KVKK Privacy Notice.

Purpose and Scope

This privacy notice has been prepared under Article 10 of Law No. 6698 on the Protection of Personal Data ("KVKK"). As Forbayt Technology (hereinafter the "Company"), we explain for which purposes and by which methods your personal data is processed, and what your rights are.

Data Controller

Categories of Personal Data Processed

The categories of personal data we process are:

• Identity: First name, last name, Turkish ID number (TCKN) (where required by a contract)
• Contact: Email, phone, address
• Customer transactions: Invoice and request details
• Transaction Security: IP address, log records
• Marketing: Cookie data based on explicit consent
• Professional background: CV details, where you submit an application

Purposes of Processing

Your personal data is processed for the following purposes:

• Carrying out business activities
• Managing contract processes
• Managing requests and complaints
• Procurement of goods / services
• Conducting communication activities
• Ensuring legal compliance
• Conducting information security processes
• Human resources processes (applications)

Collection Method and Legal Grounds

Your personal data is collected through:

• Website forms
• Email, phone and WhatsApp channels
• Face-to-face meetings
• Contract documents
• Cookies and similar technologies

on the legal grounds of explicit consent, performance of a contract, legal obligation and legitimate interests under Article 5 of the KVKK.

To Whom and for What Purpose May Data Be Transferred?

Your personal data may be transferred to the following groups of recipients for the purposes stated:

• Authorized public institutions and organizations: Where required by law (Social Security Institution (SGK), tax offices, courts)
• Service providers: Suppliers of hosting, email and infrastructure services, under confidentiality obligations
• Business partners: Only to the extent necessary to deliver the service
• Transfers abroad: Where necessary, in line with the conditions set out in the applicable legislation

Rights of the Data Subject (KVKK Art. 11)

Under Article 11 of the KVKK, every data subject has the right:

1. To learn whether their personal data is processed
2. To request information about the processing, if their data has been processed
3. To learn the purpose of the processing and whether the data is used in line with that purpose
4. To know the third parties in Türkiye or abroad to whom the data is transferred
5. To request rectification if the data has been processed incompletely or inaccurately
6. To request erasure / destruction of the data under Article 7 of the KVKK
7. To request that the actions taken under paragraphs 5 and 6 be notified to third parties
8. To object to analysis carried out exclusively by automated systems
9. To claim compensation for damage arising from unlawful processing

How to Apply

To exercise your rights, you may apply through the following channels in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller:

• Email: kvkk@forbayt.com
• Post: With a wet-signed application form — Forbayt Technology, Bağlarbaşı Mah., Bağdat Cad. No:370, Maltepe / Istanbul
• Notary: A formal notice served through a notary public

Your application must include the following information:

• First name, last name and, for written applications, a signature
• Turkish ID number (TCKN) or, for foreign nationals, nationality and passport / ID number
• Address for notifications
• Subject of the request
• Supporting information/documents, if any

Your application will be concluded free of charge within 30 days at the latest. In certain cases (where the action entails an additional cost), a fee may be charged according to the tariff set by the Board.

If your request is rejected or you do not receive a satisfactory response, you may file a complaint with the Personal Data Protection Board.