INFORMATION ON THE PROTECTION OF PERSONAL DATA ACCORDING TO LAW NO. 6698

Identity of the data controller and representative, if any;
This information is provided to fulfill the obligation of informing business partners, customers, fair visitors, and real or legal persons with whom it communicates, as the Data Controller, "KFA Fuarcılık A.Ş" (Mersis No:0548143315700001) within the scope of the Personal Data Protection Law No. 6698 ("PDPL").

For what purpose personal data will be processed;
Your personal data may be processed by the data controller or legal/real persons to be appointed by the data controller under the following circumstances and conditions;

• To improve, develop, diversify our products and services and to present or inform legal/real persons with whom we have commercial relations,
• To increase the benefit and quality that our participants who exhibit their products and services in our fairs and visitors who come to see these products and services will obtain from these organizations,
• To plan fair scopes in accordance with participant and visitor expectations, monitor effectiveness and ensure continuity,
• To increase the awareness of fairs among participants, visitors, press, relevant non-governmental organizations and relevant public institutions and organizations, to establish business partnerships between them and to enrich their commercial or social activities,
• To evaluate newly developed products and services and to determine and implement the company's commercial or business strategies,
• To increase the performance level and employee satisfaction of our employees, to determine training and career plans or to ensure occupational safety,
• To conduct necessary quality and standard audits or to fulfill reporting and other obligations determined by laws and regulations,
• Additionally, to ensure the fulfillment of legal obligations specified in PDPL within the scope of requirements and obligations determined by regulatory and supervisory institutions.

To whom and for what purpose the processed personal data may be transferred,
Your processed personal data may be transferred within the scope of the above purposes and conditions determined by PDPL;

• To our company's business partners or subsidiaries in order to carry out commercial activities and ensure their continuity,
• To our suppliers to a limited extent in order to provide outsourced products and services,
• To audit firms within the scope of relevant contracts for the purpose of auditing our commercial activities in accordance with relevant legislation,
• To our shareholders to a limited extent for the purpose of designing strategies related to our company's commercial activities,
• To legally authorized public institutions and organizations to a limited extent within the scope of requests of relevant public institutions and organizations,
• To institutions and organizations determined to ensure the fulfillment of legal obligations specified in PDPL,

with your explicit consent or within the framework of conditions determined by law.

Method and legal basis of personal data collection,
Your personal data is collected with your explicit consent by our company or real or legal persons who process data on behalf of our company through; website, various contracts, all kinds of interest information forms, surveys, job application forms, employment contracts, social media applications, call centers and not limited to those listed here, through verbal, written or electronic channels.

This information is obtained in order to provide our commercial and administrative activities within the framework of laws regulating business and social life and to enable our company to continue its commercial life and to fulfill its responsibilities arising from laws completely and correctly.

Rights of the Data Subject,
Within the scope of PDPL, you have the following rights regarding your personal data:

• Learning whether personal data is processed,
• Requesting information if personal data has been processed,
• Learning the purpose of processing personal data and whether they are used in accordance with their purpose,
• Knowing the third parties to whom personal data is transferred domestically or abroad,
• Requesting correction of personal data if it is incomplete or incorrectly processed,
• Requesting deletion or destruction of data if the reasons requiring processing of your personal data have disappeared,
• Requesting notification of the corrected or deleted information to third parties to whom personal data has been transferred,
• Objecting to the emergence of a result against the person by analyzing the processed data exclusively through automated systems,
• Requesting compensation for damages in case of damage due to unlawful processing of personal data.

You can send your written request with the necessary information identifying your identity and your explanations regarding the right you want to use to "[...]" address with wet signature and/or to our [...] registered e-mail address with secure electronic signature.

In the application you will make as a personal data owner to use your rights stated above and the right you want to use; the matter you request must be clear and understandable, the matter you request must be related to your person or if you are acting on behalf of someone else, you must be specifically authorized in this regard and your authorization must be documented, the application must contain identity and address information and documents proving your identity must be attached to the application.

Applications made within this scope will be concluded as soon as possible and within 30 days at the latest.