COOKIE POLICY - PERSONAL DATA PROCESSING DISCLOSURE

This text has been prepared by Sisel Mühendislik Elektronik Sanayi ve Ticaret Anonim Şirketi ("Company") as the data controller within the scope of Article 10 of the Personal Data Protection Law No. 6698 ("KVKK") and the Communiqué on the Procedures and Principles to be Followed in Fulfilling the Disclosure Obligation.

We use cookies in some areas of our website at https://www.enda.com/ ("Site" or "Website"). This Cookie Disclosure Text is valid for the Site managed by our Company and will be used as described below.

The purpose of this Cookie Disclosure Text is to inform you about which types of cookies we use for what purposes and how you can manage these cookies regarding the processing of personal data obtained automatically through the placement of cookies used on our website on your device. For cookies other than strictly necessary cookies and some functional and performance-analytics cookies used on our website, users' explicit consent is obtained and they are given the opportunity to change their consent at any time.

Users can see the types of cookies used on our website through the cookie management panel and can determine their preferences with "on" or "off" options for all cookies other than Strictly Necessary Cookies. Users can also change their preferences at any time through this panel.

I. GENERAL INFORMATION ABOUT COOKIES

A. What is a Cookie?

Cookies are small text files created on your device by a website and containing data in name-value format. Cookies enable the website you visit to store information on your device and use this information during your subsequent visits. Cookies created by a website are stored by the internet browser you use to access the site, and cookies do not contain personal data such as name, gender or address of visitors.

The information contained in cookies can only be accessed if you use the same internet browser and only by the domain name of the website that created the relevant cookie.

Cookies have become an important part of internet technologies today, and their main functions are remembering the preferences of online visitors and recognizing the device during connection, and cookies are used on almost every website.

B. Who Sends Cookies and How?

Cookies are sent through the communication established between the internet browser on your device (such as Chrome, Firefox, Safari, Edge, etc.) and the Site servers during your browsing.

C. What are the Types of Cookies?

1. According to ownership:

• a. First Party Cookies: Placed on the device directly by the visited website or our Company.
• b. Third Party Cookies: Cookies placed on the device by a third party such as an advertiser or analytics system that is in cooperation with our Company.

2. According to active duration:

• a. Session Cookies: Provide data that can be stored until the user closes the browser or the session ends. They are short-term cookies.
• b. Persistent Cookies: Cookies that remain on the drive until the cookie is deleted by the user or until the specific expiration date for the cookie. Persistent cookies have a written expiration date with a variable duration in their codes.

3. According to purpose of use:

• a. Strictly Necessary Cookies: Cookies that are necessary for using features such as navigating the website and accessing secure areas of the site.
• b. Functional Cookies: Allows the website to remember past selections (username information, password information, which language is preferred, etc.). Preference cookies that provide automatic login to the website are also called functional cookies.
• c. Performance-Analytics Cookies: Also known as statistics cookies, performance-analytics cookies are cookies that provide anonymous, statistical data regarding the use of the website. With statistics cookies, how the user uses the website, the pages visited, and the links clicked can be stored. Anonymized statistics cookies are not used to identify the website user. The purpose of these cookies is to make the website more functional.
• d. Marketing Cookies: Cookies that can be used by companies operating to create a profile of your interests and show relevant advertisements on other sites.

II. PURPOSE AND LEGAL BASIS FOR PROCESSING YOUR PERSONAL DATA THROUGH OUR WEBSITE

Your personal data is processed through cookies for the following purposes and legal reasons:

A. Strictly Necessary Cookies

Purpose:

• To ensure the secure operation of the website,
• To manage user sessions,
• To prevent system errors and fulfill technical requirements that directly affect user experience,
• Maintaining basic functions by remembering the user's previous actions.

Legal Basis:

• KVKK Art.5/2-c: "Necessity of processing personal data of the parties to the contract, provided that it is directly related to the establishment or performance of a contract"
• KVKK Art.5/2-f: "Necessity of data processing for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject"

B. Functional Cookies

Purpose:

• Used to make our website more functional and personalize it (to ensure that your preferences other than your privacy preferences are remembered when you re-enter the site).

