a) Data Controller

As INAVITAS ENERJİ ANONİM ŞİRKETİ ("Inavitas", the "Company"), we process the personal data of data subjects in our capacity as data controller by ensuring adequate security measures in accordance with the Law No. 6698 on the Protection of Personal Data ("KVKK") and the secondary legislation.

‍

b) Personal Data and Categories

The personal data that we obtain and process within our Company are as follows:

c) Method of Collecting Personal Data

Your personal data are collected by automatic and non-automatic means, based on the legal grounds set out in Article 5(2) of the KVKK, in order to fulfill the purposes specified in paragraph (d) of this notice, through the following methods:

- Filling out forms by the data subject, sending e-mails, contacting via phone calls, visiting/filling out forms on the website, and contacting via social media platforms.

- Sharing business cards during fair or seminar visits, establishing communication networks during training and event activities, and transmission through solution or business partner institutions or organizations.

- Verbal, written, or electronic transmission by you and/or our dealers, authorized service providers, or subcontractor representatives.

- Recording voice calls via the support line through automated and non-automated methods.

‍

d) Legal Grounds for Collecting and Processing Personal Data

The table below sets out the categories of personal data, purposes of processing, and legal grounds for processing:

e) Transfer of Processed Personal Data and Purposes of Transfer

Your personal data will be transferred for the purposes specified below in accordance with Article 8(2)(a) of the KVKK:

- To relevant public institutions and organizations and private institutions and organizations, if necessary or upon request, in order to fulfill legal obligations arising from the relevant legislation,

- To our lawyers and consultants, to the extent necessary and within the scope of confidentiality obligations, for the purpose of following up legal and financial processes,

- To our business partners, shareholders, and affiliates for the purpose of carrying out our business and management activities,

- To our suppliers for the purposes of procurement of products and services, execution of maintenance and support processes, and meeting operational requirements,

- To the group of companies to which we are affiliated for the purpose of conducting audit and reporting processes.

‍

f) Your Rights under Article 11 of the KVKK

As a personal data owner, pursuant to Article 11 of the Law, you have the following rights:

- To learn whether your personal data are processed,

- If your personal data have been processed, to request information regarding such processing,

- To learn the purpose of processing your personal data and whether they are used in accordance with this purpose,

- To know the third parties to whom your personal data are transferred domestically or abroad,

- To request correction of your personal data if they are incomplete or incorrectly processed,

- To request deletion or destruction of your personal data within the framework of the conditions stipulated in the relevant legislation,

- To request notification of the correction, deletion, or destruction operations carried out in accordance with the relevant legislation to third parties to whom your personal data have been transferred,

- To object to the occurrence of a result against you by analyzing your processed personal data exclusively through automated systems,

- To request compensation for damages in case you suffer damage due to unlawful processing of your personal data.

‍

You may submit your requests regarding your rights under Article 11 of the KVKK, by fully completing the information specified in the Data Subject Application Form, in accordance with Article 11 and Article 13(1) of the KVKK and the Communiqué on the Procedures and Principles of Application to the Data Controller, through the following methods:

- By personally visiting our Company at “İnönü Mah. FSM Bulv. Vega Cadde AVM, B Block, 412/23 Yenimahalle, Ankara”,

- Via our registered electronic mail (KEP) address: inavitas@hs06.kep.tr,

- In writing via a notary public or by registered mail with return receipt, for the purpose of verifying your identity and preventing disclosure of information to unauthorized persons,

- By sending an e-mail to kvkk@inavitas.com using a secure electronic signature, mobile signature, or (if available) the e-mail address previously notified to our Company and registered in our systems, or through other methods to be determined by the Board in the future.

‍

In addition to the rights specified in Article 11 of the KVKK, if you have given explicit consent for the processing of your personal data, you have the right to withdraw such explicit consent at any time.

‍

g) Amendments and Updates

This information notice has been prepared in accordance with the Law No. 6698 on the Protection of Personal Data and other relevant legislation. Necessary amendments may be made to this information notice in line with changes in the relevant legislation and/or the Company’s purposes and policies regarding the processing of personal data.

‍