Eşarj Elektrikli Araçlar Şarj Sistemleri A.Ş.

PRIVACY NOTICE ON PROTECTING AND PROCESSING PERSONAL DATA

Protection of Information

As Eşarj Elektrikli Araçlar Şarj Sistemleri A.Ş. (“ COMPANY ”), we would like to inform you regarding your personal data processed by the COMPANY with this Privacy Notice, pursuant to Article 10 titled “Data Controller's Obligation to Inform'' of the Personal Data Protection Law No. 6698 (“PDPL”) published in the Official Gazette dated 7 April 2016 and numbered 29677, and Communiqué On Principles And Procedures To Be Followed In Fulfillment Of The Obligation To Inform published in the Official Gazette dated 10 March 2018 and numbered 30356, which aim to protect the fundamental rights and freedoms of individuals, especially the privacy of private life, in the processing of personal data.

This information is about the purposes of the COMPANY, which is the Data Controller, to store, process, and share personal data with third parties, the legal basis thereof, the persons and organizations to which personal data can be transferred, the collection methods of personal data, and the rights and authorities you have under the PDPL.

What is Personal Data?

Personal data is defined as any information relating to an identified or identifiable natural person in the PDPL. Accordingly, your information such as your first name, surname, e-mail address, and phone number are referred to as personal data.

Which Personal Data Do We Collect?

The Method of Our Collection of Your Personal Data

Your personal data is collected through all kinds of oral, written, and electronic media.

Our Purposes and Legal Reasons for Processing Personal Data

Membership Processes

If you approve the Eşarj Loyalty Membership Agreement via Eşarj's mobile application, you will become a member of Eşarj. If you become a member of our company via the mobile application, the following categories of personal data will be collected: identity(name-surname, Turkish ID Number, Tax ID Number for sole proprietorships), contact(Phone number (mobile phone), address, e-mail address), Customer Transactions(member number, vehicle information, vehicle license plate information, billing information), transaction security(user name and password information), finance(bank information and payment system provider information, encrypted credit card number, card expiration date). Under the legal basis stated in the 2. paragraph of Article 5 Of the Law ‘Processing of personal data of the parties of a contract is necessary, provided that it is directly related to the establishment or performance of the contract.’ and ‘Processing of data is necessary for the legitimate interests pursued by the data controller, provided that this processing shall not violate the fundamental rights and freedoms of the data subject, our Company processes the relevant personal data for the following purposes:

• Carrying Out Activities in Compliance with the Legislation
• Conducting / Audit Of Business Activities
• Carrying Out Business Continuity Ensuring Activities
• Carrying Out Product / Service Sales Processes
• Carrying Out Product / Service Production and Operation Processes
• Conducting Contract Processes

RFID Card and Loading Balance

For Eşarj members, Under the legal basis stated in the 2. paragraph of Article 5 Of the Law ‘Processing of personal data of the parties of a contract is necessary, provided that it is directly related to the establishment or performance of the contract.’ and ‘Processing of data is necessary for the legitimate interests pursued by the data controller, provided that this processing does not violate the fundamental rights and freedoms of the data subject' your personal data in the following categories are processed for the below purposes: within the scope of RFID card request identity(name-surname, Turkish ID Number, Tax ID Number for sole proprietorships), contact (Phone number (mobile phone), address, e-mail address), customer transactions(vehicle license plate, user name, RFID card number) within the scope of cooperations to upload a balance to your membership account, process security(user name), customer transactions (vehicle chassis number):

• Carrying Out Activities in Compliance with the Legislation
• Conducting / Audit Of Business Activities
• Carrying Out Business Continuity Ensuring Activities
• Carrying Out Product/Service Sales Processes
• Carrying Out Product / Service Production and Operation Processes
• Conducting Contract Processes
• Tracking Claims

