1. Identity of Our Company's Data Controller

As Limonist Meta Teknoloji A.Ş. ("Limonist" or "Company"), we exercise utmost sensitivity regarding the security and confidentiality of your personal data. With this awareness, as the data controller under the Personal Data Protection Law No. 6698 ("Law"), we present the following matters to your attention within the scope of our information obligation to ensure compliance with the Law regarding personal data obtained.

2. Personal Data We Process

Within the scope of the contractual or commercial relationship you have or will have with our Company, your name-surname, T.C. identity number, IBAN number, financial data, tax number, business address, phone number, fax number, e-mail address, signature, salary information of your employees, all data you entered on the https://limonist.com website while benefiting from the services provided by the Company, financial and identity data, voice recordings taken by our call centers in case of support requests within the service you receive, conversation history in case of online support (all together "Personal Data") are processed.

3. Transfer of Personal Data

Your personal data may be transferred to official institutions, third parties from whom our Company receives or provides services, third parties from whom support is received in areas such as storage, archiving, information technology support (server, hosting, program, cloud computing), security, within the scope of the Law and related regulations, depending on the reason requiring transfer and limited to this reason, for the purposes explained in Article 2 of this Information Text.

4. Processing Method and Legal Basis of Your Personal Data

Your personal data may be collected through automatic or non-automatic methods from information communicated by you personally, orally or in writing, or through closed-circuit camera recording systems in our Company, based on and limited to the specified legal reasons, in cases where it is necessary for (i) explicit provision in laws or processing of our data, (ii) fulfillment of our Company's legal obligations, (iii) establishment of a contract between you and us or performance of an existing contract, (iv) establishment of a right, or (v) legitimate interest of our Company without harming your fundamental rights and obligations.

Your Personal Data is processed for the legal reason that processing of personal data belonging to the parties to the contract is necessary for the establishment of commercial and/or contractual relations between the Company and us and for this to be performed in accordance with the law; and for the legal reasons of explicit provision in laws and fulfillment of legal obligations to bring obligations under current legislation, including primarily Tax Procedure Law No. 213, Code of Obligations No. 6098 and Turkish Commercial Code No. 6102 and secondary legislation issued based on them.

5. Processing Purposes of Your Personal Data

Your collected personal data will be processed within the framework of personal data processing conditions and purposes specified in Articles 5 and 6 of the Law for the purposes of carrying out necessary work by our business units to benefit personal data subjects from products and services offered by the Company and conducting related business processes, carrying out necessary work by our relevant business units for the realization of commercial activities conducted by the Company and conducting related business processes, ensuring legal, technical and commercial-business security of the Company and persons in business relationship with the Company, planning and execution of commercial and/or business strategies of the Company, and planning and execution of activities necessary for recommending and promoting products and services offered by the Company to personal data subjects by customizing them according to personal data subjects' preferences, usage habits and needs.

6. How Do We Protect Your Personal Data?

Our Company takes all necessary technical and administrative measures in accordance with GDPR legislation to prevent unauthorized access to your personal data, erroneous processing, disclosure, unlawful alteration/deletion of your personal data, and to ensure their protection and security.

In case your personal data is damaged and/or captured/disclosed by third parties as a result of attacks on our Company's servers and/or other systems, our Company immediately informs you and the Personal Data Protection Board.

7. Your Rights as Data Subject Under GDPR

• •Learning whether your personal data is processed or not
• •Requesting information about your personal data if it has been processed
• •Learning the purpose of processing your personal data and whether they are used in accordance with their purpose
• •Knowing the third parties to whom your personal data is transferred domestically or abroad
• •Requesting correction of your personal data if it has been processed incompletely or incorrectly
• •Requesting deletion or destruction of your personal data
• •Requesting notification of correction and/or deletion operations to third parties to whom personal data has been transferred
• •Objecting in case of a possibility of an adverse result when your processed data is processed exclusively through automated systems analysis
• •Requesting compensation for damage in case of damage due to unlawful processing of your personal data

8. Submission of Your Requests Within the Scope of Personal Data Protection

In accordance with GDPR Article 13/1, to exercise your rights specified in this article, if you submit your request by completely filling out the application form and identity-supporting documents to Limonist's address at Ahmet Yesevi Mah. Kerem Sk. No: 9 İç Kapı No: Z02 Pendik/İstanbul in person or through a notary, or to TIRPORT's info@limonist.com e-mail address, your application will be evaluated and concluded within 30 (thirty) days.

If a written response is to be given to requests and therefore an additional cost is involved, a fee may be requested from you according to the tariff determined by the Personal Data Protection Board. In case of rejection of the request, the reason(s) for rejection will be justified in writing or electronically.