Legal Basis:

• KVKK Art.5/1: "Existence of explicit consent of the data subject"

Note: These types of cookies are only used with the explicit consent of the data subject, and are not activated in any way if consent is not given.

C. Performance and Analytics Cookies

Purpose:

• To analyze visitor behavior,
• To measure website performance,
• To detect errors and conduct improvement development processes properly,
• Reporting user habits based on page views and session information,
• To personalize site content according to the user and enhance the experience.

Legal Basis:

• KVKK Art.5/1: "Existence of explicit consent of the data subject"

Note: These types of cookies are only used with the explicit consent of the data subject, and are not activated in any way if consent is not given.

D. Advertising and Marketing Cookies

Purpose:

• Providing content and advertising displays targeting the user's areas of interest,
• Measuring the effectiveness of advertising campaigns,
• Making targeted promotions in line with user preferences,
• Performing interactive data matching with third-party advertising platforms.

Legal Basis:

• KVKK Art.5/1: "Existence of explicit consent of the data subject"

Note: These types of cookies are also not activated in any way other than explicit consent and can be withdrawn by the user at any time.

Additionally, your website browsing data (IP Address Information, Website Entry and Exit Information, Location Data) is processed on a limited basis for the following purposes and legal reasons regulated under KVKK Art. 5:

• The Company's need for your personal data such as your IP address in order to fulfill its legal and contractual obligations, especially those arising from Law No. 5651 on Regulation of Publications on the Internet and Combating Crimes Committed by Means of Such Publications and the Regulation on Procedures and Principles of Regulation of Publications on the Internet,
• Ensuring company and visitor network traffic security,
• Conducting information security processes, conducting access activities, conducting activities in compliance with legislation, monitoring and conducting legal affairs, conducting/auditing business activities, receiving and evaluating suggestions for improving business processes, conducting business continuity activities, conducting goods/services sales processes, conducting goods/services production and operation processes, conducting customer relationship management processes, conducting performance evaluation processes, conducting risk management processes, conducting storage and archiving activities, carrying out activities for customer satisfaction, tracking requests/complaints, conducting product/service marketing processes, ensuring the security of data controller operations, providing information to authorized persons, institutions and organizations, conducting management activities, creating and tracking visitor records

"Necessity of processing personal data of the parties to the contract, provided that it is directly related to the establishment or performance of a contract, Necessity for the data controller to fulfill its legal obligation, Necessity of data processing for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject."

III. SHARING YOUR PERSONAL DATA

Your personal data obtained through cookies may be shared with domestic and foreign technology suppliers, analytics and advertising service providers (e.g. Google, Meta, Microsoft, TikTok), and our business partners from whom we receive services, only limited to the processing purposes stated above and based on your explicit consent.

In addition, your personal data may be shared for the purpose of fulfilling the proper information requests of authorized public institutions and organizations and within the framework of our obligations arising from legislation.

During data transfer, full compliance with the conditions set forth in Articles 8 and 9 of the KVKK is ensured; cross-border data transfers are carried out only based on the explicit consent of the data subject or in accordance with the safeguards determined by the Board.

IV. DESTRUCTION OF YOUR PERSONAL DATA

Our Company retains your personal data only for the period required for data processing purposes and limited to the retention periods stipulated in the relevant legislation. Personal data whose retention period has expired or whose processing purpose has ceased are deleted, destroyed or anonymized in accordance with the periodic destruction processes in accordance with Article 7 of the KVKK and the provisions of the Regulation on the Deletion, Destruction or Anonymization of Personal Data.

Your personal data obtained through cookies is also deactivated when you change your preferences through your browser settings or the cookie management panel, and the data on the servers under our Company's control is deleted or rendered non-functional through the relevant technical tools.

