unlawful, malicious applications.