OXIVO Group Information Technologies Inc. ("OXIVO" or "Our Company") presents the following information to our customers and third parties using our website and/or mobile applications, in accordance with Article 10 of Law No. 6698 on the Protection of Personal Data (KVKK), published in the Official Gazette No. 29677 on 07.04.2016.

At OXIVO, we place great importance on the security of your personal data. We continue our operations with the understanding that personal data security is a top priority in all our products and services. OXIVO reserves the right to update this Privacy Notice in line with changes in the relevant legislation.

Processing and Purposes of Personal Data

In compliance with KVKK and secondary regulations, any personal data obtained or shared with us will be processed by our company within the scope and for the purposes outlined in the relevant legislation:

• Identity Data: Information related to an individual's identity (e.g., name, surname).
• Legal and Regulatory Compliance: Fulfilling legal and regulatory obligations, taking necessary security measures.
• Audits and Inspections: Facilitating inspections and regulatory activities by competent public institutions and professional organizations.
• Judicial and Administrative Requests: Fulfilling legal requests from courts and administrative authorities.
• Risk Management and Quality Assurance: Conducting risk assessments and quality improvement activities.
• Data Security: Implementing technical and administrative measures to protect system and application security.

Your personal data will be processed in accordance with the legal bases outlined in Articles 5 and 6 of the Personal Data Protection Law No. 6698.

Legal Grounds for Processing Personal Data

Our company processes personal data based on the following legal reasons:

• Compliance with national and international regulations and secondary legislation.
• Fulfilling contractual obligations and service agreements.
• Ensuring continuous service delivery and proper record-keeping.
• Meeting public security requirements and providing information to public officials upon request.
• Improving customer experience and providing tailored product and service recommendations.
• Conducting marketing, advertising, and promotional activities.
• Evaluating customer feedback, complaints, and suggestions.
• Managing server and system operations for online platforms.
• Fulfilling legal obligations and protecting legal rights.

Personal data shared by customers and visitors on our website and mobile applications will be processed in compliance with the law and, where required, with the explicit consent of the individual.

Data Transfers to Third Parties

Your personal data may be transferred to:

• Legally authorized public institutions, judicial, and administrative bodies.
• Domestic and international affiliates, business partners, and subsidiaries.
• Public and private organizations with which we collaborate for services, support, consultancy, or financing.

Methods of Data Collection

Personal data shared with OXIVO is under our supervision and control. In compliance with relevant legislation, we have established an organizational structure and implemented the necessary technical measures to ensure data security. We regularly conduct penetration tests and continuously update our data processing policies. Personal data is collected automatically or manually through various electronic and physical channels, including:

• Company headquarters, branches, call centers.
• Website and mobile applications.
• Written, verbal, or electronic communication channels.

Your Rights Under Article 11 of Law No. 6698 on the Protection of Personal Data

According to Article 11 of Law No. 6698 on the Protection of Personal Data, you have the following rights regarding your personal data:

• The right to learn whether your personal data is being processed.
• The right to request information if your data has been processed.
• The right to understand the purpose of data processing and its lawful use.
• The right to identify third parties to whom your data is transferred, domestically or internationally.
• The right to request correction of inaccurate or incomplete data.
• The right to request deletion or destruction of your data as per Article 7 of Law No. 6698.
• The right to request notification of corrections or deletions to third parties.
• The right to object to automated processing that results in adverse consequences for you.
• The right to seek compensation for damages caused by unlawful processing.

How to Submit a Request

You may submit your requests regarding your personal data using the following methods:

• By Post: OXIVO Group Information Technologies Inc., Maslak Mah. Maslak Meydan Sok. A Blok Beybi Giz Plaza No:1, İç Kapı No:26, Sarıyer/Istanbul

OXIVO reserves the right to reject improperly submitted or incomplete requests.