DIJITALIS PERSONAL DATA PROTECTION POLICY

In accordance with the Law No. 6698 on the Protection of Personal Data ("PDPL"), our Company, as the Data Controller, will process your personal data for business-related purposes, in the manner described below, including use, recording, storage, updating, transfer, and/or classification. Within this scope, our Company, in compliance with the Law and Regulations designed to protect fundamental rights and freedoms of individuals, especially the privacy of private life, and to protect personal data, takes all necessary technical and administrative measures to ensure an appropriate level of security to prevent the unlawful processing of your personal data, to prevent unlawful access, and to ensure its safekeeping.

The target audience for this document includes all natural persons whose personal data are processed by our Company, other than our Company's employees or job applicants. Personal data processed by us in our capacity as Data Controller include, but are not limited to, the following as listed below:

Name, surname, address, phone number, email address, seminar system service quality voice recording, information about the company worked for, title, cookie records.

The purposes and legal reasons for processing personal data are as follows:

The personal data you share with us:

• To benefit you and/or the institutions and organizations you represent from the products and services offered by our Company,
• To conduct necessary studies including but not limited to determining and implementing the commercial and business strategies of our Company, conducting marketing activities, and performing business development and planning activities,
• To carry out administrative operations related to communication conducted by our Company,
• When calling our Company's call center or using our website,
• To process for participation in training, seminars, or events organized by our Company.

The method of collection and storage of personal data; Your personal data shared with our Company can be collected automatically or non-automatically through offices, branches, call centers, websites, social media platforms, mobile applications, and similar means, either orally, in writing, or electronically. Your personal data will be stored in electronic and/or physical environments. To prevent unauthorized access to, manipulation of, loss of, or damage to your personal data stored and maintained by our Company, necessary business process designs and technical security infrastructure developments are implemented.

Your personal data will be processed and stored for the legal retention period or, if no such period is specified, for the period necessary for the processing purposes, subject to all necessary information security measures and not used for purposes and scopes other than those notified to you. At the end of this period, your personal data will be removed from our Company's data flows through deletion, destruction, or anonymization methods.

Transfer of Personal Data; Your rights under Article 11 of PDPL; You can apply to our Company and inquire about your personal data:

• Whether it is processed,
• Request information if processed,
• Learn the purpose of processing and whether it is used appropriately,
• Know the third parties to whom it is transferred domestically/internationally,
• Request correction if processed incompletely/incorrectly,
• Request deletion/destruction within the framework of the conditions set forth in Article 7 of PDPL,
• Request notification of the processes made in accordance with subparagraphs (e) and (f) above to the third parties to whom it is transferred,
• Object to any conclusion against you due to exclusive analysis by automated systems,
• Request compensation for damages due to unlawful processing.

In accordance with Paragraph 1 of Article 13 of the PDPL, you can submit your requests to exercise the above-mentioned rights in writing or by other methods determined by the Personal Data Protection Board to our Company.

To exercise the above-mentioned rights, you can personally deliver, send through a notary, or other methods determined by the Personal Data Protection Board, your request letter with necessary information to identify your identity, or you can send it to info@dijitalis.com.