Personal Data Protection and Information Notice

3. 3-Purposes of Processing Personal Data

Your personal data obtained within the scope of your relationship with JOKER OFIS is processed for the following purposes:

• ●Pursuing and executing legal affairs,
• ●Uploading customer information into the system for the purpose of conducting archive activities,
• ●Conducting financial and accounting affairs,
• ●Conducting advertising/campaign/promotion processes,
• ●Executing contract processes,
• ●Preparing Monthly Withholding Tax Declarations,
• ●Conducting the process of tracking requests and complaints,
• ●Preparing power of attorney on behalf of third parties (lawyers, company personnel, financial consultants, environmental consultants)
• ●Ensuring the security of movable assets and resources,
• ●Conducting activities in compliance with legislation,
• ●Conducting the wage policy,
• ●Conducting marketing processes for products/services, • Conducting the process of purchasing goods/services, • Conducting the process of selling goods/services,
• ●Conducting marketing and analysis studies,
• ●Providing physical space security,
• ●Conducting logistics activities,
• ●Conducting strategic planning activities,

4. 4-Transfer of Processed Personal Data

In accordance with the provisions of the Law regarding the transfer and cross-border transfer of personal data, your personal data may be transferred to domestic official institutions and organizations, law enforcement authorities, courts and enforcement offices, related third- party individuals and legal entities, service provider companies and authorities, business partners, banks, our company’s shareholders, our group companies and subsidiaries, suppliers, and support service providers for the purposes stated in Article 3 of this Information Notice.

5. 5-Methods of Collecting Personal Data and Legal Grounds

JOKER OFIS is collected, stored, and processed based on the legal grounds stated in Articles 5, 6, and 8 of the Law, and the purposes listed above, from you, third parties, and legal authorities, through the internet, phone, email, physical, written, verbal, and electronic media. The legal grounds for collecting, storing, and processing your personal data include:

• ●Obtaining explicit consent,
• ●Explicitly provided for in the relevant legislation applicable to our Company, including the Tax Procedure Law, the Turkish Civil Code, and the Turkish Commercial Code,
• ●Ensuring compliance with principles and standards regarding the recognition of customers at national and international levels, and compliance with obligations of information storage, reporting, and disclosure prescribed by legislation and official authorities,
• ●Necessity for the establishment, performance, or execution of a contract, provided that it is directly related to the parties of the contract,
• ●Obligation to fulfill a legal requirement,
• ●Personal data is publicly disclosed by the data subject,
• ●Necessity for the establishment, exercise, or protection of any right,
• ●Necessity for the legitimate interests pursued by the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject. Special category personal data are collected, stored, and processed based on the legal grounds mentioned below:
• ●Obtaining explicit consent,
• ●Health-related personal data, except for health data, without requiring explicit consent in cases provided by laws,
• ●Health-related personal data can be processed without explicit consent only by persons or authorized institutions and organizations under the obligation of confidentiality for the purpose of protecting public health, practicing preventive medicine, performing medical diagnosis, treatment, and care services, planning and managing health services and their financing.

6. 6-Rights of the Data Subject Whose Personal Data is Processed According to Article 11 of the Law, you have the following rights regarding your personal data:

• ●Learn whether personal data is being processed,
• ●Request information about whether personal data has been processed,
• ●Learn the purpose of processing personal data and whether they are used for their purpose,
• ●Know the third parties to whom personal data are transferred, whether domestically or abroad,
• ●Request correction of personal data if it is incomplete or incorrectly processed,
• ●Request the deletion or destruction of personal data in accordance with the conditions set out in the relevant legislation,
• ●Request notification of the operations performed as a result of the correction, deletion, or destruction of personal data to third parties to whom personal data have been transferred,
• ●Object to the occurrence of a result against you by analyzing the processed data exclusively through automated systems,
• ●Request compensation for the damages suffered due to the illegal processing of personal data.