General Data Protection Regulation Clarification Text

1) Identity of the Data Controller

As a data controller who is registered with the Istanbul Trade Registry Office under the number 202175-5 and located at Acıbadem Mahallesi Çeçen Sk. Akasya Avm Apt. No: 25 / 426- Üsküdar / Istanbul, as WORQUARTERS OFİS HİZMETLERİ ANONİM ŞİRKETİ ("WorqCompany" or "Company"), in order to act in accordance with the Personal Data Protection Law No.6698 (the “Law”) based on the personal data we obtain from you, our customers, we present the following matters to your information within the scope of our obligation on clarification.

2) Your Personal Data Processed by Us

In order to fulfill our personal data processing purposes specified in this Clarification Text, we process the following personal data:

• Your identity information, including name, surname, Turkish Identify number, other information on the Turkish ID Card, and the information on the photocopy of your driver's license;

• Your contact information, including email, telephone number, mobile phone, home and work address;

• Information about your family and relatives;

• Your location information through your mobile application or website visit,

• Your personnel information;

• Your legal transaction information;

• Your customer transaction information;

• Your physical space security information, including visitor entry and exit records;

• Your transaction security information, including IP address and website login and exit information;

• Your risk management information;

• Your financial information, including your debit and credit card details;

• Your professional experience information, including your CVs and background information;

• Your marketing information, including your usage habits and past purchases of products / services;

• Your visual and audio data,

• Association and foundation membership information on your CVs,

• Your blood type information on your driver's license photocopies.

3) For What Purposes Personal Data Is Processed

• Providing internal communication and organization regarding the services and contents to be provided to you;

• To be able to inform you about the services to be offered to you;

• To be able to present our products and/or services and to carry out sales processes,

• Carrying out product and / or service procurement processes,

• Updating, customizing and developing our products and services in line with your needs and demands,

• Solving the problems in our products and services, identifying errors and problems and removing them,

• Processing of the relevant data by BTA as a result of your use of the information technology infrastructure ("BTA") consisting of the computer network, internet infrastructure, computer system, hardware, software and services owned or used by the Company, leased or licensed by the Company ,

• To inform you about our new products or services, changes in our existing products or services, and our campaigns and promotions,

• To be able to provide you with the necessary training and information about our products and services, to explain how to use our programs, to provide Academic training,

• Execution of customer relations processes,

• Providing call center and remote support services,

• Website membership transactions,

• Managing cookies in order to improve the experience of our visitors on our websites, to identify requests and problems, and to quickly finalize their searches. (For more detailed information, you can check our Cookie Policy)

• Providing product demos,

• Receiving e-invoice, e-archive, e-dispatch note, e-reconciliation, e-producer, ez (z report) applications and providing e-book service,

• Updating your contact information in order to continue conducting our commercial activities and providing this updated information to our relevant institutions, companies, contractors and / or suppliers,

• Analyzing your business processes, adapting our products and services in accordance with your processes and improving them in line with your suggestions, requests or reports, examining and responding to any complaint made by you,

• In case of incorrect payments, the process of returning the relevant payment to the customer,

• Planning and execution of social media and communication processes,

• Carrying out marketing activities, carrying out advertising / campaign / promotion processes,

• Managing, conducting and auditing our business activities, conducting business continuity activities,

• Carrying out finance and accounting affairs,

• Ensuring the physical space security of our buildings and facilities and providing visitor records and tracking,

• Ensuring the security of our software and systems and carrying out information security processes,

• Providing fringe benefits and benefits for the relatives of our employees,

• Evaluating the job applications of employee candidates, conducting interviews and interviews, contacting the people they refer to in their resumes,

• Carrying out processes related to company acquisition,

• evaluating this data and information in anonymous statistical studies to improve the services that may be offered to you;

• Creating a customer database through Hubspot software,

• Determining the preferences and needs of your party and shaping and updating the services to be provided within this scope;

• Informing you about relevant information, products and services in line with your request;

• to be able to evaluate potential complaints and applications you may submit;

• the ability to provide personalized services for you; In addition, your personal data mentioned above can be transferred to the Company's physical archives and information systems of the Company and kept in both digital and physical environment.

