Information Notice on the Application Form to the Data Controller

APPLICATION FORM TO THE DATA CONTROLLER

INFORMATION NOTICE

This Information Notice has been prepared by ISBI Istanbul AHL Serbest Bolge Kurucu Ve Isl. A.S., acting in the capacity of data controller, within the framework of Article 10 of Personal Data Protection Law No. 6698 (the "KVKK") and the Communique on the Procedures and Principles to Be Followed in Fulfilling the Obligation to Inform, in order to inform you about the purposes for which your personal data is processed, the legal grounds for processing, the method of collection, the parties to whom it may be transferred and your rights under the KVKK.

Your identity, contact and other personal data (your relationship with the company and your request from the company) that you share by means of the "Application Form to the Data Controller" set out below is processed for the purposes of carrying out the necessary assessment and work on the matter of your application, of conducting the related business processes and of contacting you about the matter. In addition, we have no absolute control over the information you share through this form. We recommend that you do not share with our company any personal data or special categories of personal data that you do not wish us to know.

The personal data in question is processed by automated or non-automated means on the legal grounds set out in Article 5 of the KVKK, namely that "processing of data is necessary for the data controller to fulfil its legal obligation and processing of data is necessary for the establishment, exercise or protection of a right", while any special categories of personal data you provide to us in the form are processed on the legal ground set out in Article 6 of the KVKK, namely that "processing of data is necessary for the establishment, exercise or protection of a right", and such data will be shared only with the relevant judicial authorities in the event of legal disputes.

You may submit your requests under Article 11 of the Law, which governs the rights of the data subject, in accordance with the "Communique on the Procedures and Principles of Application to the Data Controller", by means of the form set out below and through the contact channels stated in the form.

ISBI

APPLICATION FORM TO THE DATA CONTROLLER

1. General Explanations

Under Article 11 of Personal Data Protection Law No. 6698 (the "KVKK"), personal data subjects defined in the Law as data subjects (the "Applicant") are granted the right to make requests concerning the processing of their personal data.

The application form has been prepared so that your relationship with ISBI Istanbul AHL Serbest Bolge Kurucu Ve Isl. A.S. ("ISBI") can be established and any personal data of yours processed by ISBI can be identified in full, in order that your application can be answered accurately and within the statutory period. In order to ensure the security of your personal data and to prevent unlawful data transfers, ISBI may request additional information to verify identity and authority. Where the information stated by the Applicant is inaccurate and/or not up to date, or where requests are made without authority, responsibility in this respect rests with the Applicant.

Pursuant to Article 7 of the Communique on the Procedures and Principles of Application to the Data Controller, where the Applicant’s application is to be answered in writing, no fee is charged for up to ten pages. A processing fee of 1 Turkish lira may be charged for each page over ten pages. Where the response to the application is provided on a recording medium such as a CD or flash drive, a fee may be charged equal to the cost of that medium.

2. Scope of the Right of Application under Article 11 of the KVKK

By applying to ISBI, the Applicant may make requests on the following matters:

1) to learn whether their personal data is processed,

2) to request information if their personal data has been processed,

3) to learn the purpose of the processing of their personal data and whether it is used in accordance with that purpose,

4) to learn the third parties in Turkiye or abroad to whom their personal data is transferred,

5) to request the correction of their personal data if it has been processed incompletely or inaccurately, and to request that the action taken in this respect be notified to the third parties to whom the personal data has been transferred,

6) to request the erasure, destruction or anonymisation of their personal data where the reasons requiring its processing have ceased to exist, even though it has been processed in accordance with the KVKK and other applicable laws, and to request that the action taken in this respect be notified to the third parties to whom their personal data has been transferred,

7) to object to a result to their detriment arising from the analysis of the processed data exclusively by automated systems,

8) to request compensation for damage where they suffer loss as a result of the unlawful processing of their personal data.

3. Method of Application

Pursuant to the first paragraph of Article 13 of the KVKK, applications concerning these rights must be submitted to us in writing and signed, or by the other methods determined by the Personal Data Protection Board (the "Board").

In this context, applications to be made in writing may be submitted to us by printing out this form and:

· by the Applicant applying in person,

· through a notary public,

· by registered electronic mail (KEP) address, secure electronic signature or mobile signature, or

· by e-mail sent from the e-mail address previously notified by the Applicant to us and registered in our system.

Information on how written applications are to be submitted to us is provided below according to the written application channel.

In applications made by the Applicant by e-mail, ISBI may request additional information to verify the Applicant’s identity and may take the necessary measures.

Pursuant to the second paragraph of Article 13 of the KVKK, the applications submitted to us will be answered in writing or electronically within thirty days of the date on which the request is notified or reaches us, depending on the nature of the request.

4. Your Identity and Contact Details

A. Applicant’s contact details

B. Please state your relationship with ISBI.

(such as visitor, person receiving goods or services, business partner employee, job applicant, former employee, third-party company employee, shareholder)

5. Subject of the Request

Please set out your request under the KVKK in detail below.

Applicant

Name / Surname:

Signature (for written applications)

Download the Application Form to the Data Controller