1. DATA CONTROLLER

Your personal data is processed by BYD within the scope of the purposes explained below in accordance with the Law on the Protection of Personal Data No. 6698 (“Law No. 6698”).

2. PURPOSE OF PROCESSING YOUR PERSONAL DATA

Your personal data collected may be processed by our Foundation for the purposes listed below, in accordance with the fundamental principles prescribed in Law No. 6698 and within the personal data processing conditions specified in Articles 5 and 6 of Law No. 6698.

• Conducting communication activities.
• Managing access authorizations.
• Ensuring activities are carried out in compliance with legislation.
• Conducting finance and accounting operations.
• Ensuring physical space security.
• Following and conducting legal procedures.
• Managing business continuity activities.
• Organization and event management.
• Conducting social responsibility and civil society activities.

3. PURPOSES OF TRANSFERRING YOUR PERSONAL DATA

Your collected data may be transferred to third parties (public institutions and organizations with which collaboration is conducted, Sanko Holding Companies, business partners, suppliers, program partners, Foundation managers/employees, legally authorized private law entities, authorized private persons) for the execution of the Foundation’s activities in accordance with the principles stipulated in the Law for the realization of the data processing purpose and pursuant to Articles 8 and 9 of Law No. 6698.

4. METHOD OF COLLECTING YOUR PERSONAL DATA AND LEGAL BASIS

Your personal data will be collected electronically by our Foundation for the purposes listed in Article 2. Your collected personal data may be collected, processed, and transferred for the purposes specified in this Clarification Text within the scope of the personal data processing conditions set forth in Articles 5 and 6 of Law No. 6698.

5. RIGHTS OF THE PERSONAL DATA OWNER UNDER ARTICLE 11 OF LAW NO. 6698

As the personal data owner, we inform you that you have the following rights under Article 11 of the Law:

• To learn whether your personal data is processed,
• If your personal data has been processed, to request information regarding this,
• To learn the purpose of processing your personal data and whether they are used in accordance with that purpose,
• To know the third parties to whom your personal data is transferred domestically or abroad,
• To request the correction of your personal data if it is incomplete or incorrectly processed, and to request that the correction be notified to third parties to whom the personal data has been transferred,
• To request the deletion or destruction of your personal data if the reasons requiring processing no longer exist, and to request that this be notified to third parties to whom the personal data has been transferred,
• To object to any result arising to your detriment through the analysis of processed data exclusively by automated systems,
• To request compensation if you suffer damage due to the unlawful processing of your personal data.