INFORMATION ON THE PROTECTION AND PROCESSING OF PERSONAL DATA

a) As IBSS CONSULTANCY COMPUTER AND EDUCATION SERVICE IND. TRADE CO. LTD. (“IBSS”), we place the utmost importance on the security of your personal data. With this awareness, we, as IBSS, attach great importance to the processing and preservation of all personal data belonging to all individuals affiliated with IBSS, including those who utilize our products and services, in accordance with Personal Data Protection Law No. 6698 (“PDPL Law”). Fully aware of this responsibility, we process your personal data as explained below and within the limits stipulated by legislation.

1. Collection, Processing, and Purposes of Personal Data While your personal data may vary depending on the service, product, or commercial activity provided by IBSS, Your personal data may be collected verbally, in writing, or electronically, through automated or non-automated methods, through offices, websites, social media channels, mobile applications, and similar means. Your personal data may be created, updated, and processed as long as you use IBSS’s products and services. Additionally, when you use our website with the intention of using IBSS services, visit IBSS or our website, or participate in training, seminars, or organizations organized by IBSS, your personal data may be processed. Your collected personal data will be processed in accordance with the personal data processing conditions and purposes specified in Articles 5 and 6 of the Personal Data Protection Law. This process will enable our relevant units to carry out the necessary work to ensure you benefit from the products and services offered by IBSS. It will also enable us to customize and recommend products and services offered by IBSS based on your preferences, usage habits, and needs. It will also ensure the legal and commercial security of IBSS and its business partners. It will also ensure the determination and implementation of IBSS’s commercial and business strategies. It will also ensure the implementation of IBSS’s human resources policies.

2. To Whom and for What Purposes Can Processed Personal Data Be Transferred. Your collected personal data will be transferred to: Your personal data may be transferred to our business partners, suppliers, legally authorized public institutions, and private individuals, in accordance with the personal data processing conditions and purposes specified in Articles 8 and 9 of the Personal Data Protection Law. This process is carried out by our units to ensure that you benefit from the products and services offered by IBSS. We customize and recommend products and services to you based on your preferences, usage habits, and needs. We also ensure the legal and commercial security of IBSS and its business partners. We also determine and implement IBSS’s commercial and business strategies and ensure the implementation of IBSS’s human resources policies.

3. Method and Legal Basis for Collecting Personal Data: Your personal data is collected, in any form, verbally, in writing, or electronically, in accordance with the purposes outlined above, to enable IBSS to provide the products and services offered by IBSS within the legal framework specified, and to enable IBSS to fully and accurately fulfill its contractual and legal obligations. Your personal data collected for this legal reason may also be processed and transferred for the purposes specified in Articles (1) and (2) of this text, within the scope of the personal data processing conditions and purposes specified in Articles 5 and 6 of the Personal Data Protection Law.

4. Rights of Personal Data Owners Listed in Article 11 of the Personal Data Protection Law. As personal data owners, if you submit your requests regarding your rights to IBSS using the methods listed below, IBSS will process the request free of charge as soon as possible and within thirty days at the latest, depending on the nature of the request. However, if the process entails an additional cost, IBSS will charge the fee set by the Personal Data Protection Board. In this context, personal data owners;

• To learn whether personal data has been processed,

• To request information regarding the processing of personal data, if personal data has been processed,

• To learn the purpose of processing personal data and whether it is being used in accordance with its intended purpose,

• To know the third parties to whom personal data has been transferred, both domestically and internationally,

• To request correction of personal data if it has been processed incompletely or incorrectly, and to request notification of the action taken to third parties to whom personal data has been transferred,

• To request the deletion or destruction of personal data if the reasons requiring processing no longer exist, despite processing in accordance with the provisions of Law No. 6698 and other relevant laws, and to request notification of the action taken to third parties to whom personal data has been transferred,

• To object to the analysis of processed data exclusively through automated systems, which may lead to a detrimental outcome,

• Object to the analysis of processed data exclusively through automated systems, leading to a detrimental outcome,

• Request compensation for damages suffered due to the unlawful processing of personal data. Pursuant to Article 13, paragraph 1, of Law No. 6698, you may submit your request to IBSS regarding the exercise of your aforementioned rights in writing or through other methods determined by the Personal Data Protection Board. Since the Personal Data Protection Board has not determined a specific method at this stage, you must submit your application to IBSS in writing, in accordance with Law No. 6698. In this context, the channels and procedures for submitting your written application to IBSS under Article 11 of Law No. 6698 are explained below. To exercise your rights specified above, you may submit your request, including the necessary information to establish your identity and your explanations regarding the right you wish to exercise as specified in Article 11 of Law No. 6698, by filling out the data owner application form at www.ibss.com.tr/kvk and delivering a signed copy of the form in person, along with documents confirming your identity, to Varyap Meridian Grand Tower Barbaros Mah. Floor: 17 No: 152 Batı Ataşehir – İSTANBUL or by other methods specified in Law No. 6698.