INFORMATION TEXT

INFORMATION AND CLARIFICATION TEXT REGARDING THE PERSONAL DATA PROTECTION LAW NUMBER 6698 (KVKK)

DATA CONTROLLER: PIER TECHNOLOGY… INC. (FULL NAME OF THE COMPANY)

ADDRESS: Esatpasa, Ziya Paşa Cd. No:6/1, 34704 Ataşehir/Istanbul

TIN: 7290597263

From now on, the "COMPANY" will show maximum care for the processing and protection of your personal data. According to the regulations of the Personal Data Protection Law, as the data controller, all necessary technical and administrative measures are taken to prevent unlawful processing, access, and ensure the preservation of personal data.

This information text has been prepared by the "COMPANY" as a data controller, within the scope of the Communiqué on the Principles and Procedures for Fulfilling the Obligation to Inform under the Personal Data Protection Law (“Law”).

As the "Data Controller" defined in the Law, we aim to keep you informed. In full awareness of this responsibility, your personal data will be processed as explained below and within the boundaries prescribed by law. The personal data you share with us as a consumer, customer, supplier, or visitor may be processed in compliance with KVKK, in connection with our business and service purposes, transferred to third parties in Turkey and abroad, stored, used for profiling, and classified.

1. Collection, Processing, and Purposes of Processing Personal Data

Your personal data collected in accordance with the relevant legislation on the Personal Data Protection Law is processed in accordance with the principles stipulated by the law, either fully or partially, automatically or through non-automatic means as part of any data recording system, by being obtained, recorded, stored, modified, rearranged, and processed.

Your personal data is processed within the scope of the COMPANY’s activities in accordance with Articles 4, 5, and 6 of the Law and the relevant legislation, for the following purposes:

Your collected personal data;

• Managing after-sales support processes for goods/services
• Receiving and evaluating suggestions for improving business processes
• Conducting customer relationship management processes
• Carrying out activities aimed at customer satisfaction
• Managing the marketing processes of products/services
• Planning and executing our company’s commercial and/or business strategies
• Managing finance and accounting processes
• Following and managing legal affairs
• Managing logistics activities
• Carrying out procurement processes for goods/services
• Managing after-sales support services for goods/services
• Managing sales processes for goods/services
• Conducting production and operation processes for goods/services
• Managing customer relationship management processes
• Managing contract processes
• Conducting strategic planning activities
• Managing the wage policy
• Processing personal data in accordance with Articles 5 and 6 of the Personal Data Protection Law (KVKK) for the purpose of ensuring the legal, technical, and commercial-business security of our company and related persons with whom we have business relations.

In cases where explicit consent is required according to the relevant articles, your explicit consent is obtained. However, personal data may be processed without obtaining the consent of the individual, provided that it complies with the conditions stated in Article 5, Paragraph 2.

According to the mandatory provisions of the laws, it is essential to keep the information of real persons accurate and up to date. Therefore, you may be asked to update your personal information at certain intervals.

In line with the purposes stated above, your personal data listed below is processed, limited to COMPANY activities.

• Your Identification Information (T.C. identity / foreign identity number, your name and surname, place and date of birth, names of your mother and father, marital status, gender)
• Your Contact Information (Your phone numbers, contact address, email address)
• Financial Information (Billing and payment information, bank account number, IBAN number, credit card information, tax identification number, tax office information, invoice, delivery notes, personal information on documents such as signature circulars, information included in contracts made with third parties)
• Your Marketing Information (Your shopping history, cookie records)
• Legal Process Information (Legal contacts with relevant persons and services provided, courts, prosecutors, mediators, arbitration boards, personal information in correspondence with judicial authorities, information in lawsuits and enforcement files)
• Visual and Audio Records (Photos on documents prepared as part of company activities, photos on printed forms, documents, and official identification papers during appointment making, communication with the company, and tracking complaint processes, images in videos/camera recordings for promotional and informative purposes on the company website, social media accounts, or written and visual media)
• Physical Space Security Information (Camera recording information, security exit log information, information on forms kept, vehicle license plate information)
• Request and Complaint Information (Information and records collected from relevant persons in electronic and physical environments, information from the internet and social media, online channels related to the management process)

2. Duration

Your personal data is retained by the Company for 15 (fifteen) years. Physical security information will be retained for 3 (three) months. After this period, your personal data will be deleted, destroyed, and/or anonymized by the Company or upon your request, in accordance with the Personal Data Protection Law and relevant regulations. You can withdraw your consent for the processing of personal data, except for data that must be processed by law, at any time.

