INFORMATION NOTICE ON THE PROCESSING OF PERSONAL DATA THROUGH COOKIES VIA HTTPS://WWW.ENDA.COM/

We use cookies in certain areas of our website https://www.enda.com/ ("Site" or "Website"). This Cookie Information Notice applies to the Site managed by our Company and will be used as explained below.

The purpose of this Cookie Information Notice is to inform you about which types of cookies we use and for what purposes, and how you can manage these cookies, in relation to the processing of personal data obtained automatically through the placement of cookies used on our website on your device. Except for the mandatory cookies and certain functional and performance-analytical cookies we use on our website, users' explicit consent is obtained for cookies, and they are provided with the opportunity to change their consent at any time.

Users can view the types of cookies used on our website through the cookie management panel and can set their preferences with the "on" or "off" options for all cookies other than Mandatory Cookies. Users can also change their preferences at any time through this panel.

I. GENERAL INFORMATION ABOUT COOKIES

A. What Is a Cookie?

Cookies are small text files created on your device by a website that contain data in name-value format. Cookies make it possible for the website you visit to store information on your device and use this information during your subsequent visits. Cookies created by a website are stored by the internet browser you use to access the site, and cookies do not contain personal data such as name, gender, or address related to visitors. The information contained in cookies can only be accessed if you use the same internet browser and only by the domain name of the website that created the relevant cookie.

Today, cookies have become an important part of internet technologies, and their main functions are to remember the preferences of online visitors and to recognize the device during the connection, and almost every website uses cookies.

B. Who Sends Cookies and How?

Cookies are sent through the communication established between your internet browser (such as Chrome, Firefox, Safari, Edge, etc.) on your device and the Site servers during your browsing.

C. What Are the Types of Cookies?

1. According to their ownership:

• a. First-Party Cookies: Placed directly on the device by the visited website or by our Company.
• b. Third-Party Cookies: Cookies placed on the device by a third party, such as advertisers or analytics systems, in cooperation with our Company.

2. According to their active duration:

• a. Session Cookies: Provide data that can be stored until the user closes the browser or the session ends. These are short-term cookies.
• b. Persistent Cookies: Cookies stored on the device until the deletion date by the user or until the specific expiration date set for the cookie. Persistent cookies contain a written expiration date with variable durations in their codes.

3. According to their purposes of use:

• a. Mandatory Cookies: Cookies necessary for using features such as navigating the website and accessing secure areas of the site.
• b. Functional Cookies: Enable the website to remember past choices (such as username information, password information, language preference, etc.). Preference cookies that provide automatic login to the website are also called functional cookies.
• c. Performance-Analytical Cookies: Also known as statistical cookies, performance-analytical cookies provide anonymous, statistical data regarding the use of the website. With statistical cookies, information such as how the user uses the website, the pages visited, and the links clicked can be stored. Anonymized statistical cookies are not used to identify the website user. The purpose of these cookies is to make the website more functional.
• d. Marketing Cookies: Cookies that may be used by companies operating to create a profile of your interests and show relevant advertisements on other sites.

II. PURPOSE AND LEGAL BASIS FOR THE PROCESSING OF YOUR PERSONAL DATA THROUGH OUR WEBSITE

Your personal data are processed through cookies for the following purposes and legal bases:

A. Mandatory Cookies

Purpose:

• To ensure the secure operation of the website,
• To manage user sessions,
• To prevent system errors and fulfill technical requirements that directly affect the user experience,
• To maintain basic functions by remembering the user's previous actions.

Legal Basis:

• KVK Law Art. 5/2-c: "Provided that it is directly related to the establishment or performance of a contract, processing of personal data belonging to the parties of the contract is necessary"
• KVK Law Art. 5/2-f: "Provided that it does not harm the fundamental rights and freedoms of the data subject, processing of data is mandatory for the legitimate interests of the data controller"

B. Functional Cookies

Purpose:

• Used to make our website more functional and personalized (except for your privacy preferences, to ensure that your other preferences are remembered when you revisit the site).

