CONNECT BİLİŞİM TEKNOLOJİLERİ LTD. ŞTİ.

CLARIFICATION TEXT ON THE PROTECTION AND PROCESSING OF PERSONAL DATA

First of all, we would like to inform you that as Connect (Connect Bi̇lı̇şı̇m Teknoloji Ltd.Şti.), we process your personal data within the scope of the Personal Data Protection Law No. 6698 (“Law”) by ensuring the necessary data security and showing the utmost sensitivity in order to fulfill all the services we offer and will offer you in the best way.

Why Are We Making This Enlightenment?

This clarification is made in order to fulfill our obligation under Article 10 of the Law No. 6698 on the Protection of Personal Data (“Law”). This clarification text has been prepared by CONNECT BİLİŞİM TEKNOLOJİLERİ LTD.ŞTİ. in the capacity of data controller within the scope of Article 10 of the Law No. 6698 on the Protection of Personal Data and the Communiqué on the Procedures and Principles to be Followed in the Fulfillment of the Disclosure Obligation.

What is Personal Data?

Within the scope of the Law, any information that makes your identity specific or identifiable is considered as Personal Data, including your sensitive personal data.

What is a Data Controller?

The data controller is the natural or legal person who determines the purposes and methods of processing personal data and is responsible for the establishment and management of the data recording system. Connect is the Data Controller for our customers. The data in question are processed by Connect as Data Controller within the scope described below and within the limits ordered by the legislation.

What is Data Processing?

Personal data processing refers to all kinds of operations performed on your personal data, such as obtaining, recording, storing, retaining, modifying, reorganizing, disclosing, transferring, taking over, making available, classifying or preventing the use of your personal data.

1. CONNECT’s Purposes and Legal Grounds for Processing Your Personal Data

Your personal data are collected and processed by CONNECT for the following purposes and legal reasons and for purposes that are appropriate to the relationship you will establish with our company and the legal relationship between us and our customer.

According to this CONNECT,

• For the purpose of planning or execution of corporate communication activities, planning, auditing or execution of information security processes Based on the legal reason that data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject,
• It transmits data for the purpose of planning/execution of marketing processes of products or services, design or execution of marketing and promotion/advertising activities in digital or other media, and in the presence of explicit consent, based on the legal reason for explicit consent.

Your personal data may be transferred to administrative and official authorities that are legally required to be transferred, to third parties from whom outsourced services are obtained to carry out our activities, to our business partners with whom we cooperate, to organizations from which service/support/consultancy is received or to which we are a program partner, for legal reasons based on the legal reason that it is clearly included in the laws, that it is mandatory for the data controller to fulfill its legal obligation, that it is directly related to the establishment or performance of a contract, that explicit consent and that data processing is mandatory for the legitimate interests of the data controller.

As CONNECT, we may transfer, process and store your personal data in other electronic media such as storage, archiving, servers receiving IT support, hosting companies, cloud computing, etc. located in Turkey or abroad, especially in EU countries, USA, UK, OECD countries, provided that we take the necessary security measures.

2. To whom and for what purpose CONNECT may transfer the processed personal data

In accordance with the provisions of the GDPR and other relevant legislation, CONNECT pays utmost care and attention to the sharing of personal data with domestic and/or foreign organizations.

CONNECT may transfer personal data to the categories of parties listed below by CONNECT, limited to the cases that allow data transfer in GDPR and if necessary.

• Legally Authorized Institutions
• Business/project Partners
• Our Consultants

3. CONNECT’s Method of Collecting Your Personal Data

Personal data are collected by CONNECT through notifications and documents sent to the company during the membership application made by the customers, especially at www.connect.com.tr, internet transactions, social media and other public channels, member interviews, digital applications to websites, written/digital applications, or electronic channels. Since CONNECT does not have face-to-face contact with its customers and transactions can be completed digitally, these methods are adopted in order to carry out transactions and fulfill its legal obligations.

Your personal data collected for this legal reason may be collected based on the legal reason related to the processing of personal data belonging to the parties of the contract, provided that it is mandatory for CONNECT to fulfill its legal obligation as a data controller and is clearly stipulated in the laws, provided that it is directly related to the establishment or performance of a contract, and it is mandatory for the data controller to fulfill its legal obligation, data processing is mandatory for the legitimate interests of the data controller and in the presence of explicit consent.

4. Rights of the Customer under the Law No. 6698 on the Protection of Personal Data

Your personal data by applying to CONNECT; I) to learn whether it has been processed, II) to request information if it has been processed, III) to learn the purpose of processing and whether it is used in accordance with its purpose, IV) to know the third parties to whom it is transferred domestically / abroad, V) to request correction if incomplete / incorrectly processed, VI) to request the deletion or destruction of personal data in the event that the reasons requiring the processing of personal data disappear, VII) to request notification of the transactions made in accordance with subparagraphs (V) and (VI) above to third parties to whom it is transferred, VIII) to object to the occurrence of a result against you due to the analysis exclusively by automated systems, IX) you have the right to demand the compensation of the damage in case you suffer damage due to unlawful processing.

5. Data Controller to whom the Customer may apply within the scope of the Law

You may submit your requests within the scope of your rights arising from the law and set forth in Article 4 by applying in person to CONNECT’s address given below or through a notary public or by using the e-mail address you provided during account opening and registered in the CONNECT system.

It is essential that your applications to our Company be in Turkish, and your applications must include your name, surname, Turkish ID number, your residential or workplace address for notification, your e-mail address for notification and the subject of your request, and information and documents regarding your request must be attached to your application. If your application is in writing, it is also a legal obligation to sign it.

Although your requests will be finalized free of charge as a rule, if the response to your application requires a cost, our Company may charge a fee within the scope of GDPR Regulations or in the tariff determined by other authorities.

For Written Applications: Prof. Dr. Ali Nihat Tarlan Caddesi No : 91 Floor : 2 Kadıköy/Istanbul

For E-Mail Applications: info@connect.com.tr