4) Method and Legal Reason for Collecting Your Personal Data

Your personal data, can be processed and transferred automatically or non-automatically, by the Company or through the Company for the purposes specified in articles the 2nd and 3rd of this text and due to legal reasons regarding the establishment or execution of the contract, the legitimate interest of the data controller, the explicit stipulation in the laws, the necessity for the establishment, protection and use of the right and within the scope of the legal obligation of the data controller.

Your personal data is collected by the Company through verbal, physical and electronic written information transmitted by you, applications and software used within the scope of the Company's activities and security cameras in the physical area of the Company.

5) Transfer of Personal Data

Your collected personal data will be transferred to our domestic and foreign suppliers, business partners, group companies and legally authorized public legal entities and individuals, e-mail and CRM service providers which their servers are located in Ireland and United States, in order to fulfill our legal obligations for the reasons stipulated in the laws in order to fulfill the purposes described in Article 2 of this Clarification Text.

6) Rights of Personal Data Subject

In accordance with Article 11 of the Law, customers whose personal data are processed can apply to the Company and make requests on the following issues:

a) learning whether their personal data has been processed;

b) to request information regarding personal data if they have been processed;

c) to learn the purpose of processing personal data and whether we use it in accordance with these purposes;

d) learning the third parties to whom their personal data has been transferred domestically or abroad;

e) request rectification in case of incomplete or incorrect processing of personal data;

f) To request the deletion or destruction or anonymization of personal data in the event that the reasons for the processing of personal data are no longer present;

g) In these cases or in case of correction, requesting that these be notified to third parties to whom data is transferred;

h) to object to this situation if he / she thinks that an unfavorable result has arisen by analyzing the processed data exclusively through automated systems, and

i) To demand the compensation of this damage in case of a loss due to the processing contrary to the law

You can submit your requests regarding your rights listed above to the Company by filling out the "Personal Data Owner Application Form", which you can access at www.worqcompany.com, using one of the channels listed below:

a) The Company's Acıbadem Mahallesi Çeçen Sk. Akasya Avm Apt. No: 25 / 426- Üsküdar / İstanbul by providing your identity confirmation and making an application in person;

b) The company's e-mail address to [email protected], your registered e-mail address (KEP) or the e-mail address previously notified to the data controller by secure electronic signature, mobile signature or by the data subject and registered in the data controller's system. using; or

c) by means of a software or application developed for the purpose of application.

EXPLICIT CONSENT LETTER

As a data controller who is registered with the Istanbul Trade Registry Office under the number 202175-5 and located at Acıbadem Mahallesi Çeçen Sk. Akasya Avm Apt. No: 25 / 426- Üsküdar / Istanbul, as WORQUARTERS OFİS HİZMETLERİ ANONİM ŞİRKETİ ("WorqCompany" or "Company"), in order to act in accordance with the Personal Data Protection Law No.6698 (the “Law”) based on the personal data we obtain from you, our customers, we request your explicit consent for the following matters in order to process and / or transfer your personal data:

• Informing and making use of general and special campaigns, promotions, promotions, discounts and similar advantages ("commercial electronic message") to be communicated by the Company in line with my customer profile created according to my preferences,

• Congratulation and wishes to me,

• Including my data in market research,

• User profiles and areas of interest based on the information provided during the use of the information technology infrastructure ("BTA"), which consists of computer network, internet infrastructure, computer system, hardware, software and services, owned or used by the Company, leased or licensed by the Company. and developing content and facilities specific to the profiles to be created by conducting research on their behavior;

• Providing internal physical security;

• processing by the Company for the purpose of analyzing and auditing in order to increase the quality of the services provided and to develop new services; and

• Automatic transfer to BTA whose infrastructure is located abroad so that it can be processed together with other data obtained within the scope of BTA;

• Transferring the services and contents to be provided by the company to abroad through Hubspot software whose infrastructure is located in the United States of America;

• Transferring the infrastructure to the e-mail account provider whose infrastructure is located abroad in order to ensure the internal communication and operation structure regarding the services and contents to be provided by the company;

• Transferring the Company to domestic and foreign suppliers, business partners and group companies in order to create the necessary operational structure for the services and contents to be offered by the company.