MEMBER CLARIFICATION TEXT ON THE PROTECTION OF PERSONAL DATA

The personal data of all our members will be recorded, classified, stored and updated in accordance with the Law within the scope of the Law on the Protection of Personal Data No. 6698 (the “Law”), and will be processed within the framework of the processing conditions listed in the Law, and will be transferred to third parties , especially on the principle of protecting the privacy of private life, in cases and to the extent permitted by the legislation by Kobi Uluslararası Tanıtım ve Dağıtım Hizmetleri Sanayi Ticaret Anonim Şirketi (“Company”) as data controller.

This Clarification Text has been prepared in compliance with in particular the Law, and the relevant legislation in force and the rules shown in the regulations, notices, decisions, and guidelines published by the Board. In case there is a change in the Law or other relevant legislation after the publication date of the Clarification Text, and the Clarification Text becomes incompatible with said change, amended provisions and rules will find the area of application.

1. RELEVANT PERSON

The relevant persons within the scope of this Clarification Text are all real persons within the members.

2. THE IDENTITY OF DATA CONTROLLER AND ITS REPRESENTATIVE

In accordance with the law, Your personal data will be collected and processed by Kobi Uluslararası Tanıtım ve Dağıtım Hizmetleri Sanayi Ticaret Anonim Şirketi as the data controller within the scope described below. You can contact the Company Contact Person via the e-mail address kvk@turkishexporter.net for your questions regarding the processing of your personal data.

3. PURPOSE OF PROCESSING PERSONAL DATA, METHODS OF COLLECTION, and LEGAL REASONS

The Company will be able to record, store, update, transfer to third parties, classify, and process your personal data in compliance with the conditions set forth under the heading "conditions for processing personal data" in Article 5 of the Law.

1. Data Processing Activity: Execution of Membership Processes
Processed Personal Data (1)

Identity Data (Name Surname, T.R. Identity No., Gender, Signature Circular*)

*Signature circular is only required when research is required for security reasons.

Contact Information (Country, Telephone Number, E-Mail)

Company Data (Company Name, Company Type, Tax Number) *This data is considered as personal data only when the members are private companies.

Other Company Data (Company Official Name-Surname, Foreign Trade Authority Name-Surname)

In the case of payments made by proxy, the Paying Person's (Name-Surname, T.R. Identity Number, Name of the company he/she made the payment by proxy)

Personal Data Processing Purposes

• Execution of Membership Registration Procedures

• Execution of Communication Processes

• Verification in Case of Any Dispute, Confirmation of Information

• Ensuring the Security of Data Controller Operations

• Execution of Information Security Processes

• Execution of Access Authorities

• Advertisement of Exporting Companies through Turkish Exporter

• Execution of Advertising / Campaign / Promotion Processes

• Execution of Storage and Archive Activities

• Execution of Contract Processes

• Execution of Product and Service Marketing Processes

• Providing Information to Authorized Persons, Institutions, and Organizations

• Execution of After-Sales Support Services

• Execution of Service Sales Processes

• Execution of Service Production and Operation Processes

• Execution of Customer Relationship Management Processes

• Carrying out the Activities for Customer Satisfaction

• Inclusion of a Registered User in Groups on Whatsapp and Similar Social Media

• Posting Ads and Requests of Registered Users on Whatsapp and Similar Social Media

• All Kinds of Sharing to Accelerate and/or Announce Sales

• Announcement of Dangerous/Suspicious Announcements and Institutions

• Carrying out the Activities of Making the Advertisements Publishable

• Execution of Registration Suspension/Cancellation Processes

• Execution of Identity Authentication Processes*

• Execution of Institution Verification Processes*

• Execution of Institutional Official Appointment Procedures

• Recording of Shared Personal Data in the Global Recipient Database

• Sharing the Information of Registered Users with Other Users

• Identification and Removal of Shares that do not comply with the User Agreement, are Logically Inappropriate, Do Not Suitable for the Purpose of Creation and Use of the Website

• Execution and Supervision of Business Activities,

• Execution of Business Continuity Ensuring Activities,

• Organization Event Management,

• Execution of Legal Affairs,

• Tracking Requests and Complaints

*Turkish Exporter is a web-based electronic platform created solely for exchanging information with Buyers and Sellers, and is not responsible for controlling the accuracy of the personal data shared by the parties.

