We, as Garanti Factoring A.Ş., care about your security and in this context, we would like to inform you about “Law of Protection of Personal Data” legislated for the purpose of protection of fundamental rights and freedoms of individuals, in particular the right of privacy and protection of personal data.

INFORMATION ABOUT PROTECTION OF PERSONAL DATA

Pursuant to the Law on Protection of Personal Data no. 6698 (“KVKK”), we, the undersigned, as Garanti Factoring A.Ş. acting as Data Responsible for the purposes hereof, hereby declare that your personal data and information will be recorded, kept, and, and may be disclosed/transferred to third parties, or be classified, and be processed as otherwise as specified in KVKK, if and to the extent permitted by the applicable laws, and within the frame described herebelow.

Purposes and legal basis of processing of personal data: Your personal data will be processed for use in all kinds of products and services, also including those we can provide as an agency as per and under the Banking Law, Financial Leasing, Factoring and Financing Companies Law no.6361 and other applicable laws; and for recording identity, address and other required information for the sake of determination of information of the transaction owner; and for keeping all kinds of records and documents underlying the transaction in electronic media or on paper; and for compliance with information keeping, reporting and information obligations arising out of the applicable laws or stipulated by the Banking Regulation and Supervision Agency, the Turkish Central Bank and other authorities.

Persons/entities to whom your personal data may be transferred for the purposes cited above: Persons or entities permitted by the Banking Law, Financial Leasing, Factoring and Financing Companies Law no.6361 and other applicable laws and regulations are including, but not limited to, financial institutions listed in Article 73/4 of the Banking Law no. 5411, and other third parties; and public legal entities such as the Banking Regulation and Supervision Agency, the Capital Markets Board, and the Turkish Central Bank; and our main shareholders, our direct/indirect local/foreign subsidiaries and affiliates; and program partners, local/foreign banks and other third parties from whom we buy services and with whom we cooperate for conduct of our activities.

Method of collection of personal data: Your personal data may be collected verbally, in writing or via electronic media through all kinds of digital channels such as Head Offices, Branch Offices and call center.

Your rights arising out of article 11 of KVKK: You have the right to apply to our Company and (a) to learn whether your personal data and information are processed or not, and (b) if processed, to request information in connection therewith, and (c) to learn the purpose of processing and whether such data are used for the intended purposes or not, and (ç) to learn the identity of third parties who received such data at home or at abroad, and (d) if your data are underprocessed or misprocessed, to demand correction of them, and (e) to demand deletion/destruction of such data under the conditions specified in Article 7 of KVKK, and (f) to request notification of transactions effected pursuant to subparagraphs (d) and (e) hereinabove to persons to whom the data are transferred, and (g) to object against a result obtained in disfavor of you due to analysis of such data solely via automatic systems, and (ğ) if you incur damages due to processing of your data in violation of the laws, to demand indemnification of your damages.