Clarification Text Regarding the Processing of Personal Data Collected via Forms

Our club, in compliance with the legal obligations arising from the Personal Data Protection Law No. 6698 and related regulations, requests certain personal data (such as name, surname, password, email address, mobile phone number) in order to fulfill its legal obligations and carry out processes. Your personal data will be processed and stored in a secure environment that is not accessible to the public, in accordance with the purposes and scope specified in this Clarification Text and the KVKK, and will not be used outside of these purposes without your explicit consent.

Purpose of Processing Personal Data

Personal data within our club will be processed for the purposes of planning and executing commercial activities, providing information to authorized institutions and organizations as required by law, resolving consumer complaints in matters not directly provided by us or outside our area of expertise, sending commercial electronic messages with your explicit consent, ensuring the execution of activities in compliance with our club's procedures and relevant regulations, planning and executing necessary audit activities to ensure compliance with the law, planning and executing corporate sustainability activities, carrying out efforts to protect the reputation of our company, managing request and complaint processes, and planning and executing corporate governance and communication activities. Personal data will be processed in accordance with the principles of being processed for relevant, limited, and proportionate purposes, being kept for the period necessary for the purposes, and being retained for the duration required by the relevant regulations. Your personal data may be processed entirely or partially through automated or non-automated means, by means of collection, recording, storage, preservation, alteration, reorganization, and other similar processes. The collected information will not be shared with third parties without your knowledge or contrary instruction, will not be used for commercial purposes outside of our activities, and will not be sold.

Transfer of Personal Data

Personal data obtained from you may be shared, to the extent necessary for fulfilling the aforementioned purposes, with domestic/international, public/private institutions and organizations, companies, our company’s consultants or solution partners, other group companies, other authorized institutions and organizations, suppliers or subcontractors, persons or entities permitted by the Turkish Commercial Code and other applicable laws, public or private law entities within their legal authority, and persons or entities required or allowed by other regulations. Personal data may be transferred to third parties without your explicit consent in accordance with Articles 5 and 8 of the Personal Data Protection Law.

Method of Collecting Personal Data

Your personal data may be collected in written, verbal, or electronic form through our website.

Deletion, Destruction, or Anonymization of Personal Data

In accordance with Article 7 of the Personal Data Protection Law, even if personal data has been processed in accordance with the relevant legislation, if the reasons for processing cease to exist, the personal data will be deleted, destroyed, or anonymized by our company, either upon request from the data subject or at our own discretion. This will be carried out in accordance with the procedures and principles set out in the Personal Data Deletion, Destruction, or Anonymization Regulation published in the Official Gazette on 28 October 2017, No. 30224. When the obligation to delete, destroy, or anonymize personal data arises, the data will be deleted, destroyed, or anonymized within 3 months from the date the obligation arises. If you request the deletion or destruction of your personal data from our company:

a) If all conditions for processing personal data have ceased to exist, the requested personal data will be deleted, destroyed, or anonymized. Your request will be finalized within 30 days and you will be notified.

b) If all conditions for processing personal data have ceased to exist and the personal data has been shared with third parties, this will be communicated to the third parties and the necessary actions will be taken within the framework of the regulation.

c) If the conditions for processing personal data have not ceased to exist, your request may be rejected with a justification, in accordance with Article 13(3) of the Personal Data Protection Law, and you will be notified in writing or electronically within 30 days.

Your Rights Under the Personal Data Protection Law

According to Article 11 of the Law, as the owner of personal data, customers have the right to:

• Learn whether personal data has been processed,

• Request information if personal data has been processed,

• Learn the purpose of processing personal data and whether it is being used in accordance with its purpose,

• Know the third parties to whom personal data has been transferred domestically or internationally,

• Request the correction of personal data if it has been processed incompletely or incorrectly,

• Request the deletion, anonymization, or destruction of personal data,

• Request notification of the correction, deletion, or anonymization of personal data to third parties to whom it has been transferred,

• Object to the processing of personal data through automated systems that result in unfavorable outcomes for the person,

• Request compensation if they suffer damage due to unlawful processing of personal data.

Non-personal information, which does not identify you personally, may be used for any purpose and shared with third parties without your consent.

4o