Processed Personal Data (2)

Financial Data (Card Number, Name and Surname on the Card, CCV, Expiry Month-Year Date, IBAN Information, Transaction Time, Transaction Date, Transaction Result-Insufficient Limit/Blocked/Paid information, Payment History, Debt Information, Billing Information, Bank Information)

Personal Data Processing Purposes

• Execution of Paid Membership Registration Procedures

• Execution of Finance and Accounting Activities

• Execution of Money Transfer/EFT Transactions

• Ensuring the Security of Data Controller Operations

• Execution of Storage and Archive Activities

• Execution of Contract Processes

• Providing Information to Authorized Persons, Institutions, and Organizations

Legal Reasons for Processing Personal Data

Your personal data is processed by the Company in line with the realization of the purposes listed below, based on the legal reason that it is directly related to the establishment or performance of a contract, specified in Article 5 of the Law, pursuant to the concluded user agreement.

Methods for Collecting Personal Data

Your personal data mentioned above are collected through electronic forms filled by you, payment screens, and other screens.

TRANSFER OF PERSONAL DATA

Your personal data that you have transmitted to us for the above purposes can be transferred to the relevant authorities without the obligation of clarification and without your explicit consent in case requested within the framework of Article 28 of the Law. Other than that, in unanticipated circumstances, your personal data may be transferred to the public institutions (to administrative authorities such as ministries) specified in the law within the scope and limitations stipulated in the law, if requested in cases expressly stated in the law. Apart from this, your personal data is transferred to our business partners, which are banks or payment institutions, for the purpose of realizing payments, to our suppliers in the country or abroad for the purpose of carrying out our custody activities, to business partners for the purpose of increasing the intensity of the commercial activities of the company you are authorized / work for and increasing the efficiency of the communication activities carried out with you. Your personal data may be shared with Forie.com as required for the legitimate interests of the data controller as limited to the above-mentioned data processing purposes, provided that data processing does not harm the fundamental rights and freedoms of the person concerned. Your personal data may be shared with abroad within the framework of keeping the e-mail service infrastructures of the e-mail contact addresses sent to the relevant persons in the data centers located abroad.

2. Data Processing Activity: Execution of Commercial Activities
A. Execution of Communication Activities
The Personal Data Processed

Identity Data (Name, Surname)

Contact Information (Country, Telephone Number, E-Mail) *Only visible to VIP members.

Other Data (Personal Data Contained in the Message Content on the Screens such as Contact Form etc., Personal Data in the File if File is Attached)

Personal Data Processing Purposes

• Execution of Communication Activities

• Ensuring Sending Education Zoom / YouTube Links

• In Case of Problem Between Companies, Informing the Companies about the Complaints, Non-Payment, etc. Situations

* In such cases, the personal data of the authorized/relevant persons are not shared with the complained company.

• Verification in Case of Any Dispute, Confirmation of Information

• Providing Returns to People Who Have Applied to Us Through Contact Forms and Other Media

• Ensuring the Security of Data Controller Operations

• Execution of Information Security Processes

• Execution of Access Authorities

• Execution of After-Sales Support Services

• Execution of Customer Relationship Management Processes

• Carrying out the Activities for Customer Satisfaction

• Execution of Storage and Archive Activities

• Tracking Requests and Complaints

• Execution of Product and Service Marketing Processes

• Core System Retention and Recording to the Station

• Inclusion in Whatsapp Groups

• Providing Information to Authorized Persons, Institutions, and Organizations

B. Execution of Demand (Purchase Offer, Sales Offer) Activities
The Personal Data Processed

Identity Data (Name, Surname)

Contact Information (Country, Telephone Number, E-Mail)

Customer Transaction Information (Member Information/Number, Request Information, Billing Information, Order Information, Payment Information, Usage Information)

Other Data (Personal Data contained in the Message, and Personal Data in the File If File Attached)

