Endeks Information Industry and Foreign Trade Joint Stock Company ensures the lawful collection, storage, and sharing of your personal data and aims to protect your privacy by implementing the highest level of security measures possible. Our goal is to inform you transparently about how your personal data is collected, processed, shared, the legal reasons for such processing, and your rights according to Article 10 of the Personal Data Protection Law No. 6698, in line with your satisfaction.

a) Data Controller

In accordance with Law No. 6698 on the Protection of Personal Data (“Law No. 6698”), your personal data will be collected and processed by Endeks Information Industry and Foreign Trade Joint Stock Company (“COMPANY”) as the data controller, as described below.

b) Purposes of Processing Personal Data

The COMPANY may collect personal data in categories such as identity information, contact information, customer information, customer transaction information, transaction security information, legal transaction and compliance information, and marketing sales information from parties such as customers, employees, potential customers, job applicants, business partners, and suppliers. Your collected personal data will be processed for purposes including:

• Provision of COMPANY products and services to you, fulfillment of our obligations towards you,
• Compliance with local and international legal obligations such as information storage, reporting, informing, tax, and other obligations,
• Conducting sales and marketing activities to enhance the quality of services and products, including personalized advertisements, campaigns, benefits, and other advantages,
• Managing infrastructure and commercial activities related to audit, finance and accounting, billing and collections, information systems, data and website hosting, business continuity and records, document and print management in compliance with internal policies and procedures,
• Communication for information technology requirements, system structure, and the necessity of received IT support services related to these services and products,
• Conducting traffic measurement, statistical analysis, segmentation/profiling, and CRM activities for sales and marketing activities,
• Measuring and enhancing customer satisfaction, complaint management, gathering opinions and suggestions regarding new services and products, receiving error notifications, providing information regarding products and services, and more.

c) Recipients and Purposes of Personal Data Transfer

Your collected personal data may be transferred to:

• COMPANY’s business partners, suppliers, shareholders, Tecde Group and subsidiaries,
• Persons or organizations permitted by Tax Procedure Law, Social Security Institution legislation, Court of Accounts, Law on Prevention of Laundering Proceeds from Crime, Law on Prevention of Money Laundering, Turkish Commercial Code, Code of Obligations, and other legislation,
• Authorized public institutions and authorities, administrative authorities, and legal authorities,
• Foreign companies and subsidiaries,
• Real or legal persons with whom we cooperate for service comparison, analysis, evaluation, advertising, and to realize the purposes mentioned above.

d) Method and Legal Basis of Personal Data Collection

Your personal data is collected by COMPANY through methods such as COMPANY Headquarters, applications made through affiliated websites, dealings with institutions with which we provide/receive support services, real and/or legal persons with whom transactions are made within the scope of any legislation or contract, and through channels that may be established/formed in the future; in compliance with legal regulations and for the purposes mentioned above.

e) Rights of the Data Subject under Article 11 of Law No. 6698

As data subjects, you have the rights to:

• Learn whether your personal data is processed,
• Request information if your personal data has been processed,
• Learn the purpose of processing personal data and whether they are used appropriately,
• Know the third parties to whom personal data is transferred domestically or abroad,
• Request correction of incomplete or incorrect personal data and notification of such correction to third parties to whom the data has been transferred,
• Request deletion or destruction of personal data in accordance with the law, despite being processed in accordance with Law No. 6698 and other relevant laws, and notification of such deletion or destruction to third parties to whom the data has been transferred,
• Object to the occurrence of a result against you through analysis of processed data exclusively by automatic systems,
• Request compensation for damages in case of suffering damages due to unlawful processing of personal data.

You can submit your requests regarding these rights in Turkish and in writing or through registered electronic mail (KEP) address, secure electronic signature, mobile signature, or the electronic mail address previously notified to COMPANY and registered in our system, in accordance with Article 13 of Law No. 6698 and Regulation on Procedures and Principles for Application to Data Controller No. 30356 dated 10.03.2018. In applications, information will only be provided about the applicant, not about other family members or third parties. COMPANY reserves the right to verify your identity before responding. Your application should include:

• Your name, surname, and signature if the application is in writing,
• Your Republic of Turkey Identification number for Turkish citizens, your nationality, passport number, or identification number if you are a foreigner,
• Your residence or business address for notification purposes,
• Your designated email address for notification, phone, and fax number, if any,
• Subject of your request.

Written applications, along with necessary documents, can be submitted to COMPANY’s address: Endeks Information Industry and Foreign Trade Joint Stock Company, Yukarı Dudullu Mah. Necip Fazıl Bulv. Keyap Sit. G1 Blk. No:115 ÜMRANİYE/İSTANBUL. You can also send your applications via email to [email protected]. For KEP applications, send them to our KEP address: [email protected]. It is mandatory to provide the requested information and documents correctly and completely to enable comprehensive and qualified research by COMPANY. In case of incomplete provision of required information and documents, COMPANY declares that it reserves its legal rights.