We shall comply with the principles and rules introduced by the Constitution of the Republic of Turkey on the protection of personal data, the Law on the Protection of Personal Data No. 6698 (KVKK) and other legislation. In order to protect the rights of the individuals whose data are processed by Invento,  the Board of Directors has adopted a written personal data protection policy and system.

All personal data processing activities must be carried out in accordance with the following data protection principles. The company's policies and procedures aim to ensure compliance with these principles:

• Compliance with the law and honesty rules.

• Being accurate and up to date when necessary.

• Processing for specific, explicit and legitimate purposes.

• Being relevant, limited and proportionate to the purpose for which they are processed.

• To be kept for the period required by the relevant legislation or for the purpose for which they are processed.