a)Data Controller

As MITROTECH DIGITAL TRANSFORMATION CONSULTANCY (hereinafter referred to as "Company"), we inform you that we process your personal data in the capacity of data controller within the scope of the EU General Data Protection Regulation (hereinafter referred to as "GDPR") and other relevant legislation.

b) Processed Personal Data

Your personal data consisting of your identity and contact information (Name-Surname, Telephone Number and e-mail address) will be processed within the scope of the purposes and legal reasons specified in this Clarification Text in accordance with the GDPR and other relevant legislation.

c) Purposes for which Personal Data will be Processed

Your personal data,

• Carrying out the necessary work by our business units in order for you to benefit from the products and services offered by our company,

• Recommending the products and services offered by our Company to you; planning and/or execution of market research activities for the sales and marketing of products and services,

d) To Whom and for What Purpose the Processed Personal Data can be Transferred

Your personal data processed by our Company are not transferred to any institution, real persons or private legal entities. Pursuant to the GDPR, your personal data may be shared with the relevant public institutions and organisations, if necessary or upon request, in order to fulfil legal obligations in accordance with the relevant legislation, without seeking the explicit consent of the person concerned.

e) Transfer Abroad

Your personal data processed on the basis of the legal grounds specified in Article 5 (2) of the LPPD, due to the fact that the sales and marketing activities of the Company's products and services are carried out through online software systems whose databases are abroad, in line with the conditions for transfer abroad in Article 9 (2) of the LPPD, without obtaining the explicit consent of the person concerned,

• Foreign countries declared to have adequate protection by the EU General Data Protection Regulation (hereinafter referred to as the "Board") ("Foreign Country with Adequate Protection")

• Provided that it is limited to the foreign country and/or countries where the data controllers in Turkey and the relevant foreign country undertake adequate protection in writing and where the Board has authorised such transfer ("Foreign Country Where the Data Controller Undertakes Adequate Protection").

The transfer of your personal data processed within the scope of the purposes described above will be carried out by our Company in accordance with the decisions taken by the Board and the relevant regulations, in particular the GDPR and other relevant legislation, by taking all necessary care and taking all necessary security measures.

f) Management and Legal Grounds for Collecting Personal Data

In order to fulfil the purposes specified in paragraph (c) of this text, your personal data are obtained by filling out the contact form, sending e-mail messages and visiting the website in electronic environment by automatic or non-automatic methods, based on the legal reasons specified in GDPR.

g) User's Rights under GDPR

Within the scope of GDPR, you have rights as a data subject and you can submit your requests regarding these rights preferably by filling in all the information specified in the Application Form on our website in accordance with GDPR and the Communiqué on the Procedures and Principles of Application to the Data Controller,

• "Eğitim Mah. İlk Öğretim Sok. No:1/9 Güzelyalı Mudanya BURSA - TÜRKİYE" by coming to our Company in person,

• in writing through a notary public or by registered letter with return receipt in order to determine your identity and not to provide information to the wrong persons,

• (if any) by sending an electronic mail to the address by using the electronic mail address previously notified by you to our Company and registered in our systems or by other methods to be determined by the Board in the future.

h) Retention Period of Personal Data

The Company deletes, destroys, destroys or anonymises personal data upon the disappearance of the purpose of processing personal data and the expiration of the mandatory retention periods determined within the scope of the Laws and other relevant legislation.

i) Changes and Updates

This clarification text has been prepared within the scope of the GDPR and other relevant legislation. Necessary changes may be made in the said clarification text in line with the relevant legal legislation and / or changes in the Company's personal data processing purposes and policies.