Under the Law on Protection of Personal Data

Personal Data refers to any information belonging to an identified or identifiable natural person, communicated by the parties to each other within the scope of this agreement, and is classified as Confidential Information. In cases where one of the parties processes Personal Data on behalf of the other Party, the relevant Party will be considered as a “data processor” within the scope of the Law on the Protection of Personal Data No. 6698 (the “Law”). In these cases, the said Party is obliged to process the Personal Data exclusively in accordance with the instructions of the other Party.

The Party that processes the data and/or transfers the Personal Data to a third party with the data controller, without prejudice to the exceptions stipulated in the Law, that the necessary explicit and informed consent is obtained from the relevant data owners within the scope of the Law, and within this scope, the necessary information is given to the relevant data owners within the scope of Article 10 of the Law. declares it done. Personal Data may be processed by the Party to which the data is transferred, exclusively for the purpose of transferring the data to itself. Any processing of Personal Data beyond the aforementioned scope is subject to the written consent of the Party transferring the data.

Personal Data transferred during the contract period will be deleted or destroyed in accordance with the relevant legislation upon the termination of the relationship between the Parties, unless a separate legal/contractual relationship is established with the relevant data owner. In the event that each of the Parties has a legal obligation to keep Personal Data, the Party that is obliged to keep the Personal Data may keep the Personal Data for a limited time and purpose within the scope of the relevant legislation.

Without prejudice to the exceptional circumstances arising from the legislation, the requests of the Data Subject against the Data Controller also bind the other Party.

Each party declares, accepts and undertakes that it will fully and completely fulfill all obligations stipulated by the Law, relevant legislation and the Personal Data Protection Board, otherwise it will be responsible for all damages.

In case the Personal Data is transferred to a third party in accordance with the relevant provision of this Agreement, the Party transferring the Personal Data is responsible for ensuring the data transfer is secure.

In the event that changes in the relevant legislation require the amendment of this Agreement, the Parties accept, declare and undertake that they will make reasonable efforts to make such changes as soon as possible. However, the provision of the Contract that needs to be amended will be implemented in accordance with the new/current legislation as of the effective date of the new/current legal regulation, even if no action has been taken by the Parties in this regard within the maximum period deemed appropriate in the relevant legislation.