Confidentiality Agreement

PERSONAL DATA PROTECTION AND PROCESSING DISCLOSURE NOTICE

1. Protection of Information

As TAYRAN GRUP İNŞAAT A.Ş. (“COMPANY”), in accordance with the Personal Data Protection Law No. 6698 (“PDPL”) and other relevant legislation aiming primarily to protect the right to privacy and the fundamental rights and freedoms of individuals in the processing of personal data, we would like to inform you, through this Disclosure Notice, about your personal data processed by the COMPANY as detailed below.

2. What Is Personal Data?

Personal data is defined under the PDPL as any information relating to an identified or identifiable natural person.

3. Which Personal Data Do We Collect?

4. Method and Legal Basis for Collecting Personal Data

Your personal data are collected through all kinds of verbal, written, and electronic means.

Your personal data are collected and processed pursuant to Article 5/2 of the PDPL based on the following legal grounds:

• Processing is necessary for the establishment or performance of a contract,

• Processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject,

• Processing is mandatory for the data controller to fulfill its legal obligations,

• Processing is mandatory for the establishment, exercise, or protection of a right.

Within this scope:

• Your personal data under the categories of identity, contact, location, and other are processed based on the legal ground that processing is necessary for the establishment or performance of a contract.

• Your data under legal transaction, customer transactions, and transaction security categories are processed based on the legal ground of legitimate interest of the data controller.

5. Purposes of Processing Personal Data

In order for the COMPANY to fulfill its legal obligations and conduct its activities effectively, the collection and processing of certain personal data are of great importance. Your personal data are processed for the following purposes:

• Providing charging services and ensuring compliance with applicable legislation,

• Delivering contractual services and improving service quality, carrying out sales and after-sales support,

• Ensuring legal and commercial security,

• Managing legal processes,

• Maintaining relations with public institutions and other organizations,

• Conducting occupational health and safety, customer relations, and call center operations,

• Managing support services, obligations, customer satisfaction, and corporate communication activities,

• Planning and executing corporate sustainability, corporate governance, strategic planning, and information security processes,

• Conducting financial operations and monitoring financial matters,

• Responding to consumer complaints,

• Managing lawsuits and enforcement proceedings involving the COMPANY,

• Conducting consultancy, partnerships, procurement, tender, and sales processes.

Provided that your explicit consent is obtained, your personal data including identity, contact, location, customer transaction, marketing, and other data (vehicle information, license plate, charging station usage date and time) may additionally be processed for the following purposes:

• Increasing customer satisfaction,

• Measuring and improving brand perception,

• Conducting market research and surveys,

• Performing marketing analysis, providing offers, gifts, and promotions, profiling, targeted advertising, and sending celebratory messages, rewards, and content,

• Customizing products and services according to preferences and usage habits and sending commercial electronic communications,

• Promoting and marketing campaigns, products, and services, informing about discounts and advantages,

• Organizing events and trainings and determining participants,

• Promoting products and services offered jointly with business partners, suppliers, group companies, and shareholders.

Your personal data are processed confidentially, lawfully, accurately, for legitimate purposes, kept up to date, and retained only for the necessary period required for the intended purposes.

6. Transfer of Personal Data

Your personal data may be transferred, within the scope permitted by legislation and required by our business processes, to:

• The Energy Market Regulatory Authority (EPDK) for transparency, dispute resolution, and evidentiary purposes,

• Public authorities and private/public legal entities where explicitly required by law,

• Banks, financial institutions, insurance companies, technology and IT service providers, local administrations, suppliers, group companies, shareholders, and authorized public institutions where necessary for contract execution,

• Business partners and authorized entities where legally required,

• Public authorities and authorized entities for the establishment, exercise, or protection of rights.

Your data are retained in accordance with the Regulation on the Deletion, Destruction, or Anonymization of Personal Data and deleted when no longer legally or reasonably required.

7. Your Rights Under Article 11 of the PDPL

Pursuant to Article 11 of the PDPL, you have the right to:

a) Learn whether your personal data are processed,
b) Request information if processed,
c) Learn the purpose of processing and whether it is used in accordance with such purpose,
d) Know the third parties to whom data are transferred domestically or abroad,
e) Request correction of incomplete or inaccurate data,
f) Request deletion or destruction of data when processing grounds no longer exist,
g) Request notification of corrections or deletions to third parties,
h) Object to adverse outcomes resulting from automated processing,
i) Claim compensation for damages arising from unlawful processing.

8. How Can You Exercise Your Rights?

You may submit your requests in writing to the COMPANY headquarters or via Registered Electronic Mail (KEP), secure electronic signature, or mobile signature.

Your application must include:

• Name, surname, and signature (if written),

• Turkish ID number (or passport number for foreigners),

• Address for notification,

• Contact details (e-mail, phone, fax),

• Subject of the request.

Applications will be responded to within 30 days following identity verification.

I hereby acknowledge that I have been informed about my processed personal data and my rights.

Data Controller Information

DATA CONTROLLER: TAYRAN GRUP İNŞAAT ANONİM ŞİRKETİ
Address: Nasuh Akar Neighborhood, 1400th Street No:4/8, Çankaya / ANKARA
KEP Address: tayrangrup@hs01.kep.tr

Amendments

The COMPANY reserves the right to amend its personal data policies and procedures in line with legislative changes.

INFORMATION REQUEST APPLICATION FORM UNDER THE PERSONAL DATA PROTECTION LAW

A. Applicant Contact Information

Name:
Surname:
Turkish ID Number / Passport Number (for foreigners):
Phone Number:
Fax Number:
E-mail:
Registered E-mail (KEP, if any):
Address:

B. Please Indicate Your Relationship with Our Company

☐ Customer/User
☐ Potential Customer/User
☐ Supplier
☐ Former Employee (Years Worked: …………………)
☐ Current Employee
☐ Job Applicant / CV Submitted
☐ Employee of a Third-Party Company (Please specify company, date, position)
☐ Other: …………………

Department contacted within the company (if any): …………………

C. Please Specify Your Request Under the PDPL in Detail

(Free text)

D. Preferred Method for Receiving Our Response

☐ By mail to my address
☐ By e-mail
☐ By registered e-mail (KEP)

Applicant (Data Subject)
Full Name:
Application Date:
Signature:

This application form has been prepared to enable you to exercise your rights under the Personal Data Protection Law and to allow our Company to fulfill its obligations accordingly.

Supporting documents may be requested for identity verification purposes. Requests unrelated to personal data or relating to third-party personal data may be rejected.

Trade Name: TAYRAN GRUP İNŞAAT A.Ş.
Address: Nasuh Akar Mah. 1400th Street No:4/8 Çankaya / ANKARA
Tax Office: HİTİT
Tax Number: 8331151695
KEP Address: tayrangrup@hs01.kep.tr
E-mail Address: