Consent Statement

a) Data Controller

Exclamation Mark Information Technologies Inc. (hereinafter referred to as the ‘Company’) hereby informs you that we process your personal data as the data controller within the scope of the Personal Data Protection Law No. 6698 ( hereinafter referred to as the ‘KVKK’) and other relevant legislation.

b) Personal Data Processed

In accordance with the KVKK and other relevant legislation, your personal data consisting of your identity and contact information (name, surname, telephone number and email address) will be processed within the scope of the purposes and legal grounds specified in this Information Notice.

c) Purpose of Processing Personal Data

Your personal data will be processed for the following purposes:

• To enable our business units to carry out the necessary work to provide you with the products and services offered by our company,
• To recommend the products and services offered by our company to you; to plan and/or execute market research activities for the sale and marketing of products and services,
• To inform our customers who benefit from our products and services about developments in the sector and to manage these processes

for the purposes specified in Article 5 (2) of the KVKK, namely ‘a) Where expressly provided for by law’, "c) Processing of personal data belonging to the parties to a contract is necessary for the establishment or performance of the contract, provided that it is directly related to the contract‘, ’ç) It is necessary for the data controller to fulfil its legal obligation‘, ’e) Data processing is necessary for the establishment, exercise or protection of a right" legal grounds specified in Article 5 (2) of the KVKK.

d) To Whom and for What Purpose Processed Personal Data May Be Transferred

Your personal data processed by our company is not transferred to any institution, natural persons or private legal entities. Your personal data may be shared with relevant public institutions and organisations in accordance with the relevant legislation, without seeking the explicit consent of the data subject, in accordance with Article 8 (2) (a) of the KVKK, in order to fulfil legal obligations, if necessary or upon request.

e) Transfer Abroad

Your personal data processed based on the legal grounds specified in Article 5(2) of the KVKK may be transferred abroad in accordance with the conditions for transfer abroad set out in Article 9(2) of the KVKK, as the Company's sales and marketing activities related to its products and services are carried out through online software systems with databases located abroad, without obtaining the explicit consent of the relevant person. (2) of the KVKK, without obtaining the explicit consent of the relevant person, to foreign countries (‘Foreign Countries with Adequate Protection’) declared by the Personal Data Protection Board (hereinafter referred to as the ‘Board’) as having adequate protection. provided that the data controllers in Turkey and the relevant foreign country have committed in writing to provide adequate protection and the Board has granted its consent for the relevant transfer, and provided that the transfer is limited to the foreign country and/or countries where the data controller committing to adequate protection is located (‘Foreign Country Where the Data Controller Committing to Adequate Protection is Located’).

The transfer of your personal data processed for the purposes described above abroad will be carried out by our Company with due care and all necessary security measures taken, in accordance with the KVKK and other relevant legislation, as well as the decisions and relevant regulations adopted by the Board.

f) Management of Personal Data Collection and Legal Basis

Your personal data is obtained electronically via the website by filling out the contact form, sending an email message, and visiting the website, using automated or non-automated methods, based on the legal grounds specified in Article 5 ( 2) of the KVKK, in order to fulfil the purposes specified in paragraph (c) of this text.

g) Your Rights under Article 11 of the KVKK

As a data subject, you have rights under Article 11 of the KVKK. You may submit requests regarding these rights by filling in all the information specified in the Data Subject Application Form , in accordance with Article 11 and Article 13(1) of the KVKK and the Communiqué on the Procedures and Principles for Applying to the Data Controller,

"Yıldırım Beyazıt Mah. Aşıkveysel Blv. Erciyes Teknopark 1 No:61/28 Melikgazi/KAYSERİ PK:38030 " in person, in writing via a notary public or by registered mail with return receipt, using (if available) the email address previously provided to our Company and registered in our systems, or by other methods to be determined by the Board in the future.

h) Retention Period for Personal Data

The Company shall delete, destroy, erase or anonymise personal data upon the cessation of the purpose of processing personal data and the expiry of the mandatory retention periods specified under the Law and other relevant legislation.

i) Changes and Updates

This information notice has been prepared in accordance with the Personal Data Protection Law No. 6698 and other relevant legislation. Necessary changes may be made to this information notice in line with changes in the relevant legal regulations and/or the Company's personal data processing purposes and policies.