Personal Data Protection Notice (KVKK)

1. Identity of the Data Controller

Within the scope of Law No. 6698 on the Protection of Personal Data ("KVKK"), your personal data is processed by Yaklaşım Mimarlık ve Yapı A.Ş. in its capacity as data controller. The contact details of the data controller are as follows: Address: Prof. Ahmet Taner Kışlalı Mahallesi, Kanuni Sultan Süleyman Bulvarı, Yeşil Altınkent Sitesi No: 7, Çankaya / Ankara, Türkiye Phone: +90 533 375 73 67 E-mail: info@yaklasimyapi.com Web: www.yaklasimyapi.com

2. Personal Data Processed

Within the scope of transactions carried out through our website and communication channels, the following personal data may be processed in order to conduct our activities and respond to your requests:

Identity Data: Name, surname and similar identity information. Contact Data: Telephone number, e-mail address, address and other information shared during communication. Customer and Request Data: Requests, messages, project information, and information shared within the scope of proposals and applications. Transaction Security Data: IP address, website access and exit records, log records and information obtained technically for the purpose of ensuring security. Visual and Audio Records: Photographs, video or other visual/audio records explicitly shared by the data subject during project, application or communication processes. Cookie and Usage Data: Cookie, browser and usage information obtained during use of the website in accordance with the relevant legislation and your preferences.

Personal data is processed limited to the conditions and purposes set out in the relevant legislation, and the necessary security measures are taken.

3. Purposes of Processing Personal Data

Your personal data is processed by Yaklaşım Mimarlık ve Yapı A.Ş. for the following purposes, in accordance with the conditions set out in the relevant legislation:

• —Evaluating and responding to contact and information requests submitted through the website,
• —Carrying out requests relating to our project, architecture, design, consultancy and other services,
• —Conducting proposal, contract and business processes,
• —Managing customer and business relationships,
• —Planning and conducting business activities and processes,
• —Fulfilling legal and regulatory obligations,
• —Ensuring the security of the website, detecting and resolving technical issues,
• —Conducting information security processes and preventing misuse,
• —Fulfilling legal obligations towards authorised persons, institutions and organisations.

Your personal data is not used outside the stated purposes or in a manner contrary to the relevant legislation.

4. Transfer of Personal Data

Your personal data may, where necessary and limited to the purposes of processing, be transferred to our business partners, suppliers from whom we receive services, technical service providers, consultants, authorised public institutions and organisations, and private law persons authorised by law, in accordance with the conditions set out in Articles 8 and 9 of the KVKK. Where transfer is necessary, your personal data is transferred with the necessary administrative and technical measures in place to protect data security and confidentiality. Where transfer abroad is concerned, the conditions and required safeguard mechanisms for transfer abroad set out in the KVKK are complied with.

5. Method and Legal Basis of Data Collection

Your personal data is collected by electronic or physical means within the scope of the use of our website, completion of contact forms, communication submitted to us via e-mail, telephone and other channels, and the establishment or conduct of contractual and business relationships. Your personal data is processed on the legal grounds set out in Article 5 of the KVKK: where expressly provided for by law; where directly related to the establishment or performance of a contract; where necessary for the data controller to fulfil a legal obligation; where data processing is mandatory for the establishment, exercise or protection of a right; and where processing is necessary for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject

• —and, where required, on the basis of your explicit consent.

The general principles set out in the KVKK and the relevant legislation are observed throughout the processing and collection of personal data.

6. Retention Period

Your personal data is retained for the retention periods set out in the relevant legislation or for as long as necessary for the purpose requiring its processing. The retention period is determined by taking into account the nature of the data, the purpose of processing, ongoing business and contractual relationships, legal obligations, limitation periods and the provisions of the relevant legislation. Upon expiry of the retention period or where the reasons requiring the processing of personal data cease to exist, personal data is deleted, destroyed or anonymised in accordance with the relevant legislation.

7. Rights of the Data Subject (KVKK Art. 11)

Within the scope of Article 11 of Law No. 6698 on the Protection of Personal Data, by applying to the data controller you have the right to:

• —Learn whether your personal data is being processed,
• —Request information if your personal data has been processed,
• —Learn the purpose of processing and whether the data is used in accordance with that purpose,
• —Know the third parties in Türkiye or abroad to whom your personal data has been transferred,
• —Request correction of your personal data if it has been processed incompletely or incorrectly,
• —Request the deletion or destruction of your personal data within the conditions set out in the KVKK,
• —Request that any correction, deletion or destruction be notified to the third parties to whom your personal data has been transferred,
• —Object to an outcome against you arising from the analysis of your processed personal data exclusively by automated systems,
• —Claim compensation if you suffer loss due to the unlawful processing of your personal data.

You may submit requests relating to these rights by applying to the data controller. Applications are evaluated and concluded in accordance with the procedures and principles set out in the relevant legislation.

8. How to Apply

You may submit requests relating to your rights under Article 11 of the KVKK to the Data Controller in accordance with Article 13 of Law No. 6698 on the Protection of Personal Data and the procedures and principles set out in the relevant legislation. You may submit your application:

• —In writing, to our address stated below,
• —Through a registered electronic mail (KEP) address,
• —Using a secure electronic signature or mobile signature,
• —From an e-mail address previously notified to us and registered in our system,
• —Through an application system or software developed in accordance with the legislation.

Data Controller: Yaklaşım Mimarlık ve Yapı A.Ş. Address: Prof. Ahmet Taner Kışlalı Mahallesi, Kanuni Sultan Süleyman Bulvarı, Yeşil Altınkent Sitesi No: 7, Çankaya / Ankara, Türkiye E-mail: info@yaklasimyapi.com

Your application must include your name and surname; your Turkish Republic identity number (for foreign nationals, nationality, passport number or identity number, if any); your address for notification; your e-mail address and telephone number, if any; and the subject of your request. Your applications are concluded as soon as possible and within 30 days at the latest, depending on the nature of the request. Where the application requires an additional cost, the fees set out in the relevant legislation may be charged.

9. Changes

This Personal Data Protection Notice may be updated in line with changes in the applicable legislation and in our company's practices. Changes take effect upon publication of the updated text on the website. The current text is always kept accessible through our website. Where there are significant changes regarding the processing of your personal data, separate notification may also be provided where necessary.