Personal Data Processing Purposes

• Members' Supply of Products to Export Companies

• Members Introducing Their Services to Export Companies

• Searching for Any Product to Export

• Evaluation / Controlling the Eligibility of Ads

• Ensuring the Announcement is Shared with Relevant / Important Members

• Entering the Requests of the Persons Who Send Requests via Jivo Chat/Live Chat/WhatsApp/Site without Being a Member

• Execution of Membership Registration Procedures

• Execution of Finance and Accounting Activities

• Receiving and Evaluating Suggestions for Improvement of Business Processes

• Execution of Goods and Services After-Sales Support Services

• Execution of Good / Service Sales Processes

• Execution of Marketing Processes of Products and Services

• Carrying out the Activities for Customer Satisfaction

• Conducting Marketing Analysis Studies

• Ensuring the Security of Data Controller Operations

• Execution of Storage and Archive Activities

• Execution of Contract Processes

• Providing Information to Authorized Persons, Institutions, and Organizations

Legal Reasons for Processing Personal Data

Your personal data, in line with the achievement of the purposes listed below by the Company; is processed for the purposes of

• Being Directly Related to the Establishment or Performance of a Contract, Sharing in Groups by Including Whatsapp and Similar Social Media Channels in order to Accelerate the Sales/Buying of the Products that Members Wish to Sell or Request,

• Based on the Explicit Consent Legal grounds specified in Article 5 of the Law.

Methods for Collecting Personal Data

Your above-mentioned personal data is collected through membership forms.

TRANSFER OF PERSONAL DATA

Your personal data that you have transmitted to us for the above purposes can be transferred to the relevant authorities without the obligation of clarification and without your explicit consent in case requested within the framework of Article 28 of the Law. Other than that, in unanticipated circumstances, your personal data may be transferred to the public institutions (to administrative authorities such as ministries) specified in the law within the scope and limitations stipulated in the law, if requested in cases expressly stated in the law. Apart from this, your personal data is transferred to our suppliers in the country or abroad for the purpose of carrying out our custody activities, to business partners for the purpose of increasing the intensity of the commercial activities of the company you are authorized / work for and increasing the efficiency of the communication activities carried out with you. Your personal data may be shared with Forie.com as required for the legitimate interests of the data controller as limited to the above-mentioned data processing purposes, provided that data processing does not harm the fundamental rights and freedoms of the person concerned. Your personal data may be shared with abroad within the framework of keeping the e-mail service infrastructures of the e-mail contact addresses sent to the relevant persons in the data centers located abroad.

3. Data Processing Activity: Conducting Educational Activities
The Personal Data Processed

Identity Data (Name, Surname)

Contact Information (Country, Phone, E-Mail, Zoom Username) Visual and Audio Recordings (Audio Recordings of Participants Speaking in the Training Over Zoom)

*Participants are not required to open their cameras in the trainings held via Zoom. However, despite this issue, users who open their cameras will be deemed to have given explicit consent and their visual records will be recorded automatically since the training is already recorded.

Other Data (Personal Data contained in the Message, and Personal Data in the File If File Attached)

Personal Data Processing Purposes

• Providing Trainings to Members for Increasing the Functionality of the Site

• Execution of Participation Certificate Issuance Procedures via Zoom Registration Forms

• Carrying out the Activities of Transmitting Participation Certificates via E-mail

• Execution of Storage and Archive Activities

• Providing Information to Authorized Persons, Institutions, and Organizations

Legal Reasons for Processing Personal Data

Your personal data, in line with the realization of the purposes listed below; is processed by the Company

• on the basis of the legal reason of Explicit Consent,

Legitimate Interest of the Data Controller,

• Recording of Audio and Visual Recordings,

as specified in Article 5 of the Law.

Methods for Collecting Personal Data

Your above-mentioned personal data is collected through training registrations on Zoom/Youtube.

