Personal Data Protection Disclosure

This Information and Clarification Form has been prepared within the scope of the processing and transfer of "Personal Data" of natural persons regulated by Law No. 6698 on the Protection of Personal Data ("KVK Law"). Under Law No. 6698, all current information you share with our company regarding you will be considered as "Personal Data".

The security of your personal data is of great importance to us, and your personal data will be stored in accordance with the conditions stipulated by the legislation, in the safest possible manner, for the period required by legal obligations, and under conditions compliant with legislation.

a) Data Controller and Representative

In accordance with Law No. 6698 on the Protection of Personal Data ("KVK Law"), your personal data; as the "Data Controller" AKYAPI İNŞAAT TAAH. SAN. VE TİC. A.Ş. (briefly AKYAPI) will process your data within the scope explained below.

b) The Purposes for Which Your Personal Data May Be Processed

Your collected personal data may be processed for the fulfillment of obligations of our company and real and legal persons with whom we have business relations, providing updates and information, establishing and executing contracts with you, reminding and fulfilling legal obligations, conducting various advertising and marketing activities, managing and monitoring finance, accounting, and legal affairs, tracking your requests and complaints - following contract processes and/or legal requests, planning and executing customer satisfaction activities through surveys and polls, obtaining your opinion, determining products, projects, and services suitable for you, customizing and developing them, providing effective customer service, informing you of changes that concern you in legislation and internal policies, making other notifications concerning you, celebrating birthdays, participating in raffles or competitions, giving gifts and similar activities, promotions, and campaigns, informing you via short message (SMS), video and voice messages (MMS), electronic mail, letter, phone, call center, automatic dialing, WhatsApp and similar internet applications, informing you about campaigns, sending printed bulletins, magazines, articles about campaigns, identifying visitor profiles, evaluating requests, demands, and complaints, and implementing our company's human resources policies, as well as responding to your requests and questions, within the personal data processing conditions and purposes specified in Articles 5 and 6 of Law No. 6698.

c) To Whom and For What Purposes Your Processed Personal Data May Be Transferred

Your collected personal data are processed in accordance with the principles of legality and good faith, accurate and, when necessary, up-to-date, for specific, explicit, and legitimate purposes, related to the purpose of processing, limited and proportionate to the purpose, and stored for the period prescribed by relevant legislation or as long as necessary for the purpose of processing. Additionally, subject to compliance with the conditions foreseen in Articles 8 and 9 of the KVK Law and taking necessary security measures, your personal data may be shared, limited to the purposes listed under heading (b) of this notice, with our domestic and foreign subsidiaries or affiliated companies, service/support/consultancy providers, or collaborators, domestic/international/public/private institutions and organizations, companies, and other third parties or organizations, our affiliated companies, consultants, shareholders, or solution partners, other group companies, the Central Registry Agency and other authorized institutions and organizations, suppliers or subcontractors, within the scope of the personal data processing conditions and purposes specified in Articles 8 and 9 of Law No. 6698. AKYAPI may process and store your personal data on servers located abroad or in other electronic environments, provided that necessary security measures are taken, and if there is sufficient protection in the foreign country to which the data is transferred; if not, AKYAPI and the relevant foreign data controllers must undertake sufficient protection in writing and obtain the approval of the Board.

d) Your Methods of Collecting Personal Data and Legal Grounds

Your personal data can be obtained by our company through various channels (by contacting AKYAPI’s headquarters, branches, agencies, sales offices, or other subcontractors or business partners, physical environments such as offices and other locations, call centers, websites, mobile applications, and similar electronic processing platforms, social media or other public platforms, participation in training, conferences, and similar events they organize, investigation methods, or through other group companies or contracted third parties and organizations, via written, verbal, audio or video recordings, or other physical or electronic means). Your personal data may be collected, processed, transferred, and stored for the purposes specified in this text’s (b) and (c) sections, within the scope of the personal data processing conditions and purposes outlined in Articles 5 and 6 of the KVK Law.

Your personal data are stored in accordance with the legislation for the duration required by legal obligations or permitted by relevant legislation.

e) Your Rights as a Data Subject

As data owners, if you submit your requests regarding your rights to our company through the methods arranged below, our company will conclude your request as soon as possible and at the latest within thirty days free of charge, depending on the nature of the request. However, if a fee is foreseen by the Personal Data Protection Authority, a fee will be charged according to the tariff determined by our company. In this context, personal data owners have the following rights;

• Learning whether personal data is processed,
• Requesting information if personal data has been processed,
• Learning the purpose of processing personal data and whether they are used in accordance with their purpose,
• Knowing the third parties to whom personal data are transferred domestically or abroad,
• If personal data are incomplete or processed incorrectly, requesting their correction and requesting that the operations performed within this scope be notified to third parties to whom the data are transferred,
• If processed in accordance with the Law and other relevant laws, requesting the deletion or destruction of personal data if the reasons requiring processing no longer exist, and requesting that the operations performed within this scope be notified to third parties to whom the data are transferred,
• Objecting to the analysis of processed data solely through automated systems if it results in a conclusion against the person,
• Requesting compensation for damages if harmed due to unlawful processing of personal data.

According to Article 13, paragraph 1 of the KVK Law, you can submit your request to exercise the above-mentioned rights in writing to our company. You can fill out the form on www.akyapi.com.tr, include your explanations regarding the right you wish to exercise, and deliver the signed copy of the form personally with identity verification documents to the AKYAPI Customer Relations Department at “METRO 34 Plaza, İOSB Mah. Bedrettin Dalan Bulvarı No. 23/104 Başakşehir/İSTANBUL” or send it via a notarized method.

Our company reserves the right to make changes to this clarification notice due to possible amendments in the KVK Law and the methods to be determined by the Personal Data Protection Board.