KVKK Privacy Notice

Kuas Teknoloji Elektronik Yazılım ve Isı Sitemleri San.Tic.Ltd.Şti.

WEBSITE PRIVACY NOTICE SERIES

PRIVACY NOTICE UNDER PERSONAL DATA PROTECTION LAW NO. 6698

a) Data Controller

KUAS TEKNOLOJİ (hereinafter the "Company") hereby informs you that, as data controller, it processes your personal data in accordance with the Personal Data Protection Law No. 6698 (hereinafter the "KVKK") and other applicable legislation.

b) Personal Data Processed

In accordance with the KVKK and other applicable legislation, your personal data consisting of identity and contact information (full name, telephone number and email address) will be processed for the purposes and on the legal grounds set out in this Privacy Notice.

c) Purposes for Processing Personal Data

Your personal data,

• Enabling our business units to carry out the work necessary for you to benefit from the products and services offered by our Company,
• Recommending our Company's products and services to you; planning and/or conducting market research for their sale and marketing,
• Informing customers who use our products and services about industry developments and managing these processes,

For these purposes, personal data will be processed on the legal grounds in Article 5(2) of the KVKK: "(a) expressly provided for by law"; "(c) necessary for processing the personal data of the parties to a contract, provided that it is directly related to the establishment or performance of that contract"; "(ç) necessary for the data controller to fulfil its legal obligation"; and "(e) necessary for the establishment, exercise or protection of a right".

d) Recipients and Purposes of Transfers of Processed Personal Data

Personal data processed by our company is not transferred to any institution, natural person or private-law legal entity. Under Article 8(2)(a) of the KVKK, it may be shared with relevant public institutions and organisations, without the data subject's explicit consent, where required or requested in order to fulfil legal obligations under applicable legislation.

e) Transfers Abroad

Your personal data processed on the legal grounds specified in Article 5(2) of the KVKK may be transferred abroad without your explicit consent, subject to the conditions in Article 9(2), because sales and marketing activities relating to the Company's products and services are conducted through online software systems whose databases are located abroad,

• to foreign countries declared by the Personal Data Protection Board (hereinafter the "Board") to provide adequate protection ("Foreign Countries with Adequate Protection"),
• or to foreign countries in which data controllers in Türkiye and the relevant foreign country have provided a written undertaking to ensure adequate protection and the Board has authorised the transfer ("Foreign Countries Where a Data Controller Has Undertaken to Provide Adequate Protection"), and transfers will be limited to those countries.

Our Company will transfer personal data processed for the purposes described above abroad with due care and all necessary security measures, in accordance with the KVKK, other applicable legislation, Board decisions and relevant regulations.

f) Method and Legal Grounds for Collecting Personal Data

For the purposes set out in paragraph (c) of this notice and on the legal grounds specified in Article 5(2) of the KVKK, your personal data is collected electronically, by automated or non-automated means, when you complete a contact form on the website, send an email or visit the website:

g) Your Rights under Article 11 of the KVKK

As a data subject, you have rights under Article 11 of the KVKK. You may submit requests concerning these rights, preferably by completing all information in the Data Subject Application Form on our website, in accordance with Articles 11 and 13(1) of the KVKK and the Communiqué on the Procedures and Principles of Application to the Data Controller,

• by visiting our Company in person at "Akçaburgaz Mahallesi 3078. Sokak, No:2 34522 Esenyurt – İstanbul / TURKIYE",
• in writing through a notary or by registered mail with return receipt, so that we can verify your identity and avoid disclosing information to the wrong person,
• (if applicable) by sending an email from the email address previously provided to our Company and registered in our systems,

or by any other methods that the Board may specify in the future.

h) Personal Data Retention Period

The Company deletes, destroys or anonymises personal data when the purpose of processing ceases and the mandatory retention periods prescribed by law and other applicable legislation expire.

i) Changes and Updates

This Privacy Notice has been prepared in accordance with the Personal Data Protection Law No. 6698 and other applicable legislation. It may be amended as necessary following changes in applicable legislation and/or the Company's purposes and policies for processing personal data.