For the World and the Person Receiving the Service

FOR THE PERSON RECEIVING THE PRODUCT OR SERVICE

Personal Data Protection Information Text

DataLonga Bilişim A.Ş. (DataLonga) takes the highest possible security measures to ensure that your personal data is collected, stored, and shared lawfully and to protect your privacy.

The purpose of preparing this Privacy Notice is to inform you in the most transparent way possible, in accordance with Article 10 of the Law No. 6698 on the Protection of Personal Data, about the methods of obtaining your personal data, the purposes of processing, the persons with whom it is shared, the legal reasons, and your rights.

The information provided in this document is intended for the "Person Receiving the Product or Service" group within our Company for the activities of "Execution of Goods/Services Sales Processes" and "Execution of Finance and Accounting Operations" .

• Identity of the Data Controller

In accordance with the Law No. 6698 on the Protection of Personal Data (“Law No. 6698”), your personal data may be collected and processed by DataLonga Bilişim A.Ş. (DataLonga) (the Company) as the data controller, within the scope described below.

• The Purpose for Which Personal Data Will Be Processed

Your collected personal data will be processed for the following purposes and within the scope of the personal data processing conditions and purposes specified in Articles 5 and 6 of Law No. 6698:

1. Categories of personal data collected:

• Identity
• Communication
• Customer Transactions
• Marketing

1. General personal data collected:

• Name
• Surname
• Date of birth
• Birthplace
• Turkish Republic Identity Number
• Gender
• Signature
• Address
• Email address
• Contact Address
• Phone Number
• Call Center Records
• Billing Information
• Promissory Note Information
• Check Information

1. Special categories of personal data collected:

• No sensitive personal data is collected.

1. Purposes of collecting personal data:

DATA CATEGORY	PROCESSING OBJECTIVES
Identity	Ensuring compliance with regulations, managing finance and accounting, managing company/product/service loyalty processes, monitoring and managing legal matters, conducting communication activities, managing/monitoring business activities, managing sales processes for goods/services, managing customer relationship processes, conducting customer satisfaction activities, conducting marketing analysis studies, managing advertising/campaign/promotion processes, managing storage and archiving activities, managing contract processes, monitoring requests/complaints, managing product/service marketing processes, and providing information to authorized persons, institutions, and organizations.
Communication	Ensuring compliance with regulations, managing finance and accounting, managing company/product/service loyalty processes, monitoring and managing legal matters, conducting communication activities, managing/monitoring business activities, managing sales processes for goods/services, managing customer relationship processes, conducting customer satisfaction activities, conducting marketing analysis studies, managing advertising/campaign/promotion processes, managing storage and archiving activities, managing contract processes, monitoring requests/complaints, managing product/service marketing processes, and providing information to authorized persons, institutions, and organizations.
Customer Transactions	Ensuring compliance with regulations, managing finance and accounting, managing company/product/service loyalty processes, monitoring and managing legal matters, conducting/auditing business activities, receiving and evaluating suggestions for improving business processes, managing goods/services procurement processes, managing goods/services sales processes, managing customer relationship management processes, conducting customer satisfaction activities, conducting marketing analysis studies, managing advertising/campaign/promotion processes, managing storage and archiving activities, following up on requests/complaints, managing product/service marketing processes, and providing information to authorized persons, institutions, and organizations.
Marketing	Execution of Company/Product/Service Loyalty Processes, Execution of Customer Relationship Management Processes, Execution of Customer Satisfaction Activities, Execution of Marketing Analysis Studies, Execution of Advertising/Campaign/Promotion Processes, Execution of Storage and Archiving Activities, Tracking of Requests/Complaints, Execution of Product/Service Marketing Processes

• To Whom and for What Purpose the Processed Personal Data May Be Transferred

Your collected personal data may be transferred to the following parties (if specified in the table) within the framework of the personal data processing conditions and purposes specified in Articles 8 and 9 of Law No. 6698, limited to the fulfillment of the purposes stated above:

