Clarification Text

1) Data Controller

This "Clarification Text" has been prepared by EAT Agency ("Company") in its capacity as the data controller, in accordance with the Turkish Personal Data Protection Law No. 6698 ("KVKK"), within the framework of Article 10 titled 'Obligation of the Data Controller to Inform' and Article 11 titled 'Rights of the Data Subject', to inform you about the methods, processing, use, transfer, and destruction of your personal data.

2) Purpose of Processing Your Personal Data

Your personal data will be processed in verbal, written, or electronic form in accordance with Articles 4, 5, and 6 of the KVKK for the following purposes:

To conduct our Human Resources processes and activities within the framework of the applicable legal requirements,
To plan, audit, and execute information security processes,
To establish and manage IT infrastructure,
To track finance and/or accounting operations,
To manage contracts, establish legal procedures, and monitor legal processes,
To ensure personnel security,
To conduct productivity and/or efficiency analyses of our commercial activities, plan and/or execute these activities,
To determine and implement commercial and business strategies,
To provide products and services and post-sales support services, and to manage customer relationship processes,
To address your requests and complaints,
To ensure that the Company fulfills its contractual and legal obligations properly,
To evaluate, respond to, and improve proposals, requests, complaints, and malfunction reports submitted through our website.

Your personal data will be processed within the scope of the legal obligations and responsibilities defined by the relevant legislation, as well as for the purposes of providing products and services, managing customer relations, fulfilling the Company's commercial activities, and conducting necessary work processes by the relevant business units. It will be securely stored in physical or electronic form for the appropriate duration.

3) Transfer of Your Personal Data

Personal data processed for the purposes mentioned above may be transferred in accordance with the conditions and purposes specified in Articles 8 and 9 of the KVKK.

4) Sharing Personal Data with Third Parties

The Company will only share your personal data in cases where explicit consent is provided, or when necessary according to the laws we are subject to, when it is required for the establishment or performance of a contract, when it is mandatory for legal obligations, or when it is necessary for legitimate interests, based on the provisions of the KVKK. Adequate security and confidentiality measures will be taken, and your data may be transferred to our direct/indirect/domestic/foreign affiliates, contracted legal and real persons, subcontractors, business partners, shareholders, legal, financial, and tax consultants, auditors, audit companies, or public institutions and organizations authorized by law in accordance with the conditions and purposes specified in Articles 8 and 9 of the KVKK.

5) Your Rights Under the Personal Data Protection Law

Unless otherwise stated in the exceptions in Article 28 of the KVKK, data subjects have the following rights under Article 11 of the KVKK:

To learn whether your personal data is being processed,
If your personal data has been processed, to request information about it,
To learn the purpose of processing your personal data and whether it is used in accordance with that purpose,
To know the third parties to whom your personal data is transferred, within or outside the country,
To request the correction of any incomplete or inaccurate personal data,
To request the deletion or destruction of your personal data under the conditions set forth in Article 7 of the KVKK,
To request notification of these actions (correction, deletion, or destruction) to third parties to whom your data has been transferred,
To object to any result that occurs due to the analysis of your personal data solely by automated systems, which produces a negative consequence for you,
To request compensation for damages arising from the unlawful processing of your personal data.

It is essential that the information/data you share with the Company is correct for the proper use of your rights. The responsibility for any incorrect or erroneous information lies with the party who provides the data.

Requests can be made in writing or via a registered electronic mail address, secure electronic signature, mobile signature, or the electronic mail address previously notified to the Company and registered in our systems. To make such a request, you must provide your full name, signature, T.C. identification number, address of residence or workplace, email address (if available), phone or fax number, and an explanation of the rights you wish to exercise, and you can deliver the request in person to our office at Altıntepe Mahallesi, İstiklalim Sokak, Apartman No: 23/A, Maltepe/ISTANBUL, send it via notary, or send it as an e-mail with an e-signature.

The Company will respond to your request within the legal period of 30 days. If the process of fulfilling these requests involves any additional costs, the Company will charge the applicant according to the tariff determined by the Regulatory Authority.

If someone other than the data subject wishes to make a request, a power of attorney specifically authorized by the data subject must be presented.