Privacy Notice

This Privacy Notice has been prepared in accordance with Article 10 of the Law No. 6698 on Protection of Personal Data ("DPL").

This Privacy Notice aims to ensure that your personal data is processed in accordance with the DPL and other relevant legislation during the use of the website owned by Vendorside Bilişim Anonim Şirketi ("Company"). Using the Website means that this Notice has been read, understood and accepted. If you do not accept the rules specified in this Notice, please immediately terminate your use of the website.

Identity of the Data Controller

The data controller for the personal data processed in this application is the Company.

Mersis No: 0924109420900001

Address: Muallimköy Mah. Deniz Cad. Muallimköy T.G.B. 1.Etap Sitesi 1.1.C1 Blok No: 143/8 İç Kapı No: Z01 Gebze / Kocaeli

Phone: ….

E-mail: vendorside@hs01.kep.tr

What Personal Data is Processed?

During your visit to the website, personal information that you voluntarily share with our Company, personal information you send to the email address we share with you at your own request, personal information you share to contact us in the contact section, and information you share during system login are processed. In other words, you may share your name-surname, email address, phone number, the title of the company you work for and your position with our Company in order to obtain information about Vendorside products and services and/or to create a Demo Account and/or Membership Account to experience Vendorside products and services.

Apart from the data you voluntarily share, passive information may be obtained in order to organize and improve the site in line with your needs. Data such as your IP address, internet service provider type, domain name, number of visits to the site and duration of stay on the site are included in "passive information". Without your permission, this information cannot be disclosed and can only be stored for internal use purposes.

Cookies other than technical/mandatory cookies (such as functional/advertising) are used on our website. We would like to note that technical/mandatory cookies (Google Analytics, Google Tag Manager) are essential for the functionality of the website.

During your visit to the website, you may voluntarily share the following data with us:

• Your name, surname,
• Your email address,
• Your phone number
• The title of the company you work for and your position in that company

How is Personal Data Processed?

Your personal data is collected and processed based on the personal data processing conditions specified in Articles 5 and 6 of the Law, when you contact our Company electronically through the website;

• For the establishment and performance of a contract
• The legitimate interest of our Company

based on legal grounds.

For What Purposes is Your Personal Data Processed?

The Company may use your personal data to evaluate, analyze and respond to your requests, and to create your demo or membership account.

Your personal data is also processed for the following purposes:

• Establishment of business relationship between our Company and the company you work for,
• Execution of the contract between our Company and the company you are an employee/authorized person of, fulfillment of all kinds of obligations arising from this business relationship, including the provision of products and services for your use.
• Conducting the necessary work by the relevant business units, including sales and marketing activities, and planning and execution of business processes in this context, in order to enable relevant persons to benefit from the products and services offered by our Company,
• Execution of necessary operational activities by our business units and coordination of support processes in order to offer our products and services to relevant persons,

for these purposes.

In Case of Your Explicit Consent

• Some cookies used on the website are provided by third-party service providers other than the Company. If you give your explicit consent, some of your data will be processed through functional and advertising cookies for transaction security, targeting and advertising of your social media data, performance and analysis, obtaining and conducting statistical data about website users and visitors, conducting marketing processes of our products and services, customizing and recommending them according to your usage habits, preferences and needs. You can withdraw your explicit consent regarding cookies other than mandatory cookies at any time.

Transfer of Personal Data

The Company may share your personal data only with Group Companies and Affiliates, and with our Company's domestic service providers and business partners in areas requiring expertise such as information technologies and mailing, in order to fulfill the data processing purposes specified in the relevant section. Finally, your personal data may also be shared with judicial and administrative authorities or institutions and organizations that request it as required by legislation.

Otherwise, it is not shared with any third parties and institutions located in the country or abroad.

Method and Legal Basis of Personal Data Collection

Your personal data is processed based on Articles 5.2/c, 5.2/d, 5.2/e and 5.2/f of the DPL, at your own request, your sharing with the Company for the purpose of contacting you, and the legal grounds of "data processing is necessary for the establishment and performance of a contract", "data processing is mandatory for the establishment, use or protection of a right" and "data processing is mandatory for the legitimate interests of the data controller".

Because in order to create your demo and/or membership account, your information needs to be verified and your account needs to be activated. In addition, your data is processed to receive your questions and requests, to provide you with information about our Company's products and services, etc., and in light of the articles mentioned above.

Rights of Data Subjects

As personal data owners, if you submit your requests regarding your rights to our Company with the Application Form presented to your attention in the attachment, our Company will finalize the request free of charge within thirty days at the latest, depending on the nature of the request. However, if a fee is stipulated by the Personal Data Protection Board, the fee determined by our Company will be charged. In this context, personal data owners have the following rights:

• Learning whether personal data is processed,
• Requesting information about it if personal data has been processed,
• Learning the purpose of processing personal data and whether they are used in accordance with their purpose,
• Knowing the third parties to whom personal data is transferred domestically or abroad,
• Requesting correction if personal data is incomplete or incorrectly processed and requesting notification of the operation carried out in this context to third parties to whom personal data has been transferred,
• Requesting deletion or destruction of personal data if the reasons requiring its processing cease to exist, even though it has been processed in accordance with the DPL and other relevant legal provisions, and requesting notification of the operation carried out in this context to third parties to whom personal data has been transferred,
• Objecting to the occurrence of a result against the person himself/herself by analyzing the processed data exclusively through automated systems,
• Requesting compensation for damages in case of damage due to unlawful processing of personal data.

Data Retention Period

The Company retains your personal data only for as long as necessary, limited to the purpose for which this data was collected.

Data Security

Your Personal Data will be kept in a password-protected database that can only be accessed by certain employees of the Company. All necessary measures and precautions will be taken in accordance with the legislation while your data is stored.

Application to the Data Controller

You can submit your written applications in accordance with Article 13 of the DPL to the address specified above or to the e-mail address …….. by using the Application Form presented to your attention in the attachment.