KVKK

İNGOBİO PERSONAL DATA PROTECTION POLICY

In accordance with the Law on the Protection of Personal Data No. 6698 (“KVKK”), your personal data will be processed by our Company, as the Data Controller, within the framework explained below, in connection with business purposes, to be used, recorded, stored, updated, transferred, and/or classified. In this context, our Company takes all technical and administrative measures to ensure an appropriate level of security to prevent the unlawful processing of your personal data, prevent unlawful access to it, and ensure its preservation, in accordance with the Law and Regulations established to protect individuals' fundamental rights and freedoms, primarily the privacy of private life.

The target audience of this text includes all real persons whose personal data are processed by our Company, excluding our Company employees or job applicants who have applied to our Company.

The personal data processed as the data controller include, but are not limited to, the following;
Name, surname, T.C. identity number, address, phone number, email address, signature, physical space/security video recording, call center/service quality voice recording, bank account number, cookie records

The purposes and legal reasons for processing personal data; Your personal data shared by you;

• To benefit you and/or the institutions and organizations you represent from the products and services offered by our Company, to carry out necessary studies including but not limited to the determination and implementation of our Company's commercial and business strategies, marketing activities, and business development and planning activities,
• To carry out administrative operations related to communication conducted by our Company,
• To ensure the physical security and control of the locations used by our Company,
• To establish relationships with partners/customers/suppliers (authorized or their employees),
• To fulfill the contractual requirements and financial reconciliation regarding the products and services offered in cooperation with our business partners, suppliers, or other third parties,
• To implement our Company's human resources policies,
• To process your data for the purpose of participating in training, seminars, or organizations organized by our Company.
and/or
• Your personal data will be processed for the purpose of participating in training, seminars, or organizations organized by our Company.

Method of collecting and storing personal data; Your personal data shared with our Company may be collected verbally, in writing, or electronically through offices, branches, call centers, websites, social media platforms, mobile applications, and similar means, either automatically or non-automatically. Your personal data will be stored in electronic and/or physical environments. Necessary business processes and technical security infrastructure developments are implemented to ensure that the personal data provided and stored by our Company are not subject to unauthorized access, manipulation, loss, or damage in the environments where they are stored.

Your personal data will be processed and stored for the duration required by the purpose of processing or, if no such period is foreseen, for the duration necessary, provided that all necessary information security measures are taken, and will be deleted, destroyed, or anonymized when this period expires.

Transfer of Personal Data;

Your personal data may be transferred within the framework of the Laws and other regulations and for the stated purposes;
• To Türk Telekomünikasyon A.Ş. and Türk Telekomünikasyon group companies,
• To companies and representatives authorized by us to act on behalf of our Company,
• To regulatory and supervisory institutions, public institutions or organizations authorized to explicitly request your personal data under the laws they are subject to,
• To business partners, suppliers, and contractor companies, banks, credit risk and financial institutions, and other real or legal persons within the scope of the stated purposes,
• To tax and similar consultants, mandatory persons, institutions, and organizations related to legal follow-up processes, and third parties from whom we receive consultancy, including auditors, and without limitation, to business partners, third parties providing services, authorized persons, and organizations both domestically and abroad for the purposes mentioned above.

Your rights under Article 11 of the KVKK; By applying to our Company, you have the right to know whether your personal data is being processed;

1. Learn whether it is processed,
2. Request information if it has been processed,
3. Learn the purpose of processing and whether it is used in accordance with its purpose,
4. Know the third parties to whom it has been transferred domestically/internationally,
5. Request correction if it has been processed incompletely/incorrectly,
6. Request deletion/destruction within the framework of the conditions stipulated in Article 7 of the KVKK,
7. Request notification of the transactions carried out in accordance with the above-mentioned (e) and (f) clauses to the third parties to whom it has been transferred,
8. Object to the emergence of a result against you due to analysis exclusively through automated systems,
9. You have the right to request compensation for damages in case you suffer damage due to unlawful processing.
In accordance with the first paragraph of Article 13 of the KVK Law, you can submit your request to exercise the above-mentioned rights to our Company in writing or through other methods determined by the Personal Data Protection Board.

To exercise the above-mentioned rights, you can personally deliver your request petition with necessary information to identify your identity, send it via notary, or through other methods determined by the Personal Data Protection Board, orsend it securely with an electronic signature to the address[email protected]