INFINITYQ ADVANCED TECHNOLOGY AND ARTIFICIAL INTELLIGENCE SYSTEMS INDUSTRY AND TRADE JOINT STOCK COMPANY

PRIVACY NOTICE FOR DATA SUBJECT APPLICATIONS

This Privacy Notice has been prepared in accordance with Article 10 of Law No. 6698 on the Protection of Personal Data (the “KVKK” or the “Law”) and the Communiqué on the Procedures and Principles to Be Followed in Fulfilling the Disclosure Obligation.

As INFINITYQ ADVANCED TECHNOLOGY AND ARTIFICIAL INTELLIGENCE SYSTEMS INDUSTRY AND TRADE JOINT STOCK COMPANY (the “Data Controller” or “InfinityQ”), we attach importance to the protection and processing of your personal data and to ensuring its security. In this context, we show sensitivity in processing and retaining all kinds of collected personal data in accordance with the KVKK and its secondary regulations.

Being aware that, as set out in the KVKK, we are responsible in the capacity of “Data Controller” for the personal data processed by the Data Controller or upon the Data Controller’s instruction, your personal data is processed as explained below and within the limitations permitted by the legislation.

1. Data Controller

Pursuant to Law No. 6698, your personal data may be processed by INFINITYQ ADVANCED TECHNOLOGY AND ARTIFICIAL INTELLIGENCE SYSTEMS INDUSTRY AND TRADE JOINT STOCK COMPANY as the “Data Controller” within the scope explained below.

2. Collection and Processing of Personal Data and Processing Purposes

Data Processing Activity Data Subject Data Category Processing Purpose Collection Method Legal Basis
Carrying out the processes related to data subject applications submitted to the Data Controller within the scope of Article 11 of the Law on the Protection of Personal Data Applicant Data Subject Identity (Name and Surname, Turkish ID Number, Passport Number, Nationality); Contact (Residence Address, Workplace Address, Email Address, Phone Number, Fax Number) · Carrying out activities in compliance with the legislation
· Ensuring the security of Data Controller operations
· Carrying out communication activities
Directly from the data subject, physically or electronically KVKK Art. 5/2-(a) — Being expressly provided for in the laws.

Your personal data is processed in compliance with the principles of lawfulness and good faith; in an accurate and, where necessary, up-to-date manner; for specified, explicit and legitimate purposes; in connection with and limited to those purposes; and is retained for the periods stipulated in the relevant legislation or for the period necessary for the processing purpose.

3. Transfer of Personal Data to Third Parties and Transfer Purposes

In order to fulfil the purposes set out in Article 2 above, your collected personal data may be transferred — within the scope of our legitimate interests — to our domestic business partners and to the suppliers from whom we receive services; and — within the scope of being expressly provided for in the laws and the fulfilment of our legal obligations — to public institutions legally authorized and to legally authorized private persons, in accordance with the data processing conditions set out in Article 5 of the Law and the rules on the transfer of personal data set out in Article 8 of the Law.

4. Your Rights as a Data Subject

As a data subject, if you submit your requests under Article 11 of the KVKK regarding your personal data processed by us, in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller and via the methods stated below, the Data Controller will conclude your request as quickly as possible and within thirty days at the latest, free of charge, depending on the nature of the request. However, a fee may be charged if stipulated by the Personal Data Protection Board.

Pursuant to Article 13(1) of the KVKK, in order to exercise the rights stated above, you may submit your request to InfinityQ by filling in the “Data Subject Application Form” that you can access via the InfinityQ website.