DISCLOSURE TEXT WITHIN THE SCOPE OF THE LAW ON THE PROTECTION OF PERSONAL DATA

Necessary technical and legal measures are taken by us to ensure that personal data within Aybit Technology INC. (hereinafter referred to as Aybit Technology for short) are securely stored and processed by Law No. 6698 on the Protection of Personal Data (hereinafter referred to as LPPD for short). This LPPD Clarification Text has been prepared to inform you about the collection, processing, and transfer of your data by the Law.

Personal data means all kinds of information relating to an identified or identifiable natural person; the processing of personal data means all kinds of operations performed on personal data such as obtaining, recording, storing, preserving, modifying, reorganizing, disclosing, transferring, taking over, making available, classifying or preventing the use of personal data by fully or partially automated or non-automated means provided that it is part of any data recording system; data controller refers to the natural or legal person who determines the purposes and means of processing personal data and is responsible for the establishment and management of the data recording system; data processor refers to the natural or legal person who processes personal data on behalf of the data controller based on the authorization granted by the data controller.

Collection, Processing, and Processing Purposes of Personal Data:

Your data, by Articles 4, 5, and 6 of the LPPD No. 6698. In accordance with Articles 4, 5 and 6 of LPPD No. 6698, your personal data may vary depending on the services and commercial activities provided by Aybit Technology and may vary depending on the services and commercial activities provided by Aybit Technology and may be collected by automatic or non-automatic methods, with all other documents related to transactions issued by signature, approval or consent, Aybit Technology units, website and all kinds of similar electronic applications verbally, in writing or electronically to ensure the fulfillment of our legal obligations as required or required by legal regulations, to carry out the necessary work to fulfill commercial activities in accordance with the legislation and company policies and to carry out activities in this direction, to determine short, medium and long term commercial policies, planning and implementation, personalization of the services, products and projects offered by Aybit Technology according to the personal preferences of the relevant person, providing information about the products, services and projects offered, providing an effective customer service, carrying out all kinds of advertising activities, determining visitor profiles, ensuring that requests, requests and complaints are resolved, conducting statistical studies, liaising with business partners, creating and managing technological infrastructure, following financial transactions, following legal affairs, ensuring that the data is accurate and up-to-date and for all kinds of business and transactions permitted by law.

Transfer of Personal Data and Purposes of Transfer:

Your data may be transferred to third parties and institutions by Articles 8 and 9 of the LPPDNo. 6698 to ensure the legal, technical, and commercial security of persons who are in a relationship with Aybit Technology and for the above-mentioned processing purposes. These persons and institutions are Aybit Technology’s business partners, company officials, consultants, auditors, public institutions, and organizations legally authorized to receive information and legally authorized private legal entities. Your data may be transferred to third parties within the country as well as abroad within the framework of the personal data transfer conditions and purposes specified in Articles 8 and 9 of the law.

Method of Collection of Personal Data and Legal Reason:

Your data is processed in all kinds of verbal, written, or electronic media, to provide our services in line with the above-mentioned purposes and this context, for Aybit Technology to fulfill its obligations completely and by the law, and any case, by the company policy and the customs of commercial life, limited to the period that requires processing and is deleted, destroyed or anonymized upon expiration of the period. Your collected personal data may also be processed and transferred for the purposes specified in this text within the scope of the personal data processing conditions and purposes specified in Articles 5 and 6 of the LPPD, by the basic principles set out in Article 4 of the LPPD. In addition to these, in cases stipulated in the laws, your data, which is mandatory for Aybit Technology to fulfill its legal obligations as the data controller, is made public by the person concerned, which must be processed for the legal interests of our company, which has the title of the data controller, provided that it does not harm the fundamental rights and freedoms of the person concerned, can only be used for the realization of the purposes specified in this sentence if the specified periods have passed. For these reasons, your stored personal data will not be allowed to be accessed for any other purpose and can only be used in mandatory cases. Your data will be duly deleted, destroyed, or anonymized upon the expiration of the state of necessity.

Cases where consent is not required for the collection of personal data:

Under Article 5 of the LPPD, it is possible to store your data in cases where there is no explicit consent in the following cases:

• It is stipulated in the laws.
• It is mandatory for the protection of the life or physical integrity of the person who is unable to disclose his/her consent due to actual impossibility or whose consent is not legally valid.
• Provided that it is directly related to the establishment or performance of a contract, it is necessary to process personal data belonging to the parties to the contract.
• The data controller must fulfill its legal obligation.
• It has been made public by the data subject himself/herself.
• Data processing is mandatory for the establishment, exercise, or protection of a right.
• Provided that it does not harm the fundamental rights and freedoms of the data subject, data Learning whether personal data is processed or not

Rights of the Personal Data Owner:

You may submit your requests with the methods specified in the LPPD to Aybit Technology’s Bilişim Vadisi, Muallimköy Mh. Deniz Cd. No:143/5/40 Gebze / KOCAELI in writing, your request will be finalized free of charge as soon as possible and within 30 days at the latest, depending on its nature. However, if a fee is stipulated by the Personal Data Protection Board, the fee in the determined fee schedule may be charged. The applications must include the name and surname of the applicant, Turkish ID number for citizens of the Republic of Türkiye, nationality and passport number for foreigners, residential address suitable for notification, e-mail address and telephone number, if any, and the subject of the request. The subject of the request must be clear and understandable, must be related to the applicant, and if acting on behalf of someone else, must be duly authorized. Otherwise, the application shall be deemed not to have been made. According to Article 11 of the LPPD, the rights of the natural person whose personal data is processed are as follows.

• Request information if personal data has been processed
• To learn the purpose of processing personal data and whether they are used for their purpose
• To know the third parties to whom personal data are transferred domestically or abroad
• To request correction of personal data in case of incomplete or incorrect processing
• To request the deletion or destruction of personal data within the framework of the conditions stipulated in Article 7 of the LPPD
• To request notification of the transactions made to third parties to whom personal data are transferred
• Object to the occurrence of a result to the detriment of the person himself/herself by analyzing the processed data exclusively through automated systems
• In case of damage due to unlawful processing of personal data, to demand compensation for the damage

Changes in the Clarification Text:

This Clarification Text has been issued by Aybit Technology as the data controller within the scope of the Law on the Protection of Personal Data and may be amended by Aybit Technology at any time under the conditions permitted by law.