INFORMATION NOTICE REGARDING THE PROCESSING OF PERSONAL DATA IN COMPLIANCE WITH KVKK

This information notice provided to you is a legal requirement under Article 10 of the Law No. 6698 on the Protection of Personal Data, aiming to inform you about the processing of personal data.

DEFINITIONS

According to Law No. 6698 on the Protection of Personal Data:
Explicit consent: Consent based on informed and freely given choice on a specific subject matter,
Data subject: The natural person whose personal data is processed,
Personal data: Any kind of information related to an identified or identifiable natural person,
Processing of personal data: Any operation performed on personal data, whether fully or partially automated or non-automated, including obtaining, recording, storing, preserving, altering, reorganizing, disclosing, transferring, making available, classifying, or preventing the use of data,
Data processor: The natural or legal person who processes personal data on behalf of the data controller based on the authority granted by the data controller,
Data recording system: The system where personal data is processed based on specific criteria,
Data controller: The natural or legal person who determines the purposes and means of processing personal data, and is responsible for establishing and managing the data recording system.

1. IDENTITY OF THE DATA CONTROLLER
Burç Group., hereinafter referred to as the "company," is the data controller responsible for determining the purposes and methods of processing your personal data and for establishing and managing the data recording system, in accordance with Article 10 of the Law No. 6698 on the Protection of Personal Data and the "Communiqué on Procedures and Principles to be Followed in Fulfilling the Obligation of Notification."

2. PURPOSES OF PROCESSING YOUR PERSONAL DATA
Your personal data is processed for the following purposes: Planning and execution of activities necessary for the customization and promotion of products/services offered by the company based on preferences, likes, and needs of individuals; conducting necessary work and transactions within the scope of commercial activities carried out by the company; ensuring the legal, technical, and commercial-business security of the company and individuals in business relationships with the company; establishing communication with the data subject; tracking processes related to finance/accounting or billing; informing individuals about products through electronic mail or any other communication means and providing information about personalized campaigns; verifying identity; and measuring customer satisfaction.

3. TO WHOM AND FOR WHAT PURPOSES YOUR PERSONAL DATA MAY BE TRANSFERRED
In accordance with the personal data processing conditions specified in the KVKK, your personal data, as stated in title 2, may be shared with the company's direct or indirect subsidiaries, business partners, and suppliers, as well as legally authorized institutions and organizations, and also legally authorized private legal entities upon request with judicial authorities or relevant law enforcement agencies.

4. METHOD AND LEGAL BASIS OF PERSONAL DATA COLLECTION
All your personal data obtained through channels such as calling our call center, application forms, website and communication forms, cookies, job application forms, and any written or verbal information submitted to the company are processed for the purposes listed in Article 2 of the Information Notice, in accordance with the Law No. 6698 on the Protection of Personal Data, Articles 5 and following;

1. It is explicitly prescribed by the laws.
   
2. It is necessary for the protection of life or bodily integrity of the data subject or another person who cannot disclose his/her consent due to actual impossibility or whose consent is not legally valid.
   
3. It is necessary for the conclusion or performance of a contract, provided that it is directly related to the parties to the contract.
   
4. It is necessary for the data controller to fulfil its legal obligation.
   
5. It has been made public by the data subject himself/herself.
   
6. It is necessary for the establishment, exercise, or protection of a right.

5. RIGHTS OF THE DATA SUBJECT AS SPECIFIED IN ARTICLE 11 OF KVKK
Your rights under Article 11 of the KVKK are as follows:

By applying to our institution, you have the right to:

• Learn whether your personal data is being processed,
• Request information if your personal data has been processed,
• Learn the purpose of processing personal data and whether they are used in accordance with their purpose,
• Know the third parties to whom personal data is transferred domestically or abroad,
• Request the correction of personal data if it is incomplete or incorrectly processed,
• Request the deletion or destruction of personal data within the framework of the conditions stipulated in Article 7 of the law,
• Request that the transactions be notified to the third parties to whom personal data has been transferred,
• Object to the occurrence of a result against the person himself/herself by the analysis of processed data exclusively through automated systems,
• Request compensation for damages in case of damage due to unlawful processing of personal data.

To exercise your rights as described within the framework of KVKK, you can submit your requests, along with identity documents, to the company's address "Bilkent Plaza A3 Blok No: 6, Çankaya 06800 Ankara - Türkiye" in person or by mail with a signed letter, or by sending an email to burc@burc.com.tr. Your request will be finalized within 30 days at the latest.

Necessary information for your applications:

• Full name
• Signature if the application is written
• Turkish Republic ID Number (TCKN)
• Residence or workplace address for notifications
• (If any) Email address for notifications
• Phone number
• Subject of the request

If the processing of your request requires an additional fee, the fee specified in the tariff determined by the Personal Data Protection Board will be charged.

Sincerely,
Burç Group