Clarification Text

1. Information Protection

As Istanbul Energy Industry and Trade Inc. ("Company" or "ŞARJPARK"), we aim to protect the privacy of private life, fundamental rights and freedoms of individuals, and ensure data security in the processing of your personal data. In this context, in accordance with Article 10 of the Personal Data Protection Law No. 6698 ("KVKK"), published in the Official Gazette No. 29677 dated April 7, 2016, and the Communiqué on the Procedures and Principles to be Followed in Fulfilling the Information Obligation, published in the Official Gazette No. 30356 dated March 10, 2018, we hereby inform you about your personal data specified below.

This information text; This information has been prepared to explain the storage, processing, and sharing of personal data with third parties, the legal basis for which our Company, as the data controller, can transfer personal data, the persons/organizations to which it may be transferred, data collection methods, and your rights under the Personal Data Protection Law. The Company takes all necessary technical and administrative measures to protect personal data.

2. Information Regarding the Data Controller

3. What is Personal Data?

According to the Personal Data Protection Law, personal data is any information relating to an identified or identifiable natural person. For example, information such as your name, surname, email address, phone number, and license plate number is personal data.

4. What Personal Data Do We Collect?

4.1. Personal Data Categories

5. Methods of Collection of Personal Data and Legal Basis

Your personal data may be collected automatically or non-automatically through our mobile application, website (https://sarjpark.istanbul), call center, email, social media, cookies, third-party APIs, and similar verbal, written, or electronic channels. Your personal data collected accordingly may also be processed and transferred for the purposes specified in Article 6 of this Disclosure Statement, within the scope of the personal data processing conditions and purposes specified in Articles 5 and 6 of the KVKK.

6. Purposes and Legal Grounds for Processing Personal Data

The table below shows the main processes, the categories of data processed, and the legal grounds under Article 5/2 of the KVKK.

For the purposes specified above, we may process your Personal Data, including your Personal Data that has been made public, without further consent, to the extent permitted under the KVKK, provided that your explicit consent is obtained, in accordance with the conditions and purposes for processing personal data specified in Articles 5 and 6 of the KVKK.

7. Transfer of Personal Data

Your personal data; To fulfill the above purposes, in accordance with the Personal Data Protection Law and relevant legislation, your personal data may be shared with:

• The Energy Market Regulatory Authority (EPDK) and other authorized public institutions and organizations,
• Banks, payment institutions, auditors, law firms, consultants, suppliers, and our business partners,
• Our shareholders, group companies, and cloud computing service providers (e.g., AWS, Google Cloud),
• Legal commercial message infrastructures, including the Message Management System,
• Our group companies and marketing service providers, where you have your explicit consent,

Data transfer abroad is carried out in accordance with Article 9 of the Personal Data Protection Law (KVKK) with your explicit consent or within the framework of adequacy decisions determined by the Board.

8. Your Rights as a Data Subject (KVKK) Article 11

As personal data subjects, if you submit your requests regarding your rights to the Company using the methods set out below in this Information Notice, you will be contacted as soon as possible and within 30 days at the latest following the evaluation of your request. However, if a fee schedule is stipulated by the Personal Data Protection Board, İstanbul Enerji San. Ve Tic. A.Ş. The fee specified in the tariff will be collected from the relevant party.

1. To learn whether your personal data has been processed,
2. If processed, to request information about it,
3. To learn the purpose of processing and whether the data is being used in accordance with its purpose,
4. To know the third parties to whom the data has been transferred, both domestically and internationally,
5. To request correction if the data has been processed incompletely or incorrectly,
6. To request deletion or destruction within the framework of Article 7 of the KVKK,
7. To request notification of (5) and (6) of the transactions to third parties to whom the data has been transferred,
8. To object to a result detrimental to you as a result of analysis exclusively by automated systems,
9. To claim compensation if you suffer damage due to unlawful processing.

9. How to Exercise Your Rights Can you exercise it?

You can send your request to exercise your rights specified above, in accordance with the first paragraph of Article 13 of the KVKK, by attaching documents confirming your identity and address, in accordance with the Communiqué on Application Procedures and Principles to the Data Controller;

• You can send a signed petition to our address above, by hand, registered mail, or by notary,
• This email address is being protected from spambots. You need JavaScript enabled to view it. KEP address,
• This email address is being protected from spambots. You need JavaScript enabled to view it. via your registered email address,
• With a secure electronic signature or mobile signature,

Your applications will be answered within 30 days after identity verification.

10. Changes

The Company reserves the right to make changes to this Disclosure Statement to comply with regulatory changes. The current text is always published at https://sarjpark.istanbul.

Sincerely,
Istanbul Energy Industry and Trade Inc.