PERSONAL DATA PROTECTION AND PROCESSING POLICY

PERSONAL DATA PROTECTION AND PROCESSING POLICY AND INFORMATION TEXT

Uniarch Clinical Engineering and Clinical Facility Design Services Industry and Trade Corporation ("Uniarch" or "Company") places the utmost importance on the security of your personal data. With this awareness, we process and store your personal data, which you have provided to us due to your service and commercial relationship, in compliance with the Personal Data Protection Law ("Law") numbered 6698, secondary regulations (regulations, communiqués, directives) enacted and to be enacted within the framework of the Law, and decisions taken and to be taken by the Personal Data Protection Board, in a manner consistent with the definitions in the Law. We process your personal data within the specified framework in accordance with the responsibilities described in the Law as a "Data Controller." We would like to inform you about the relevant legislation and some definitions specified in this legislation:

1. Information about the Data Controller

Uniarch Clinical Engineering and Clinical Facility Design Services Industry and Trade Corporation, registered with the Istanbul Trade Registry Directorate under the number 85958, with MERSIS number 0892033560600001, is the Data Controller, with its address at "Çavuşoğlu Mah. Yakacık Cad. Simtec Blok No: 130 Kartal/ISTANBUL," operating at this address according to the Law.

2.  Purposes of Processing Personal Data

Uniarch,toplanan kişisel verilerinizi; within the scope of the Law numbered 6698 and related legislation, and only in cases where Uniarch is the Data Controller, in a lawful, fair, and connected manner with the purposes listed below within the limits specified by the Law:

• Creating membership records and accounts on the Uniarch website https://www.uniarch.com.tr/ as needed,
• Processing online visitor data in accordance with the relevant legislation, creating visitor records, and tracking them,
• Sending messages to Uniarch via the website https://www.uniarch.com.tr/ for questions, opinions, suggestions, and feedback,
• Providing better service to members/visitors, offering various advantages, informing about sales, marketing, promotions, providing information about campaigns and conditions, conducting surveys, conducting customer satisfaction surveys, facilitating and expediting purchase transactions,
• Sending important information about changes in our service terms and changes in our electronic services,
• Ensuring quality, training, and security improvements,
• Resolving complaints and processing data access or correction requests,
• Contacting the data subject,
• Preventing, detecting, and investigating crimes, including fraud and money laundering, and analyzing and managing other commercial risks,
• Complying with legal obligations, including anti-money laundering and counter-terrorism laws, and responding to requests from government and state authorities (including those outside your country of residence),
• Managing our infrastructure and commercial operations, including audit, finance, and accounting; billing and collections; information systems; data and website hosting; business continuity, records, document, and print management, in accordance with internal policies and procedures,
• Determining and defending legal rights; protecting our activities or the activities of our business partners, our rights, our privacy, our security, our property and/or those of others; applying available remedies or limiting our damage,
• Conducting market research and analysis, including satisfaction surveys,
• Facilitating your participation in campaigns and similar promotions and managing these activities,
• Facilitating the social media sharing function,
• Personalizing your experience with electronic services by presenting you with personalized information and advertisements related to electronic services,
• Utilizing data subject's benefit from the services provided through the site, detecting system errors, and monitoring performance, as well as improving the operation of the site,
• Conducting the necessary studies by the relevant business units for the realization of the commercial activities conducted by Uniarch and the execution of related business processes, ensuring the legal, technical, and commercial/business security of Uniarch and the persons in business relationship with Uniarch, planning and execution of Uniarch's commercial and/or business strategies,
• Establishing possible rights and claims of the relevant persons,
• Conducting statistical evaluations and market research,
• Managing corporate reputation, implementing company human resources policies and media communication, managing information security management services,
• Fulfilling the obligations arising from the Law numbered 6698,
• Making the necessary arrangements for the data being processed to be up-to-date and accurate.

3. TO WHOM AND FOR WHAT PURPOSES PROCESSED PERSONAL DATA MAY BE TRANSFERRED

Your personal data may be transferred to official authorities, judicial authorities, regulatory and supervisory bodies, especially parent companies and subsidiaries, business partners, investors, performance supporters, our employees, our managers, and our suppliers (only anonymously), shareholders, in accordance with the personal data processing conditions and purposes specified in Articles 5, 6, 8, and 9 of Law number 6698, within the scope of and with the necessary security measures, as well as to third parties abroad, limited to the purposes mentioned in this Information Text, provided that the necessary security measures are taken.

4. METHOD AND LEGAL BASIS OF COLLECTING PERSONAL DATA

Your personal data are processed through the contract concluded with you based on the reasons specified in Article 5/2 of the Law, which are a) processing of personal data of the parties to the contract, provided that it is directly related to the establishment or performance of a contract, b) being explicitly stipulated in the laws, and c) being compulsory for the data controller to fulfill its legal obligation. These data may be collected through the contract concluded with you, information sent to our company's e-mail address, information transmitted directly verbally or in writing to the relevant department, the website, electronic mail, mobile communication, mobile applications, application and membership forms, various contracts, and in written, verbal, or electronic form.

5. RIGHTS OF DATA SUBJECTS UNDER THE LAW

You can apply to Uniarch at any time to:

• Find out if your personal data is being processed,
• Request information if your personal data has been processed,
• Learn the purpose of processing your personal data and whether it is used for its purpose,
• Learn the third parties in your country or abroad to whom your personal data has been transferred,
• Request the correction of your personal data if it is incomplete or incorrect,
• Request the deletion or destruction of your personal data within the framework of the conditions specified in Article 7 of the Law,
• Request the notification of the transactions made pursuant to Article 11 of the Law to third parties to whom your personal data has been transferred, as per paragraphs (d) and (e) of Article 11 of the Law,
• Object to the occurrence of a result against you by analyzing your processed data exclusively through automated systems,
• Request the compensation of the damage in case you incur damages due to the illegal processing of your personal data.

To use your rights under the Law and regarding the application of the Law, you can send your requests and explanations about the rights you want to use through an application form you can obtain from the workplace to the company's address by notary public, by registered mail with return receipt, or personally, or after signing the application form filled out in electronic environment with your mobile signature, and your secure electronic signature to the address of Uniarch Company. In case the company provides responses in written form, they will not impose a charge for the initial 10 pages. However, for each additional page beyond the initial 10 pages, a fee will be assessed according to the fee schedule established by the Personal Data Protection Board. Should the response be provided in a recording medium, such as a CD or flash drive, the company may apply a fee, but it will not exceed the cost associated with the recording medium. The requests without the mentioned elements will be rejected by Uniarch.

6. STORAGE PERIOD OF DATA COLLECTED BY OUR COMPANY

Your personal data are stored for the periods specified in the relevant legal regulations, or if no period is specified in the relevant legal regulations, according to the practices of our company and the requirements of the business life, within the framework of the processing purposes mentioned above, and are deleted, destroyed, or anonymized in accordance with Article 7 of the Law after the specified period.

UNIARCH CLINICAL ENGINEERING AND
CLINICAL FACILITY DESIGN SERVICES INDUSTRY AND TRADE CORPORATION.