TRANSFER OF PERSONAL DATA

Your personal data that you have transmitted to us for the above purposes can be transferred to the relevant authorities without the obligation of clarification and without your explicit consent in case requested within the framework of Article 28 of the Law. Other than that, in unanticipated circumstances, your personal data may be transferred to the public institutions (to administrative authorities such as ministries) specified in the law within the scope and limitations stipulated in the law, if requested in cases expressly stated in the law. Apart from this, your personal data is transferred to our suppliers in the country or abroad for the purpose of carrying out our custody activities, to business partners for the purpose of increasing the intensity of the commercial activities of the company you are authorized / work for and increasing the efficiency of the communication activities carried out with you. Your personal data may be shared with Forie.com as required for the legitimate interests of the data controller as limited to the above-mentioned data processing purposes, provided that data processing does not harm the fundamental rights and freedoms of the person concerned. Your personal data may be shared with abroad within the framework of keeping the e-mail service infrastructures of the e-mail contact addresses sent to the relevant persons in the data centers located abroad.

4. Data Processing Activity: Ensuring Physical Environment Security
The Personal Data Processed

Visual Records (Camera Recordings)

Personal Data Processing Purposes

• Ensuring Physical Environment Security

• Execution of Storage and Archive Activities

• Providing Information to Authorized Persons, Institutions, and Organizations

Legal Reasons for Processing Personal Data

Your personal data, in line with the realization of the purposes listed below; is processed by the Company

• on the basis of the legal reason of Explicit Consent,

as specified in Article 5 of the Law.

Methods for Collecting Personal Data

Your personal data mentioned above is collected through CCTV cameras.

TRANSFER OF PERSONAL DATA

Your personal data that you have transmitted to us for the above purposes can be transferred to the relevant authorities without the obligation of clarification and without your explicit consent in case requested within the framework of Article 28 of the Law. Other than that, in unanticipated circumstances, your personal data may be transferred to the public institutions (to administrative authorities such as ministries) specified in the law within the scope and limitations stipulated in the law, if requested in cases expressly stated in the law. Apart from this, your personal data is transferred to our domestic or foreign suppliers for the purpose of carrying out our storage activities. Your personal data may be shared with abroad within the framework of keeping the e-mail service infrastructures of the e-mail contact addresses sent to the relevant persons in the data centers located abroad.

5. Data Processing Activity: Execution of Information Security and Marketing Analysis Processes
The Personal Data Processed

Transaction Security Data (Web Site Traffic Information, IP Address, MAC Address, Login Time to System, Device Information Used, Site Name, Browser Information, Connection Time / Duration, Communication Amount, Electronic Access/Activity Records, History Information, Survey, Cookie Records, Campaign/Promotion Information, etc.)

Personal Data Processing Purposes

• Carrying out the Activities in Compliance with the Legislation,

• Creating and Tracking Visitor Records

• Execution of Commitment Processes for Products and Services

• Conducting Marketing Analysis Studies

• Execution of Information Security Processes

• Execution of Storage and Archive Activities

• Providing Information to Authorized Persons, Institutions, and Organizations

• Execution of Access Authorities

• Carrying out Activities in Compliance with the Legislation

• Tracking and Execution of Legal Affairs

Legal Reasons for Processing Personal Data

Your personal data, in line with the realization of the purposes listed below; is processed by the Company,

• Pursuant to the Responsibility of the Hosting Provider in the Law No. 5651 on the Regulation of Broadcasts Made on the Internet and fighting Crimes Committed Through These Broadcasts,

• and based on the legal reason of Explicit Consent,

as stated in Article 5 of the Law.

Methods for Collecting Personal Data

Your personal data mentioned above are collected during the sales process, in digital and printed forms, online electronic forms (website contact form etc.), or other web technologies (cookies, etc.) during the member experience (complaint management, satisfaction surveys, etc.).

TRANSFER OF PERSONAL DATA

Your personal data that you have transmitted to us for the above purposes can be transferred to the relevant authorities without the obligation of clarification and without your explicit consent in case requested within the framework of Article 28 of the Law. Other than that, in unanticipated circumstances, your personal data may be transferred to the public institutions (to administrative authorities such as ministries) specified in the law within the scope and limitations stipulated in the law, if requested in cases expressly stated in the law. Apart from this, your personal data is transferred to our suppliers in the country or abroad for the purpose of carrying out our custody activities, to business partners for the purpose of increasing the intensity of the commercial activities of the company you are authorized / work for and increasing the efficiency of the communication activities carried out with you.

