Privacy and Security Policy

ARGEKIP INFORMATION TECHNOLOGIES LTD. CO.

REGARDING THE PROCESSING OF PERSONAL DATA

(Prepared in accordance with Law No. 6698 on the Protection of Personal Data — KVKK)

In the capacity of data controller, this is an information notice prepared pursuant to Article 10 titled "Obligation to Inform by the Data Controller" of the Law.

Information regarding the processing of personal data by ARGEKIP INFORMATION TECHNOLOGIES LTD. CO. is provided below. This Clarification Notice may be amended at any time. Such amendments shall take effect immediately upon publication of the revised Clarification Notice on our website.

1 - Data Controller

Within the scope of Law No. 6698 (KVKK), your personal data may be processed by ARGEKIP INFORMATION TECHNOLOGIES LTD. CO.

ARGEKIP INFORMATION TECHNOLOGIES LTD. CO. is the data controller.

2 - Processing of Your Personal Data and Its Purposes

Your personal data is processed in compliance with Articles 4, 5, and 6 of Law No. 6698 (KVKK).

Without limitation, the purposes include ensuring the legal and commercial security of ARGEKIP INFORMATION TECHNOLOGIES LTD. CO. and its business partners, sustaining commercial activities, and managing human resources and employment policies. Technical and administrative measures have been taken to prevent the unlawful processing of your personal data and unlawful access to your data.

3 - Sharing, Retention, and Deletion of Personal Data

Your personal data may be shared with the shareholders, business partners, suppliers, and external service providers of ARGEKIP INFORMATION TECHNOLOGIES LTD. CO., as well as with legally authorized public institutions and organizations, in compliance with the conditions set forth in Article 8 of Law No. 6698 (KVKK). Necessary security measures are taken when your personal data is shared.

Your personal data may be retained for the periods required by the purposes of processing. In the absence of any other justification or legal reason, applicable national or international laws or regulations, and upon the expiration of contractual obligations, your data whose processing purposes have ceased and whose retention periods have expired will be deleted, destroyed, or anonymized.

4 - Methods of Collecting Personal Data and Legal Bases

Your personal data is collected through application forms, information required for contracts, legally executed agreements, and by persons authorized under this law, in compliance with the conditions set forth in Articles 4, 5, and 6 of Law No. 6698 (KVKK), for ARGEKIP INFORMATION TECHNOLOGIES LTD. CO. to carry out its operations.

In accordance with this explanation, your personal data;

• Carrying out necessary work by our business units and/or partners to enable our employees and customers to benefit from the products and services offered by our Company,
• Creating and managing customer records and employee records,
• Conducting evaluation, analysis, and risk management studies within legal boundaries regarding employees and customers,
• Recommending and presenting products and services offered by our Company customized according to the preferences, usage habits, and needs of employees and customers,
• Informing about changes that may occur in our terms of service and electronic services,
• Ensuring the legal and commercial security of our Company and persons with whom it has business relations,
• Planning business activities conducted with our business partners, authorized dealers, authorized service providers, and suppliers,
• Determining and implementing commercial and business strategies of our Company, conducting market research and analysis including customer and employee satisfaction surveys, and improving the services provided,
• Resolving complaints from customers and employees and processing data access or correction requests,
• Ensuring that data belonging to you is kept accurate and up to date,
• Participation in competitions, prize draws, similar promotions, and loyalty programs and managing these activities,
• Obtaining information about customer and employee-based developments and creating and updating efficiency reports,
• Facilitating social media sharing functions,
• Planning and executing customer-specific sales and marketing activities,
• Tracking and executing legal processes and communication processes with official authorities, planning information security processes, and establishing and managing information technology infrastructure,
• Conducting risk management, ensuring business continuity, tracking contractual processes or legal claims,
• Sustaining business and operations, executing company activities and procedures,
• Managing customer and employee relations and tracking corporate governance activities,
• Fulfilling warranty obligations, tracking insurance and coverage processes,
• Conducting financial, accounting, and fiscal transactions including sales-related billing, and carrying out risk management,
• Fulfilling obligations related to after-sales support and executing and tracking related processes,
• Contacting potential customers at fairs, promotional tours, product exhibitions, sponsorships, and similar events organized to increase brand awareness, planning active visits and events, thereby identifying potential consumers and informing consumers about campaigns and new products,
• Obtaining necessary information and approvals from regulatory and supervisory authorities and official bodies in line with their requests and inspections, as well as from authorities reviewing relevant applications,
• Determining and defending legal rights; protecting our activities or those of our business partners, our rights, privacy, security, or property and/or yours or others' aforementioned assets, applying available remedies, or limiting our damages,
• Structuring contractual processes such as sales and after-sales support with you as our customers, executing and tracking all necessary transactions, evaluating and finalizing them, conducting risk assessments, executing contractual processes, and in summary, planning and executing operational processes related to company activities,
• Conducting market research, and planning and organizing activities aimed at ensuring and/or increasing loyalty to products and services

may be processed within the scope of personal data processing conditions and purposes specified in Articles 5 and 6 of the KVKK.

5 - Your Legal Rights

Pursuant to Law No. 6698 (KVKK), you have the following rights regarding your personal data:

1. To learn whether your personal data has been processed,
2. To request information if your personal data has been processed,
3. To learn the purpose of processing your personal data and whether it has been used in accordance with its purpose,
4. To know the third parties to whom your personal data has been transferred, domestically or abroad,
5. To request the correction of personal data if it is incompletely or inaccurately processed,
6. To request the deletion and destruction of personal data within the framework of the conditions stipulated in Article 7 of the Law,
7. To request that transactions made pursuant to Articles 5 and 6 of the Law be notified to third parties to whom personal data has been transferred,
8. To object to a result that arises against you through the analysis of processed data exclusively by means of automated systems,
9. To request compensation for damages incurred if personal data is processed unlawfully,

NOTE: To exercise your legal rights, you must use the contact form on our website.