Website Visitor Privacy Notice

İZBAŞ İZMİR SERBEST BÖLGE KURUCU VE İŞLETİCİSİ ANONİM ŞİRKETİ

PRIVACY NOTICE ON THE PROTECTION AND PROCESSING OF PERSONAL DATA OF WEBSITE VISITORS

(“Privacy Notice”)

1. GENERAL DESCRIPTION

Within the scope of the Law, personal data includes all kinds of data relating to an identified or identifiable individuals. Sensitive Personal Data, which is a special type of personal data, refers to race, ethnic origin, political opinion, philosophical belief, religion, sect, other beliefs, appearance and apparel, association, foundation or union membership, health, sexual life, criminal conviction and security measures, biometric and genetic data.

Processing of personal data refers to all kinds of operations performed on personal data, such as obtaining, recording, storing, retaining, modifying, reorganizing, disclosing, transferring, taking over, making available, classifying or preventing the use of personal data by fully or partially automatic means or by non-automatic means provided that it is part of any data recording system.

2. DATA CONTROLLER

Your personal data may be processed by İzbaş İzmir Serbest Bölgesi Kurucu ve İşleticisi Anonim Şirketi ("Data Controller") as the data controller within the scope described below in accordance with the Personal Data Protection Law No. 6698 ("Law").

3. COLLECTION OF PERSONAL DATA, LEGAL BASIS AND PURPOSES OF PROCESSING

Your personal data, in accordance with the Law, may vary depending on the service provided by the Data Controller and the commercial activities of the Data Controller, and collected verbally, in writing or electronically, automatically or non-automatically.

Your collected personal data may be processed by the DATA CONTROLLER for the following purposes, in accordance with the basic principles stipulated in the Law and within the personal data processing conditions (legal basis) specified in Articles 5 and 6 of the Law and shown below. You can examine what your personal data is, how they are collected, what personal data may be subject to processing by us, and the details of the purposes of processing this data from the tables below.

Transaction Security

Marketing

4. THE PARTIES TO WHICH YOUR PERSONAL DATA IS TRANSFERRED AND THE PURPOSE OF TRANSFER

Your personal data may be transferred by the Data Controller to the domestic and foreign recipient groups listed below, limited to the above-mentioned purpose, in accordance with the basic principles stipulated in the Law and within the personal data transfer conditions specified in Articles 8 and 9 of the Law.

5. YOUR RIGHTS AS PERSONAL DATA SUBJECT STATED IN ARTICLE 11 OF THE LAW

In accordance with Article 11 of the Law, we declare that you have the following rights as data owners:

• Learning whether your personal data is processed,
• If your personal data has been processed, requesting information about it,
• To learn the purpose of processing your personal data and whether they are used in accordance with the purpose,
• Knowing the third parties to whom your personal data is transferred, in the country or abroad,
• Requesting correction of your personal data in case of incomplete or incorrect processing and requesting notification of the transaction made within this scope to the third parties to whom your personal data has been transferred,
• Requesting the deletion or destruction of personal data in the event that the reasons requiring its processing have disappeared, although it has been processed in accordance with the Law and other relevant law provisions, and requesting the notification of the transaction made within this scope to the third parties to whom your personal data has been transferred,
• Objecting to a result against you by analyzing the processed data exclusively through automated systems,
• Requesting the compensation of the damage in case you suffer damage due to unlawful processing of your personal data.

If you submit your requests regarding your rights to us through the methods stated below, the request will be finalized as soon as possible and within thirty days at the latest, free of charge, depending on its nature.

In order to exercise your rights, after filling and signing the relevant person/data owner application/request form, a copy of which is available at www.izbas.net or you can get physically from the Data Controller, this application form or your originally signed petition to use your rights;

• It can be hand-delivered to the secretariat of İzmir Serbest Bölgesi Panaz Mevkii Maltepe Köyü Menemen/İZMİR address (Data Controller address) with documents identifying your identity.,
• It can be sent to our address above via a notary public or registered mail,

Thank you for reading our privacy notice.

İzbaş İzmir Serbest Bölge Kurucu ve İşleticisi Anonim Şirketi