VISITOR / USER INFORMATION NOTICE

CFA International takes the security of your personal data seriously. As the Data Controller, CFA International processes certain personal information of users who register through the website www.cfainternational.com.tr and visitors who share their contact information through communication channels.

With respect to the personal data it processes, CFA International ("Data Controller") is subject to the Personal Data Protection Law No. 6698 ("PDPL"). In this context, CFA International takes great care to ensure the processing, deletion, destruction, anonymization, transfer, informing of the data subject ("Data Subject"), and the security of personal data in accordance with the principles set forth by the PDPL. The purpose of this Information Notice is to inform Data Subjects about data processing activities through CFA International in accordance with the PDPL.

Purposes of Processing Personal Data

Your personal data will be processed in accordance with the principles set forth in the Law for the following purposes:

• In order to provide products and services and establish communication for the purpose of forming relationships with Business Partners / Suppliers / Visitors / Employees / Customers, and for the improvement, development, diversification, and provision of commercial information or to provide services,
• To create databases of customers and/or users,
• To prepare all records and documents necessary for you to complete transactions in written, verbal, or electronic media,
• For the security and continuity of administrative operations, ensuring the legal or technical security of persons within the business relationship, and for the performance of administrative operations,

Transfer of Personal Data

CFA International only shares your personal data with third parties in accordance with the purposes set out in this Information Notice and in compliance with Articles 8 and 9 of the PDPL.

CFA International may transfer your personal data to domestic and foreign business partners or affiliates, third parties who provide support in data processing activities, hosting, cloud, and service providers who provide support in data processing activities, auditing firms within the scope of the contracts for the control of commercial activities, authorized public institutions and organizations within the framework of their requests within the legal authority, and the authorized public institutions and organizations for the purpose of ensuring the fulfillment of the legal obligations stipulated in the relevant legislation, and with your explicit consent, or in cases where the conditions specified in the PDPL are met.

Method and Legal Basis of Collecting Personal Data

Your personal data may vary depending on the service or commercial activity provided by CFA International. All information you enter through registration and contact forms on the website www.cfainternational.com.tr or via communication records will be collected in written or electronic form, either automatically or non-automatically, depending on the service or commercial activity.

CFA International will process your personal data in accordance with Article 5, Paragraph 1 of the PDPL based on your explicit consent. However, without your explicit consent, your personal data may be processed in cases specified under Article 5, Paragraph 2 of the PDPL, including but not limited to "being clearly stipulated in the law," "being necessary for the performance or establishment of a contract, provided that it is directly related to the contract," "the data subject's personal data is made public by the data subject," "the processing of personal data is mandatory for the establishment, exercise, or protection of a right," and "the processing of personal data is mandatory for the legitimate interests of the data controller."

Data Subject Rights

In accordance with Article 11 of the PDPL, the Data Subject has the right to:

• Learn whether their personal data has been processed,
• Request information if their personal data has been processed,
• Learn the purpose of processing personal data and whether they are used in accordance with their purpose,
• Know the third parties in the country or abroad to whom personal data have been transferred,
• Request the correction of personal data if it is incomplete or incorrectly processed, and request notification of the transaction made within this scope to third parties to whom personal data have been transferred,
• Request the deletion or destruction of personal data in the event that the reasons requiring its processing cease to exist, despite the fact that it has been processed in accordance with the PDPL and other relevant laws, and request notification of the transaction made within this scope to third parties to whom personal data have been transferred,
• Object to the occurrence of a result against the person himself/herself by analyzing the processed data exclusively through automated systems,
• Request the compensation of the damage in case of damage due to the unlawful processing of personal data.

You can submit your requests regarding the above-mentioned rights to us free of charge with your identity identification information and documents, and through the following methods or by other methods determined by the Personal Data Protection Board, if any:

(1) By delivering a wet-signed copy in person, by registered mail, or through a notary public to CFA International at the address "Demirköprü Mah. 6180/1 sk. No 6/9. Karşıyaka, İzmir, Türkiye",

(2) By sending an e-mail to the e-mail address [email protected], with "Personal Data Protection Law Information Request" written in the subject line, using your electronic mail address in our company's system,

Your requests will be evaluated and concluded as soon as possible, and no later than 30 days. CFA International reserves the right to charge a fee specified in the fee schedule determined by the Personal Data Protection Board, if any.

Message Management: With your consent, you accept all kinds of promotional, campaign, and informational messages sent electronically for commercial purposes, including data, voice, and visual content sent via electronic means such as telephones, call centers, faxes, automatic dialing machines, smart voice recording systems, electronic mail, and text messaging services, related to products, services, campaigns, and customer relations provided by CFA International within the scope of relevant legislation on the Regulation of Electronic Commerce.

In messages sent by CFA International, you can easily and free of charge unsubscribe from the mailing list and prevent the sending of commercial electronic messages to you.