In accordance with the Law on Protection of Personal Data No. 6698, personal and/or private Your information is only available in cases permitted under the relevant Law and within the framework described below. It will be recorded, stored, updated by Arıkanlar İnşaat, where the legislation allows. that can be disclosed or transferred to persons, classified and listed in this law. can be processed and used in different ways. By signing the sales contract, Having read the terms set forth in this “Privacy and Security Policy”, which is a part of You acknowledge that you understand.

General Information About the Law

Protection of Personal Data is primarily the “Privacy of Private Life” of the Constitution of the Republic of Turkey. It is constitutionally guaranteed in Article 20. Personal data in regulation It is stated that the principles and procedures regarding the protection of the law will be regulated by law. Therefore, April 7, 2016 Law on Protection of Personal Data No. 6698 in the Official Gazette No. 29677 dated has been published. In the process, with the regulations and communiqués stipulated in the law, its scope has been expanded and started to be implemented. The said law and related regulations It can be accessed from the official website of the Personal Data Protection Authority. ( https://www.kvkk.gov.tr/ ) Personal Data Protection Law No. 6698, personal data To protect the fundamental rights and freedoms of individuals, especially the privacy of private life, and the obligations of natural and legal persons processing personal data and the procedures and principles to be followed. to regulate, to determine the legal rights that natural persons whose personal data are processed can use arranged for the purpose.

Collection, Processing and Processing Purposes of Personal Data

Your personal data shall be processed in accordance with the basic principles stipulated in the Personal Data Protection Law and our company’s operational activity processes, our business relations and human resources processes. to be able to execute the contracts, to inform about the updates, to conclude the contracts with you. establishment and performance, reminder and fulfillment of legal obligations, various to carry out advertising and marketing activities, to get your opinion with surveys and voting, you Identifying suitable products, projects and services for you, tailoring them to you, and development, providing an effective customer service, you in the legislation, in-company policies notification of changes that concern you or making other notifications that concern you, other meeting the demands of the relevant persons, the continuation of the technical processes, the commercial security of the company It is processed within the scope of providing our work, carrying out our works, It is securely stored in physical or electronic media for an appropriate period of time.

To Whom and For What Purpose the Processed Personal Data Can Be Transferred

Your collected personal data; We welcome you from the products and services offered by our company. to be carried out by our business units in order to benefit the products and services offered according to your tastes, usage habits and needs. to be customized and recommended to you, to determine the commercial and business strategies of our company and For the purposes of ensuring the implementation of our Company’s human resources policies, To the companies that our company receives service, support, consultancy, project, financing partner, sub- to our employers, Company officials, legally authorized public institutions and private individuals, KVK Within the limits of the personal data processing conditions and purposes specified in Articles 8 and 9 of the Law may be transferred, provided that necessary administrative and technical security measures are taken.

Method and legal reason for personal data collection

Personal data is directly related to the establishment or performance of the contract, based on the reasons that it is compulsory for the company to fulfill its legal obligations, the applications made, the online application forms available in the electronic environment, and the obtained by recording the necessary information. Legal rights under the personal data protection law The personal data owner, pursuant to Article 11 of the Law on the Protection of Personal Data No. 6698, and By applying to our Company in accordance with the “Communiqué on the Procedures and Principles of Application to the Data Controller; Learning whether personal data is processed or not, If personal data has been processed, requesting information about it, Learning the purpose of processing personal data and whether it is used in accordance with its purpose, To know the 3 persons whose personal data is transferred in the country or abroad, If personal data is incomplete or incorrectly processed, requesting their correction, 7 of the KVKK Requesting its deletion or destruction within the framework of the conditions stipulated in the article, In accordance with subparagraphs (d) and (e) above, to 3 persons to whom their personal data has been transferred. requesting notification of transactions, Due to the analysis of your personal data exclusively by automated systems, object to the occurrence of the result, If you suffer damage due to unlawful processing of your personal data, has the right to demand its removal. Requests submitted in this context, depending on the nature of the request, as soon as possible or within thirty days at the latest. will finalize. Deletion of personal data The expiry of the legally required storage periods, the completion of judicial processes or other When the requirements disappear, the data in question is automatically or related to our company. It is deleted, destroyed or anonymized at the request of the person. Exercising the rights regulated under the law In accordance with paragraph 1 of Article 13 of the KVK Law, you can use your above-mentioned rights. your request in writing within the scope of the Communiqué on Application Procedures and Principles to the Data Controller. as, or previously notified to our Company by you and registered in our system. You must forward it to our Company by using your e-mail address. In this context In your applications within the scope of Article 11 of the KVK Law, you must submit your application in writing. The channels and procedures you will transmit are described below. To exercise your above-mentioned rights with the necessary information to identify you and the rights specified in Article 11 of the KVK Law. your petition containing your explanations about the right you want to use. You can send it to [email protected] via e-mail. Rights regarding personal data can only be exercised about personal data. Data of persons other than the person who sent the e-mail and whose ID copy is attached. requests will not be considered. Forms without a photocopy of ID are not taken into account. will not be accepted. Application methods and addresses are clearly stated in the table below. APPLICATION METHOD APPLICATION ADDRESS EXPLANATION With Notary Public Information Request” should be included. Documents identifying your identity must be attached and within the notification envelope. The phrase “Information Request Under the Law on the Protection of Personal Data” should be included. by e-mail to [email protected] by the Applicant, in the subject part of the e-mail “Personal Data Protection Law Information Request” should be included.