Providing Charging Service

Within the scope of providing charging services, for Eşarj Members, your personal data in customer transaction(membership number, transaction number, vehicle information, vehicle license plate information, charging station location, charging station usage date and time information, amount of electricity used, charging package information, service charge, billing information, usage information, RFID card information) and transaction security(username, IP address) and for guest users,  your personal data in identity (Name-surname, Turkish ID Number, Tax ID Number for sole proprietorships), contact (Phone number (mobile phone), address, e-mail address), customer transactions (data such as call center records, transaction number, support and request information, vehicle information, vehicle license plate information, charging station location, charging station usage date and time information, amount of electricity used, charging package information, service charge, billing information, usage information, service type,) and transaction security (IP address information, version of the mobile device, version of the mobile device operating system) categories are processed under the legal basis ‘Processing of personal data of the parties of a contract is necessary, provided that it is directly related to the establishment or performance of the contract’, ‘Processing is necessary for compliance with a legal obligation to which the data controller is subject’ and ‘Processing of data is necessary for the legitimate interests pursued by the data controller, provided that this processing does not violate the fundamental rights and freedoms of the data subject’ stated in the 2. paragraph of Article 5 of the Law, for the following purposes:

• Carrying Out Activities in Compliance with the Legislation
• Conducting / Audit Of Business Activities
• Carrying Out Business Continuity Ensuring Activities
• Carrying Out Product/Service Sales Processes
• Carrying Out Product / Service Production and Operation Processes
• Conducting Contract Processes
• Providing Information to Authorized Persons, Institutions and Organizations

Payment Processes

Within the scope of providing receipts for charging services to Eşarj Members, your personal data in identity (Name-surname, Turkish ID Number, Tax ID Number for sole proprietorships), customer transactions (membership number, transaction number, type of service, vehicle license plate information, charging station location, charging station usage date and time information, amount of electricity used, service fee, billing information, usage information) and process security (username) and to guest users, your personal data in identity (Name-surname, Turkish ID Number, Tax ID Number for sole proprietorships),  customer transactions (transaction number, support and request information, vehicle information, vehicle license plate information, charging station location, charging station usage date and time information, amount of electricity used, charging package information, service charge, billing information, usage information, service type), finance(card information) and transaction security (IP address information, version of the mobile device operating system) categories are processed under the legal basis ‘Processing of personal data of the parties of a contract is necessary, provided that it is directly related to the establishment or performance of the contract’, ‘Processing is necessary for compliance with a legal obligation to which the data controller is subject’ and ‘Processing of data is necessary for the legitimate interests pursued by the data controller, provided that this processing does not violate the fundamental rights and freedoms of the data subject’ stated in the 2. paragraph of Article 5 of the Law, for the following purposes:

• Carrying Out Finance and Accounting Affairs
• Carrying Out Activities in Compliance with the Legislation
• Conducting / Audit Of Business Activities
• Carrying Out Business Continuity Ensuring Activities
• Carrying Out Product/Service Sales Processes
• Carrying Out Product / Service Production and Operation Processes
• Conducting Contract Processes
• Providing Information to Authorized Persons, Institutions and Organizations

For Eşarj members, our company stores your encrypted credit card information through a service provider that meets PCI DSS Level 1 standards. The company does not have any access to sensitive information about the credit card (information such as the card's 16 digits, CVV2, CVC2 security codes, which can initiate paying transactions without the need for a person), except for the following information.

For Eşarj members, our company performs transactions within the scope of card retention service during payment receipt and refund processes. If you request that your credit card be registered via the Company application, your following information is collected and processed via electronic systems:  identity (name, surname) and your finance (bank information and payment system provider information, encrypted credit card number, card expiration date). Our company processes personal data under the "explicit consent" condition stipulated under paragraph 1 of  'your explicit consent' stated in the 1. paragraph of  of the Law for the following purposes:

• Receiving charging service Payments
• Conducting finance and accounting works
• Execution of product and service production and operation procedures
• Carrying out activities for customer satisfaction
• Carrying out retention and archive activities

User Support

Within the scope of our Company's service provided to users under call centers, WhatsApp social media and complaint platforms channels, your personal data in identity (Name-surname, Turkish ID Number, Tax ID Number for sole proprietorships), contact(Phone number (mobile phone), address, e-mail address), location(Location information), customer transactions(Call center records, transaction number, complaint and claim number and information, vehicle information, vehicle chassis number, vehicle license plate information, charging station location, charging station usage date and time information, amount of electricity used, service fee, billing information, RFID card information), legal transaction(information in correspondence with judicial and administrative authorities, information in the lawsuit/execution files), transaction security(IP address information, access information, user name and password information, mobile device model, mobile device operating system version) categories are processed under the legal basis ‘Processing of personal data of the parties of a contract is necessary, provided that it is directly related to the establishment or performance of the contract’, ‘Processing is necessary for compliance with a legal obligation to which the data controller is subject’, ‘Data processing is necessary for the establishment, exercise or protection of a right’, ‘Personal data have been made public by the data subject’ and ‘Processing of data is necessary for the legitimate interests pursued by the data controller, provided that this processing does not violate the fundamental rights and freedoms of the data subject’ stated in the 2. paragraph of Article 5 of the Law, for the following purposes:

