Personal Data Protection Law Clarification Text

Dear Customers,

To provide you with better service and to fulfill our obligations arising from the Law on the Protection of the Consumer No. 6502 and the Regulation on Distance Contracts, we request some personal data from you.

As KIOSCERT CERTIFICATION SERVICES LIMITED ("KIOSCERT"), we present the following information to the attention of our valued customers and third parties who use our website, in order to fulfill our disclosure obligation arising from Article 10 of the Personal Data Protection Law No. 6698 ("KVKK").

1. What is the legal basis for KIOSCERT's collection of personal data?

Primarily, the principles of personal data protection are set by the Constitution of the Republic of Turkey and the KVKK No. 6698. Additionally, the Law on the Regulation of Electronic Commerce No. 6563 contains provisions regarding the protection of personal data. The Turkish Penal Code No. 5237 prescribes criminal sanctions in certain cases to ensure personal data protection. Furthermore, data collection and usage are necessary to fulfill our obligations arising from the Law on the Protection of the Consumer No. 6502 and the Regulation on Distance Contracts.

2. What methods does KIOSCERT use for personal data collection?

Data provided by customers on our website https://kioscert.com or through our call center are processed by KIOSCERT with customer consent and in compliance with legislative provisions.

KIOSCERT collects, processes, shares with third parties, and securely stores your browsing data within the scope and purpose outlined in this Privacy and Personal Data Protection Information Notice to provide better service to visitors of https://kioscert.com and to meet its legal obligations.

To offer personalized promotions, advertising, and marketing offers tailored to you, improve the website or mobile app content according to your preferences, https://kioscert.com can monitor your browsing data and/or usage history on the website, analyze and interpret visitor movements and preferences.

KIOSCERT also allows connection to the https://kioscert.com website or applications through social media platforms (e.g., Facebook, Google social sharing sites) and can collect profile information and personal data that you and your social media friends share publicly during such connections, along with browsing/traffic information on its websites and applications.

https://kioscert.com may match online and offline information gathered from you on the site at different times or through different methods and use this information together with information obtained from third-party sources.

Please note that the https://kioscert.com website uses cookies. A cookie is a file that allows the device to be identified by being stored in the internet browser or on the hard disk of the device being used, often consisting of letters and numbers.

https://kioscert.com uses cookies to remember your preferences and personalize your use of the website/mobile application. This includes cookies that save your password and keep your website/mobile app session continuously open, sparing you from entering your password multiple times with each visit, and cookies that remember and recognize you in subsequent visits.

https://kioscert.com uses cookies to determine how you use the website/mobile application, including tracking your connection location, the content you view on the website/mobile app, and the duration of your visit.

Cookies on the https://kioscert.com website are also used for advertising/promotional purposes to provide content and advertisements that are more relevant to your interests. This allows us to offer more suitable content, personalized campaigns, and products and to avoid showing content or opportunities you have previously indicated you do not want.

https://kioscert.com may also use cookies to enable "advertising technology" to serve advertisements that it thinks may interest you when you visit search engines, websites, mobile applications, or websites where the website advertises. Advertising technology uses information about previous visits to the website/mobile app and websites where the website advertises to display special ads for you.

3. For what purposes does KIOSCERT use personal data?

In cases and to the extent permitted by law, KIOSCERT may record, store, update, disclose, transfer, classify, and process your personal data. Personal data processing includes any operation on data collected through automatic or manual methods, in whole or in part, such as obtaining, recording, storing, preserving, changing, reorganizing, disclosing, transferring, acquiring, making data retrievable, classifying, or blocking the use of data. Your personal data is processed for the following purposes:

• To confirm the identity of the individual initiating the transaction,
• To record the address and other necessary information for communication,
• To communicate with you regarding the terms or current status of your Distance Sales Contract,
• To organize all records and documents that will form the basis for processing in electronic (internet/mobile) or paper environments,
• To fulfill the obligations undertaken under the Distance Sales Contract,
• If you provide consent, to carry out periodic campaign activities, create special advertisements, campaigns, and other promotional activities based on customer profiles, perform customer "classification" studies, conduct surveys and tele-sales applications, data mining, and other statistical analyses,
• To evaluate customer complaints and suggestions regarding our products and services,
• To fulfill our obligations under KVKK and exercise our rights arising from the legislation.

4. How does KIOSCERT protect your personal data?

All personal data you share is under the supervision and control of KIOSCERT, which has the status of "Data Controller" under KVKK No. 6698. KIOSCERT is responsible for establishing and adapting the necessary organizational and technical measures to protect the confidentiality and integrity of the information, in accordance with the relevant legislation. We would like to inform you that we constantly update our data processing policies in compliance with international and national technical standards on data privacy.

5. Does KIOSCERT share your personal data?

Sharing your personal data with third parties occurs within the scope of your consent, and as a rule, personal data is not shared with third parties without the customer’s approval. However, your personal data may be shared with courts and other public institutions within the scope of our legal obligations, limited to these obligations. Additionally, personal data may be transferred to third parties we are contracted with to provide services, enabling us to fulfill our commitments and conduct quality control of the services offered. Necessary technical and legal precautions are taken to prevent rights violations during data transfers to third parties. However, KIOSCERT is not responsible for violations arising from the third party’s data protection policies.

6. Does KIOSCERT share your personal data with third parties abroad?

To carry out our activities, your personal data may be shared with partner institutions and organizations we cooperate with, domestic/foreign persons and institutions from whom we receive cloud storage services, firms from whom we receive website and mobile app infrastructure services, domestic/foreign organizations we are contracted with to send commercial electronic messages to you, the Interbank Card Center, banks we are contracted with, and other domestic/foreign third parties and relevant business partners as part of various marketing activities to provide better service and ensure customer satisfaction.

7. What are your rights under the Personal Data Protection Law?

According to KVKK, you have the right to:

1. Learn whether your personal data has been processed,
2. Request information if it has been processed,
3. Learn the purpose of processing and whether it is used in accordance with that purpose,
4. Know the third parties to whom it has been transferred domestically or abroad,
5. Request correction if it has been processed incompletely or inaccurately,
6. Request deletion/destruction of your data within the framework of the conditions stipulated in Article 7 of KVKK,
7. Request notification to third parties to whom your data has been transferred, in accordance with (d) and (e) items above,
8. Object to any result that is to your detriment by analyzing it exclusively through automated systems,
9. Request compensation for damage if you suffer damage due to illegal processing.

We would like to remind you of these rights.

8. How can I stay updated on changes to personal data legislation?

In the event of a change in legislation related to personal data, we will update the information on our page to comply with the new legislation, and you can always follow the updates on this page.

9. How can I ensure that data is kept accurate and up-to-date?

According to Article 4 of KVKK, KIOSCERT is required to keep your personal data accurate and up-to-date. In this regard, to enable KIOSCERT to fulfill its obligations under the current legislation, our customers are required to share their accurate and up-to-date data with KIOSCERT. In case your data changes, we kindly ask you to update your data by contacting us through the communication channels listed below.

KIOSCERT CERTIFICATION SERVICES LIMITED

KIOSCERT

https://kioscert.com

24 BROOKDALE LONDON ENGLAND N11 1BL

+44 2080 580195