DISCLOSURE TEXT ON PERSONAL DATA

As RG Gayrimenkul İnşaat Otomotiv Sanayi ve Ticaret Yatırımları A.Ş. ("RGüzel Group" or "Company"), we attach importance to ensuring the security of your personal data. Your personal data is processed, stored and protected by RGüzel Group in accordance with the basic principles and personal data processing conditions set forth in the Law on Protection of Personal Data No. 6698 ("LPPD"). For this purpose, as a company that takes all kinds of measures for data protection and shows maximum sensitivity, we would like to inform you about the processing of your personal data.

Our Principles for Processing Personal Data

Your personal data is processed by us in the light of the following principles:

1. Compliance with the law and good faith,
2. Being accurate and, where necessary, up to date,
3. Processing for specific, explicit and legitimate purposes,
4. Being relevant, limited and proportionate to the purpose for which they are processed,
5. To be retained for the period stipulated in the relevant legislation or required for the purpose for which they are processed.

Disclosure Obligation

Article 10 of the LPPD requires data controllers to fulfill the obligation of disclosure when obtaining the consent of the data subjects whose data are processed. RGüzel Group, who has the title of "data controller" within the scope of the relevant article, refers to "data subjects":

1. the identity of the data controller and its representative, if any,
2. the purposes for which personal data are processed,
3. to whom and for what purpose the processed personal data may be transferred,
4. the method and legal reasons for the collection of personal data,
5. informs the data subject about the rights that the data subject may direct to the data controller pursuant to Article 11 of the LPPD.

The said information is realized with this Clarification Text and our explanations are given below.

Identity of the Data Controller

Pursuant to Article 3/1 (ı) of the LPPD, the data controller is defined as "natural or legal persons who determine the purposes and means of processing personal data and are responsible for the establishment and management of the data recording system". In this context, the Company is the data controller and the information of the Company is shared below in order to contact RGüzel regarding your personal data:

RG Gayrimenkul İnşaat Otomotiv Sanayi ve Ticaret Yatırımları A.Ş.
Topçular Mah. Aspendos Blv. 119-A 07200 Muratpaşa/Antalya /Turkey
ANT. KURUMLAR VD.-7350945418 TİC.SİC.NO:96594
E-mail address: info@rguzelgroup.com
Telephone: +90242 344 80 80

Processing and Purposes of Personal Data

Your personal data is processed only with your explicit consent or in the presence of one of the following cases of compliance with the law. These are;

• Explicitly stipulated in the law,
• It is mandatory for the protection of the life or physical integrity of the person who is unable to disclose his/her consent due to actual impossibility or whose consent is not legally valid, himself/herself or someone else,
• Provided that it is directly related to the conclusion or performance of a contract, it is necessary to process personal data of the parties to the contract,
• It is mandatory for the data controller to fulfill its legal obligation,
• It has been made public by the person concerned,
• Data processing is mandatory for the establishment, exercise or protection of a right,
• Data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject.

To whom and for what purpose the processed personal data can be transferred

Your personal data may be shared with business partners, public legal entities and judicial authorities within the scope of the purposes listed above and where necessary for the Company to fulfill its legal obligations.

In sharing your personal data, the regulations in Articles 8 and 9 of LPPD are complied with and all kinds of technical and administrative measures are taken to ensure data security during and after the sharing process.

Rights of the Relevant Person

As the person concerned, you can contact us about yourself;

• Learn whether personal data is being processed,
• Request information if their personal data has been processed,
• To learn the purpose of processing personal data and whether they are used for their intended purpose,
• To know the third parties to whom personal data is transferred domestically or abroad,
• To request correction of personal data in case of incomplete or incorrect processing,
• To request the deletion or destruction of personal data,
• To request notification to third parties about corrections or deletions,
• To object to automated decision-making that results in unfavorable consequences,
• In case of damage due to unlawful processing, demand compensation for the damage

you have the right to use your rights.

How Do We Protect?

All necessary technical and administrative measures are taken by our Company to protect the personal data collected and processed by the Company, to prevent unauthorized access and to prevent the real and legal persons with whom the Company cooperates from being victimized.

Right to Apply and Obtain Information

In relation to personal data, within the scope of Article 11 of the LPPD, if any of the rights described above are desired to be exercised, an application may be made to the Company. This application should be made to the Company in writing or by other methods determined by the Board.

Please fill out the application form;

• In person at the above-mentioned address of the Company (the applicant must come in person and fill out the application form with his/her ID card),
• By sending it to the Company address via notary or registered mail,
• By using secure electronic signature, mobile signature or the electronic mail address previously notified to us by the relevant person and registered in the Company's system to the Company's registered e-mail address specified above or
• Please fill in the section of our website below and send it electronically.

Pursuant to Article 13/2 of the LPPD, you will be responded to within 30 (thirty) days from the date the applications are received by the Company. Our response will be delivered to you in writing or electronically.