• Carrying Out Communication Activities
• Creating an alternative consumer demand/suggestion/complaint channel
• Carrying Out Activities in Compliance with the Legislation
• Conducting / Audit Of Business Activities
• Receiving and Evaluating Suggestions for Improving Business Processes
• Carrying Out After-sales Support Services of Goods / Services
• Carrying Out Customer Relationship Management Processes
• Carrying out activities for customer satisfaction
• Follow Up of Requests / Complaints
• Development of Products and Services
• Ensuring Information Security
• Resolving Disputes Such as Consumer Disputes, Lawsuits, or Enforcement Procedures
• Providing Information to Authorized Persons, Institutions and Organizations
• Carrying Out Retention and Archive Activities

If you prefer the video call center, our Company will delete the relevant audio and visual records within 1 month from the date of the call.

Customer Satisfaction Activities

Within the scope of the Eşarj’s members satisfaction surveys conducted to measure the quality of the services received from our Company's mobile application, Deşarj Noktası, support channels and the charging service offered, your personal data in identity(First name-last name), contact(Phone number (mobile phone), address, e-mail address), location (Location information), customer transactions (Call center records, member number, membership date transaction number, complaint and request number and information, vehicle chassis information, vehicle information, vehicle chassis number, vehicle license plate information, charging station location, charging station usage date and time information, used) and transaction security(user name)  and within the scope of the customer satisfaction surveys conducted to measure the quality of the service received from the support channels and the charging service offered for guest users, your personal data in identity(Name-surname), contact(Phone number (mobile phone), address, e-mail address), location (Location information), customer transactions (data such as call center records, transaction number, support and request information, vehicle information, vehicle license plate information, charging station location, charging station usage date and time information, amount of electricity used, charging package information, service charge, billing information, usage information, service type) and transaction security(version of the mobile device, mobile device operating system version) categories are processed under the legal basis ‘Processing of personal data of the parties of a contract is necessary, provided that it is directly related to the establishment or performance of the contract’, ‘Processing is necessary for compliance with a legal obligation to which the data controller is subject’, ‘Data processing is necessary for the establishment, exercise or protection of a right’ and ‘Processing of data is necessary for the legitimate interests pursued by the data controller, provided that this processing does not violate the fundamental rights and freedoms of the data subject’ stated in the 2. paragraph of Article 5 of the Law, for the following purposes:

• Receiving and Evaluating Suggestions for Improving Business Processes
• Carrying out activities for customer satisfaction
• Following-Up Complaints and Claims
• Carrying Out Communication Activities
• Conducting / Audit Of Business Activities
• Carrying Out Customer Relationship Management Processes
• Development of Products and Services

Sales and After-Sales Processes for Charging Stations for Individual Use

The personal data we process, categorized as identity (name-surname) and contact (mobile phone) information, through the "Eşarj Station Request Form" on our company website, will be processed for the purpose of contacting you based on the legal ground of "explicit consent" under Article 5, Paragraph 1 of the Personal Data Protection Law No. 6698.

If you apply through our company's call center or request a charging station as part of our company collaborations, your personal data categorized as identity (name-surname), contact (mobile phone, address, email address), customer transaction (call center records, request number and details, vehicle information, vehicle chassis number, requested station capacity, and the type of location for installation in charging station requests) will be processed under the legal grounds of "necessity for the establishment or performance of a contract to which the data subject is a party" and "necessity of data processing for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject," as stated in Article 5, Paragraph 2 of the Personal Data Protection Law No. 6698.

In order to provide you with a proposal and establish a sales agreement, your personal data categorized as identity (name-surname), contact (mobile phone, address, email address), customer transaction (call center records, request number and details, vehicle information, requested station capacity, type of location for installation in charging station requests, vehicle chassis number) and and finance (information on the receipt) will be processed under the legal grounds of "necessity for the establishment or performance of a contract to which the data subject is a party" and "necessity of data processing for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject," as stated in Article 5, Paragraph 2 of the Personal Data Protection Law No. 6698.

