Personal data institution law

As Giproject, we attach great importance to the security of your personal data that you share with us while using our website or through other communication channels. The Law No. 6698 on the Protection of Personal Data (“Law”) has entered into force. Within this scope, we would like to inform you about the relevant legislation and certain definitions set forth therein:

1. PURPOSE OF THE PERSONAL DATA PROTECTION AND CONSENT NOTICE AND GIPROJECT’S STATUS AS DATA CONTROLLER

Giproject acts as the “Data Controller” within the scope of the Law regarding the personal data of its customers. This notice aims to inform customers about personal data processing activities and to obtain their explicit consent where required.

2. PURPOSE OF PROCESSING PERSONAL DATA OF CUSTOMERS

Personal data belonging to customers are processed in accordance with the personal data processing conditions and purposes specified in Articles 5 and 6 of the Law. Within this scope, personal data may be processed for the following purposes:

• To enable customers to benefit from the products and services offered,

• To carry out commercial activities,

• To plan and implement business strategies,

• To ensure legal, technical, and commercial security,

• To carry out marketing and customer satisfaction activities.

3. TRANSFER OF PERSONAL DATA OF CUSTOMERS

Personal data may be shared, in line with the purposes stated above and in accordance with Articles 8 and 9 of the Law, with Giproject authorized personnel, business partners, suppliers, shareholders, legally authorized public institutions and organizations, and private entities.

4. METHOD AND LEGAL BASIS OF COLLECTING PERSONAL DATA

Personal data are collected electronically from customers and may be processed and transferred for the purposes specified above within the framework of Articles 5 and 6 of the Law.

5. RETENTION PERIOD OF PERSONAL DATA

Personal data are retained for the periods stipulated by applicable legislation. Upon the expiration of these periods, personal data are deleted, destroyed, or anonymized in accordance with the law.

6. RIGHTS OF CUSTOMERS AS PERSONAL DATA SUBJECTS

Pursuant to Article 11 of the Law, data subjects have the right to:

• Learn whether their personal data are processed,

• Request information regarding their personal data,

• Learn the purpose of processing personal data and whether they are used in accordance with such purpose,

• Request correction of incomplete or inaccurate personal data,

• Request deletion or destruction of personal data.

These rights may be exercised by submitting a request to Giproject through the methods specified under the Law. Requests will be finalized by Giproject within a maximum of 30 days. In case of any amendments or updates, this notice shall be revised accordingly.

Giproject will continue to protect your personal data in line with legal and technological developments.