ARTICLE 5 - Conditions for the processing of personal data

(1) Personal data cannot be processed without the explicit consent of the data subject.

(2) The processing of personal data may be possible without the explicit consent of the data subject in the presence of one of the following conditions:

1. Explicitly provided for by law.
2. It is necessary to protect the life or bodily integrity of the person who cannot express consent due to physical impossibility or whose consent is not legally valid, for himself or another person.
3. It is necessary to process personal data belonging to the parties to the contract, provided that it is directly related to the establishment or performance of a contract.
4. It is necessary for the data controller to fulfill a legal obligation.
5. It has been made public by the relevant person.
6. Processing of data is necessary for the establishment, use, or protection of a right.
7. It is necessary to process data for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the relevant person.

ARTICLE 6 - Conditions for the processing of special categories of personal data

(1) Personal data related to a person’s race, ethnic origin, political opinion, philosophical belief, religion, sect, or other beliefs, clothing and attire, membership in an association, foundation, or trade union, health, sexual life, criminal convictions, and security measures, as well as biometric and genetic data, are considered special categories of personal data.

(2) The processing of special categories of personal data is prohibited without the explicit consent of the data subject.

(3) Personal data, other than health and sexual life as specified in the first paragraph, may be processed without the explicit consent of the data subject in cases provided for by law. Personal data related to health and sexual life may only be processed without the explicit consent of the data subject by persons or authorized institutions and organizations bound by the obligation of confidentiality for the purposes of protecting public health, preventive medicine, medical diagnosis, treatment, and the management of healthcare services and their financing.

(4) The processing of special categories of personal data also requires the sufficient measures determined by the Board to be taken.

WHO AND FOR WHAT PURPOSES PERSONAL DATA MAY BE TRANSFERRED

Our company may transfer your personal data to real persons or legal entities of private law, organizations providing IT support, and authorized public institutions and persons in accordance with the personal data processing conditions and purposes specified in Articles 8 and 9 of Law No. 6698, provided that the specified conditions are met and necessary measures are taken.

4. METHOD OF COLLECTING PERSONAL DATA AND LEGAL REASONS:

Your personal data may be obtained by our company through various means (offices and other physical environments where you can contact the company’s headquarters, branches, sales offices, or other subcontractors or business partners, websites, and similar electronic transaction platforms, social media, or other public channels, by participating in training, conferences, and similar environments they organize, through investigation methods, or through other group companies or other persons and organizations with which they have agreements, in written, verbal, visual recording, or other physical or electronic environments, etc.).

Your personal data is collected for the purpose of providing the products and services offered by the Company in accordance with the established legal framework and to fulfill the contractual and legal obligations of the Company completely and accurately.

Your personal data is collected through various channels such as the website, digital channels, various contracts, emails, application forms, etc., through verbal, written, or electronic communications made with the Company by natural or legal persons processing data on behalf of our Company. Personal data collected for these purposes and legal reasons may also be processed and transferred for the purposes specified in Articles 5 and 6 of the KVK Law, as outlined in paragraphs (1) and (2) of this text.