If you request an inspection for the installation of a charging station, your personal data categorized as identity (name, surname, TR ID number, Tax ID number for sole proprietorships), contact (mobile phone, address, email address), and customer transaction (vehicle information, license plate number, meter number, station serial number) will be processed under the legal grounds of "necessity for the establishment or performance of a contract to which the data subject is a party" and "necessity of data processing for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject," as stated in Article 5, Paragraph 2 of the Personal Data Protection Law No. 6698.

For the processes of charging station malfunction and repair, your personal data categorized as identity (name-surname), contact (mobile phone, email address, address), and customer transaction (complaint and request details) will be processed under the legal ground of "necessity for the establishment or performance of a contract to which the data subject is a party," as stated in Article 5, Paragraph 2 of the Personal Data Protection Law No. 6698.

Receivables Collection Process, Legal Dispute Resolution, Requests from Official Institutions and Organizations

Within the scope of charging service fees that are not paid on time, for the resolution of judicial and execution disputes within the scope of the service provided by our Company, for the fulfillment of the requests of official institutions and organizations your personal data in identity, contact, customer transactions, legal transaction and transaction security categories are processed under the legal basis ‘Processing is necessary for compliance with a legal obligation to which the data controller is subject’, ‘Data processing is necessary for the establishment, exercise or protection of a right’ and ‘Processing of data is necessary for the legitimate interests pursued by the data controller, provided that this processing does not violate the fundamental rights and freedoms of the data subject’s stated in the 2. paragraph of Article 5 of the Law, for the following purposes:

• Carrying Out Activities in Compliance with the Legislation
• Follow-up and Carrying out Legal Affairs
• Providing Information to Authorized Persons, Institutions and Organizations
• Tracking of Requests/Complaints

Obtaining a Commercial Electronic Communication Consent

Within the scope of commercial communication consent granted, for users to benefit from campaigns and advantages, to make commercial communication such as special day celebrations, your personal data in identity (name-surname) and contact (phone number (mobile phone), e-mail address) categories are processed under the legal basis  'your explicit consent' stated in the 1. paragraph of Article 5 of the Law.

In addition, within the scope of handling your commercial communication consents, your personal data in identity (name-surname) and contact (phone number (mobile phone), e-mail address) and customer transactions (approval/rejection information regarding commercial electronic consent, the approved channel, the date and time of approval, the approved communication channel) categories are processed under the legal basis ‘Processing is necessary for compliance with a legal obligation to which the data controller is subject’ stated in the 2. paragraph of Article 5 of the Law, for the following purposes:

In addition, we collect your personal data under the heading "Which Personal Data do We Collect" to the extent necessary in accordance with the legal basis ‘Processing is necessary for compliance with a legal obligation to which the data controller is subject’ and ‘Processing of data is necessary for the legitimate interests pursued by the data controller, provided that this processing does not violate the fundamental rights and freedoms of the data subject’ under Paragraph 2 of Article 5 of the Law, for the following purposes:

• Ensuring legal and commercial security,
• Carrying out and execution of occupational health and safety processes,
• Planning and executing processes of corporate sustainability, corporate governance, strategic planning, and information security,
• Preparing applications and maintaining existing ones,
• Executing financial operations and following up on financial issues,
• Executing consultancy, business partnership, purchase, tender, and sales transactions,
• Execution of internal audit, internal control and reporting processes of the company

Personal Data Processed Based on the Legal Basis of Your Explicit Consent

Within the scope of your membership, if you provide explicit consent, your personal data categorized as identity (name, surname, Turkish ID Number), contact (phone number, mobile phone number, email address, address), location (e.g., location data), customer transactions (membership number, transaction number, membership date, usage information, type of service, vehicle information, charging station location, charging station usage date and time, amount of electricity used, service fee), and marketing (segmentation data, behavior data and cookie data from websites and mobile applications created for the delivery, use, or promotion of products and services, survey data, usage habits) may be processed for the following purposes:

• Conducting campaigns, sweepstakes, and competitions,
• Improving customer satisfaction,
• Measuring and enhancing brand perception,
• Carrying out market research and surveys, such as Net Promoter Score (NPS), that indicate the company's position in the market,
• Conducting segmentation and marketing analysis, offering proposals, gifts, and promotions, performing analysis and profiling, targeted promotions, special celebrations, greetings, delivery of awards, sweepstakes, and content users appreciate, want to access again, or would like reminders about,
• Customizing the products and services offered by the company according to your preferences, usage habits, and needs, and sending commercial electronic messages within this scope,
• Promoting and marketing campaigns, products, and services, personalized or otherwise, contacting you regarding these, providing information about campaigns and discounts, and ensuring access to membership benefits, events, and economic advantages,
• Organizing events and training sessions and determining participants,
• Promoting the products and services provided jointly with our business partners, suppliers, group companies, and direct or indirect shareholders, as well as promoting their own products and services.

