KVKK Disclosure

Ece Ticari Gayrimenkul Yatırım ve Yönetim Hizmetleri A.Ş. (ECE), the owner of the www.ecetgm.com website, processes your personal data in the capacity of data controller in accordance with the Law on the Protection of Personal Data No. 6698 (KVKK) and related legislation. Pursuant to Article 10 of the KVKK, which regulates the Obligation to Inform, data controllers are obliged to inform the data subjects whose personal data they process about certain matters. This disclosure has also been drafted in accordance with the Communique On Principles And Procedures To Be Followed In Fulfillment Of The Obligation To Inform, published by the Personal Data Protection Authority, in order to fulfill the legal obligation. Definitions: Pursuant to Law No. 6698 on the Protection of Personal Data: “Personal Data” refers to all kinds of information regarding real person whose identity is determined or determinable; “Processing of Personal Data” refers to All kinds of operations performed on data such as obtaining, recording, storing, preserving, changing, rearranging, disclosing, transferring, taking over, making available, classifying or blocking the use of personal data in whole or in part by automatic means or non-automatic means provided that it is a part of any data recording system; "Data Subject" refers to the real person whose personal data is processed; "Data Controller" refers to the real or legal person who determines the purposes and means of processing the personal data, and is responsible for the establishment and management of the data recording system; "Obligation to Inform" refers to the obligation of the data controller or the authorized person to inform the data subjects during the acquisition of personal data about the identity of the data controller, the purpose for processing the personal data, to whom the processed personal data can be transferred and the purpose of such transfer, the method and legal grounds for collecting personal data, and other rights listed in Article 11 of the Law. Data Subject: You, whose personal data are processed by ECE, are considered to be a Data Subject by the Law as a website visitor due to your visit to our website. Data Controller: Our company ECE is the data controller, who determines the purposes and means of processing your personal data, and is responsible for the establishment and management of the data recording system. Obtaining Your Personal Data: Your personal data may be collected with your consent, verbally, in writing, or electronically via any channels including but not limited to our websites, our sales and marketing department and other relevant employees, forms collected during customer visits, digital marketing and call center, social media, our organizers, suppliers, and business partners. Purposes and Legal Reasons for Processing Your Personal Data: Our company saves the data provided by individuals voluntarily in accordance with the law to carry out periodic promotions, to design special promotional activities for customer profiles, to deal with customer complaints and suggestions, to carry out surveys and research, to better fulfill customer requests, to revise products, to promote products and services and to carry out the advertisement, communication, promotion, sales, and marketing activities, and to better meet the customer requests. The following table lists the legal grounds and purposes of processing your personal data. Transfer of Your Personal Data: Your personal data may be transferred to the relevant authorities without the obligation to inform and without your explicit consent in case they are requested within the framework of Article 28/1 of the KVKK. In unforeseen circumstances apart from this, your personal data may be transferred to public institutions (administrative authorities such as ministries, Presidential boards, etc.) specified in the law, within the scope and limitations stipulated in the law, if requested in cases clearly stated in the law. In addition, subject to your consent, your personal data is disclosed to the group of companies that our company is included in, other group companies, program/service partner organizations, service providers, companies that process data on our behalf, social media organizations, social networking organizations (Facebook, etc.), and domestic/foreign organizations and other relevant third parties within the framework of the cookie policy. Your Rights Regarding Your Personal Data: Data subjects must first apply to the data controller in order to exercise their rights regarding their personal data. According to Article 14 of the Law, no direct complaint can be made to the Personal Data Protection Authority. In accordance with the law, you may exercise the following rights regarding your personal data by applying to the data controller, i.e. us. a) Learn whether their Personal Data is processed or not, b) Request information about your personal data if they have been processed, c) Learn the purpose of processing the personal data and whether they are used appropriately for their purpose, d) Know the third parties to whom personal data is transmitted in the country or abroad, e) In case personal data is processed deficiently or incorrectly, request the correction of such, f) Request the deletion or destruction of your personal data in case the reasons that require processing are eliminated, g) Request that the transactions conducted as per sub-clauses (e) and (f) be notified to the third parties to whom your personal data is transferred, h) Object to the occurrence of a consequence against you through analyzing the processed data exclusively on automated systems, i) Request the remedy of damages in case of any damages suffered due to illegal processing of the Personal Data.

Method of Application to the Data Controller You can apply using one of the following methods: • In writing to our Company at the address of Gayrettepe Mahallesi Prof. Dr. Bülent Tarcan Caddesi Engin Pak İş Merkezi No.: 5 Beşiktaş/Istanbul; • By e-mail to our company's registered e-mail address pakholding@hs01.kep.tr address using your registered e-mail address, including your secure electronic signature or mobile signature; • e-mail to kvkk@pakgrp.com using your e-mail address registered in our system. Detailed information on the procedures and principles to be followed when making an application can be found in the Communiqué on Procedures and Principles of the Application to Data Controller of the Personal Data Protection Authority. Ece Ticari Gayrimenkul Yatırım ve Yönetim Hizmetleri A.Ş.

II-EXPLICIT CONSENT I have read the disclosure drafted by Ece Ticari Gayrimenkul Yatırım ve Yönetim Hizmetleri A.Ş., I hereby accept and declare that my personal data can be processed in accordance with the purposes and conditions stated in the disclosure. If you grant the permissions/approvals specified within the scope of the information above, click the "I have read and hereby accept the Personal Data Disclosure and Consent" box on the screen to indicate your acceptance, consent, and approval.