Supportive Service Electronic Electric Computer Technology and Industry Trade Co. Ltd.

Personal Data Owner Application Form

1. General Information

According to Article 20 of the Constitution of the Republic of Turkey, everyone has the right to request the protection of personal data related to themselves. This right includes being informed about personal data, accessing this data, requesting their correction or deletion, and learning whether they are being used for their intended purposes.

The Law on the Protection of Personal Data No. 6698 ("PDPL") grants certain rights regarding the processing of personal data.

Supportive Service Electronic Electric Computer Technology and Industry Trade Co. Ltd. (hereinafter referred to as "Supportive/COMPANY"), in accordance with Article 13 of the PDPL, must evaluate the rights arising from the status of data owners and inform the data owners through this Personal Data Owner Application Form.

2. Right to Apply

2.1. Application Subjects

According to Article 11 of the PDPL, everyone whose personal data is processed can apply to our Company and request the following:

1. Learn whether personal data is processed or not,
2. If personal data is processed, request information regarding this,
3. Learn the purpose of processing personal data and whether they are used for their intended purpose,
4. Learn third parties to whom personal data is transferred domestically or internationally,
5. If personal data is processed incompletely or incorrectly, request their correction and request that the transaction made within this scope be notified to third parties to whom personal data has been transferred,
6. If the reasons requiring the processing of personal data cease to exist, request their deletion, destruction, or anonymization, and request that the transaction made within this scope be notified to third parties to whom personal data has been transferred,
7. Object to the occurrence of a result against the person by analyzing the processed data solely through automatic systems,
8. If personal data is processed unlawfully, request compensation for damages suffered.

2.2. Exceptions to the Right to Apply

According to Article 28 of the PDPL, data owners will not be able to assert their rights in the following cases:

1. If personal data is processed within the scope of activities related to themselves or family members living in the same household by real persons completely, provided that it is not transferred to third parties and subject to data security obligations,
2. If personal data is processed for purposes such as research, planning, and statistics by being anonymized with official statistics,
3. If personal data is processed for purposes such as art, history, literature, or science or within the scope of freedom of expression, provided that it does not violate national defense, national security, public security, public order, economic security, privacy, or personal rights or does not constitute a crime,
4. If personal data is processed by public institutions and organizations authorized by law to ensure national defense, national security, public security, public order, or economic security within the framework of preventive, protective, and intelligence activities to be carried out by law and granted authority,
5. If personal data is processed by judicial authorities or execution authorities for the purposes of investigation, prosecution, trial, or execution processes.

According to the second paragraph of Article 28 of the PDPL, data owners will not be able to assert their rights (except for the right to request compensation for damages) in the following cases:

1. If personal data processing is necessary for the prevention of a crime or for the investigation of a crime,
2. If personal data already made public by the data subject is processed,
3. If personal data processing is necessary by authorized and authorized public institutions and organizations or professional organizations having the characteristics of public institutions, for the conduct of supervision or regulation duties and for the conduct of disciplinary investigation or prosecution,
4. If personal data processing is necessary for the protection of the State's economic and financial interests regarding budget, tax, and financial matters.

3. Application Methods

Data subjects' applications regarding their rights arising from the PDPL must be submitted to us in writing in accordance with Article 13 of the PDPL or through other methods determined by the Personal Data Protection Board ("Board").

Application Method	Description	Application Address
Website	Application Form available at the address of the Application Form must be filled out, signed manually, and sent in writing personally or through a notary	-address-
Electronic Environment	Sending through the registered electronic mail (KEP) address of the data subject, secure electronic signature, mobile signature, or via the e-mail address extension registered in the Supportive system previously notified by the data subject to Supportive

*Applications must be submitted with the title "Information Request Under the Law on the Protection of Personal Data."

Your personal data is meticulously protected through technical and administrative means, and necessary security measures are provided at an appropriate level considering potential risks and technological capabilities.

