Project Finance and Infrastructure Investments

Privacy and Personal Data Protection Policy

1. How Your Personal Data Can Be Processed

Under the Law No. 6698 on Protection of Personal Data (KVKK), your personal data that you share with Can Law and Consulting Firm can be processed in whole or in part, automatically or non-automatically, obtained, recorded, stored, altered, re-arranged, in short, processed by us in any way as a part of any data recording system. Any process performed on data is considered as "processing of personal data" within the scope of KVKK.

1. Purposes and Legal Grounds for Processing Your Personal Data

The personal data you share are processed for the following purposes and legal grounds:

• To fulfill the requirements of the services we provide to our customers, in compliance with the contract and technology, and to improve the products and services we offer;
• To provide information to the public officials, prosecutors, courts, and relevant authorities upon request and pursuant to legislation, in matters related to public safety and legal disputes;
• To provide our members with various opportunities extensively, and to share them with legal entities and individuals who can offer these opportunities, within the legal framework;
• To analyze advertisement preferences;
• In compliance with the Law No. 6698 on Protection of Personal Data and relevant secondary legislation.

1. Information on Third Parties or Organizations Your Personal Data Can Be Transferred To

The persons/organizations that your personal data shared with Can Law and Consulting Firm can be transferred to for the above-mentioned purposes are our shareholders, advertisers, our direct or indirect domestic/foreign subsidiaries, including but not limited to member companies using the Can Law and Consulting Firm infrastructure and those related to the service provided, our service providers as data processors, cooperation partners, program partner organizations, domestic/foreign entities, and other third parties and organizations.

1. Ways of Collecting Personal Data

Your personal data can be collected in the following ways:

• Through forms on Can Law and Consulting Firm websites and mobile applications, including information such as name, surname, address, phone, business or private e-mail address, and the preferences on the pages accessed by using a username and password, IP records of the transactions carried out, cookie data collected by the browser, and navigation duration and details, location data;
• From individuals who share their personal data through physical or virtual environments, face-to-face or remote, verbally or in writing or electronically, to establish a commercial relationship with Can Law and Consulting Firm, to apply for a job, to make an offer, and in other ways such as business cards, resumes (cv), offer submissions;
• In addition, through indirect channels, data collected from (micro) websites used for purposes such as blogs, contests, surveys, games, campaigns, and similar, and data from publicly available databases, social media platforms such as Facebook, Twitter, Google, Instagram, Snapchat, etc., open profiles, and data shared on social sharing sites, e-mail reading or click-through movements, can be processed and collected.

5. Your Personal Data Obtained Before the Entry into Force of the KVKK

Since Can Law and Consulting Firm does not want to start publishing before the effective date of KVKK, 7 April 2016, there can be no personal data that we have stored before.

6. Transfer of Your Personal Data

To the service vehicles (accredited by the Personal Data Board and where personal protection areas are adequate) within the scope of KVKK and in accordance with the purposes of the contract, provided that our personal control undertaken with any of the above-mentioned guides, in order to be processed in Turkey or to be processed and stored outside of Turkey. can also be transferred.

Your Personal Data;

Our business partners with whom we cooperate and/or receive services for the preservation and promotion of products and services,

To the competent authorities who will determine your position in emergency aid operations,

Regulatory and supervisory institutions and other official institutions such as courts and enforcement offices, other public institutions or bodies authorized to request personal organisms,

Legal entities that have a commercial relationship with Can Law and Consulting Firm and have your phone number,

Necessary sections can be transferred.adius: 8px;}

7. Storage and Protection of Personal Data

Can Law and Consulting Firm prevents unauthorized persons from accessing the systems and databases where your personal data is stored, by preventing the unlawful processing of personal data in accordance with Article 12 of the KVKK; It is obliged to take software measures such as hash, encryption, transaction log, access management and physical security measures in order to ensure their safekeeping. In the event that it is learned that personal data has been obtained illegally by others, the situation will be immediately reported to the Personal Data Protection Board in accordance with the legal regulation and in writing.

8. Keeping Personal Data Up-to-Date and Accurate

Pursuant to Article 4 of the KVKK, Can Law and Consulting Firm has the obligation to keep your personal data accurate and up-to-date. In this context, in order for Can Law and Consulting Firm to fulfill its obligations arising from the current legislation, our members are required to share their correct and up-to-date data or update them via the website / mobile application.

9. Rights of Personal Data Owners Pursuant to Law No. 6698

Article 11 of the KVKK No. 6698 entered into force on 07 October 2016, and in accordance with the relevant article, the rights of the Personal Data Owner after this date are as follows:

Personal Data Owner, by applying to Can Law and Consulting Firm (data controller);

Learning whether personal data is processed or not,

If personal data has been processed, requesting information about it,

Learning the purpose of processing personal data and whether they are used in accordance with its purpose,

Knowing the third parties to whom personal data is transferred at home or abroad,

Requesting correction of personal data in case of incomplete or incorrect processing,

Requesting the deletion or destruction of personal data within the framework of the conditions stipulated in Article 7 of the KVKK,

In case of correction, deletion or destruction of personal data, requesting that these transactions be notified to the third parties to whom the personal data has been transferred,

Objecting to the emergence of a result against the person himself by analyzing the processed data exclusively through automated systems,

It has the right to demand the compensation of the damage in case of loss due to the unlawful processing of personal data.

10. Communication and Application Method

The Data Controller Representative to be appointed by Can Law and Consulting Firm announces in the Data Controllers Registry the internet address where this document is located, when the legal infrastructure is provided.

Personal Data Owners can send their questions, opinions or via the e-mail they have.

Can Law and Consulting Firm can give a positive/negative response, written or digital effects to the submitted requests, provided that it is measured and responds within 30 days. It is essential that the necessary transactions regarding the requests are free of charge. However, if using it requires a cost, Can Law and Consulting Firm reserves to charge a fee. These fees are determined by the Personal Data Protection Board based on the definition defined in accordance with Article 13 of the Personal Data Protection Law.

The processing, processing methods, use, operation and other relevant terms of use in our Personal Data Policy and policy by sharing it on our web page, in our applications and other air channels, , notifications and recommendations can be shared with commercial third parties as they belong to the users and you agree to this, you will apply to Can Law and Consulting Firm before using your legal rights You have declared that it has been accepted with an express consent expressed as:

This contract was last updated on 01/01/2020.