Dear Guest,

We respect and value the privacy of your personal life.

Therefore, we would like to inform you about your rights regarding the use and protection of your personal data under Law No. 6698 on the Protection of Personal Data (“Law”), which is in effect to safeguard your fundamental rights and freedoms.

General Scope of the Law Under the Law, our company is referred to as the “Data Controller.” Within the scope of the Law, “Data Processing” refers to any operation performed on personal data, either entirely or partially, by automatic means or non-automatic means as long as it is a part of any data recording system. This includes obtaining, recording, storing, updating, classifying, sharing with third parties permitted by the legislation, or transferring them to third parties.

Legal Grounds for Processing Personal Data In the context of the relationship we establish with you due to the products and services you receive from our company, we process your personal data based on the legal grounds specified in Article 5 of the Law:

Article 5/2 (a): If processing is explicitly stipulated in the laws, Article 5/2 (c): If processing of personal data is necessary for the performance of a contract to which the data subject is a party or in order to take steps at the request of the data subject prior to entering into a contract, Article 5/2 (ç): If processing is necessary for compliance with a legal obligation to which our company is subject, Article 5/2 (e): If processing is necessary for the establishment, exercise, or protection of a right, Article 5/2 (f): If processing is necessary for the legitimate interests pursued by our company, provided that it does not harm your fundamental rights and freedoms, For special categories of personal data, your explicit consent is required according to Article 6/2 of the Law.

Purposes of Processing Personal Data We process your personal data for the following purposes within the framework of the Law:

To record your identity, address, and other necessary information to identify you in the transactions you perform, To communicate important information that needs to be shared with you through your contact information, To record camera images in our buildings for workplace security applications, To plan, audit, and implement our corporate sustainability, corporate governance, strategic planning, and information security processes, To fulfill our administrative and legal obligations and the requirements of the contracts we have signed with you. If necessary, we share your personal data only with individuals and organizations permitted by the Law.

What Are Your Rights Under the Law? You can apply to our company at any time to learn about your personal data:

Whether it is being processed, the purpose of processing, and whether it is being used for its intended purpose, To learn about third parties, both domestically and internationally, with whom your information is shared in accordance with the law, To request correction if you believe your information is incomplete or incorrect, To request the deletion or destruction of your information within the framework of the conditions specified in Article 7 of the Law, To request notification to third parties to whom your information has been transferred regarding the corrections and deletions made, To object to any negative consequences arising from the analysis of your information by automated systems or to object to the recording or use of your information unlawfully and, if you have suffered damage as a result, to request the remedy of the damage. If your application for these purposes requires any additional costs, you may be required to pay the fee amount specified by the Personal Data Protection Board. Your requests in your application will be concluded as soon as possible and no later than 30 (thirty) days, depending on the nature of the request.

To exercise your rights under the Law, you can submit your applications in writing, through registered electronic mail (KEP) address, secure electronic signature, mobile signature, or the electronic mail address you have previously notified to our bank and is registered in our bank’s system. For detailed information, you can visit the website of the Personal Data Protection Authority.