Technology

CLARIFICATION TEXT ON THE PROCESSING OF PERSONAL DATA

As DEMAS.AI, we present the clarification text we have prepared in accordance with Article 10 of the Law on the Protection of Personal Data No. 6698 (the "Law"), which contains information about the company's personal data processing activities, to the public and relevant persons;

ARTICLE 1: DATA CONTROLLER

Your personal data may be processed by DEMAS.AI, acting as the data controller, within the scope described below. The concept of the data controller is understood to mean; the natural or legal person who determines the purposes and means of processing personal data and is responsible for the establishment and management of the data recording system.

You can use the following channels to contact the data controller:

Address: GUSAB Kurtulus OSB. Ataturk Cad. No:173/2 Gursu / Bursa / TURKEY

Phone: +90 224 341 71 00

E-mail: marketing@demas.ai

Website: www.demas.ai

ARTICLE 2: PURPOSE OF PROCESSING PERSONAL DATA

Personal data is processed by us for the following purposes:

1. Executing human resources processes
2. Ensuring corporate communication
3. Ensuring company security
4. Conducting statistical studies
5. Fulfilling business and transactions resulting from signed contracts and protocols
6. Ensuring the fulfillment of legal obligations, as required or necessitated by legal regulations
7. Establishing contact with natural/legal persons who are in a business relationship with the Company
8. Making legal reports
9. Managing call center processes
10. Fulfilling the burden of proof as evidence in future legal disputes
11. Executing/following up on the company's legal affairs

ARTICLE 3: PARTIES TO WHICH PERSONAL DATA MAY BE TRANSFERRED AND PURPOSE OF TRANSFER

Personal data related to customers may be shared with the company's business partners and suppliers, legally authorized institutions and organizations, and legally authorized private law legal entities, within the framework of the personal data processing conditions and purposes specified in Articles 8 and 9 of the Law, including for the purposes of: planning and executing the necessary activities for customizing and promoting the products and services offered by the Company according to the preferences, usage habits, and needs of the relevant persons; carrying out the necessary work by business units to enable relevant persons to benefit from the products and services offered by the Company and conducting related business processes; carrying out the necessary work by relevant business units to perform the commercial activities conducted by the Company and conducting related business processes; planning and executing the Company's commercial and/or business strategies, and ensuring the legal, technical, and commercial-business security of the Company and the relevant persons in a business relationship with the Company.

ARTICLE 4: METHODS OF COLLECTING PERSONAL DATA AND LEGAL GROUNDS

Personal data is collected through electronic environments such as information and request forms on websites, mobile applications, and social media platforms, applications downloaded to smartphones, or in physical environments. The legal grounds for the collection and processing of personal data are as follows:

1. Retention of personal data due to its direct relevance to the establishment and execution of contracts,
2. Retention of personal data for the purpose of establishing, exercising, or protecting a right
3. Necessity of retaining personal data for the company's legitimate interests, provided that it does not harm the fundamental rights and freedoms of individuals
4. Retention of personal data for the purpose of the company fulfilling any legal obligation
5. Explicit provision for the retention of personal data in the legislation
6. Existence of explicit consent of data owners for retention activities that require explicit consent from data owners

ARTICLE 5: RIGHTS OF THE RELEVANT PERSON

The natural person whose personal data is processed is defined as the relevant person and has the following rights regarding themselves by applying to the company:

1. Learning whether personal data is processed
2. Requesting information if personal data has been processed
3. Learning the purpose of processing personal data and whether they are used appropriately for their purpose
4. Knowing the third parties to whom personal data is transferred domestically or abroad
5. Requesting the rectification of personal data if it is incomplete or incorrectly processed
6. Requesting the erasure or destruction of personal data
7. , Requesting that the transactions carried out pursuant to clauses (e) and (f) be notified to third parties to whom the personal data has been transferred
8. Objecting to the emergence of a result against the person by analyzing the processed data exclusively through automated systems
9. Requesting the compensation of damages in case of suffering damage due to the unlawful processing of personal data

Sincerely,

DEMAS.AI

DEMAS MAKİNA SANAYİ VE TİCARET LİMİTED ŞİRKETİ