Privacy Notice (KVKK)

This is an English translation provided for convenience. In case of any discrepancy, the Turkish version shall prevail.

Article 10 of Turkish Personal Data Protection Law No. 6698 (“KVKK”), titled 'Data Controller's Obligation to Inform', obliges RADİKA REKLAM VE PRODÜKSİYON HİZM. SAN. TİC. LTD. ŞTİ. (“radika” or the “Company”), as the 'data controller', to inform the relevant persons (in other words, 'data subjects') about the identity of the data controller, the purposes of processing personal data, the persons to whom personal data are transferred and the purposes of such transfers, the legal grounds and methods of collecting personal data, and the rights of the data subject listed in Article 11 of the KVKK.

With this Privacy Notice, data subjects are informed in accordance with Article 10 of the KVKK.

1. Identity of the Data Controller

Paragraph 1(a) of Article 10 of the KVKK, titled 'Data Controller's Obligation to Inform', requires information to be provided on the identity of the data controller. Paragraph 1(ı) of Article 3 of the KVKK defines the data controller as 'the natural or legal person who determines the purposes and means of processing personal data and who is responsible for establishing and managing the data filing system'. For the purposes of the KVKK, radika may act as a 'data controller'. Within this framework, the 'identity of the data controller' is RADİKA REKLAM VE PRODÜKSİYON HİZM. SAN. TİC. LTD. ŞTİ., established as a Limited Company in accordance with the laws of the Republic of Türkiye and continuously in existence, registered with the İzmir Trade Registry under registration number 266977, with its registered office at Kültür Mah. Şair Eşref Blv. Günar Apt. No:75 K:1 D:1, 35220 Konak/İzmir.

2. Purposes of Processing Personal Data

Personal data are processed, in accordance with the KVKK, other applicable legislation and our Personal Data Protection and Processing Policy, for the purposes listed below — by automated or non-automated means, through the website, online services and similar channels, verbally, in writing or electronically — in line with Articles 5 and 6 of the KVKK: in cases explicitly provided for by law; where processing the personal data of the parties to a contract is necessary, provided that it is directly related to the conclusion or performance of that contract; or for radika's legitimate interests, provided that this does not harm the fundamental rights and freedoms of the data subject.

The purposes of processing personal data may be updated in line with our company policies and our obligations arising from legislation; the current purposes include the following:

• Performance of the services provided by radika, for the purpose of the relevant business units fulfilling the services offered by radika,
• Administrative operations carried out to ensure the legal and commercial security of persons in a business relationship with radika,
• Processes and operations, financial operations and communication activities carried out for determining and implementing radika's commercial and business strategies, and the execution thereof,
• Planning, auditing and executing information security processes, and building and managing the information technology infrastructure,
• Planning and executing sales, marketing and/or promotional activities for business activities and services,
• Planning and executing corporate communications and corporate governance activities,
• Planning and/or tracking customer relationship management processes, customer satisfaction processes and customer requests and/or complaints,
• Planning and executing the operational activities necessary to ensure that company activities are carried out in accordance with company procedures and/or applicable legislation,
• Ensuring that data are accurate and up to date,
• Providing information to authorized persons and/or institutions as required by legislation.

The following principles are observed in the processing of personal data:

• Compliance with the law and the rules of good faith,
• Being accurate and, where necessary, kept up to date,
• Processing for specified, explicit and legitimate purposes,
• Being relevant, limited and proportionate to the purposes for which they are processed,
• Being retained for the period stipulated in the relevant legislation or required for the purpose for which they are processed.

3. To Whom and for What Purpose Processed Personal Data May Be Transferred

Your collected personal data may be transferred by radika — in accordance with the fundamental principles set out by the KVKK and within the personal data processing conditions and purposes specified in Articles 8 and 9 of the KVKK — to our business partners, suppliers, shareholders, legally authorized public institutions and private persons permitted by the data subject, for the following purposes:

• Carrying out the necessary work by our Company's business units, and conducting activities accordingly, so that radika's commercial activities are performed in compliance with legislation and Company policies;
• Determining, planning and implementing radika's short-, medium- and long-term commercial policies;
• Designing and conducting radika's human resources activities;
• Ensuring the commercial and legal security of natural persons with whom radika has a business relationship;
• Protecting radika's commercial reputation and the trust it has built.

4. Method and Legal Grounds for Collecting Your Personal Data

Your personal data are collected by radika through various channels in order to carry out our activities, based on the legal grounds of ensuring compliance with legislation and Company policies. In accordance with the fundamental principles set out by the KVKK, and within the scope of the personal data processing conditions and purposes specified in Articles 5 and 6 of the KVKK, your personal data may also be processed and transferred for the purposes stated in this Privacy Notice.

5. Rights of the Data Subject Under Article 11 of the KVKK

As data subjects, you may submit your requests regarding your rights to us via hello@radikateam.com. Depending on the nature of the request, radika will conclude it free of charge as soon as possible and within thirty (30) days at the latest. However, if the process requires an additional cost, the fee in the tariff determined by the Personal Data Protection Board will be charged. Under Article 11 of the KVKK, natural persons whose personal data are processed have the right to:

• Learn whether their personal data are processed,
• Request information if their personal data have been processed,
• Learn the purpose of processing their personal data and whether they are used in line with that purpose,
• Know the third parties in Türkiye or abroad to whom their personal data are transferred,
• Request the correction of personal data that have been processed incompletely or inaccurately, and request that third parties to whom the personal data have been transferred be notified of this,
• Request the deletion or destruction of personal data where the reasons requiring their processing no longer exist, even though they were processed in accordance with the KVKK and other applicable laws, and request that third parties to whom the personal data have been transferred be notified of this,
• Object to a result arising against them through the analysis of processed data exclusively by automated systems,
• Claim compensation for damages if they suffer damage due to the unlawful processing of their personal data.

6. Security

radika applies technical and organizational security measures to protect the personal data it manages from manipulation, loss, damage and use by unauthorized persons. Our security measures are continuously improved in line with technological developments.