This Information and Elucidation form is prepared in connection with processing and transfer of “Personal Data” of real persons under the Law on the Protection of Personal Data numbered 6698 (“PPD Law”). All your current information that you shared with our company under the law numbered 6698 will be considered “Personal Data”.

Security of your personal data is very important for us and your personal data will be stored in accordance with the conditions set forth in the applicable legislation in the most secure manner and for the statutory time period required under that legislation.


a) Data controller

TMS, acting in the capacity of “Data Controller”, will process your personal data within the scope of the following conditions under the Law on the Protection of Personal Data numbered 6698 (“PPD Law”).


b) Purposes of Processing Personal Data

Your personal data collected by us will be processed in accordance with the conditions and purposes of processing Personal Data as required under articles 5 and 6 of PPD Law numbered 6698 in order for our company as well as the real and legal entities in connection with our company to perform their liabilities, to notify you about the updates, to remind and ensure performance of the legal liabilities of the parties with regards to the execution of contracts sign with you, to engage in various advertisement and marketing practices, to have your opinions through questionnaires and polls, to determine products, projects and services suitable for you, to customize and improve such products, projects and services, to offer efficient customer services, to inform you on any changes to the in-company policies that may concern you or make any other notifications relevant to you, to inform you via electronic mail, SMS or facsimile, to inform you of campaigns, to send printed bulletins, magazines or letters about campaigns, to determine the visitor profile, to assess your requests, demands and complaints, to manage our human resources policies and to answer any questions you may have.


c) To Whom and For Which Purpose the Processed Personal Data May be Transferred

In addition, your personal data collected hereunder may, if and to the extent required for achievement of the purposes listed in paragraph (b) of this Notice, be transferred to our direct/indirect local/foreign subsidiaries or affiliates, local/foreign/international public/private organizations, corporations, companies and other third parties that our company procures services/support/advice from or cooperates with or our company is a project/program/financing partner of, as well as affiliates, consultants, shareholders or solution partners and other legally authorized public entities and administrations and suppliers or subcontractors thereof within the framework of the personal data processing conditions and purposes set forth in Articles 8 and 9 of the Law no. 6698. TMS may further process or keep such data on servers or electronic environment in Turkey or abroad, provided that it takes necessary security measures.

ç) Methods and Legal Reasons of Processing Personal Data

Your Personal Data may be collected or obtained by our Company via different channels (including headquarters, agencies, sales offices of TMS and other physical environments, call centers, internet sites, websites, mobile applications and similar electronic platforms, promotions, launches and donations organized on social media and other publicly available media, your participation into training sessions, conferences, etc. or recording on written, verbal, audio or video basis through other group companies or contracted persons and entities or other physical and electronic environments etc.). Your Personal Data will be collected, transferred and processed based on your explicit consent for the purposes set forth under clauses (b) and (c) of this notice within the scope of the articles 5 and 6 of the PPD Law.

Your personal data will be stored in accordance with the conditions set forth in the applicable legislation and for the statutory time period required under that legislation.


d) Rights Available to You in Connection with Your Personal Data

If you, as personal data owner, send us your requests regarding your rights by any one of the methods set down, provided that you prove your identification, your demand will be met without a charge as soon as possible, but in any case within thirty days at the latest, depending upon the nature of your demand. However, in case it is required to charge you by the Personal Data Protection Board, you will be charged the fees shown in the tariff rates determined by the Board. Now and therefore, personal data holders have the following rights:


o Learning whether Personal Data was processed,

o Demanding information on the Personal Data so processed,

o Learning specific purpose of processing and whether processed Personal Data was used for the intended purpose,

o Learning the identity of third persons to whom Personal Data was transferred in and out of the country,

o Demanding correction of Personal Data processed inaccurately or deficiently and notification of the third persons to whom Personal Data was transferred about this correction,

o Demanding deletion or destruction of Personal Data processed in accordance with PPD Law numbered 6698 and other laws upon termination of specific reasons of processing and notification of the third persons to whom Personal Data was transferred about this deletion or destruction,

o Objecting to the negative consequences arising from the analysis of Personal Data only by automated means,

o Claiming remedy for the losses and damages incurred by you because of illegal processing of Personal Data.

Acting in our capacity of the ‘Data Controller’ as defined in the PPD Law Number 6698 Article 11, we hereby notify you that you may send your requests regarding implementation of the Law as well as processing of your personal data to our e-mail address with your secure electronic signature or mobile signature or to our

mailing address Ramazanoğlu Mah. Yerel Sok. No:1/1 Pendik/İstanbul (through notary public or registered mail). In addition, if your previously provided e-mail address is registered in our system, you can also use this e-mail address to send your requests. As per the provisions of Article 5 of the Communique on Principles and Methods of Application to the Data Controller, you are required to provide your first name, last name and, in case you apply in writing, your signature, your Turkish ID number if you are a Turkish citizen, otherwise your passport number or ID number, your home or work address for notification as well as your notification e-mail address, if any, telephone number, fax number and the subject of your request.