Privacy Notice for Corporate Customer

Pursuant to the Personal Data Protection Law No. 6698 ("Law"), your personal data may be processed by RTW Bilişim ve Danışmanlık Anonim Şirketi ("Company"), as the data controller, within the scope specified below.

Purposes and Legal Grounds for Processing Personal Data

Your collected personal data may be processed for the purposes ("Purposes") listed below in accordance with the personal data processing conditions and purposes specified in Article 5 of the Law.

Based on the legal ground that processing is necessary for the legitimate interests of the data controller, provided that this processing shall not violate the fundamental rights and freedoms of the data subject;

• Carrying out the membership processes of the company for which you are an employee/authorized representative on the AI Agent TR platform ("Platform"),
• Performing all operational and technical activities for the performance of the services provided via the Platform, including the provision of AI-powered call center and customer management services to the company for which you are an employee/authorized representative,
• Fulfilling all obligations arising from the business relationship between our Company and the company for which you are an employee/authorized representative,
• Conducting the necessary activities and related business processes by our relevant business units for the performance of the commercial activities carried out between our Company and the company for which you are an employee/authorized representative,
• Planning and executing operational processes for the performance of the services provided via the Platform,
• Carrying out reporting processes,
• Conducting and managing legal affairs,
• Carrying out information security processes,
• Planning and executing corporate communication activities,
• Planning and executing customer satisfaction and corporate communication activities,
• Ensuring accuracy and up-to-date of data,
• Conducting finance and accounting activities,
• Planning and/or executing business continuity activities,
• Carrying out the sales and marketing activities of our products and services.

Based on the legal ground that processing is explicitly stipulated by law and is mandatory for the data controller to fulfill its legal obligations;

• Fulfillment of requests from official authorities,
• Providing information to authorized institutions as required by applicable legislation,
• Ensuring compliance with statutory data retention obligations,
• Responding to data subject requests in accordance with applicable legislation and carrying out the necessary procedures.

Based on the legal ground that processing is necessary for the establishment, exercise, or protection of a right;

• Receiving, evaluating, and resolving your requests, inquiries, complaints, and suggestions,
• Retaining records for the general statute of limitations period in order to constitute evidence in the event of any potential future disputes.

Based on your explicit consent;

• Processing your identity and contact data for the purpose of sending commercial electronic communications to you through your preferred communication channels.

Recipient Parties and Purposes for Transferring Personal Data

Your personal data collected may be transferred, within the scope of fulfilling the above-mentioned Purposes, to our suppliers from whom we receive services based on our legitimate interests, and to legally authorized public institutions and legally authorized private entities where explicitly stipulated by law and required for the fulfillment of our legal obligations, in accordance with the data processing conditions set out under Article 5 of the Law and the rules on the transfer of personal data specified under Article 8 of the Law.

Method of Collecting Personal Data

Your personal data is collected by our Company, within the scope of fulfilling the above-mentioned Purposes, in the physical environment via cargo/post, printed forms, and face-to-face meetings, and in the electronic environment via the Platform, the website https://aiagenttr.com/, email, online forms, and telephone.

Rights of the Data Subject under Article 11 of Law No. 6698

We hereby declare that as personal data subjects, you have the following rights set forth under Article 11 of the Law:

• To learn whether your personal data are being processed,
• To request information if your personal data have been processed,
• To learn the purpose of the processing of your personal data and whether they have been used accordingly,
• To learn which third parties domestic or abroad your personal data has been transferred to,
• To request rectification in case your personal data has been processed incompletely or inaccurately and to demand the operations in this regard be reported to third parties your personal data has been transferred to,
• To demand the erasure or destruction of your personal data if the reasons for the processing no longer exist even though it was processed in accordance with the Law and other relevant provisions and to demand the operations in this regard be reported to third parties your personal data has been transferred to,
• To object to negative consequences to you that are concluded, because of analysis of the processed personal data through solely automatic systems,
• To demand compensation for the damages that you have suffered as a result of an unlawful processing of your personal data.

You may convey your requests concerning your rights listed above, to our Company by filling out the Data Subject Application Form, your application will be concluded as soon as possible and no later than thirty (30) days, depending on the nature of the request and in principle, free of charge. However, if the process requires additional costs, a fee may be demanded according to the tariff determined by the Personal Data Protection Board.