For guest users, if you give explicit consent your personal data in identity (name, surname.) and contact (mobile phone and number, e-mail, address) categories are processed limited to the following purposes:

• Promotion and marketing of campaigns, products, and services to all customers, contacting them on such matters, informing them about campaigns and discounts; providing opportunities to benefit from membership, events, and economic advantages, and performing the required transactions for their user
• Promotion of the products and services we provide together with our business partners, suppliers, group companies, and direct or indirect shareholders, as well as their own products and services.

Within the scope of your explicit consent provided while filling out the "Follow the latest developments" section on our website, your personal data categorized as identity (name-surname) and contact information (email address) is processed for the purpose of sending commercial electronic messages to deliver newsletters to your email. This processing is carried out based on the legal ground of "explicit consent" under Article 5, Paragraph 1 of the Personal Data Protection Law No. 6698 ("Law").

Location Data

If you give your consent from your mobile phone, your personal data in the location (location Information) category is processed in order to show the nearest charging station. The relevant data is created only to show the location and is stored in any way.

If you do not want to show your location information, you can turn off tracking your location on our Company's application from your phone.

Your personal data is used and processed by the COMPANY for the purpose of serving you, within the framework and control of the PDPL, in serious confidentiality. While processing your data, the COMPANY pays attention to the accuracy of the data, not to be used outside the scope of the processing, to be processed for legitimate purposes, to keep the data up-to-date, and to store it for a reasonable period of time for the intended purpose, by complying with the law and the principle of good faith.

To Whom and for What Purpose May We Transfer Your Personal Data?

Your personal data, for the above-mentioned purposes, to the extent permitted by the legislation and required by our business processes, is shared

• With the Energy Market Regulatory Authority (EMRA) for the purposes of ensuring transparency within the scope of regulatory and supervisory powers in accordance with the Electricity Market Law and secondary legislation, resolving disputes, being able to be used as evidence in disputes that may arise,
• With public authorities, private law and public law legal entities, natural persons, community companies, direct or indirect shareholders, if it is clearly stipulated in the laws,
• With banks and financial institutions, insurance companies, individuals and organizations conducting digitalization, information and technology businesses, natural persons and private legal entities, including local administrations and infrastructure organizations, our shareholders, suppliers, community companies and authorized public organizations, provided that it is directly related to the establishment or execution of a contract,
• Since it is mandatory for the fulfillment of our legal obligation, with our suppliers, business partners, community companies, direct or indirect shareholders, authorized private law and public law legal entities, including local administrations, infrastructure organizations, and natural persons,
• With public authorities, authorized private law and public law legal entities, and natural persons for the establishment, exercise, or protection of a right,
• With the Enerjisa Group companies and Hacı Ömer Sabancı Holding companies within the scope of the legitimate interest of our data controller company and the legislation regulating the provisions of the community company.
• If consent for commercial communication is granted, your personal data in identity (name-surname) and communication (phone number (mobile phone), e-mail address) and customer transactions (confirmation/rejection information regarding commercial electronic authorization, the channel approved, the date and time of approval, the communication channel approved) categories are transferred under the legal basis ‘It is expressly provided for by the laws’, ‘Processing is necessary for compliance with a legal obligation to which the data controller is subject’, ‘Data processing is necessary for the establishment, exercise or protection of a right’ stated in the 2. paragraph of Article 5 of the Law, to our service providers and Message Management System.
• When you start a conversation with our company via WhatsApp, your personal data that you have transmitted to our company is stored on platforms abroad. Your relevant personal data will be transferred abroad for the realization of the above-mentioned processing purposes under the legal basis  ‘Processing of data is necessary for the legitimate interests pursued by the data controller, provided that this processing does not violate the fundamental rights and freedoms of the data subject’ stated in the 2. paragraph of Article 5 of the Law.
• If you request a video call, under the legal basis ‘Processing of data is necessary for the legitimate interests pursued by the data controller, provided that this processing does not violate the fundamental rights and freedoms of the data subject’, your name, surname, contact information (mobile phone and e-mail) with the form sent by the service provider before the interview, and customer transactions personal data, and your audio and visual personal data that you will share during the interview will be transferred to and stored in the service provider's servers located abroad.
• If you request card registration services, we transfer your identity (name, surname) and financial information (credit card number, card expiration date, CVV2, CVC2, bank information from which the card was issued and pay system provider information) to a PCI DSS Level 1 standard service provider, under your "explicit consent" given during the process under Paragraph 1 of Article 5 of PDPL.
• For the purpose of sending newsletters, we transfer data to the suppliers we work with based on the legal ground of 'explicit consent' under Article 5(1) of the Law.
• Based on the legal basis "Processing of data is necessary for the legitimate interests pursued by the data controller, provided that this processing does not violate the fundamental rights and freedoms of the data subject", "Processing of personal data of the parties of a contract is necessary, provided that it is directly related to the establishment or performance of the contract", we transfer your personal data to the cloud database belonging to Amazon Web Services (“AWS”), from which we purchase storage and hosting services within the scope of the service contract as a third-party service provider, and to the cloud databases located abroad called Google Cloud belonging to Google LLC in order to realize the purposes stated under the heading “For Which Purposes Do We Process Your Personal Data?”.
• Name-surname, T.R. identification number, address, telephone number, and e-mail address data are kept in Enerjisa Enerji A.Ş. systems and are processed for the period required by the above-mentioned policies and procedures and legal regulations in order to fulfill the legal obligations of the COMPANY with Enerjisa Enerji A.Ş. arising from the legislation such as the current shareholding structure, system usage, and tax regulations.

