PDPL Disclosure Text

INFORMATION NOTICE REGARDING THE PROCESSING OF PERSONAL DATA

1. Introduction
This information and consent text has been prepared by Kalyon Solar Technologies Production Inc. (“Our Company”), acting in the capacity of data controller, together with other group companies, in compliance with the Personal Data Protection Law No. 6698 (“Law”), with the purpose of obtaining the explicit consent of data subjects regarding the processing of personal data and special categories of personal data, and informing data subjects about the matters stipulated in Article 10 of the Law during the collection of personal data and the rights of the data subjects stipulated in Article 11.
2. Definitions
The concepts of personal data, special categories of personal data, and data processing used in this information and consent text are employed in accordance with the definitions set forth in the Law. As defined in the Law:

• The term “Personal Data” refers to any information relating to an identified or identifiable natural person.
• The term “Processing of Personal Data” refers to any operation performed on personal data, whether fully or partially by automatic means, or by non-automatic means provided that it is part of a data recording system, such as obtaining, recording, storing, retaining, altering, re-arranging, disclosing, transferring, taking over, making available, classifying, or preventing the use of data.

3. Principles of Processing Personal Data
Pursuant to Article 4 of the Law, personal data belonging to the data subject will be processed by our Company within the purposes specified below in accordance with the principles of: processing lawfully and fairly; being accurate and up to date when necessary; being processed for specific, explicit, and legitimate purposes; being relevant, limited, and proportionate to the purpose for which they are processed; and being retained for the period required by relevant legislation or for the purpose for which they are processed.

4. Purposes of Processing Personal Data
The personal data collected will be processed in accordance with the conditions and purposes for processing personal data specified in Articles 5 and 6 of the Law, for purposes such as: enabling you to benefit from the products and services offered by our Company and our group companies; customizing the products and services offered by our Company and our group companies according to your preferences, usage habits, and needs and recommending them to you; ensuring the legal and commercial security of our Company, our group companies, and individuals in business relations with our Company; conducting administrative operations related to communication carried out by our Company; ensuring the physical security and supervision of locations belonging to our Company; evaluation, reputation research, compliance, and financial processes related to business partners, customers, suppliers, and/or their authorized persons or employees; ensuring the determination and implementation of our Company’s commercial business strategies; and ensuring the implementation of our Company’s human resources policies.

5. Transfer of Personal Data
Your personal data collected may be transferred to our group companies and to natural or legal persons with whom our Company has business relations, in accordance with the conditions set forth in Articles 8 and 9 of the Law, for purposes such as: enabling you to benefit from the products and services offered by our Company and our group companies; customizing the products and services offered by our Company and our group companies according to your preferences, usage habits, and needs and recommending them to you; ensuring the legal and commercial security of our Company, our group companies, and individuals in business relations with our Company; conducting administrative operations related to communication carried out by our Company; ensuring the physical security and supervision of locations belonging to our Company; evaluation, reputation research, compliance, and financial processes related to business partners, customers, suppliers, and/or their authorized persons or employees; ensuring the determination and implementation of our Company’s commercial business strategies; and ensuring the implementation of our Company’s human resources policies.

6. Method and Legal Grounds for Collecting Personal Data / Special Categories of Personal Data
Your personal data may vary depending on the services provided by our Company and our Company’s commercial activities, and may be collected automatically or non-automatically, in writing or electronically, through our Company’s units and offices, group companies, website, social media platforms, mobile applications, and similar channels. As long as you benefit from the products and services offered by our Company and our group companies, your personal data may be processed in accordance with the periods stipulated by the law.

7. Rights of the Data Subject as Stipulated in Article 11
Data subjects may apply to our Company, acting as the data controller, and exercise the following rights regarding themselves: to learn whether personal data is being processed; to request information if personal data has been processed; to learn the purpose of processing personal data and whether they are used in accordance with their purpose; to be informed about the third parties to whom personal data is transferred domestically or abroad; to request the correction of personal data if they are incomplete or incorrectly processed; to request the deletion or destruction of personal data within the framework of the conditions stipulated in Article 7 of the Law; to request notification to third parties to whom personal data has been transferred regarding the correction, deletion, or destruction of personal data; to object to the occurrence of a result against the person through the exclusive analysis of processed data by automated systems; and to request compensation if personal data is unlawfully processed and causes damage.