Website Privacy Notice

PHİLLİPCAPİTAL MENKUL DEĞERLER A.Ş.
INFORMATION TEXT UNDER THE PERSONAL DATA PROTECTION LAW No. 6698

PHİLLİPCAPİTAL MENKUL DEĞERLER A.Ş. (Company) as Data Controller within the scope of the Personal Data Protection Law No. 6698 (KVKK) and relevant legislation, your personal data may be processed within the framework explained below and in accordance with the Capital Markets Law No. 6362 and other legislation.

1. Data Controller

PHİLLİPCAPİTAL MENKUL DEĞERLER A.Ş. It processes your personal data as "Data Controller" as defined in Article 3 of the Personal Data Protection Law No. 6698.

2. For what purpose is personal data processed?

In accordance with KVKK No. 6698, your personal data that you share with our institution is processed by our institution as the subject of all kinds of transactions carried out on your personal data by obtaining, recording, storing, changing, rearranging, in whole or in part, automatically or by non-automatic means provided that it is part of any data recording system.

The personal data processed by the Institution within the scope of its activities are processed in accordance with the relevant legislation for the following purposes. In this direction;

• Your Identity Information: Name and surname, parents' name, mother's maiden name, nationality, place of birth, date of birth, driver's license information, marital status information, passport number, TR ID number, tax number;
• Your Contact Information: Home address, email, mobile phone;
• Your Transaction Security Information: IP address, internet login and logout information, password password information, log records;
• Your Professional Experience Information: Profession, transcript, diploma;
• Your Risk Management Information: Information processed to manage commercial technical administrative risks;
• Customer Transaction Information: Customer complaints, requests and acknowledgments, call center records, invoice and bill check information, order information, request information;
• Your Marketing Information: Shopping history information, information obtained through surveys and campaign studies;
• Your Financial Information: Bank account number, card information, invoice debt information, asset information, financial performance information, balance sheet, credit/risk information;
• Your Legal Transaction Information: Information in correspondence with judicial authorities, information in the case file;
• Your Demographic Information: Education level, income level and similar profile information, usage habits and behavior analysis;
• Visual and Audio Records: Voice recording;

Your personal data that you will share directly or indirectly with our institution, such as complaints or requests submitted through the website and records regarding the transactions carried out during the evaluation and management process, are processed and protected in accordance with the Personal Data Protection Law No. 6698 and relevant legislation, limited to the activities of the institution.

The purposes of personal data processing by our institution are determined as follows:

• Carrying out activities in accordance with the legislation,
• Follow-up and execution of legal affairs,
• Carrying out account opening procedures,
• Preparation of tax return,
• Preparation of investor tax report,
• Preparation of TSPB data bank volume notifications,
• Accounting for negative balance provisions,
• Managing MKK processes,
• Preparation of investor visa, withholding tax and dividend letter,
• Making share and VIOP commission refunds,
• Preparation of reports and response letters within the scope of audits carried out by audit firms,
• Carrying out public offering distribution procedures,
• Identification of objectionable customers,
• Sending the statement,
• Carrying out customer credit notification transactions,
• Carrying out default notification procedures,
• Carrying out universal account opening procedures,
• Carrying out data publication definition and reporting processes,
• Conducting conformity tests,
• Managing Customer Securities Transfers,
• Execution of customer conditional transfer transactions,
• Carrying out Share Lending Market transactions,
• Carrying out purchase / sale and transfer transactions,
• Conducting allocated sales transactions,
• Execution of investor cash transfer transactions,
• Carrying out investor account opening procedures,
• Execution of information security processes,
• Conducting performance evaluation processes,
• Carrying out activities aimed at customer satisfaction,
• Execution of advertising / campaign / promotion processes,
• Conducting seminars and training activities,
• Ensuring that investor data is kept accurate and up-to-date,
• Providing information to authorized persons, institutions and organizations such as CMB,
• Carrying out internal audit / investigation / intelligence activities of branches, liaison offices and units,
• Evaluation of investor demands, suggestions and complaints,
• Reporting investor positions to foreign stock exchange organizations,
• Managing foreign share transfer transactions,
• Sending transaction result forms at the end of the day for transactions made in investment accounts,
• Making an investment consultancy agreement,
• Managing membership transactions via the website,
• Presenting portfolio suggestions via the website,
• Sending newsletters and company reports.