These data are processed for the period required by the activities and legal regulations of the COMPANY, within the framework of our policies and procedures determined in accordance with the Regulation on the Erasure, Destruction or Anonymization of Personal Data, and are erased when you no longer have a relationship with the COMPANY, or when there is no reasonable or legal requirement or compliance.

As a Data Subject, What Are Your Rights Enumerated in Article 11 of the PDPL?

In accordance with Article 11 of the PDPL, we inform you that you have the rights regarding your personal data;

1. Learn whether your personal data are processed or not,
2. Request for information as to if your personal data have been processed,
3. Learn the purpose of processing personal data and whether they are used in compliance with the purpose,
4. Know the third parties to whom personal data is transferred in the country or abroad,
5. Request the rectification in case of incomplete or inaccurate processing,
6. Request the erasure or destruction of personal data in the event that the reasons for processing disappear, although it has been processed in accordance with the provisions of the PDPL and other relevant laws,
7. Request notification of the transactions made under paragraphs (e) and (f) above to the third parties to whom it is transferred,
8. Object to the emergence of a result against you by analyzing the processed data exclusively through automated systems,

9. Request compensation for the damage arising from the unlawful processing of your personal data.

   How Can You Exercise Your Rights Regarding Your Personal Data that You Have Provided to Us?

You can submit your requests within the scope of Article 11 of the Law, which regulates the “Rights of the data subject”, to COMPANY headquarters in writing, through the information shown in the table, to the Registered E-mail Address (“REM”), in accordance with the “Communiqué on the Procedures and Principles of Application to the Data Controller” with your electronic signature or mobile signature, or to the COMPANY e-mail address* by using your e-mail address that is previously notified to our company and registered in our system.

In your application, the elements below which are referred to in article 5 of the Communiqué On The Principles And Procedures For The Request To Data Controller("Communiqué");

a) Name, surname, and signature if the application is in writing,

b) Turkish identification number for citizens of the Republic of Türkiye, nationality, passport number or identification number, if any, for foreigners,

c) Domicile or workplace address for notification,

ç) If available, the e-mail address, telephone and fax number for notification, and

d) The subject of the request

We would like to indicate that you can send Your Data Subject Application to us by filling out the ''Data Subject Application Form''.

Your application will be responded to as soon as possible and within thirty (30) days at the latest, following the identity verification to be made by our COMPANY.

I accept and declare that I have been informed in accordance with the Law regarding my processed data and my rights.

*You can find information about the Data Controller Company in the table below.

Amendments

The COMPANY reserves the right to make amendments to its policies and procedures regarding personal data to ensure compliance with legislative amendments.

Yours sincerely,