You can submit your requests within the scope of the law by filling out the "Data Subject Application Form" available on the website www.supportive-servis.com. You can deliver your requests:

• Personally to the address: Yeşilce Mah. Barbaros Cad. Gerçek İş Merkezi No:69 Kağıthane / Istanbul / Turkey
• By sending through a notary
• To our company's address: Yeşilce Mah. Barbaros Cad. No:69/1 Kağıthane/İstanbul

4. Personal Data Owner Contact Information

Name Surname
Turkish Identity Number / Nationality for foreigners, passport number, or if available, identity number
Email Address
Phone Number
Mailing address or workplace address for notification
Relationship with Our Company	o  Product or Service Recipient o  Supplier o  Potential Product or Service Recipient o  Visitor Parent/Guardian/Representative o  Other

Requests That Can Be Made by Data Subjects Please select the subject of your application regarding your personal data from the following options:

	Subjects That Can Be Requested and Legal Basis	Your Choice
1	"I want to know if my personal data is being processed within your company. (Legal Basis: Article 11/1 (a) of the Law on the Protection of Personal Data)"
2	"If my personal data is being processed, I request information regarding this data processing activity. (Legal Basis: Article 11/1 (b) of the Law on the Protection of Personal Data)"
3	"If my personal data is being processed, I want to know the purpose of this data processing and whether it is being used in accordance with the purpose. (Legal Basis: Article 11/1 (c) of the Law on the Protection of Personal Data)"
4	"I request information on whether my personal data has been transferred to third parties domestically and/or internationally, and if so, I request information about these third parties. (Legal Basis: Article 11/1 (ç) of the Law on the Protection of Personal Data)"
5	"I request the correction of my personal data that is incomplete or incorrect at your company or by third parties to whom my personal data has been transferred. (In case of request, correct and complementary information/documents should be provided for the correction of your personal data that you believe to be incomplete or incorrect.) (Legal Basis: Article 11/1 (d) of the Law on the Protection of Personal Data)"
6	"I believe that the reasons requiring the processing of my personal data have ceased, and within this framework, I request:   - Deletion of my personal data   - Making my personal data anonymous      (Please indicate your choice with an 'x'.)    (Legal Basis: Article 11/1 (e) of the Law on the Protection of Personal Data)"
7	"I also want the correction of my personal data (Request No: 5) that I believe to be incomplete or incorrect, by the third parties to whom it has been transferred. (Legal Basis: Article 11/1 (f) of the Law on the Protection of Personal Data)"
8	"I also request that my personal data (Request No: 5), which I believe to be incomplete or incorrect, be:   - Deleted   - Made anonymous     (Please indicate your choice with an 'x'.)   (Legal Basis: Article 11/1 (f) of the Law on the Protection of Personal Data)"
9	"I object to the result obtained against me solely by automatic means of analysis of my personal data. (Legal Basis: Article 11/1 (g) of the Law on the Protection of Personal Data)"
10	"I request compensation for the damages I have suffered due to the unlawful processing of my personal data. (Legal Basis: Article 11/1 (h) of the Law on the Protection of Personal Data)"

Our Company's Procedure and Timeframe for Responding to Requests

In accordance with Article 13 of the Law on the Protection of Personal Data, our Company will process the requests made by the data subject to our Company, depending on the nature of the request, as soon as possible and no later than 30 (thirty) days free of charge. However, if the process requires an additional cost, the fee specified in the tariff determined by the Board may be requested from the data subject.

To ensure the security of your personal data, our Company may request information from the applicant for identification and authorization purposes.

The data subject's application may be rejected in the following cases:

1. Impairment of the rights and freedoms of others
2. Disproportionate effort
3. Information being publicly available
4. Jeopardizing the privacy of others
5. Existence of one of the cases falling outside the scope as per the Law on the Protection of Personal Data (See 2.2)

Please indicate your preference for how you would like to be informed of our Company's response to your application:

1	I want to receive the response in writing.
2	I prefer to receive it electronically.

In accordance with Article 14 of the Law on the Protection of Personal Data, if the request is rejected, the response is deemed inadequate, or if no response is received within the stipulated period, the data subject may lodge a complaint with the Board within 30 (thirty) days from the date of learning our Company's response and in any case within 60 (sixty) days from the date of application.

A complaint to the Board cannot be made without first applying to Supportive Servis Elektronik Elektrik Bilgisayar Teknoloji ve Sanayi Ticaret Ltd. Şti. as required by law.

Data Subject (Applicant):
Full Name:
Application Date:
Signature:
Contact Information: