DISCLOSURE TEXT REGARDING THE SENDING AND PROCESSING OF COMMERCIAL ELECTRONIC MESSAGES

This document has been prepared in accordance with Article 10 of the Personal Data Protection Law No. 6698 (“Law”) and the Communiqué on the Procedures and Principles to be Followed in Fulfilling the Disclosure Obligation, for the purpose of informing you about the processing of your personal data.

1. Information Regarding the Data Controller

The data controller is Cisoft Yazılım ve Finans Çözümleri Anonim Şirketi, registered with the Istanbul Trade Registry under registration number [238047], with MERSIS number [0575087930100001], residing at "Zümrütevler Mah. Acarlar Sok. No:16/11 Maltepe/İstanbul."

2. Data Categories

The Company, as the data controller, processes, stores, and protects your following personal data:

• Identity Information: Your name and surname.
• Contact Information: Your phone number and e-mail address.

3. Our Purposes for Processing Your Personal Data

Your personal data are processed for limited, proportionate, specific, explicit, and legitimate purposes in accordance with the principle of commitment to purpose, and in compliance with the law and rules of honesty. Furthermore, the Company shows the necessary care to keep the personal data it processes accurate and up-to-date. In this context, your personal data may be processed for the following purposes:

The Company may require your explicit consent when processing your personal data in some of its activities. We may process your name, surname, phone number, and e-mail address data for purposes such as executing the marketing processes of products and services offered by the Company to our customers and potential customers, making plans for you to obtain the highest benefit, announcing special opportunities for our products and services, carrying out promotional and advertising activities for tender works, and managing customer satisfaction and loyalty studies.

4. Transfer of Your Personal Data

Your personal data, primarily contact information, may be transferred to our suppliers and business partners from whom we receive services, in accordance with the conditions and basic principles specified in Article 8 of the Law, for the purpose of ensuring the execution of the business and within the scope of the purposes stated above. They may also be transferred to authorized public institutions and private individuals for the purpose of fulfilling our legal obligations for reasons stipulated by law.

5. Method and Legal Grounds for Collecting Your Personal Data

Based on the legal grounds of having your explicit consent as specified in Article 5/1 of the Law, the existence of a contractual relationship as specified in Article 5/2(c) of the Law, and the fact that it has been made public by the data subject themselves as specified in Article 5/2(d) of the Law, the Company collects your personal data through physical and electronic environments, including e-mail, telephone, SMS, and other devices, in order to fulfill the aforementioned purposes in a practical and effective manner.

6. Storage of Your Personal Data

Your personal data may be stored for the durations required by the processing purposes. Within the scope of the Company fulfilling its legal obligation under Article 5/2(ç) of the Law, in the event that you reject receiving commercial electronic messages or commercial communication, the Company may store your personal data for 3 years from the date of rejection, provided there is no other reason requiring longer storage.

In the event that there is no other justification or legal reason, no legal storage period stipulated in any legislation, no international law or regulation, and the obligations arising from contracts disappear, your personal data whose processing purposes have ceased to exist will be deleted, destroyed, or anonymized.

7. Your Rights Regarding Your Personal Data

As a personal data owner, you have the following rights regarding your personal data pursuant to Article 11 of the Law:

• - Learning whether your personal data is processed,
• - Requesting information if your personal data has been processed,
• - Learning the purpose of processing and whether they are used in accordance with their purpose,
• - Knowing the third parties to whom your personal data is transferred domestically or abroad,
• - Requesting correction if personal data is processed incompletely or incorrectly and requesting notification of this to third parties to whom the data was transferred,
• - Requesting deletion or destruction of personal data if the reasons for processing no longer exist and requesting notification of this to third parties,
• - Objecting to the occurrence of a result against you by analyzing the data exclusively through automated systems,
• - Requesting compensation for damages in case of loss due to unlawful processing.

You can submit your requests regarding these rights by filling out the Application Form on our website.

You may transmit them to the Company using a written format, registered electronic mail (KEP) address, secure electronic signature, mobile signature, or your e-mail address previously notified to the Company and registered in the Company's system.

Methods of Application:

• Submitting a wet-signed copy in person or via a notary to "Zümrütevler Mah. Acarlar Sok. No:16/11 Maltepe/İstanbul" after filling out the form at https://cisoft.com.tr.
• Sending the form at https://cisoft.com.tr after signing it with a secure electronic signature or mobile signature to the Company's KEP address or registered e-mail address.

Pursuant to Article 6 of the Communiqué, your request will be finalized free of charge as soon as possible and within thirty days at the latest, depending on the nature of the request.

8. Validity

The Company reserves the right to make changes to the content of this disclosure text. The changed text will be announced within the framework of the Company's policies and procedures. This disclosure text is interpreted within the scope of the Company's Personal Data Protection and Processing Policy. Changes will become effective immediately upon being published on our website.

Cisoft Yazılım ve Finans Çözümleri Anonim Şirketi