Legal Basis:

• KVK Law Art. 5/1: "The explicit consent of the data subject"

Note: Such cookies are used only upon obtaining the explicit consent of the data subject, and are not activated in any way if consent is not given.

C. Performance and Analytical Cookies

Purpose:

• To analyze visitor behavior,
• To measure the performance of the website,
• To detect errors and ensure the proper conduct of improvement and development processes,
• To report user habits based on page views and session information,
• To personalize site content according to the user and enhance the experience.

Legal Basis:

• KVK Law Art. 5/1: "The explicit consent of the data subject"

Note: Such cookies are used only upon obtaining the explicit consent of the data subject, and are not activated in any way if consent is not given.

D. Advertising and Marketing Cookies

Purpose:

• To provide content and advertisements tailored to the user's interests,
• To measure the effectiveness of advertising campaigns,
• To conduct targeted promotions in line with user preferences,
• To perform interactive data matching with third-party advertising platforms.

Legal Basis:

• KVK Law Art. 5/1: "The explicit consent of the data subject"

Note: Such cookies are not activated in any way without explicit consent and can be withdrawn by the user at any time.

In addition, your website browsing data (IP Address Information, Website Login-Logout Information, Location Data);

• For the Company to fulfill its legal and contractual obligations, primarily those arising from Law No. 5651 on the Regulation of Publications on the Internet and Combating Crimes Committed Through Such Publications and the Regulation on the Procedures and Principles Regarding the Regulation of Publications on the Internet, which requires personal data such as your IP address,
• To ensure the network traffic security of the Company and visitors,
• For the purposes of conducting information security processes, carrying out access activities, ensuring compliance with legislation, tracking and executing legal affairs, conducting business activities/audits, receiving and evaluating suggestions for the improvement of business processes, ensuring business continuity, conducting sales processes of goods/services, conducting production and operational processes of goods/services, conducting customer relationship management processes, conducting performance evaluation processes, conducting risk management processes, conducting storage and archiving activities, carrying out customer satisfaction activities, tracking requests/complaints, conducting product/service marketing processes, ensuring the security of data controller operations, providing information to authorized persons, institutions and organizations, conducting management activities, and creating and tracking visitor records,

are processed limited to these purposes and on the legal grounds regulated under Article 5 of the KVK Law: "Provided that it is directly related to the establishment or performance of a contract, processing of personal data belonging to the parties of the contract is necessary; processing is mandatory for the data controller to fulfill its legal obligations; and provided that it does not harm the fundamental rights and freedoms of the data subject, processing is mandatory for the legitimate interests of the data controller."

III. SHARING OF YOUR PERSONAL DATA

Your personal data obtained through cookies may be shared with domestic and foreign technology providers, analytics and advertising service providers (e.g., Google, Meta, Microsoft, TikTok), and our business partners, limited to the processing purposes specified above and based on your explicit consent.

In addition, your personal data may be shared for the purpose of fulfilling duly requested information demands of authorized public institutions and organizations and within the scope of fulfilling our legal obligations arising from legislation.

During data transfer, full compliance with the conditions set forth in Articles 8 and 9 of the KVK Law is ensured; and international data transfers are carried out only based on the explicit consent of the data subject or in accordance with the safeguards determined by the Board.

IV. DESTRUCTION OF YOUR PERSONAL DATA

Our Company retains your personal data only for the period necessary for the purposes of data processing and limited to the retention periods stipulated in the relevant legislation. Personal data whose retention period has expired or whose processing purpose has ceased are deleted, destroyed, or anonymized in accordance with Article 7 of the KVK Law and the Regulation on the Deletion, Destruction, or Anonymization of Personal Data, in line with periodic destruction processes.

Your personal data obtained through cookies are also deactivated if you change your preferences via your browser settings or the cookie management panel, and the data on servers under the control of our Company are deleted or rendered non-functional through relevant technical tools.

