2. Purposes of Processing Personal Data

Your personal data may be processed by the Company for the following purposes:

• Execution of commercial operations in accordance with legislation and internal policies,
• Planning and implementation of short, medium, and long-term commercial strategies,
• Design and execution of human resources activities,
• Fulfillment of legal obligations,
• Management of customer relations and corporate communication,
• Ensuring the legal and commercial safety of the Company and its business partners.

Personal data is processed in a manner that is lawful, fair, and connected, limited, and proportionate to the above purposes.

3. Transfer of Personal Data

To ensure the continuity of business processes and for the realization of the purposes outlined above, personal data may be shared in compliance with Articles 8 and 9 of the Law with:

• Authorized public institutions,
• Judicial and administrative authorities,
• Private legal and natural persons permitted by law,
• Auditors, payment institutions, business partners, and suppliers,
• Group companies for operational coordination and legitimate interest purposes.

All transfers are conducted with necessary and sufficient data security measures.

4. Collection Methods and Legal Basis

Your personal data may be collected verbally, in writing, or electronically through automatic or non-automatic means by authorized Company personnel. The processing is based on the following legal grounds under Article 5/2 (a, c, ç, d, e, f) of the Law:

• Explicitly provided for by law,
• Necessary for the performance of a contract,
• Legal obligation of the data controller,
• Publicly disclosed by the data subject,
• Establishment, exercise, or defense of legal claims,
• Legitimate interests of the data controller without harming fundamental rights and freedoms.

Health data, categorized as sensitive personal data, is processed solely by workplace health and safety professionals under confidentiality obligations in accordance with Article 6/3 of the Law.

Marketing-related data may be processed with your explicit consent for advertising, campaigns, and promotional communications.

5. Rights of the Data Subject

Under Article 11 of the Law, you may apply to the Company at any time to:

• Learn whether your personal data is being processed,
• Request information on such processing,
• Learn the purpose and whether it is used appropriately,
• Know the third parties to whom it is transferred domestically or internationally,
• Request correction of incomplete or inaccurate data,
• Request deletion or destruction under Article 7,
• Request notification of such actions to third parties,
• Object to adverse results arising from automatic processing,
• Demand compensation if you suffer damages due to unlawful processing.

To exercise your rights, you may fill out the application form available at http://bizimsirket.net and submit it via:

• Notary or registered mail to: Kore Şehitleri Cad. Ütğm. Mehmet Gönenç Sk. No:3 Şişli/Istanbul

• Secure electronic signature or mobile signature to:
  • bizimsirket@hs01.kep.tr
  • info@bizimsirket.net
  • kvkk@bizimsirket.net

For written responses, the first 10 pages are free of charge; a fee of 1 TL per additional page may be charged. If the response is provided on media such as CD or USB, the cost of such media may be charged.

Incomplete applications will be rejected. Your application must include: name-surname, signature, ID number, address, email, phone/fax number, and the details of the request.

6. Updates and Changes

Nuance Group reserves the right to make changes to this notice due to legal obligations or decisions of the Board. Any updates will be effective as of the date of notification.