This document has been prepared per Law on the Protection of Personal Data No. 6698 (KVKK), which applies within the Republic of Turkey's borders.

DATA PROTECTION INFORMATION NOTICE

By the Law on the Protection of Personal Data No. 6698 (KVKK), the processing and protection of personal data is of great importance. EG Danışmanlık A.Ş. (from now on referred to as "EG") processes your data in compliance with the fundamental principles and data processing conditions outlined in the Law. Therefore, EG takes necessary technical and administrative measures to protect, safeguard, and process your personal and special categories of personal data by the Law. While we are sensitive to protecting your data, we would like to inform and enlighten you about the personal data processed.

Please note that EG processes your data as the "Data Controller" within the scope of Article 3 of the Law on the Protection of Personal Data No. 6698. Accordingly, the personal data and special categories of personal data you provide to our company within the scope of our service relationship are processed within the limits prescribed by the Law. Below, we present our data processing policy and information notice to you.

WHAT IS PERSONAL DATA?

Personal data is defined in the Law on the Protection of Personal Data No. 6698 as "Any information relating to an identified or identifiable natural person." As understood from the definition, any data that makes you identifiable is personal data. Accordingly, another party cannot collect and process your data unless you explicitly consent. In addition to this, data such as political opinions, religious beliefs, health information, philosophical beliefs, sexual orientation, criminal records, conviction details, and biometric data are considered special categories of personal data. The processing of special categories of personal data requires your explicit written consent.

PURPOSES OF PROCESSING YOUR DATA

The personal data and special categories of personal data you share with our company through various means are processed within the scope of the personal data processing conditions stipulated in Articles 5 and 6 of the Law on the Protection of Personal Data No. 6698. Accordingly, our purposes of data processing include:

- Establishing a business relationship and ensuring mutual fulfillment of obligations

- Forming and fulfilling contracts

- Sustaining company activities

- Ensuring data security

- Forecasting, planning, and implementing business and professional strategies

- Archiving data

- Legalizing the services provided by the company

- Ensuring continuity in the business relationship and the work performed by the company

- Fulfilling the company's legal obligations arising from contracts by the Law

- Determining the technical, legal, occupational safety, commercial security, human resources, financial, and administrative structural processes and strategies of the company

- Performing the services received by and provided to third parties by the company

- Ensuring the necessary software and hardware security in all of the company's work and transactions

- Fulfilling the company's legal obligations, exercising and ensuring the establishment of a right

- Protecting the company's rights in potential disputes and obtaining all kinds of legal support for the use of such rights

- Managing recruitment processes and conducting necessary interviews

- Determining the human resources strategy of the company and making the necessary plans

- Implementing and planning the services provided by company employees

- Transferring data to companies to be employed domestically and abroad, business partners, and group companies within the scope of personal data processing conditions stipulated in Articles 8 and 9 of the Law on the Protection of Personal Data No. 6698

- Sharing data with departments within the company to ensure the continuation of the business relationship

OUR COMPANY'S PRINCIPLES REGARDING THE PROCESSING OF YOUR DATA

We adhere to the following principles regarding the processing of personal data:

- Retaining personal data for the period stipulated in the relevant legislation or as necessary for the purposes for which they are processed

- Processing personal data in compliance with the Law

- Ensuring the accuracy and up-to-dateness of personal data

- Acting by the principles of integrity and good faith

- Using personal data only for the purposes for which they are processed

- Ensuring that personal data are processed in a measured and limited manner

- Processing personal data by public morals, customs, and traditions

- Complying with the provisions of the Law on the Protection of Personal Data No. 6698 and all other relevant legislation

WE MAY TRANSFER YOUR DATA -TO WHOM AND FOR WHAT PURPOSE-

Within the scope of the data processing purposes outlined in this Information Notice, we can transfer your data to the persons and institutions specified below by the data processing conditions stipulated in Articles 8 and 9 of the Law on the Protection of Personal Data No. 6698. EG takes all necessary technical and administrative measures during and after transferring your data.

We may transfer your data to actual and legal persons, private institutions, and organizations we have identified as suitable for your position and with whom we can conduct employment activities related to your job sector, role, and position. Apart from the data in your resumes that you share voluntarily and the data obtained from interviews, no data transfer is performed.

METHODS AND LEGAL GROUNDS FOR COLLECTING YOUR DATA

Your data may be collected through the resumes shared on the EG system, by automated means, and through the evaluations obtained as a result of the interviews conducted with you after the resumes are reviewed by the relevant department within the company by non-automated means.

RIGHTS OF THE PERSONAL DATA OWNER

Article 11 of the Law on the Protection of Personal Data No. 6698 has defined the data owner's rights. As a data owner, you can apply to our company and:

- Learn whether your data is being processed

- Request information if your data has been processed

- Learn the purpose of processing your data and whether they are used for their purpose

- Know the third parties to whom your data is transferred domestically or abroad

- Request the correction of your data if they are incomplete or incorrectly processed

- Request the deletion or destruction of your data within the framework of the conditions stipulated in Article 7 of the Law on the Protection of Personal Data

- Request notification to third parties to whom your data has been transferred regarding the correction or deletion of personal data if your data is incomplete or incorrectly processed

- Object to any results that arise against you through the analysis of your processed data exclusively by automated systems

- Demand the compensation of damages in case of any loss incurred due to the illegal processing of your data

EXERCISING THE RIGHT TO REQUEST INFORMATION ABOUT YOUR DATA AND SUBMITTING A REQUEST BY THE DATA OWNER

As explained above, you can request information about your data as a data owner. If you have any doubts about your data, you can submit your requests to EG, whose contact details are available on its website.

By Article 13 of the Law on the Protection of Personal Data No. 6698 and to exercise the rights stipulated in Article 11 of the same Law, you can send your applications to our company in writing, to the registered email address KEP, or by using your previously notified registered email address to gdpr@eg.partners.

You must submit your requests regarding the rights arising from the Law to our company using the procedures specified in this Information Notice. EG will answer such requests within thirty days. Applications must be made personally by the data owner. Only applications made by the data owner will be considered by EG, and EG will share the information regarding the applicant. Applications are free of charge; however, if the Personal Data Protection Board stipulates a fee, the fee determined by the board will be requested from you by our company.

All the regulations mentioned above are applicable only within the borders of the Republic of Turkey under the Law on the Protection of Personal Data No. 6698 (KVKK).