KVKK Policy

In accordance with the Law No. 6698 on the Protection of Personal Data, your personal data may be collected and processed by Endeks Bilişim Sanayi Ve Dış Ticaret Anonim Şirketi as the data controller within the scope explained below.

Personal data may be collected in categories such as identity information, contact information, customer information, customer transaction information, transaction security information, legal transaction and compliance information, and marketing sales information. Your collected personal data will be processed for the following purposes: • To provide our products and services, fulfill our obligations, comply with local and international legal regulations regarding information storage, reporting, notification, tax and other obligations • To offer you special advertisements, campaigns, advantages and other benefits for sales and marketing activities to improve service and product quality • To manage infrastructure and commercial activities, comply with internal policies and procedures including audit, finance, accounting, billing, IT systems, data hosting, business continuity, records and document management • To communicate with you regarding IT requirements, system structure, support services and to provide necessary information about our products and services • To conduct traffic measurement, statistical analysis, segmentation/profiling and CRM studies for sales and marketing activities • To measure and increase customer satisfaction, manage complaints, receive your feedback and suggestions, and inform you about products, services and requests • To process your orders, manage payments, arrange product delivery through logistics partners, recommend products and services that may interest you, conduct online behavioral advertising and marketing, manage customer portfolio, measure and improve service quality • To use in all products and services to be offered to you within the framework of the law and relevant legislation • To comply with information storage, reporting and notification obligations required by official institutions, fulfill contractual requirements and legal obligations • To determine and implement the Company's commercial and business strategies, manage financial operations, communication, market research, purchasing operations, internal systems and legal operations • To comply with applicable laws and regulatory obligations including anti-money laundering and counter-terrorism laws, respond to requests from official authorities All purposes will be processed within the scope of personal data processing conditions specified in Articles 5 and 6 of Law No. 6698.

Your collected personal data may be transferred to the following persons and organizations, limited to the realization of the purposes stated above: • Business partners, suppliers, shareholders and affiliates of the Company • Persons or organizations permitted by the Tax Procedure Law, Social Security Institution legislation, Court of Accounts, Law on Prevention of Money Laundering, Turkish Commercial Code, Code of Obligations and other legislation • Public institutions and organizations, administrative and legal authorities authorized by law • Overseas companies and affiliates • Third parties from whom we receive services or with whom we cooperate for product/service comparison, analysis, evaluation, advertising, program partner institutions, contracted institutions for message delivery, and cargo companies for order delivery This transfer will be carried out within the framework of personal data processing conditions specified in Articles 8 and 9 of Law No. 6698.

Your personal data is collected verbally, in writing or electronically through our Headquarters, contracted websites, applications, support services, our website and mobile application, call centers, social media accounts and other channels. The data is collected by the Company within the framework of legal legislation for the purposes stated above and within the scope of contract performance.

As personal data subjects, if you submit your requests regarding your rights, the Company will conclude the request as soon as possible and within thirty days at the latest. No fee will be charged for up to ten pages in the response. A fee of 1 TL will be charged for each page over ten pages. If the response is provided on a recording medium such as CD or USB flash drive, the fee charged will not exceed the cost of the recording medium. Personal data subjects have the following rights: • To learn whether personal data is processed • To request information if personal data has been processed • To learn the purpose of processing and whether it is used appropriately • To know the third parties to whom personal data is transferred, domestically or abroad • To request correction of incomplete or incorrectly processed data and to request notification of this correction to third parties • To request deletion or destruction of personal data when the reasons requiring processing cease to exist, and to request notification of this to third parties • To object to a result arising against the person by analyzing the processed data exclusively through automated systems • To request compensation for damage arising from unlawful processing Application Methods: You may submit your requests regarding your rights in Turkish and in writing, or via registered electronic mail (KEP) address, secure electronic signature, mobile signature, or the email address previously notified to the Company. Only information about the applicant will be provided; information about other family members or third parties cannot be obtained. Required information in your application: • Your name, surname and signature (if written) • Your Turkish ID number (or nationality, passport number for foreigners) • Your residential or business address for service of notice • Your email address, phone and fax number (if any) • The subject of your request Submission addresses: Written application: Endeks Bilişim Sanayi Ve Dış Ticaret Anonim Şirketi, Yukarı Dudullu Mah. Necip Fazıl Bulv. Keyap Sit. B-1 Blk. No:23 ÜMRANİYE/İSTANBUL Email: [email protected] KEP: [email protected]