6. Data Processing Activity: Execution of Legal Affairs
The Personal Data Processed

Legal Transaction Information (Information in the Case File, Correspondence with Official Institutions and Organizations, Information in the Scope of Warning and Notice)

Personal Data Processing Purposes

• Carrying out Activities in Compliance with the Legislation

• Tracking and Execution of Legal Affairs

• Providing Information to Authorized Persons, Institutions, and Organizations

Legal Reasons for Processing Personal Data

Your personal data, in line with the realization of the purposes listed below; is processed by the Company, based on the legal reasons of, as stated in Article 5 of the Law,

• Clearly stipulated in the law,

• Provided that it is directly related to the establishment or performance of a contract, being necessary to process the personal data of the parties to the contract,

• In the event that it is mandatory for the data controller, fulfilling his/her legal obligations

Methods for Collecting Personal Data

Your personal data mentioned above are collected through electronic and physical forms and contracts transmitted to us.

TRANSFER OF PERSONAL DATA

Your personal data that you have transmitted to us for the above purposes can be transferred to the relevant authorities without the obligation of clarification and without your explicit consent in case requested within the framework of Article 28 of the Law. Other than that, in unanticipated circumstances, your personal data may be transferred to the public institutions (to administrative authorities such as ministries) specified in the law within the scope and limitations stipulated in the law, if requested in cases expressly stated in the law. Apart from this, your personal data is transferred to our domestic or foreign suppliers for the purpose of carrying out our storage activities, to our consultants and legal advisers for the execution of legal processes. Your personal data may be shared with abroad within the framework of keeping the e-mail service infrastructures of the e-mail contact addresses sent to the relevant persons in the data centers located abroad.

4. YOUR RIGHTS UNDER THE LAW

If, as personal data owners, you submit your requests regarding your rights to the company contact address of Musalla Bağları Mahallesi, Kule Caddesi, No:2/28, Selçuklu/Konya, or kvk@turkishexporter.net such that your identity can be confirmed, by filling the Relevant Person Application Form published on the internet address, using the methods regulated in the relevant person application procedure, or by using, specified in the Notice on the Procedures and Principles of Application to the Data Controller, name, surname, and signature, if the application is written, T.R. identification number for citizens of the Republic of Turkey, for foreigners, if any, nationality, passport number or identification number, domicile or workplace address for notification, if available, the e-mail address, telephone, and fax number for notification, the subject of the request in writing or to a registered e-mail (KEP) address, secure electronic signature, mobile signature or e-mail address previously notified to the Company by the relevant person and registered in the Company's system, the company will conclude the request free of charge as soon as possible and within thirty days at the latest from the notification depending on the nature of the request. However, if the transaction requires a separate cost, the fee in the tariff determined by the Personal Data Protection Board will be charged by the Company. In this context, personal data owners have the right to learn whether personal data has been processed, to request information if their personal data has been processed, to learn the purpose of processing personal data and whether they are used in accordance with its purpose, to know the third parties in the country or abroad to whom personal data has been transferred, to request correction of personal data in case of incomplete or incorrect processing, and to request the notification of the transaction made within this scope to the third parties to whom the personal data has been transferred, to request the deletion or destruction of personal data in the event that the reasons requiring processing are eliminated, even though they have been processed in accordance with the provisions of the law and other relevant laws, and to request the notification of the transaction made within this scope to the third parties to whom the personal data has been transferred, to object to the emergence of a result against the person by analyzing the processed data exclusively through automated systems, and to request the compensation of the damage in case of damage due to unlawful processing of personal data.

Kobi Uluslararası Tanıtım ve Dağıtım Hizmetleri Sanayi Ticaret Anonim Şirketi assures that the provisions of the legislation will be applicable in case of a change in the legislation in force and in case of any inconsistency between this Clarification Text on the Protection of Personal Data and said amendment.

Data Controller : Kobi Uluslararası Tanıtım ve Dağıtım Hizmetleri Sanayi Ticaret Anonim Şirketi

Address : Musalla Bağları Mahallesi, Kule Caddesi, No:2/28, Selçuklu/Konya

Telephone : +90 (216) 573 37 64 / 21 95 - 444 23 99