Invento Technology and Information Services Inc. (hereinafter referred to as "INVENTO") attaches great importance to the security of your personal data, processed as the data controller under the Personal Data Protection Law No. 6698. Therefore, we would like to inform you about the processing of your personal data.

PURPOSE AND LEGAL BASIS OF PROCESSING PERSONAL DATA

Your personal data will be processed in accordance with Law No. 6698 and secondary regulations within the framework of the purposes and legal grounds specified below: In this context, your personal data such as "Identity Information, Contact Information, Title," obtained for the purpose of establishing communication with you in the areas where you operate will be processed within the legal ground stated in Article 5/2-d of Law No. 6698, which involves "being made public by the data subject himself/herself." If you provide consent for commercial communications within the scope of the Law on the Regulation of Electronic Commerce No. 6563, your personal data will be processed based on legal grounds such as the legitimate interests of the data controller for the mandatory processing of data for these purposes, without violating the fundamental rights and freedoms of the data subject under Article 5/2-f of Law No. 6698 in case you are a merchant or tradesperson, and with your explicit consent under Article 5/1 if you are not a merchant or tradesperson.

TRANSFER OF PERSONAL DATA

INVENTO may transfer your personal data to third-party business partners and subsidiaries in case it needs to be shared for the fulfillment of the business, as well as to third-party business partners or suppliers, as explicitly envisaged by laws and within the framework of our legal obligations, to authorized public institutions and private individuals under the conditions and purposes of personal data processing specified in Article 8 of Law No. 6698. Furthermore, your personal data mentioned above is transferred to CRM (Customer Relationship Management) and Message Management System (IYS) within the limits specified for the purposes mentioned.

METHODS OF COLLECTING PERSONAL DATA

INVENTO collects your personal data when you deliver your business card to our employees or authorized personnel, share your business card information via email, or share your business card information with us through various methods. Additionally, your personal data is collected when you contact INVENTO through other methods and disclose information.

STORAGE OF PERSONAL DATA

Your personal data is stored in accordance with Article 5/2-d of the Personal Data Protection Law No. 6698, which involves "being made public by the data subject himself/herself," and in electronic and printed files of our systems, as specified in the mentioned purposes. According to Article 13, paragraph 2 of the Regulation on Commercial Communications and Commercial Electronic Messages; consent records are kept for three years from the end of the validity of the consent, rejection records are kept for three years from the rejection date, and other records related to commercial electronic messages are kept for three years from the registration date. Limited-time stored personal data will be deleted or destroyed as a result of periodic reviews.

It is accepted that the preserved personal data is up-to-date, and the responsibility to update non-current personal data belongs to you. You can make update requests to us through the methods specified below.

YOUR RIGHTS REGARDING PERSONAL DATA

As the Data Subject, by applying to INVENTO:

• You have the right to learn whether your personal data is being processed or not.

• If your personal data has been processed, you have the right to request information regarding this processing.

• You have the right to learn the purpose of the processing of your personal data and whether they are used in accordance with this purpose.

• You have the right to know the third parties to whom your personal data is transferred, domestically or abroad.

• In case your personal data is incomplete or inaccurately processed, you have the right to request their correction and, within this scope, the notification of the third parties to whom your personal data has been transferred.

• If the reasons requiring processing cease to exist, you have the right to request the deletion or destruction of your personal data and, within this scope, the notification of the third parties to whom your personal data has been transferred.

• You have the right to object to the occurrence of a result against you by the analysis of your processed data solely through automatic systems.

• If you suffer damage due to the unlawful processing of your data, you have the right to request the remedy of the damage.

If you submit your requests regarding the mentioned rights to the Data Controller in accordance with the application procedures and principles specified in the Regulation on the Procedures and Principles of Application to the Data Controller, INVENTO Technology and Information Services Inc. will conclude your request, depending on its nature, as soon as possible and within a maximum of 30 (thirty) days free of charge. However, if the transaction requires an additional cost, INVENTO Technology and Information Services Inc. may charge the fee specified in the tariff determined by the Personal Data Protection Board.

For detailed information, you can review our Privacy Policy.