ONLINE CLARIFICATION TEXT FOR VISITORS REGARDING THE PERSONAL DATA PROTECTION IN ACCORDANCE WITH THE LAW ON PROTECTION OF PERSONAL DATA NO 6698 (“KVKK”)

Ankaref Innovation and Technology Inc. as (the "Company"), attaches importance to the security and privacy of your personal data , and in this respect, we hereby submit the following matters to your information as "Data Controller" within the scope of the The Law on the Protection of Personal Data No. 6698 ("KVKK") regarding your personal data we request from you in order to fulfill the clarification obligation arising from Article 10 of the Law .

WHICH PERSONAL DATA DO WE PROCESS?

If you are an online visitor that we gather and process personal data from, the personal data we gather and process are as follows:

• ID information; Name, Surname, Institution of Work,
• Contact information; E-mail address,
• Transaction Security Information; IP Address, Destination IP/Domain Records, Device IMEI Number, Device MAC Address, Other Traffic Data (eg connection time/duration, communication amount etc.)

FOR WHAT PURPOSES DO WE PROCESS YOUR PERSONAL DATA?

Your personal data is processed for the following; The execution of information security processes, carrying out activities in accordance with the legislation, conducting communication activities, the execution of keeping and archiving activities, follow-up of the requests/complaints, carrying out customer relations and satisfaction processes, ensuring the security of data controller operations, carrying out activities to inform the authorized persons, institutions and organizations.

TRANSFER OF PROCESSED PERSONAL DATA

The personal data gathered, within the framework of the personal data processing conditions and purposes set out in Articles 8 and 9 of the Law on Protection of Personal Data, for the purposes included in this Online Visitor Clarification Text, can be shared with official institutions and organizations in Turkey, law enforcement, courts and enforcement offices, third-party natural and legal persons, service providers and officials, business partners, shareholders of our Company, suppliers and support service providers, domestic people and institutions that we receive the data storage in cloud environment. Your personal data is not transferred abroad.

METHOD AND LEGAL GROUNDS FOR GATHERING PERSONAL DATA

When you visit our company’s website, your personal data is being gathered in writing and electronically through the application forms, information systems and electronic devices (eg. telecommunications infrastructure, computers and phones), online website, Cookies created by our own website, Tracking Cookies created by third parties (eg: Hotjar), website usage measurement systems ( eg: Google Analytics) and other documents declared by the relevant person. Your personal data obtained by the above mentioned methods are processed within the framework of the personal data processing conditions specified in Articles 5 and 6 of KVKK Law and in accordance with the basic principles of the law of protection of personal data.

RIGHTS OF THE RELATED PERSON WHOSE PERSONAL DATA IS PROCESSED

In accordance with the provisions of Article 11 of the Law on Protection of Personal Data, you have the following rights in relation to your personal data;

• The right to be informed whether or not your personal data have been processed,
• The right to request information concerning the processing if your personal data have been processed,
• The right to be informed about the purpose for the processing of your personal data and whether your personal data have been used in accordance with the purpose,
• The right to be informed about the third parties to whom your personal data is transferred at home or abroad,
• The right to request the rectification of the data in the event they are processed incompletely or inaccurately,
• The right to request the deletion or destruction of personal data,
• The right to request the correction, deletion or destruction of personal data be notified to third parties to which personal data is transferred,
• The right to object to occurrence of any result deriving from a decision based solely on automated processing and that is to your detriment,
• In case the personal data is damaged due to unlawful processing, the right to request the compensation for the loss,

HOW LONG DO WE KEEP YOUR PERSONAL DATA?

You have the following rights regarding your personal data as per the Article 11 of the Law; In accordance with Law on Protection of Personal Data (KVKK), when the purpose that requires the data to be processed according to Article 7/1 of the KVKK has disappeared and/or when the timeout period has become obligatory for us to process your data in accordance with the legislation, your personal data will be deleted, destroyed or anonymized by us.

HOW CAN YOU USE YOUR RIGHTS?

In accordance with the provisions of Article 11 of the Law, you have the following rights in relation to your personal data; You can submit your applications regarding your rights listed above to the Data Controller by filling out the Application Form, which you can access here.
Pursuant to the Communiqué on the Procedures and Principles of Application to the Data Controller, the name, surname, signature if the application is written, the Turkish identity number (passport number if the applicant is foreigner), the address or place of residence of the notification, e-mail address, phone number and fax number, if any, and the subject of the request are mandatory.
The Person concerned should clearly and evidently state what is requested in the application, which includes explanations regarding the right to do and requests to use the rights mentioned above. Information and documents related to the application must be attached to the application.
Although the subject of the request must be related to the applicant's person, if acting on behalf of someone else, the applicant must have a special authority in this regard and this authority must be documented (special power of attorney). In addition, the application must contain identification and address information and authenticating documents must be attached to the application.
The requests made by unauthorized third parties on behalf of someone else will not be considered.
Yetkisiz üçüncü kişilerin başkası adına yaptığı talepler değerlendirmeye alınmayacaktır.

WHEN WILL YOUR DEMANDS BE ANSWERED?

Your claims regarding your personal data are evaluated and answered within 30 days at the latest after they reach us. However, if the transaction requires a separate cost, the fee determined by our Company by the Personal Data Protection Board will be charged. In case of negative evaluation of your application, the rejection reasons are sent to the address you specified in the application, via e-mail or postal way as selected in the Application Form.

Data Controller Contact Information: