INFORMATION NOTICE PURPOSE AND SCOPE

As 4M DIGITAL, we take measures to protect your personal data in accordance with the Personal Data Protection Law No. 6698 (“KVKK” or “Law”). As a “data controller,” we process your personal data for the reasons and methods explained below within the framework of KVKK and relevant legal regulations.

This 4M DIGITAL Personal Data Processing Information Notice has been prepared to inform you transparently, as required by Article 10 of KVKK, titled "Obligation of the Data Controller to Inform." This document explains the identity of the data controller, the method and legal basis for collecting personal data, the purposes for processing, the parties to whom the data may be transferred and for what purposes, the data processing period, and the rights granted under Article 11 of KVKK. The explanations regarding “Your Personal Data” in this information notice also cover “Sensitive Personal Data.”

1. Data Controllers

Company Name: 4M DIGITAL
Address: Headquarters: Mustafa Kemal Mah. Dumlupınar Boulevard No: 266C, Interior Door No: 56, Çankaya/ANKARA

Collection Method and Legal Basis for Your Personal Data

Your personal data may be collected verbally, in writing, or electronically, through automated or non-automated means, to conduct company activities. As long as your relationship with the company continues, your personal data may be processed, updated, and stored in both digital and physical environments.

Your personal data may be processed and transferred for the purposes listed in Article 2 and in accordance with the conditions and purposes stated in Articles 5 and 6 of the Personal Data Protection Law No. 6698.

Processed Data and Processing Purposes

Your personal data is processed securely and in compliance with the Personal Data Protection Law to fulfill legal obligations and provide better services in company operations. Depending on the company’s services, products, or commercial activities, personal data may be processed verbally, in writing, aurally, or electronically.

Processed data includes:

• Identity Information: Name, Surname, and Turkish ID Number provided by the visitor.
• Physical Space Data: Entry-Exit Camera Records, IP Camera Footage.

Collected data is processed for the following purposes:

• Ensuring Physical Space Security
• Creating and Monitoring Visitor Records

VISITOR INFORMATION NOTICE UNDER THE PERSONAL DATA PROTECTION LAW NO. 6698

Your personal data will be processed in accordance with the conditions and purposes specified in Articles 5 and 6 of the Personal Data Protection Law No. 6698. It will also be securely stored in both digital and physical environments.

For detailed information on how 4M DIGITAL processes personal data, you can visit our Personal Data Protection and Privacy Policy at www.4mtodigital.com.

Recipients and Purposes of Data Transfers

For the purpose of ensuring the physical security of our company, individuals in business relationships with our company, and other visitors, necessary technical and administrative measures will be taken to provide an appropriate level of security.

In this context, visitor information may be transferred to our supplier companies in compliance with the conditions specified in Articles 8 and 9 of KVKK, provided that the necessary security measures are taken.

Data Processing and Retention Period

Your personal data will be processed only for the purposes specified in this Information Notice and in accordance with the relevant laws and legal time limits. If the laws change the data processing periods, the updated periods will apply.

As required by the principle of purpose limitation, your personal data will be processed only for the fulfillment of the purposes explained in this Information Notice and will be deleted, destroyed, or anonymized once these purposes are fulfilled or after the legally required retention period expires.

Rights of Data Subjects and Exercising These Rights

Individuals whose personal data is processed have the following rights:
a. To learn whether personal data is being processed,
b. To request information if their personal data has been processed,
c. To learn the purpose of processing personal data and whether they are used in accordance with the purpose,
d. To know the third parties to whom personal data is transferred domestically or abroad,
e. To request the correction of incomplete or incorrect personal data and to request that the correction be notified to third parties to whom the data has been transferred,
f. To request the deletion or destruction of personal data if the reasons for processing no longer exist, even if the data was processed in accordance with the law, and to request that third parties to whom the data has been transferred be notified of this,
g. To object to a result arising from the exclusive analysis of processed data via automated systems that is against their interests,
h. To demand compensation for damages in case of unlawful processing of personal data.

How to Exercise Your Rights

Individuals whose personal data is processed can submit their requests regarding their rights in accordance with the Information Notice along with documents verifying their identity using the following methods or any other methods determined by the Personal Data Protection Authority.

Data subjects can submit their requests free of charge by filling out and signing the Application Form and delivering it to the General Manager in the following ways:

• By filling out the Personal Data Application and Response Form available at www.4mtodigital.com
• By sending a signed written petition explicitly mentioning that the request concerns KVKK to www.4mtodigital.com
• By sending an email with a secure electronic signature, mobile signature, or using the registered email address in our system to kurumsal@4mtodigital.com
• By submitting the request in person to the General Manager.

Mandatory Information for Valid Applications

According to the Communiqué on Application Procedures to the Data Controller, a valid application must include the following details:
a) Name, surname, and signature (if the application is written),
b) For Turkish citizens: Turkish ID number; for foreigners: nationality, passport number, or identity number (if available),
c) Residence or workplace address for notifications,
d) If applicable, an email address, telephone, or fax number for notifications,
e) The subject of the request.

Applications lacking this information will not be considered valid. If applying without filling out the Application Form, all required details must still be provided to the General Manager.

If an authorized third party applies on behalf of the data subject, a notarized special power of attorney must be submitted.

Updates to the Information Notice

4M DIGITAL reserves the right to modify this Information Notice at any time. Changes will become effective immediately once the updated Information Notice is published on www.4mtodigital.com.