Data Breach Notification Form

PERSONAL DATA APPLICATION FORM GENERAL EXPLANATIONS Personal data owners, who are defined as the relevant person in the Law on the Protection of Personal Data No. 6698 (“PDPL”) (“PDP Law”), are granted the right to make certain requests regarding the processing of their personal data in Article 11 of the PDP Law. In accordance with the first paragraph of Article 13 of the PDP Law; the Applicant must submit applications regarding these rights to our Company, which is the data controller, in writing or through other methods determined by the Personal Data Protection Board (“Board”). Within this framework, applications to be made to our Company “in writing” can be made by printing out this form;

With the applicant’s personal application,

via a notary,
by signing with the “secure electronic signature” defined in the Electronic Signature Law No. 5070 by the applicant and sending it to the Company’s registered electronic mail address, it can be sent to us.

Application Method Address to Apply Information to be Specified in the Application Submission
In-Person Application (Applicant coming in person and applying with a document proving his/her identity) Data Controller Institution’s address here “Information Request Within the Scope of the Personal Data Protection Law” will be written on the envelope.
Registered Mail with Return Policy Data Controller Institution’s address here “Information Request Within the Scope of the Personal Data Protection Law” will be written on the envelope.

Notification via a notary Data Controller Institution’s address here “Information Request Within the Scope of the Personal Data Protection Law” will be written on the notification envelope.

In addition, after the other methods determined by the Board are announced, our Company will announce how applications will be received through these methods. Your applications sent to us will be answered within thirty days from the date your request reaches us, depending on the nature of the request, in accordance with the second paragraph of Article 13 of the Personal Data Protection Law. Our answers will be delivered to you in writing or electronically in accordance with the provision of Article 13 of the relevant Personal Data Protection Law. (Your application will be finalized free of charge, however, if the process requires an additional cost, the fee determined by the Board may be charged.) A. Applicant contact information:

Name:

Surname:

TC Identity Number:

Phone Number

E-mail

Address:

B. Applicant’s relationship with our company:

o Customer o Business partner o Visitor o Other………………………………………………………………………………………………………………………………………………………………

o Former Employee o I shared a Job Application/CV o I am a third party company employee
The unit you are in contact with within our company:

Years worked (For former employees):

Company and position worked (For third party company employees):

Subject:

Please specify your request within the scope of the Personal Data Protection Law in detail:

Request No. Request Subject   Legal Basis   Your Choice

1 I want to know if your company processes personal data about me Personal Data Protection Law Article 11/1 (a)


2 If your company processes personal data about me, I request information about these data processing activities Personal Data Protection Law Article 11/1 (b)


3 If your company processes personal data about me, I want to know the purpose of processing and whether it is used in accordance with this purpose Personal Data Protection Law Article 11/1 (c)


4 If my personal data is transferred to third parties in Turkey or abroad, I want to know these third parties. Personal Data Protection Law Article 11/1 (ç)

5 I believe that my Personal Data has been processed incompletely or incorrectly and I want it to be corrected Personal Data Protection Law Article 11/1 (d)

6 Although my Personal Data has been processed in accordance with the law and other relevant legal provisions, I believe that the reasons requiring processing have disappeared and within this framework, I request that my personal data be deleted or destroyed Personal Data Protection Law Article 11/1 (e)

7 I want my Personal Data, which I believe to be processed incompletely or incorrectly, to be corrected by the third parties to whom it has been transferred. Personal Data Protection Law Article 11/1 (f)


8 Although my Personal Data has been processed in accordance with the law and other relevant legal provisions, I believe that the reasons requiring processing have been eliminated and within this framework, I request that third parties be notified of the deletion or destruction of my personal data. Personal Data Protection Law Article 11/1 (f)

9 I believe that my Personal Data processed by your Company has been analyzed exclusively through Automatic Systems and that a result has emerged against me as a result of this analysis. I object to this result. Personal Data Protection Law Article 11/1 (g)

10 I have suffered damage due to the unlawful processing of my Personal Data. I request compensation for this damage. Personal Data

Law on the Protection of Children Article 11/1 (h)


11 Other Please specify:

Please select the method by which we will notify you of our response to your application:

I want it to be sent to my address. o
I want it to be sent to my e-mail address. o
I want to receive it by hand. o

Note: (We will be able to respond to you faster if you select the e-mail method.) (In case of receipt by proxy, a notarized power of attorney or authorization document is required.) This application form has been prepared to determine your relationship with our Company, to determine your personal data processed by our Company, if any, in full, and to respond to your application correctly and within the legal period. In order to eliminate legal risks that may arise from unlawful and unfair data sharing and especially to ensure the security of your personal data, our Company reserves the right to request additional documents and information (copy of identity card or driver’s license, etc.) for identification and authorization. In case the information regarding your requests submitted within the scope of the form is not correct and up-to-date or an unauthorized application is made, our Company does not accept liability for the requests arising from the said incorrect information or unauthorized application. In line with the requests I have stated above, I kindly request that my application made to your Company be evaluated in accordance with Article 13 of the Law and that I be informed. I hereby declare and undertake that the documents and information I have provided to you in this application are correct and up-to-date and belong to me. I hereby consent to the processing of the information and documents I have provided in this application form by your Company for the limited purposes of evaluating, responding to, delivering my application to me and determining my identity and address in accordance with Article 13 of the Law on the Protection of Personal Data No. 6698. Applicant (Personal Data Owner) Name and Surname: Signature: Application Date: Signature: