PRIVACY POLICY

PROTECTION AND PROCESSING OF PERSONAL DATA

I QANIK YAZILIM DANIŞMANLIK VE BİLİŞİM HİZMETLERİ ANONİM ŞİRKETİ ("I-QANIK", "Company", or "We") attaches great importance to the lawful processing of our customers' personal data. Through this Personal Data Protection and Processing Notice ("Notice"), we aim to ensure that personal data is processed in compliance with the Law on Protection of Personal Data No. 6698 ("Law") and applicable national legislation.

Ensuring the security of our customers' personal data is one of our primary objectives. To this end, we share our customers' data only with trusted business partners at a minimum level, and we take security measures in compliance with current legislation.

Transparency is one of the most important topics for us in the field of personal data protection. We prepared this Notice to provide you with the necessary information while processing your personal data for both fulfilling our legal obligations and delivering a better customer experience.

PURPOSES FOR WHICH WE PROCESS YOUR PERSONAL DATA

This Notice contains our statements and explanations regarding the processing of personal data of our customers and individuals who contact us in accordance with the Law and applicable national legislation. We reserve the right to make changes to the Notice to provide current information about practices and legal regulations in the field of personal data protection. However, if material changes are made to the Notice, data subjects will be notified through appropriate channels.

CATEGORIES OF PERSONAL DATA WE PROCESS

A) Personal Data Processed Within the Scope of Communication Services

We may process certain data about you through our "Communication Services" channels in order to benefit you from our products and services, resolve your requests/complaints and suggestions, provide information, and evaluate your applications.

1 — Through Our Call Centers

When you call I-QANIK call center numbers or when we contact you through these channels; your identity information such as name, surname, T.R. ID number, your contact information such as mobile phone number and e-mail, and your request/complaint information may be processed.

2 — Through Our Websites

Information such as your name, surname, e-mail, mobile phone, address, and request/complaint details may be collected and processed through contact forms on our websites. On our websites that use cookies, some of your personal data such as your usage habits, preferences, and frequency of page visits may be collected.

3 — Through Our Social Media Accounts

When you contact us through our social media accounts, you may share personal data such as your name, surname, username, e-mail address, and phone number with us.

B) Processing of Personal Data of Dealer Officials and/or Employees

If you have applied to become a dealer of I-QANIK, certain information is requested from you so that your application can be evaluated. Personal data such as name, surname, address, mobile phone, title, username, log records, IP information, T.R. ID number, information in the signature circular may be processed.

C) Processing of Personal Data of Subcontractor Officials and/or Employees

If you are an official or employee of a firm that serves I-QANIK as a subcontractor, we may need to process your personal data due to the business relationship and some of our obligations.

D) Processing of Personal Data of Supplier & Business Partner Officials and/or Employees

We have business partners and suppliers with whom we have entered into business relationships to provide services and support to I-QANIK. As an employee or authorized signatory of these companies, we need to process some of your personal data to fulfill our mutual obligations in our business relationship.

E) Processing of Personal Data of Visitors

When you visit I-QANIK buildings and facilities as a visitor, internet access records (IP address, MAC address, visited pages, log records) and camera footage may be processed as part of creating and tracking visitor records.

F) Processing of Your Personal Data Within the Scope of Job Applications

When you apply for a job at I-QANIK, personal data such as name, surname, address, phone, e-mail, date of birth, educational background, foreign language knowledge, reference information, certificates, professional qualifications, and information in your CV may be processed.

TRANSFER OF PERSONAL DATA

Your personal data may be shared with parties that provide products or services on our behalf, our suppliers, social media agencies, subcontractors, sponsors and business partners, and our group companies. Your personal data may also be shared with legally authorized public institutions and private individuals within the scope of their authority.

The transfer of your personal data abroad may be carried out where there is your explicit consent, or in countries with adequate protection or upon adequate protection commitment and approval of the Personal Data Protection Board.

STORAGE OF PERSONAL DATA

We determine the storage periods for personal data by taking into account current legislation and the purposes for which the relevant data is processed. When the purpose of personal data processing disappears, data is deleted, destroyed, or anonymized unless there is another legal basis or ground allowing the retention of personal data.

PERSONAL DATA PROCESSING PRINCIPLES

• Acting in accordance with law and principles of good faith
• Accuracy and currency
• Processing data for specific, explicit, and legitimate purposes
• Being related, limited, and proportionate to the purposes for which personal data is processed
• Retaining for the period stipulated in relevant legislation or as long as necessary for the relevant purpose

COOKIE USAGE

As I-QANIK, we use certain technologies such as cookies and pixels ("Cookies") to improve your experience during your visits to our online platforms. The use of these technologies is carried out in accordance with the Law, GDPR, and other applicable legislation.

How Does I-QANIK Use Cookies?

• To remember your preferences and personalize your website usage
• To determine how you use the website (connection time, viewed content, visit duration)
• To offer content and advertisements relevant to your interests
• To perform the basic functions required for the site to work
• To analyze and improve site performance

I-QANIK also uses Google Analytics. We recommend visiting Google's privacy policy for information about opting out of Google Analytics cookies.

Cookie Management

You may refuse, delete, or enable notifications not to be tracked by changing your browser settings. However, we note that some features of the website may not work properly in this case.

RIGHTS OF DATA SUBJECTS

According to Article 11 of the Law, data subjects have the following rights against the data controller:

• To learn whether personal data concerning themselves is processed
• To request information if personal data concerning themselves has been processed
• To learn the purpose of processing personal data and whether they are used in accordance with their purpose
• To know the third parties to whom personal data is transferred domestically or abroad
• To request correction of personal data in case they are incomplete or incorrectly processed
• To request deletion or destruction of personal data under the conditions stipulated in relevant legislation
• To object to the occurrence of a result against the person themselves by analyzing the processed data exclusively through automated systems
• To request compensation for damages in case personal data is processed unlawfully

Contact Channels

You can reach us through the following channels to exercise your rights. Your applications will be concluded free of charge within a maximum of thirty days.

• Email: info@iqanik.com
• Phone: +90 262 349 41 11
• Address: Karadenizliler Mah. Başyiğit Cad. No:178, Başiskele / Kocaeli, Turkey

DATA SECURITY

We take reasonable technical and administrative measures to prevent unauthorized access risks, accidental data losses, intentional deletion, or damage to your personal data.

• Software and hardware including virus and malware protection systems, firewalls, and intrusion prevention systems
• Controlling access to personal data within the framework of unit/role/application-based authorizations
• Ensuring necessary audits are carried out in accordance with Article 12 of the Law
• Ensuring compliance of data processing activities with the Law through internal policies and procedures
• Subjecting access to special category personal data to stricter measures

DEFINITIONS

• Explicit consent: Consent declared freely regarding a specific matter, based on being informed, by data subjects.
• Anonymization: Making personal data impossible to associate with an identified or identifiable natural person, even by matching with other data.
• Relevant person/data subject: The natural person whose personal data is processed.
• Personal data: Any information relating to an identified or identifiable natural person.
• Processing of personal data: Any operation performed on personal data such as collection, recording, storage, preservation, alteration, reorganization, disclosure, transfer, taking over, making available, classification, or blocking its use, whether wholly or partially by automated means or non-automated means as part of a data recording system.
• Data controller: The natural or legal person who determines the purposes and means of processing personal data and is responsible for the establishment and management of the data recording system.

Last updated: 2025 — Prepared by I QANIK YAZILIM DANIŞMANLIK VE BİLİŞİM HİZMETLERİ ANONİM ŞİRKETİ.