However, the destruction of persistent cookies placed by third-party providers (e.g. Google, Meta) and over which our Company has no direct intervention is subject to the data policies of the relevant third parties. In this context, users should direct their requests regarding third-party cookies directly to the relevant provider.

V. YOUR RIGHTS REGARDING THE PROCESSING OF PERSONAL DATA

Within the framework of Article 11 of the KVKK, you can submit the following requests to our Company:

1. To learn whether your personal data is processed and to request information about it if it has been processed,
2. To learn the purpose of processing your personal data and whether they are used in accordance with their purpose,
3. To learn the third parties to whom your personal data is transferred domestically or abroad,
4. To request correction of personal data if it has been processed incompletely or incorrectly,
5. To request deletion, destruction or anonymization of your personal data if the reasons requiring processing of your personal data within the scope of Article 7 of the KVKK have ceased to exist,
6. To request that the transactions carried out pursuant to subparagraphs (d) and (e) be notified to third parties to whom your personal data has been transferred,
7. To object to the occurrence of a result against you by analyzing the processed data exclusively through automated systems,
8. To request compensation for damage if you suffer damage due to unlawful processing of your personal data.

You can exercise the above rights in accordance with the KVKK and the provisions of the Communiqué on Application Procedures and Principles to Data Controller published on 10.03.2018 and relevant current legislation through the relevant application channels accessible on our website at https://www.enda.com/;

• You can deliver in person/by hand, send via notary or registered mail to Şerifali Mah. Barbaros Cad. No:18/1 Ümraniye/İstanbul,
• You can send via your email address registered in our system to ik@enda.com.tr.

For a person other than the data subject to make a request, there must be a notarized special power of attorney issued in the name of the person who will apply on behalf of the data subject regarding the matter.

Your requests that you properly submit to our Company in this context will be finalized within thirty days at the latest. If the finalization of your requests requires an additional cost, a fee according to the tariff determined by the Personal Data Protection Board ("Board") will be charged by our Company from the applicant. If your application is responded to via a recording medium such as CD or flash memory, a fee determined not to exceed the cost of the recording medium may be charged by our Company.

Our Company may request information from the data subject in order to determine whether the applicant is the owner of the personal data, and may ask questions to the data subject regarding the application in order to clarify the matters specified in the application.

Pursuant to Article 14 of the KVKK, in cases where the application is rejected, the response given is found insufficient, or the application is not responded to in time; the personal data owner may file a complaint with the Board within thirty days from the date of learning of our Company's response and in any case within sixty days from the date of application.

VI. COOKIE INFORMATION LIST

Strictly Necessary Cookies

These cookies are necessary for the proper functioning of the website and enable the provision of basic services such as users' privacy preferences and session management.

Functional Cookies

Used to make our website more functional and personalize it (to ensure that your preferences other than your privacy preferences are remembered when you re-enter the site).

(No additional functional cookies are listed in the current detection; this area will be updated if a functional category is opened in the panel.)

Performance and Analytics Cookies

Used to monitor and improve the performance of the website. Also used for analysis of visits to the website, understanding user behavior and statistical reporting.

Advertising and Marketing Cookies

Used to show advertisements to users based on their interests. Usually placed by third-party advertising providers.

Browser-Based Cookie Management

You can configure your browser to block cookies for all sites or specific sites, to warn when a cookie is created, to block third-party cookies, or to treat all cookies as session cookies. Additionally, you can delete cookies through your browser or see the list and values of cookies stored in your browser. For detailed information about your browser's cookie management functions, please review the support pages of the relevant browser.

Also;

• You can use the relevant browser/Google add-on options to disable cookies managed by Google Analytics.
• You can use Google ad settings to manage the personalized advertising experience provided by Google.
• Preferences for cookies used by many companies for advertising activities can be managed via Your Online Choices.

For more detailed information about cookies, you can visit https://www.aboutcookies.org or https://www.youronlinechoices.eu/ or use the "Privacy Badger" application (https://www.eff.org/privacybadger).