Protection of Personal Data

SİSTEM GLOBAL DANIŞMANLIK A.Ş.

PRIVACY NOTICE ON THE PROCESSING OF PERSONAL DATA OF CORPORATE WEBSITE VISITORS

1. Data Controller

Pursuant to the Personal Data Protection Law No. 6698 (the "Law"), the personal data of data subjects who visit our corporate website at www.sistemglobal.com.tr (the "Site") are processed by Sistem Global Danışmanlık A.Ş. (the "Company") in its capacity as data controller, within the scope described below.

This notice covers the personal data processed through the contact, online appointment, industry report request, e-newsletter subscription and job application channels available on the Site, as well as data processed in connection with the technical operation of the Site. Our obligation to inform customers, suppliers, employees and other groups of data subjects is fulfilled through separate notices.

2. Personal Data Processed, Purposes of Processing and Legal Grounds

The personal data we collect through the Site, the purposes for which they are processed and the legal grounds set out in Article 5 of the Law are shown in the table below.

We kindly ask you not to include special categories of personal data (such as health data, trade union membership or criminal convictions) in your CV. Should such data reach us without having been requested, they will not be taken into consideration and will be deleted.

For detailed information on the cookies used on the Site, their types and your management preferences, please refer to our Cookie Policy.

3. Method of Collecting Personal Data

Your personal data are collected in electronic form when you complete and submit the forms on the Site, enter your e-mail address in the e-newsletter field, send your CV to ik@sistemglobal.com.tr, or when applications made through Kariyer.net are viewed via that portal. Data relating to the technical operation of the Site are collected automatically through server and cookie technologies. Kariyer.net acts as a separate data controller in respect of the data it collects on its own platform.

4. Transfer of Personal Data

Your personal data are transferred only to the recipient groups listed below, limited to the stated purposes and in compliance with the conditions set out in Article 8 of the Law.

4.1. Transfer Abroad

Our Company's corporate e-mail and communication infrastructure operates on cloud services provided by Microsoft. Accordingly, the form, message and CV data you submit through the Site are transferred to Microsoft, whose servers are located abroad. This transfer is carried out under the standard contract published by the Personal Data Protection Board pursuant to Article 9(4) of the Law, and the standard contract is notified to the Board within the statutory period. The servers of other cloud-based service providers we use may also be located abroad; in such cases the same safeguard mechanism applies.

5. Your Rights as a Data Subject

5.1. Withdrawal of Explicit Consent

You may withdraw your explicit consent to the e-newsletter subscription and to the sending of commercial electronic messages at any time by using the unsubscribe link included in every message, by notifying us at kvkk@sistemglobal.com.tr, or through the Message Management System (iys.org.tr). Withdrawal of consent does not affect the lawfulness of processing carried out before the date of withdrawal.

5.2. Your Rights

Pursuant to Article 11 of the Law, by applying to our Company you have the right to:

• learn whether your personal data are being processed;
• request information on the processing, if your personal data have been processed;
• learn the purpose of the processing and whether your data are used in accordance with that purpose;
• know the third parties to whom your personal data are transferred, domestically or abroad;
• request the rectification of your personal data if they are incomplete or inaccurate;
• request the erasure or destruction of your personal data within the framework of the conditions set out in Article 7 of the Law;
• request that the rectification, erasure or destruction carried out be notified to the third parties to whom your personal data have been transferred;
• object to the occurrence of a result to your detriment arising from the analysis of your personal data exclusively through automated systems;
• claim compensation for damage suffered as a result of the unlawful processing of your personal data.

6. Application Procedure

You may submit your requests concerning your rights to our Company by one of the following methods, in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller:

• in person or through a notary, to the address stated above, by means of a signed written application accompanied by documents verifying your identity;
• to our registered electronic mail (KEP) address sistemglobaldanismanlik@hs05.kep.tr, using a secure electronic signature or mobile signature;
• to kvkk@sistemglobal.com.tr, from an e-mail address you have previously notified to our Company and which is registered in our systems.

Your application must include your first name, last name, signature (for written applications), Turkish ID number (or nationality and passport or ID number for foreign nationals), residential or workplace address for service of notice, e-mail address for notification (if any), telephone number and the subject matter of your request. Your application will be concluded free of charge as soon as possible and in any event within thirty days, depending on its nature. Should the procedure entail an additional cost, the fee set out in the tariff determined by the Board may be charged.