PERSONAL DATA PROCESSING CCTV INFORMATION TEXT

1) Data Responsible and Representative

In accordance with Law No. 6698 on the Protection of Personal Data, your personal data may be processed by Sedat Tahir A.Ş., acting as the data controller, within the scope described below. Detailed information regarding the processing of your personal data can be found in the Sedat Tahir A.Ş. Personal Data Protection and Processing Policy, available at www.sedattahir.com/kvkk.

2) Purposes for Processing Personal Data

Your collected personal data will be processed in accordance with the personal data processing conditions and purposes specified in Articles 5 and 6 of Law No. 6698, for the purposes of ensuring facility security, ensuring the legal, technical, and commercial-occupational security of the Institution and the relevant individuals in business relationships with the Institution, carrying out the necessary work by our relevant business units to carry out the activities carried out by the Institution, and carrying out related business processes.

3) To Whom and for What Purposes Can Processed Personal Data Be Transferred?

Your collected personal data may be transferred to our suppliers, legally authorized public institutions, and legally authorized private individuals within the scope of achieving the above-mentioned purposes, in accordance with the personal data processing conditions and purposes specified in Articles 8 and 9 of the Law.

4) Method and Legal Reason for Collecting Personal Data

Your personal data is collected electronically by the Institution through closed-circuit camera recording systems to ensure facility security, in accordance with the personal data processing conditions specified in Articles 5 and 6 of the Law.

5) Rights of the Personal Data Subject Enumerated in Article 11 of Law No. 6698

As a personal data subject, we hereby declare that you have the following rights pursuant to Article 11 of the Law:

• To learn whether your personal data has been processed,

• To request information regarding your personal data if it has been processed,

• To learn the purpose of processing your personal data and whether it is being used in accordance with its intended purpose,

• To know the third parties to whom your personal data has been transferred, both domestically and internationally,

• To request correction of your personal data if it has been processed incompletely or inaccurately, and to request notification of the action taken to the third parties to whom your personal data has been transferred,

• To request the deletion or destruction of your personal data if the reasons requiring processing no longer exist, despite the processing being in accordance with the law and other relevant legal provisions, and to request notification of the action taken to the third parties to whom your personal data has been transferred,

• To object if any adverse result is produced by the analysis of processed data, exclusively through automated systems,

• To request the processing of your personal data to request compensation for damages if you suffer damages due to unlawful processing.

You can submit your applications regarding your rights listed above to our Institution by completing the Sedat Tahir A.Ş. Data Owner Application Form, which you can access at www.sedattahir.com/kvkk. Depending on the nature of your request, your applications will be processed free of charge as soon as possible and within thirty days at the latest. However, if the process requires additional costs, you may be charged a fee according to the tariff determined by the Personal Data Protection Board.