Personal Data Protection Notice (KVKK)

Your personal data is processed by our Company, whose details are set out below, in its capacity as the data controller and in accordance with the KVKK and related legislation.

Title: Olympeak Bilgisayar Elektrik Elektronik Güvenlik Enerji Reklam ve Tic. Ltd. Şti. Address: Gökçeören Mahallesi Gökseki Sokak No:232/B, Kaş / Antalya, Türkiye Tax Office: Kaş Tax Office Tax Number: 6420403227

Your personal data is processed for the purposes of carrying out our corporate IT, network, cybersecurity, CCTV, cloud/data-center and digital transformation services, preparing and performing quotations and contracts, and managing customer relations and after-sales support processes.

In addition, your personal data is processed for the purposes of responding to your communication and information requests, carrying out invoicing and financial/accounting processes, ensuring information, system and network security, fulfilling our legal obligations, and planning and executing our activities in line with the legitimate interests of our Company.

Your personal data is processed pursuant to Article 5/2 of the KVKK on the grounds that: processing is directly related to the conclusion or performance of a contract; it is necessary for the Company to fulfil its legal obligations; it is necessary for the establishment, exercise or protection of a right; and processing is necessary for the legitimate interests of the Company, provided that it does not harm the fundamental rights and freedoms of the data subject.

Where these legal grounds do not apply, your personal data is processed on the basis of your explicit consent. Special categories of personal data are processed only where your explicit consent exists or where processing is provided for by law, in accordance with Article 6 of the KVKK.

The following categories of personal data may be processed within the scope of our activities:

- Identity Data (such as name, surname, title) - Contact Data (such as email address, telephone number, address) - Customer Transaction Data (such as requests, quotations, contracts, orders and support records) - Financial Data (such as invoice and payment information) - Transaction Security / Log Data (such as IP address, access and transaction logs, cookie data)

Within the scope of the installation and management of our CCTV services, visual/audio recordings may be processed on our customers' systems; such recordings are handled in accordance with the data-controller capacity and instructions of the relevant customer.

Your personal data is collected through automated and non-automated methods, including the contact and request forms on our website, correspondence via email, telephone and fax, face-to-face meetings, contract and quotation processes, and the cookies used on our website.

The collected data is processed for the purposes stated in this Notice and on the basis of the relevant legal grounds.

Your personal data may be transferred, within the conditions set out in Articles 8 and 9 of the KVKK and limited to the purposes stated in this Notice, to the hosting, cloud and technical service providers from whom we receive support in providing our services, as well as to our business partners and suppliers. [TODO: Names of the specific third-party service/hosting providers to whom data is transferred]

In addition, your personal data may be transferred to legally authorized public institutions and organizations and to judicial and administrative authorities in order to fulfil our obligations arising from the applicable legislation. Where transfers abroad are involved, we act in accordance with the conditions under Article 9 of the KVKK. [TODO: Whether any transfers abroad occur and to which countries/providers]

Your personal data is retained for the period required by the purposes of processing, taking into account the statutory limitation periods and legal retention obligations set out in the applicable legislation.

Upon expiry of the retention period or when the purpose of processing no longer exists, your personal data is deleted, destroyed or anonymized. [TODO: Specific retention periods applied for each data category (e.g. year-based periods for commercial/accounting records)]

Pursuant to Article 11 of the KVKK, you may exercise the following rights by applying to our Company in its capacity as data controller:

- To learn whether your personal data is being processed, - To request information if your personal data has been processed, - To learn the purpose of processing your personal data and whether it is used in accordance with such purpose, - To know the third parties to whom your personal data is transferred domestically or abroad, - To request the correction of your personal data if it has been processed incompletely or inaccurately, - To request the deletion or destruction of your personal data within the conditions set out in Article 7 of the KVKK, - To request that correction, deletion or destruction operations be notified to the third parties to whom your data has been transferred, - To object to any adverse outcome arising against you as a result of the analysis of the processed data exclusively through automated systems, - To request compensation for damages in the event that you suffer damage due to the unlawful processing of your personal data.

For any questions regarding this Notice and the processing of your personal data, you may contact our Company using the contact details below.

Address: Gökçeören Mahallesi Gökseki Sokak No:232/B, Kaş / Antalya, Türkiye Email: [TODO: KVKK contact/application email address] Phone: [TODO: Company contact telephone number]

To exercise your rights under Article 11 of the KVKK, you may submit your requests to our Company in writing in accordance with the Communiqué on the Principles and Procedures for Application to the Data Controller, or by other methods determined by the Personal Data Protection Board.

You may submit your application by post to the Company address stated above with a wet signature, by email to [TODO: KVKK application email address], or via [TODO: registered electronic mail (KEP) address, if any]. Your application must clearly include your request together with information and documents verifying your identity. Depending on its nature, your request will be finalized free of charge as soon as possible and in any case within thirty days at the latest; however, if the process requires an additional cost, a fee within the tariff determined by the Board may be charged.