KVKK Aydınlatma Metni

(Clarification Text on Protection of Personal Data)

As UTEK Engineering (“UTEK” or “Company”), we attach maximum importance to the security of your personal data in accordance with the Law on Protection of Personal Data No. 6698 (“KVKK”). In this context, as a data controller, we inform you about the processing of your personal data on the following issues.

1. Identity of the Data Controller

Data controller pursuant to KVKK:

You can reach UTEK via the communication channels on our website.

2. Processing Purposes of Your Personal Data

The main personal data categories processed by UTEK may be as follows:

• Identity information: (name, surname, etc.)
• Contact information: (phone number, e-mail address, etc.)
• Corporate information: (company you work for, title, etc.)
• Opinions and requests: (texts you submit via contact/proposal forms)
• Log and transaction records: (IP address, browser information, visit date and time, etc.)

This data is processed for;

• Execution of proposal and service delivery processes,
• Ensuring communication before and during the contract,
• Management of customer relations and technical support processes,
• Fulfillment of legal obligations,
• Evaluation of requests and complaints,
• Execution of information security, system security, and audit processes,
• Reporting and improvement works regarding UTEK's activities

purposes within the framework of data processing conditions and purposes specified in Articles 5 and 6 of KVKK.

3. Method and Legal Reason for Collecting Personal Data

Your personal data can be collected via;

• Contact/proposal forms you fill out on our website (utekmuhendislik.com.tr),
• E-mail, telephone, and other remote communication channels,
• Meeting, contract, and proposal processes carried out in physical environment

by automatic or partially automatic means or by non-automatic means.

This data is processed based on the legal reasons of KVKK;

• 5/2 (c) – It is directly related to the establishment or performance of a contract,
• 5/2 (ç) – It is mandatory for the data controller to fulfill its legal obligation,
• 5/2 (f) – Data processing is mandatory for our legitimate interests, provided that it does not harm the fundamental rights and freedoms of the data subject

reasons. In cases requiring explicit consent, your explicit consent is also obtained.

4. Parties to Whom Personal Data are Transferred and Transfer Purposes

Your personal data can be transferred to:

• Authorized public institutions and organizations (within the framework of legal obligation),
• Our business partners, suppliers, consultants when deemed necessary (e.g. law, finance, IT services),
• Companies from which we receive information technology services (hosting, backup, security, software, etc.)

in accordance with the above-mentioned purposes and KVKK.

In cases where data transfer abroad is required, action is taken by taking necessary legal and technical measures in accordance with Articles 8 and 9 of KVKK, and your explicit consent is obtained if necessary.

5. Retention Period of Personal Data

Your personal data is deemed to be stored in accordance with the storage periods stipulated in the relevant legislation and UTEK internal policies and procedures;

• For the period required by the relevant activity purpose,
• During the periods of limitation regarding joint rights and receivables,
• For the period during which relevant legal obligations continue

stored; at the end of these periods, it is deleted, destroyed, or anonymized in accordance with KVKK and relevant legislation.

6. Your Rights under KVKK

By applying to UTEK pursuant to Article 11 of KVKK, you have the right to;

• Learn whether your personal data is processed,
• Request information if processed,
• Learn the purpose of processing and whether they are used in accordance with their purpose,
• Know the third parties to whom it is transferred at home or abroad,
• Request correction if processed incompletely or incorrectly,
• Request deletion or destruction in accordance with KVKK,
• Request notification of the transactions within the scope of (5) and (6) above to third parties to whom data is transferred,
• Object to the occurrence of a result against you by analyzing the processed data exclusively through automated systems,
• Request compensation for damages in case of damage due to unlawful processing

rights.

7. Application Method

You can submit your requests within the scope of KVKK to UTEK in writing or through other methods determined by the Personal Data Protection Board in accordance with KVKK and relevant legislation. Your applications will be concluded as soon as possible and within 30 days at the latest depending on their nature.