Eşarj Elektrikli Araçlar Şarj Sistemleri A.Ş.
NEWSLETTER SUBSCRIPTION PRIVACY NOTICE ON PROTECTING AND PROCESSING PERSONAL DATA

Protection of Information

As Eşarj Elektrikli Araçlar Şarj Sistemleri A.Ş. (“ COMPANY ”), we would like to inform you regarding your personal data processed by the COMPANY with this Privacy Notice, pursuant to Article 10 titled “Data Controller's Obligation to Inform'' of the Personal Data Protection Law No. 6698 (“PDPL”) published in the Official Gazette dated 7 April 2016 and numbered 29677, and Communiqué On Principles And Procedures To Be Followed In Fulfillment Of The Obligation To Inform published in the Official Gazette dated 10 March 2018 and numbered 30356, which aim to protect the fundamental rights and freedoms of individuals, especially the privacy of private life, in the processing of personal data.

This information is about the purposes of the COMPANY, which is the Data Controller, to store, process, and share personal data with third parties, the legal basis thereof, the persons and organizations to which personal data can be transferred, the collection methods of personal data, and the rights and authorities you have under the PDPL.

What is the Personal Data?

Personal data is defined as any information relating to an identified or identifiable natural person in the PDPL. Accordingly, your information such as your first name, surname, e-mail address, and phone number are referred to as personal data.

Which Personal Data Do We Collect?

The Method of Our Collection of Your Personal Data

Your name, surname, and email address are collected through the "Follow the new developments" section of our website.

Our Purposes and Legal Reasons for Processing Personal Data

Your name, surname, and email address are processed based on the legal basis of "explicit consent" under Article 5, Paragraph 1 of the Personal Data Protection Law No. 6698 ("Law") for the purpose of creating an e-newsletter contact database and sending newsletters to your email address through commercial electronic communication.

In addition, within the scope of handling your commercial communication consents, your personal data in identity (name-surname) and communication (e-mail address) and customer transactions (approval/rejection information regarding commercial electronic consent, the approved channel, the date and time of approval, the approved communication channel) categories are processed under the legal basis ‘Processing is necessary for compliance with a legal obligation to which the data controller is subject’ stated in the 2. paragraph of Article 5 of the Law, for the following purposes:

To Whom and for What Purpose May We Transfer Your Personal Data?

Your personal data, for the above-mentioned purposes, to the extent permitted by the legislation and required by our business processes, is shared

• For the purpose of sending newsletters, your personal data is shared to the suppliers we work with based on the legal basis of "explicit consent" under Article 5, Paragraph 1 of the Law.
• If consent for commercial communication is granted, your personal data in identity (name-surname) and communication (phone number (mobile phone), e-mail address) and customer transactions (confirmation/rejection information regarding commercial electronic authorization, the channel approved, the date and time of approval, the communication channel approved) categories are transferred under the legal basis ‘It is expressly provided for by the laws’, ‘Processing is necessary for compliance with a legal obligation to which the data controller is subject’, ‘Data processing is necessary for the establishment, exercise or protection of a right’ stated in the 2. paragraph of Article 5 of the Law, to our service providers and Message Management System.

These data are processed for the period required by the activities and legal regulations of the COMPANY, within the framework of our policies and procedures determined in accordance with the Regulation on the Erasure, Destruction or Anonymization of Personal Data, and are erased when you no longer have a relationship with the COMPANY, or when there is no reasonable or legal requirement or compliance.

As a Data Subject, What Are Your Rights Enumerated in Article 11 of the PDPL?

In accordance with Article 11 of the PDPL, we inform you that you have the rights regarding your personal data;

1. Learn whether your personal data are processed or not,
2. Request for information as to if your personal data have been processed,
3. Learn the purpose of processing personal data and whether they are used in compliance with the purpose,
4. Know the third parties to whom personal data is transferred in the country or abroad,
5. Request the rectification in case of incomplete or inaccurate processing,
6. Request the erasure or destruction of personal data in the event that the reasons for processing disappear, although it has been processed in accordance with the provisions of the PDPL and other relevant laws,
7. Request notification of the transactions made under paragraphs (e) and (f) above to the third parties to whom it is transferred,
8. Object to the emergence of a result against you by analyzing the processed data exclusively through automated systems,

9. Request compensation for the damage arising from the unlawful processing of your personal data,

   How Can You Exercise Your Rights Regarding Your Personal Data that You Have Provided to Us?

You can submit your requests within the scope of Article 11 of the Law, which regulates the “Rights of the data subject”, to COMPANY headquarters in writing, through the information shown in the table, to the Registered E-mail Address (“REM”), in accordance with the “Communiqué on the Procedures and Principles of Application to the Data Controller” with your electronic signature or mobile signature, or to the COMPANY e-mail address* by using your e-mail address that is previously notified to our company and registered in our system.

In your application, the elements below which are referred to in article 5 of the Communiqué On The Principles And Procedures For The Request To Data Controller("Communiqué");

a) Name, surname, and signature if the application is in writing,

b) Turkish identification number for citizens of the Republic of Türkiye, nationality, passport number or identification number, if any, for foreigners,

c) Domicile or workplace address for notification,

ç) If available, the e-mail address, telephone and fax number for notification, and

d) The subject of the request

We would like to indicate that you can send Your Data Subject Application to us by filling out the ''Data Subject Application Form''.

Your application will be responded to as soon as possible and within thirty (30) days at the latest, following the identity verification to be made by our COMPANY.

I accept and declare that I have been informed in accordance with the Law regarding my processed data and my rights.

*You can find information about the Data Controller Company in the table below.

Amendments

The COMPANY reserves the right to make amendments to its policies and procedures regarding personal data to ensure compliance with legislative amendments.

Yours sincerely,