As AHMET ERSOY - BİSAAT (“AHMET ERSOY - BİSAAT”), we take measures to protect your personal data within the scope of the Personal Data Protection Law No. 6698 (hereinafter referred to as the KVKK or the Law). We process your Personal Data within the scope of the KVKK and relevant legal legislation and with the reasons and methods explained below as the “data controller”.

AHMET ERSOY - BİSAAT, Information Text on the Processing of Personal Data, has been prepared in accordance with the article titled “Data Controller’s Information Obligation” in Article 10 of the KVKK; in order to inform you in the most transparent way about the identity of the data controller, the method and legal reason for collecting your personal data, the purpose for which this data will be processed, to whom and for what purpose it can be transferred, the data processing period and your rights listed in Article 11 of the KVKK. This information text concerns third parties who use our company website.

Data Controller

Company Title: AHMET ERSOY

Address: Oruçreis Mah. Tekstilkent Cad. Tekstilkent B6 Blok No:60 Esenler/İstanbul

(In this Disclosure Text, it will be referred to as “Company” or “AHMET ERSOY - BİSAAT”.)

Method of Collection of Your Personal Data and Legal Reason

Your personal data may be collected verbally, in writing or electronically, through automatic or non-automatic methods, through the Company’s affiliated units, website, social media channels, call center, mobile applications and similar means. Your personal data may be created, updated and processed as long as your relationship with the Company continues, and may be kept in both digital and physical environments.

As Bisaat, we request your personal information such as name, age, areas of interest, e-mail in order to provide better service to our customers. This information collected is used in periodic campaigns, special promotions for customer profiles and classification studies to prevent unwanted e-mails. Apart from this, our customers' personal information is never shared with third parties without the customer's knowledge or instruction and this information is not used for commercial purposes. In terms of privacy and security, the security of our customers is kept at the highest level and all kinds of measures are taken to protect personal information.

In line with the purposes stated under the heading "Your Processed Personal Data and Processing Purposes" and in accordance with the provision of the explicit consent condition within the scope of Article 5, paragraph 1 of Law No. 6698 or

In accordance with the personal data processing conditions and purposes specified in subparagraphs "a, c, ç and e" in accordance with Article 5, paragraph 2, it can be processed and transferred.

Your Processed Personal Data and Processing Purposes

Your Personal Data is processed securely in accordance with the Personal Data Protection Law in order to provide a more appropriate service in the company's business and transactions due to legal obligations.

The following data is collected as personal data for the purposes of being clearly stated in the laws, providing services, fulfilling legal obligations as a Company, exercising legal rights and legitimate interests:

Identity Data: Data group containing information about the person's identity (Name and surname)

Contact Data: Data group that can be used to reach the person (Telephone, residential address, e-mail)

Professional Experience Data: Data group containing the person's education information and certificates.

Legal Transaction Data: This data category refers to data types such as information in correspondence with judicial authorities and consumer arbitration committees, information in the case file.

Transaction Security Data: Data group containing digital traces resulting from the processing of personal information. (IP address information, website login and exit information, cookie information)

Marketing Data: Data group containing digital traces resulting from the processing of personal information used for marketing and sales purposes. (IP address information, website navigation information, cookie information for marketing)

Finance Data: Data group containing financial information of the person. (Bank Account Number, IBAN)

If you give your explicit consent in this direction, your Contact Information may also be processed for advertising and promotional purposes.

Your personal data collected;

● The necessary work to be carried out by our relevant business units so that real and/or legal third party institutions and organizations (employees, visitors, suppliers, business partners, etc.) who have a relationship with the company can benefit from the products and services of our company and/or its affiliated centers and units,

● Ensuring the life and property security and legal and commercial security of real and/or legal third party institutions and organizations where the company's business is carried out or located in the centers and units affiliated to the company,

● Turkish Commercial Code No. 6102, Turkish Code of Obligations No. 6098, Law No. 6502 on the Protection of Consumers, Law No. 6698 on the Protection of Personal Data, Law No. 213 on Tax Procedure, Law No. 6563 on the Regulation of Electronic Commerce, Regulation on Commercial Communication and Commercial Electronic Messages, Law No. 5651 on the Regulation of Publications Made on the Internet and Combating Crimes Committed through These Publications, Fulfilling legal and regulatory requirements arising/that may arise from the Law on Consumer Protection and all relevant laws and secondary regulations and taking necessary measures within this scope,

● Carrying out inspection and/or regulation duties to be carried out by authorized public institutions and organizations and professional organizations with public institution status,

● Fulfilling information and document requests requested by judicial bodies, consumer arbitration committees and/or administrative authorities,

● Listing, reporting, verification analysis studies regarding the usage of products and services offered by our company and all centers and units affiliated with the company, producing statistical and scientific information in this regard, developing our products and services accordingly, increasing satisfaction regarding our products and services and making customizations regarding the user within this scope,

● Being able to conduct market research, promotion and necessary information regarding our products and services, evaluating complaints and suggestions and being able to contact you directly through the communication channels shared with the Company,

● Planning and managing the financing of all services offered and performing their invoicing,

● Data security Within the scope of the purpose of taking all necessary technical and administrative measures for the system and applications, it will be processed within the scope of the personal data processing conditions and purposes specified in Article 5 of Law No. 6698.

To Whom and for What Purposes Can Your Processed Personal Data Be Transferred

By ensuring that all necessary technical and administrative measures are taken to ensure the appropriate level of security in accordance with the KVKK and the relevant legislation, we will transfer your Personal Data/Personal Data

only when necessary in line with the purposes specified above;

● Persons/institutions and/or organizations permitted by other relevant legislation,

● Private insurance companies and banks,

● Lawyers for the purpose of following up legal affairs,

● Financial advisors for the purpose of carrying out financial and accounting transactions,

● Consultants,

● Business partners,

● Domestic/overseas organizations from which we receive and/or provide services under contract in order to carry out our activities, and cooperate with,

According to Article 8 of the Personal Data Protection Law, if one of the conditions specified in the second paragraph of Article 5 of the Personal Data Protection Law exists and within the framework of the personal data processing conditions and purposes specified in Article 9, it may be transferred by providing explicit consent.

Data Processing Period and Storage Period

Your personal data will be processed by our Company in accordance with the data processing and limitation periods specified in all relevant laws and other legal regulations, limited to the purposes specified in this Disclosure Text. In case of changes in the laws regarding data processing periods, the new determined periods will be taken as basis.

As a requirement of the principle of limitation of purpose, your personal data is processed for the purposes explained in this Disclosure Text and in any case, for the period required to be processed in accordance with the legal periods, company practices and commercial customs, and after the periods expire, it is deleted, destroyed or made anonymous. If you would like to get detailed information about the storage periods of your personal data, you can contact us via the addresses in the rights section of the relevant person.

Rights of the relevant person

As the relevant person, you have the rights regulated within the scope of Article 11 of Law No. 6698 regulating the rights of the relevant person. You can submit your requests within this scope in accordance with the “Communiqué on the Procedures and Principles of Application to the Data Controller” at Oruçreis Mah. Tekstilkent Cad. The rights listed can be exercised by sending a written message to Tekstilkent B6 Blok No:60 Esenler/Istanbul Türkiye or by sending an electronic message to [email protected] e-mail address.● The necessary work to be carried out by our relevant business units so that real and/or legal third party institutions and organizations (employees, visitors, suppliers, business partners, etc.) who have a relationship with the company can benefit from the products and services of our company and/or its affiliated centers and units,