As Faturamatik Elektronik Para ve Ödeme Kuruluşu A.Ş. (the 'Company'), we place the utmost importance on the protection and security of your personal data. With this awareness, we ensure that all personal data belonging to individuals who benefit from our products and services, as well as all persons affiliated with the Company, are processed and stored with the highest level of care and diligence. In full awareness of this responsibility, we, as the 'Data Controller' under the Law No. 6698 on the Protection of Personal Data ('Law') and relevant regulations, would like to provide you with transparent information regarding the methods of collection, purposes of processing, legal grounds for processing, and your rights concerning your personal data.

Your collected personal data will be used for the fulfillment of obligations arising from the relevant legislation to which our company is subject, such as the Law on Payment and Securities Settlement Systems, Payment Services and Electronic Money Institutions, the Banking Law, the Law on Bank Cards and Credit Cards, the Law on the Prevention of Laundering of Crime Revenues. It will also be used for the fulfillment of reporting and notification obligations if requested by official and administrative authorities such as the Central Bank of the Republic of Turkey (CBRT), the Banking Regulation and Supervision Agency (BRSA), the Central Registry Agency, the Financial Crimes Investigation Board, the Ministry of Treasury and Finance, the Credit Bureau, the Turkish Payment Institutions and Electronic Money Institutions Association (TÖDEB), and the Ministry of Treasury and Finance. Additionally, your personal data will be used to ensure that Payment Services activities are carried out in accordance with our company's procedures and/or relevant legislation. It will also be used for the execution of business and management of relations with our domestic and international representatives, group companies, affiliated institutions, partner banks, and companies providing support services. Your personal data is essential for carrying out the necessary work by our relevant departments to provide you with the products and services offered by our company. Furthermore, your personal data will be used for the creation of membership registration on the website, to perform identity verification during the membership process, to send commercial electronic communications in accordance with your preferences, to report and evaluate shopping data, to conduct statistical analyses, to ensure the legal and commercial safety of our company and those in business relations with our company, and to determine and implement our company’s commercial and business strategies. managing customer relationships within the scope of planning and execution of customer relationship management processes, updating customer contact information. The products and services offered by our company will be customized according to your preferences, usage habits, and needs, and recommended to you. Additionally, personalized advertisements, campaigns, and other benefits will be provided, and the execution of our company's human resources policies will be ensured, all within the framework of the personal data processing conditions and purposes specified in Articles 5 and 6 of the Law. Your personal data will be processed in accordance with the following principles: a) Compliance with legal and honesty principles b) Accuracy and, when necessary, up-to-date c) Processed for specific, clear, and legitimate purposes ç) Linked, limited, and proportionate to the purposes for which they are processed d) Retained for the period required by the relevant legislation or for the purpose for which they were processed.

Your personal data collected; In order for our relevant units to carry out the necessary work to benefit you from the products and services offered by our Company, to create a membership registration on the website and to verify your identity during membership creation, to send commercial electronic messages in line with your permission preferences, to report and evaluate your shopping data, to conduct statistical analyzes, to ensure the legal and commercial security of our Company and the persons who have a business relationship with our Company, event management, risk management regarding compliance processes, determination and implementation of our Company's commercial and business strategies, planning and execution of customer relationship management processes the management of customer relationships, updating customer contact information, The products and services offered by our company will be customized according to your preferences, usage habits, and needs, and recommended to you. Additionally, personalized advertisements, campaigns, and other benefits will be provided, and the implementation of our company's human resources policies will be ensured. For these purposes, your personal data may be transferred to our group companies, business partners, suppliers, shareholders, subsidiaries, banks, relevant public institutions, financial advisors, third parties we cooperate with or from whom we benefit, software service providers, other external service providers, hosting service providers, cargo and logistics companies, law firms, and private individuals, within the framework of the personal data processing conditions and purposes specified in Articles 8 and 9 of the Law. Furthermore, your personal data may be transferred to foreign countries that have been declared by the Board to provide adequate protection, in accordance with Article 9 of the Law. If adequate protection is not available, your personal data may be transferred to foreign countries where the data controllers in Turkey and the relevant foreign countries have committed to providing adequate protection in writing and with the permission of the Board, in accordance with the data transfer conditions specified in the legislation.

Your personal data may vary depending on the service, product, or business activity provided by the "Company." It is collected either through automated or non-automated methods, by our departments, representatives, regional offices, sales teams, call centers, affiliated institutions, organizations, and companies, SMS channels, websites, social media platforms, mobile applications, member merchant POS channels, partner stores, third-party service providers, and other communication channels that the "Company" uses to contact you or may contact you in the future, either verbally, in writing, or electronically. Personal data collected for this legal reason may be processed and transferred for the purposes mentioned above, in line with the personal data processing conditions and purposes outlined in Articles 5 and 6 of Law No. 6698. Additionally, the personal data specified above may be processed within the framework of relevant legislation, including the Identity Notification Law No. 1774, the Turkish Commercial Code, the Law on Payment and Securities Settlement Systems, Payment Services, and Electronic Money Institutions No. 6493, BRSA regulations, MASAK regulations, the Law on the Protection of Consumers No. 6502, the Condominium Law No. 634, the Insurance Law, and secondary legislation related to these laws, as well as tax legislation, regulations of supervisory and regulatory bodies, and cases mandated by other relevant public authorities. The personal data may be transferred to the physical archives and information systems of the "Company," where it will be stored in both digital and physical formats for the legally required retention periods.

The rights you have under Article 11 of the Law are as follows:

• To learn whether your personal data is being processed,
• To request information about your personal data if it has been processed.
• To learn the purpose of processing your personal data and whether it is used in accordance with its purpose,
• To know the third parties to whom your personal data has been transferred, either domestically or internationally,
• To request the correction of your personal data if it has been processed incompletely or inaccurately and to request that the operation performed be notified to third parties to whom your personal data has been transferred, • Even if it has been processed in compliance with the Law and other relevant laws, to request the deletion or destruction of your personal data if the reasons for processing no longer exist, and to request that the operation performed be notified
• Even if it has been processed in compliance with the Law and other relevant laws, to request the deletion or destruction of your personal data if the reasons for processing no longer exist, and to request that the operation performed be notified to third parties to whom your personal data has been transferred,
• To object to a result that may be against you arising solely from automated processing of the processed data,
• To request the compensation of the damage if you suffer damage due to the unlawful processing of personal data,

In accordance with Article 13/1 of the Law, you can submit your request regarding the exercise of the rights mentioned above, Veri Sahibi Başvuru Formu’nu You can submit the Data Subject Application Form by filling it out and using the methods prescribed by the legislation. Depending on the nature of your request, it will be processed and concluded free of charge within the shortest time and no later than thirty days; however, if the process requires an additional cost, a fee may be charged according to the tariff set by the Personal Data Protection Board. In accordance with the Law on the Protection of Personal Data No. 6698, I acknowledge and undertake that I have read, reviewed, evaluated, and understood the information provided in this clarification text, which explains that all personal data I have provided and/or that has been collected by Faturamatik Electronic Money and Payment Institution Inc. may be processed by Faturamatik Electronic Money and Payment Institution Inc. under Articles 5 and 6 of the Law and transferred in accordance with Articles 8 and 9 of the Law.