1. Parties to whom personal data may be transferred:

DATA CATEGORY	TRANSFER PURPOSES	BUYER GROUPS	TRANSFER ABROAD
Identity	Information sharing	Authorized Public Institutions and Organizations, Individuals and Organizations with Whom We Receive Contractual Services and Collaborate With	Not transferring
Communication	Information sharing	Authorized Public Institutions and Organizations, Individuals and Organizations with Whom We Receive Contractual Services and Collaborate With	Not transferring
Customer Transactions	Information sharing	Authorized Public Institutions and Organizations, Individuals and Organizations with Whom We Receive Contractual Services and Collaborate With	Not transferring
Marketing	Information sharing	Authorized Public Institutions and Organizations, Individuals and Organizations with Whom We Receive Contractual Services and Collaborate With	Not transferring

• Method and Legal Basis for Personal Data Collection

1. Methods of collecting personal data:

• Documents submitted by the person in question.
• Statements of the Person in Question (Written and Oral Statements)
• Contact Form
• Membership Registration Form

1. Legal grounds for collecting personal data:

• Establishment of the Contract
• Fulfillment of Legal Obligation
• As Provided in the Laws
• Legitimate Interest of the Data Controller

• Rights of the Personal Data Subject as Listed in Article 11 of Law No. 6698

As data subjects, if you submit your requests regarding your rights using the methods described below, the COMPANY will process your request as soon as possible, and no later than thirty days, depending on the nature of the request. No fee will be charged for responses up to ten pages. A processing fee of 1 Turkish Lira will be charged for each page exceeding ten pages. If the response to the application is provided on a recording medium such as a CD or flash drive, the fee that may be requested by the COMPANY will not exceed the cost of the recording medium.

In this context, personal data owners;

• To find out whether your personal data is being processed,
• The right to request information regarding the processing of personal data.
• To learn the purpose of processing personal data and whether it is being used appropriately for that purpose.
• Knowing the third parties to whom personal data is transferred, whether domestically or internationally.
• The right to request the correction of personal data if it has been processed incompletely or inaccurately, and to request that this correction be notified to third parties to whom the personal data has been transferred.
• Even if personal data has been processed in accordance with Law No. 6698 and other relevant laws, the right to request the deletion or destruction of personal data when the reasons requiring its processing cease to exist, and to request that this action be notified to third parties to whom the personal data has been transferred.
• The right to object to an outcome that is detrimental to oneself, resulting from the analysis of processed data exclusively through automated systems.
• Individuals who suffer damages as a result of the unlawful processing of their personal data have the right to claim compensation for those damages.

You can submit your request regarding the exercise of your rights mentioned above to the COMPANY using the following application methods, in accordance with Article 13, paragraph 1 of Law No. 6698 and the Communiqué No. 30356 dated 10.03.2018 on the Procedures and Principles for Applications to the Data Controller:

• In writing

• Postal Address: Halaskargazi Mah. Kuyumcu İrfan Sok. 38/4 Şişli/ISTANBUL

• Via Registered Electronic Mail Address

• E-Mail: datalongabilisim@hs01.kep.tr

• Through a notary

1. • Postal Address: Halaskargazi Mah. Kuyumcu İrfan Sok. 38/4 Şişli/ISTANBUL

Applications will only provide information about the applicant; information about other family members or third parties will not be available. The COMPANY reserves the right to verify your identity before responding.

In your application;

1. Your name, surname, and signature (if the application is in writing),
2. For Turkish citizens, your Turkish Republic identity number; if you are a foreigner, your nationality, passport number, or identity number if you have one.
3. Your residential or business address for notification purposes,
4. If you have one, please provide your email address, telephone number, and fax number for notification purposes.
5. It is mandatory to state the subject of your request, and if applicable, relevant information and documents should be attached to the application.

Depending on the nature of your request, you must provide us with complete and accurate information and documents that will enable identity verification. Failure to provide the requested information and documents properly may hinder the COMPANY 's ability to conduct a thorough and effective investigation into your request. In this case, the COMPANY reserves its legal rights. Therefore, your application must be submitted completely and include all the requested information and documents, according to the nature of your request.