However, the destruction of persistent cookies placed by third-party providers (e.g., Google, Meta), over which our Company does not have direct intervention capability, is subject to the data policies of the relevant third parties. In this context, users must direct their requests regarding third-party cookies directly to the relevant provider.

V. YOUR RIGHTS REGARDING THE PROCESSING OF PERSONAL DATA

Within the scope of Article 11 of the KVK Law, you may submit the following requests to our Company:

1. To learn whether your personal data are processed, and to request information if they have been processed,
2. To learn the purpose of processing your personal data and whether they are used in accordance with that purpose,
3. To learn the third parties to whom your personal data are transferred domestically or abroad,
4. To request the correction of your personal data if they are incomplete or incorrectly processed,
5. To request the deletion, destruction, or anonymization of your personal data if the reasons requiring their processing cease to exist within the scope of Article 7 of the KVK Law,
6. To request notification of the transactions carried out pursuant to subparagraphs (d) and (e) to third parties to whom your personal data have been transferred,
7. To object to the emergence of a result against you by analyzing the processed data exclusively through automated systems,
8. To request compensation for damages in case you suffer damage due to the unlawful processing of your personal data.

You may exercise the above rights in accordance with the provisions of the KVK Law and the Communiqué on the Procedures and Principles of Application to the Data Controller published on 10.03.2018 and the relevant current legislation, through the application channels available on our website at https://www.enda.com/;

• You may deliver it in person/by hand to the address Şerifali Mah. Barbaros Cad. No:18/1 Ümraniye/İstanbul, or send it via a notary public or registered mail with return receipt,
• Or you may send it through your email address registered in our system to ik@enda.com.tr.

If a person other than the data subject makes a request, a notarized special power of attorney issued by the data subject in the name of the person who will apply must be provided.

Requests submitted to our Company in due form will be concluded within thirty days at the latest. If the fulfillment of such requests requires an additional cost, the fee in the tariff determined by the Personal Data Protection Board ("Board") will be charged by our Company. If the response is provided on a recording medium such as a CD or flash drive, a fee not exceeding the cost of the recording medium may be requested.

Our Company may request information from the applicant in order to determine whether the person submitting the request is the personal data owner, and may ask questions regarding the application in order to clarify the issues specified in the request.

In cases where the application is rejected, the response is found insufficient, or the application is not answered in due time, the personal data owner may file a complaint with the Board within thirty days from the date of learning the Company's response, and in any case within sixty days from the date of application, pursuant to Article 14 of the KVK Law.

VI. COOKIE INFORMATION LIST

Mandatory Cookies

These cookies are necessary for the proper functioning of the website and enable the provision of basic services such as users' privacy preferences and session management.

Functional Cookies

They are used to make our website more functional and personalized (except for your privacy preferences, to ensure that your other preferences are remembered when you revisit the site).

(No additional functional cookies are currently listed; this section will be updated if the functional category is activated in the panel.)

Performance and Analytical Cookies

Used to monitor and improve the performance of the website. Also used for analyzing visits to the website, understanding user behavior, and statistical reporting.

Advertising and Marketing Cookies

Used to display advertisements to users based on their interests. Usually placed by third-party advertising providers.

Cookie Management via Browser

You can configure your browser to block cookies for all sites or specific sites, to give a warning when a cookie is created, to block third-party cookies, or to treat all cookies as session cookies. In addition, you can delete cookies via your browser or view the list and values of cookies stored in your browser. For detailed information about your browser's cookie management functions, please refer to the support pages of the relevant browser.

In addition;

• You can use the relevant browser/Google add-on options to disable cookies managed by Google Analytics.
• You can use Google ad settings to manage the personalized advertising experience provided by Google.
• For cookies used by many companies for advertising activities, preferences can be managed via Your Online Choices.

For more detailed information about cookies, you may visit https://www.aboutcookies.org or https://www.youronlinechoices.eu/, or use the "Privacy Badger" application (https://www.eff.org/privacybadger).