Privacy Notice for Potential Customer

Pursuant to the Personal Data Protection Law No. 6698 ("Law"), your personal data may be processed by RTW Bilişim ve Danışmanlık Anonim Şirketi ("Company"), acting as the data controller, within the scope specified below.

Purposes and Legal Grounds for Processing Personal Data

Your collected personal data may be processed for the purposes ("Purposes") listed below in accordance with the personal data processing conditions and purposes specified in Article 5 of the Law.

Based on the legal ground that processing is necessary for the legitimate interests of the data controller, provided that this processing shall not violate the fundamental rights and freedoms of the data subject;

• Receiving and evaluating your applications and requests submitted to us for the purpose of benefiting from the products and services offered by our Company, and providing you with the necessary offers and information within this scope,
• Planning or executing potential customer relationship management processes,
• Receiving, evaluating, and resolving your requests, suggestions, and inquiries, and planning and executing the necessary activities with the relevant business units and parties for this purpose,
• Conducting and managing legal affairs,
• Carrying out information security processes,
• Planning and executing corporate communication activities,
• Planning and executing customer satisfaction and corporate communication activities,
• Carrying out the sales and marketing activities of our products and services,
• Enabling you to benefit from the functionalities of the website https://aiagenttr.com/.

Based on the legal ground that processing is explicitly stipulated by law and is mandatory for the data controller to fulfill its legal obligations;

• Fulfillment of requests from official authorities,
• Providing information to authorized institutions as required by applicable legislation,
• Ensuring compliance with statutory data retention obligations,
• Responding to data subject requests in accordance with applicable legislation and carrying out the necessary procedures.

Based on the legal ground that processing is necessary for the establishment, exercise, or protection of a right;

• Receiving, evaluating, and resolving your requests, inquiries, complaints, and suggestions,
• Retaining records for the general statute of limitations period in order to constitute evidence in the event of any potential future disputes.

Based on your explicit consent;

• Processing your identity and contact data for the purpose of sending commercial electronic communications to you through your preferred communication channels.

Recipient Parties and Purposes for Transferring Personal Data

Your personal data collected may be transferred, within the scope of fulfilling the above-mentioned Purposes, to our suppliers from whom we receive services based on our legitimate interests, and to legally authorized public institutions and legally authorized private entities where explicitly stipulated by law and required for the fulfillment of our legal obligations, in accordance with the data processing conditions set out under Article 5 of the Law and the rules on the transfer of personal data specified under Article 8 of the Law.

Method of Collecting Personal Data

Your personal data is collected by our Company, within the scope of fulfilling the above-mentioned Purposes, in the physical environment via cargo/post, printed forms, and face-to-face meetings, and in the electronic environment via AI Agent TR Platform, the website https://aiagenttr.com/, email, online forms, and telephone.

Rights of the Data Subject under Article 11 of Law No. 6698

We hereby declare that as personal data subjects, you have the following rights set forth under Article 11 of the Law:

• To learn whether your personal data is being processed,
• To request information if your personal data have been processed,
• To learn the purpose of the processing of your personal data and whether they have been used accordingly,
• To learn which third parties domestic or abroad your personal data has been transferred to,
• To request rectification in case your personal data has been processed incompletely or inaccurately and to demand the operations in this regard be reported to third parties your personal data has been transferred to,
• To demand the erasure or destruction of your personal data if the reasons for the processing no longer exist even though it was processed in accordance with the Law and other relevant provisions and to demand the operations in this regard be reported to third parties your personal data has been transferred to,
• To object to negative consequences to you that are concluded, because of analysis of the processed personal data through solely automatic systems,
• To demand compensation for the damages that you have suffered as a result of an unlawful processing of your personal data.

You may convey your requests concerning your rights listed above, to our Company by filling out the Data Subject Application Form, your application will be concluded as soon as possible and no later than thirty (30) days, depending on the nature of the request and in principle, free of charge. However, if the process requires additional costs, a fee may be demanded according to the tariff determined by the Personal Data Protection Board.