For their purposes, your personal data is processed in accordance with the conditions and purposes determined in accordance with Articles 4, 5 and 6 of the Law. Your personal data will not be used for any purpose other than the activities of our institution.

3. To whom and for what purpose is the processed personal data transferred?

Your personal data; Within the scope of the provisions of KVKK regarding the transfer of personal data and their transfer abroad, for the purposes stated in Article 2 of this Information Text, within the country; to official institutions and organizations, our business partners, service provider companies and their officials, banks, our group companies and affiliates, abroad; can be transferred to our group companies and third parties.

4. Method and Legal Reasons for Collecting Personal Data

Your personal data is collected and processed in all kinds of verbal, written, visual or electronic media, for the purposes stated above and to carry out all kinds of work within the legal framework of the Company's field of activity, and in this context, for the Company to fully and properly fulfill its contractual and legal obligations. The legal reason for collecting your personal data is;

• Having your explicit consent,
• It is clearly stipulated in the legislation to which our Company is subject, including the Capital Markets Law, Income Tax Law and Turkish Commercial Code,
• To comply with national and international principles and principles regarding the recognition of customers, to comply with the information storage, reporting and information obligations stipulated by the legislation and official authorities,
• Provided that it is directly related to the establishment or performance of a contract, it is necessary to process personal data of the parties to the contract, to provide the requested products and services and to fulfill the requirements of the contracts you have concluded,
• It is mandatory to fulfill the legal obligation,
• It has been made public by the person concerned,
• Where data processing is mandatory for the establishment, exercise or protection of a right,
• It is necessary to process data for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the person concerned.

Your special personal data is collected, stored and processed based on the following legal compliance reasons.

5. Rights of the Personal Data Owner in accordance with KVKK No. 6698 (Right of Application)

Your requests within the scope of Article 11 of the Personal Data Protection Law No. 6698 "regulating the rights of the relevant person", Communiqué on the Procedures and Principles of Application to the Data Controller Accordingly, PHİLLİPCAPİTAL MENKUL DEĞERLER A.Ş. is the data controller. to the corporate address of the relevant person who is the Personal Data Owner, APPLICATION FORM By filling it out, you can personally deliver a signed copy of the form to the institution's address along with documents identifying your identity, by sending an e-mail to the relevant e-mail address using Secure Electronic Signature, mobile signature or the Electronic Mail address you have notified to our institution and registered in our institution's system, with a personal application, through a Notary Public or by methods determined by the KVK Institution.

In accordance with Article 11 of the Law; Everyone can contact the data controller regarding himself/herself;

• Learning whether personal data is processed or not,
• Requesting information if personal data has been processed,
• To learn the purpose of processing personal data and whether it is used in accordance with that purpose,
• To know the third parties to whom personal data is transferred, domestically or abroad,
• Requesting correction of personal data if it is incomplete or incorrectly processed,
• Requesting the deletion or destruction of personal data within the framework of the conditions stipulated in Article 7 of the KVKK,
• In case of correction, deletion or destruction of personal data, request that these transactions be notified to third parties to whom personal data have been transferred,
• To object to the emergence of a result against the person themselves due to the exclusive analysis of processed data through automated systems,
• In case of damage due to unlawful processing of personal data, they have the right to demand compensation for the damage.

KVK Law No. 6698 13/1. In accordance with the article, you must submit your applications to our institution in order to exercise your rights stated above, in writing or by the above-mentioned methods determined by the KVK Institution. Our institution will finalize your requests in the application free of charge as soon as possible and within thirty days at the latest, depending on the nature of the request. However, if the transaction requires an additional cost, the fee in the tariff determined by the Board will be charged.