CLARIFICATION TEXT ON PROTECTION AND PROCESSING OF PERSONAL DATA

1. Data Controller

In accordance with the Law on the Protection of Personal Data No. 6698 (“Law”), as Futurecode Teknoloji İnovasyon ve Yazılım A.Ş. (“Company”), in our capacity as data controller, we may process, record, store, classify, update, and disclose/transfer your personal data to third parties where permitted by legislation, within the scope of the purposes explained below and in accordance with the law and rules of honesty.

2. Method and Legal Basis for Collecting Personal Data

Your personal data is collected through our website (https://loggerise.com/), mobile applications, social media accounts, e-mail, call center, contracts, and physical channels using automated or non-automated methods. This data is processed based on the legal grounds specified in Article 5 of the Law, namely:

• “Establishment or performance of a contract,”
• “Fulfillment of a legal obligation,”
• “Establishment, exercise, or protection of a right,”
• “Legitimate interest of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject.”

3. Purposes of Processing Personal Data

Your collected personal data (Identity, Contact, Customer Transaction, Transaction Security data, etc.) are processed limited to the following purposes:

• Provision of products and services and execution of operational processes,
• Execution of contract processes and fulfillment of legal obligations,
• Planning customer relationship management and satisfaction studies,
• Follow-up of requests and complaints, execution of finance and accounting affairs,
• Execution of information security processes and providing information to authorized persons/institutions.

4. To Whom and For What Purpose Personal Data May Be Transferred

Your processed personal data may be transferred to our suppliers, legally authorized public institutions, and private persons (notary, lawyer, financial advisor, etc.) for the realization of the purposes stated above and in accordance with Articles 8 and 9 of the Law.

5. Rights of the Data Subject (Article 11 of the Law)

As a data subject under Article 11 of the Law, you have the right to:

• Learn whether personal data is processed and request information if processed,
• Learn the purpose of processing and whether they are used accordingly,
• Know the third parties to whom data is transferred domestically or abroad,
• Request correction if personal data is incomplete or incorrectly processed,
• Request deletion or destruction of personal data within the framework of the conditions stipulated in the Law,
• Object to results occurring exclusively through automated systems,
• Demand compensation for damages if data is processed unlawfully.

6. Contact and Application

You may submit your requests regarding your rights under the KVKK in writing or by using your registered electronic mail (KEP) address, secure electronic signature, mobile signature, or the electronic mail address previously notified to our Company and registered in our system, in accordance with the “Communiqué on the Procedures and Principles of Application to the Data Controller.”