Privacy Notice Regarding the Protection and Processing of Personal Data in the E-Newsletter Process

As Deneyim Patent Ltd. Şti. (“deneyimpatent.com”), we attach great importance to the protection and processing of personal data and have taken the highest level of security measures in compliance with the Personal Data Protection Law No. 6698 (“Law”) regarding the processing and protection of such data. Acting in the capacity of data controller, due to our operation of the website www.arkheegitim.com (“Platform”), we have prepared this Privacy Notice on the Protection and Processing of Personal Data (“Privacy Notice”), which sets out our statements and disclosures regarding the purposes of data processing, data categories, methods and legal grounds for data collection, to whom and for what purposes data may be transferred, data retention periods, and your rights concerning your personal data.

Which Data Is Processed by Deneyim Patent Ltd. Şti.?

Deneyim Patent Ltd. Şti. is entitled to process general and special categories of personal data with the explicit consent of the data subject and, in cases stipulated under Articles 5 and 6 of the Law, without explicit consent.

Within this scope, in accordance with the terms and conditions set forth in this Privacy Notice, the following types of “personal data” may be processed on the website by Deneyim Patent Ltd. Şti.:

• Contact information such as email address and phone number.

For What Purposes Are Personal Data Processed by Deneyim Patent Ltd. Şti.?

Deneyim Patent Ltd. Şti. processes personal data for purposes including, but not limited to, the following:

• Recording name, surname, address, and other information for communication purposes,
• Managing goods and services sales processes,
• Managing customer satisfaction processes.

What Measures Are Taken for the Protection of Personal Data and How Will the Data Be Stored?

Deneyim Patent Ltd. Şti. undertakes to take all necessary technical and administrative measures, and to conduct all required audits in a timely and complete manner, in order to ensure the protection of personal data, prevent unlawful processing and access to personal data, and avoid data breaches, in accordance with the conditions set out in the Law and this Privacy Notice.

Your personal data will be processed with all necessary information security measures in place, provided that it is not used outside the purposes and scope notified to you. Such data will be stored and processed for the statutory retention period or, if no such period is stipulated, for the duration required by the purpose of processing. Upon the expiration of this period, your personal data will be removed from the data flows of Deneyim Patent Ltd. Şti. through deletion, destruction, or anonymization methods.

To Which Parties Are Personal Data Transferred?

Personal data processed by Deneyim Patent Ltd. Şti. in accordance with Articles 5 and 6 of the Law and limited to the purposes stated in this Privacy Notice;

Your personal data is not transferred abroad by Deneyim Patent Ltd. Şti. in any manner. Where necessary, your explicit consent will be obtained separately for domestic data transfer processes.

• To Türk Telekomünikasyon Anonim Şirketi and Türk Telekomünikasyon group companies,
• To companies and representatives authorized by us and operating on behalf of and for the account of our Company,
• To regulatory and supervisory authorities and public institutions or organizations expressly authorized by law to request personal data,
• To business partners, suppliers, and contractor companies, banks, credit risk and financial institutions, and other natural or legal persons within the scope of the stated purposes,
• To tax and similar consultants, mandatory parties related to legal follow-up processes, public institutions and organizations, and third parties from whom we receive consultancy services, including auditors, as well as business partners, third-party service providers, and authorized persons and organizations for the purposes stated above.

How Long Are Personal Data Retained?

Deneyim Patent Ltd. Şti. retains the relevant personal data for the period required by the processing purposes specified in this Privacy Notice, taking into account the limitation periods set forth in the Law and other applicable legislation. Upon expiration of such periods, the data is deleted or destroyed in accordance with the Law.

What Are Your Rights as a Data Subject?

Within the scope of the Law, you may contact Deneyim Patent Ltd. Şti. at any time to obtain information regarding the following matters:

• Whether your personal data is being processed,
• The purpose of processing and whether it is used in accordance with that purpose,
• The identities of persons to whom personal data is transferred,
• Requesting correction in case of incomplete or inaccurate processing and, where conditions are met, requesting deletion of personal data and notification of such actions to third parties to whom the data has been transferred,
• Objecting to the emergence of a result against you due to analysis of processed data exclusively through automated systems,
• Requesting compensation for damages in case of loss due to unlawful processing,
• Requesting deletion or destruction of personal data where the reasons requiring processing cease to exist, even if the data has been processed in accordance with the Law.

You may submit your applications regarding these rights by sending the Data Subject Application Form via a notary public or through other methods determined by the Personal Data Protection Board, or by transmitting it with a secure electronic signature to ArkheEgitim@hs03.kep.tr.

Your request will be responded to as soon as possible and, in any case, within thirty (30) days in accordance with the Law. However, if the transaction requires an additional cost, Deneyim Patent Ltd. Şti. reserves the right to request a fee in accordance with the tariff determined by the Personal Data Protection Board.