Furthermore, your personal data is processed based on the legal reasons written below without requiring explicit consent. Accordingly, your personal data,

• Due to explicit provisions in the laws,
• It is necessary for the protection of the life or bodily integrity of a person who is unable to express their consent due to actual impossibility or for whom legal validity is not granted to their consent.
• It is necessary for the processing of personal data belonging to the parties to a contract directly related to the establishment or performance of contracts between our company and natural or legal persons.
• The personal data has been made public by the data subject themselves.
• Processing of data is necessary for the establishment, exercise, or protection of a right.
• Processing of data is necessary for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject.
• Your personal data is processed, collected, and transferred limited to the purposes specified in accordance with Articles 5 and 6 of the Personal Data Protection Law and Article 5/1-h of the Communiqué on the Procedure and Principles to be Followed in Fulfilling the Obligation to Inform. Your personal data is kept and stored for the duration prescribed in the relevant legislation within the scope of company activities.

UNDER ARTICLE 11 OF THE LAW; ANYONE CAN APPLY TO THE DATA CONTROLLER REGARDING THEMSELVES;

• Learn whether personal data is processed,
• Request information if personal data has been processed,
• Learn the purpose of processing personal data and whether it is used accordingly,

Additionally, your personal data is processed based on the legal reasons written below without requiring explicit consent. Accordingly; your personal data,

• Due to explicit provisions in the laws,
• It is necessary for the protection of the life or bodily integrity of the person who cannot declare consent due to actual impossibility or whose consent is not legally recognized.
• Personal data of the parties to the contract is necessary for the establishment or performance of contracts between our company and real or legal persons,
• The personal data has been made public by the relevant person themselves,
• Data processing is necessary for the establishment, use, or protection of a right,
• Data processing is necessary for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the relevant person,

In accordance with Articles 5 and 6 of the Law on the Protection of Personal Data and Article 5/1-h of the Communiqué on the Procedures and Principles to be Complied with in the Fulfillment of the Obligation to Inform, your personal data is processed, collected, and transferred for the limited purposes specified. Your personal data is stored for as long as specified by the relevant legislation as part of company activities.

ACCORDING TO ARTICLE 11 OF THE LAW NO. 5; EVERYONE MAY APPLY TO THE DATA CONTROLLER REGARDING THEMSELVES;

• Learning whether personal data is being processed
• Requesting information if personal data has been processed
• Learning the purpose of processing personal data and whether it is being used in accordance with its purpose
• Knowing third parties to whom personal data is transferred domestically or abroad
• Requesting correction of personal data if it is incomplete or incorrectly processed
• Requesting deletion or destruction of personal data under the conditions set forth in Article 7 of the KVKK
• Requesting that the third parties to whom the personal data has been transferred be notified of the correction, deletion, or destruction
• Objecting to a result against oneself through the exclusive analysis of processed data by automated systems
• Requesting compensation if personal data is unlawfully processed and causes harm

6 - RIGHTS OF THE PERSONAL DATA OWNER ( RIGHT OF APPLICATION ) :

According to Article 11 of the Law on the Protection of Personal Data, you can submit your requests within the scope of this law to the data controller by filling out an application form and submitting the signed copy to the company address with identity-verifying documents, either in person, through a notary, or by the methods determined by the Personal Data Protection Authority.

In accordance with Article 13/1 of the Law No. 6698 on Personal Data Protection, you must submit your applications in writing or by the above-mentioned methods determined by the Personal Data Protection Authority to our company. Our company will conclude your requests free of charge as soon as possible, and at the latest within thirty days, depending on the nature of the request. However, if the transaction requires an additional cost, a fee will be charged in accordance with the tariff set by the Board. In this context, no fee will be charged for written responses of up to ten pages, but for each page above ten, a processing fee of 1 TL will be charged. If the response to the application is provided in an electronic recording medium such as a CD or flash drive, the fee requested by our company will not exceed the cost of the recording medium.

Pursuant to Article 10 of the Law on the Protection of Personal Data No. 6698, titled 'Obligation of the Data Controller to Inform,' I have read and understood this Disclosure Text, which explains by whom my personal data will be processed, for what purpose, to whom and for what purpose the processed personal data may be transferred, the method and legal reason for collecting personal data, and my rights under Article 11 of the Law. I have been informed in detail by the 'COMPANY,' which is the data controller.