Disclosure Text

Data Controller: Ensight Information Technologies Inc.

This disclosure text has been prepared in accordance with Article 10 of the Personal Data Protection Law No. 6698 (“Law”), in cases where Ensight Information Technologies Inc. acts as the data controller. It aims to inform real persons (“Data Subjects”) about the principles regarding the processing, storage, protection, and destruction of their personal data, as well as their legal rights as data subjects.

Detailed information on the processing of your personal data can be found in the “Ensight Information Technologies Personal Data Privacy Policy” (“Policy”) available on the Ensight Information Technologies website. Click here to access the Policy. Ensight Information Technologies reserves the right to update this disclosure text at any time within the scope of changes to applicable legislation.

Purposes of Processing Your Personal Data

As the Data Controller, we process your personal data in accordance with the relevant provisions of the Law and for the following purposes:

Negotiation, conclusion, and performance of contracts,
Provision of products and services,
User identification for systems related to the offered products and services,
Announcements of products, services, and campaigns, as well as conducting sales and marketing activities,
Conducting market research,
Performing statistical and analytical evaluations regarding products and services,
Collection and determination of charges for products, services, and subscriptions,
Communication with end-users,
Managing commercial relations with business partners, suppliers, and subcontractors,
Reporting within the scope of commercial cooperation,
Developing and planning the company’s commercial strategies,
Communicating for customer satisfaction surveys,
Registering participants for organized events and training and preparing certifications,
Fulfilling legal obligations and managing legal disputes in accordance with regulatory requirements,
Responding to requests from public authorities,
Managing investor relations,
Conducting recruitment processes and evaluating job applications,
Establishing, executing, and terminating employment contracts,
Providing employees with rights and benefits arising from employment contracts,
Evaluating employee performance and productivity,
Setting up user accounts, providing in-house ID and meal cards,
Organizing transportation for company employees,
Registering participants for events attended on behalf of the company,
Tracking training participation and certification for employees,
Registering and tracking visitors,
Ensuring the security of the company’s website, applications, buildings, facilities, and surrounding areas,
Analyzing the use of the company’s website,
Creating a personal data inventory,
Evaluating and responding to all written, verbal, or electronic questions, requests, suggestions, complaints, and applications related to personal data.

To Whom and For What Purposes Personal Data Can Be Transferred

Your personal data may be transferred to the following third parties in accordance with the Law and other applicable data protection regulations, for the purposes outlined above:

Consultants
Audit firms
Suppliers
Subcontractors
Resellers
Service Providers
Partner Companies
Ensight Information Technologies Group Companies
Customers
Shareholders
Company Executives
Technopark Management
Banks and Financial Institutions
Judicial Authorities and Public Institutions

Methods and Legal Grounds for Collecting Personal Data

We collect and process your personal data in accordance with the provisions of the Law, our Policy, and other relevant regulations, using various methods, including face-to-face interviews, written, verbal, and electronic communications, or through visual means.

The data collection process may occur via:
i) Websites, mobile applications, emails, recruitment portals, or other digital channels;
ii) Contracts, applications, forms, remote support, sales and marketing units, website cookies, business cards, phones, and similar means;
iii) Face-to-face interviews with the Data Subject.

Your Rights as a Data Subject

Under the relevant provisions of the Law, as a Data Subject, you have the right to request the following by applying to our company:

To learn whether your data is processed,
To request information if your data has been processed,
To learn the purpose of processing your data and whether it is used in accordance with this purpose,
To learn about third parties to whom your data has been transferred domestically or abroad,
To request correction of your data if it has been processed incompletely or inaccurately and to request notification of this correction to third parties to whom your data has been transferred,
To request the deletion or destruction of your data in cases where the reasons for its processing no longer exist, even if it has been processed in accordance with the Law and other relevant regulations, and to request notification of this action to third parties to whom your data has been transferred,
To object to any adverse results arising from the exclusive analysis of your data by automated systems,
To request compensation for damages if you incur losses due to unlawful processing of your data.

If you wish to exercise your rights, you may submit your requests to our company in writing or via registered electronic mail, secure electronic signature, mobile signature, or your previously notified and registered electronic mail address in our system.

Your requests will be evaluated and responded to as soon as possible and no later than thirty days. However, if the process incurs additional costs, the fees specified in the tariff determined by the Board will be charged.

Incomplete or inaccurate information shared during the application process, failure to clearly articulate the request, lack of supporting documents, or the absence of a power of attorney for applications made on behalf of others may cause difficulties in processing your requests. Therefore, it is important to comply with these requirements to avoid delays. Our company is not responsible for delays resulting from such cases. Legal rights against false, unlawful, or malicious applications are reserved.

Regarding Events and Organizations

At Ensight Information Technologies Inc., we prioritize the security of your personal data under the Personal Data Protection Law (KVKK). The personal data collected during our events will be processed in compliance with the KVKK and relevant regulations under the following conditions:

1. Personal Data to Be Processed

During the event, the following personal data will be collected:

Identity information (Name, surname)
Contact information (Phone number, email address)
Visual and audio records (Photos and videos taken during the event)

2. Purpose of Processing Your Personal Data

Your personal data will be processed for the following purposes:

Event organization management,
Capturing photos and videos during the event,
Sharing event-related posts on our company’s social media accounts,
Sending commercial electronic messages and conducting marketing activities by our company in the future.

3. Transfer of Your Personal Data

The personal data collected will not be shared with third parties and will only be used by relevant departments within our company for the above purposes.

4. Retention of Personal Data

Your personal data will be retained for the duration required to achieve the purposes of data processing and will be deleted or anonymized in compliance with laws and regulations.

5. Your Rights Under the KVKK

Under Article 11 of the KVKK, you have the right to request information about the processing of your personal data, access your data, request correction if it is processed inaccurately, and request deletion or destruction of your data if the reasons for processing no longer exist.

Methods and Legal Grounds for Collecting Your Personal Data

Your personal data is collected by our company for operational purposes via various channels, based on legal grounds such as compliance with regulations and company policies. Your data may be processed and transferred for the purposes specified in this Disclosure Text, in accordance with the principles outlined in the KVKK and Articles 5 and 6 of the KVKK.