The Prestigious Villa Project of Bahçeşehir: Sylvana Istanbul

ILLUMINATION TEXT WITHIN THE SCOPE OF THE PERSONAL DATA PROTECTION LAW NO. 6698

In accordance with the Personal Data Protection Law No. 6698 (hereinafter referred to as 'KVKK' or the 'Law'), it is important to process and preserve personal data and/or special category personal data. For this reason, as REPORTAGE TURKEY GAYRİMENKUL GELİŞTİRME YATIRIM SATIŞ PAZARLAMA TİCARET ANONİM ŞİRKETİ (hereinafter referred to as 'REPORTAGE' or the 'Company'), we act in accordance with the KVKK regarding the protection, preservation, and processing of your personal data and/or special category personal data. We frequently receive data from you on the internet. Personal data and/or special category personal data received and recorded during the visit to our website are processed in accordance with the Personal Data Protection Law. In this context, REPORTAGE, as the data controller, receives and preserves your data within legal limits. In addition, we would like to state that; all personal data and/or special category personal data received during the visit to our website are protected within the framework of our Privacy Policy. In this regard, you can review our Privacy Policy, which you can find on our page, and the KVKK illumination text of our website from the link www.reportage.com.tr. This illumination text has been prepared by REPORTAGE in its capacity as the data controller within the scope of Article 10 of the Personal Data Protection Law No. 6698 and the Communiqué on the Procedures and Principles to be Followed in Fulfilling the Obligation of Illumination.

1. WHAT IS PERSONAL DATA?
Personal data is expressed in the Personal Data Protection Law No. 6698 as 'Any information relating to an identified or identifiable natural person'. As can be understood from the definition, any information that makes you identifiable is personal data. In addition to all these, political thought, sect, race, religion, association-foundation membership, health information, philosophical thought, belief, sexual preference, criminal record, criminal conviction information, and biometric data are special category personal data.

2. LEGAL BASIS
The Personal Data Protection Law No. 6698 stipulates that the persons whose data are processed must be illuminated before the data processing activity is carried out. This matter, which is considered as the Obligation of Illumination, is ruled in Article 10 of the Personal Data Protection Law as 'During the collection of personal data, the data controller and the person authorized by it are obliged to provide the relevant persons with information regarding; The identity of the data controller and its representative, if any, for what purpose the personal data will be processed, to whom and for what purpose the processed personal data may be transferred, the method and legal reason for collecting personal data, other rights listed in Article 11.' In Article 3 of this Law, the data controller is defined as 'Natural or legal persons who determine the purposes and means of processing personal data, and who are responsible for the establishment and management of the data recording system'. Again, the data processor is ruled as 'The natural or legal person who processes personal data on behalf of the data controller based on the authority given by it.' In this context, the data controller is REPORTAGE, whose website you are visiting. The information of the data controller is also as follows. Data Controller: REPORTAGE TURKEY GAYRİMENKUL GELİŞTİRME YATIRIM SATIŞ PAZARLAMA TİCARET ANONİM ŞİRKETİ Address: Mah. Sümer Sk. No: 4 Maslak Office Building (MOB) Zemin Kat No: 3 Sarıyer, İstanbul, Türkiye Tel: +90 444 4 515 E-mail: info@reportage.com.tr

3. SCOPE OF THE ILLUMINATION OBLIGATION OF THE DATA CONTROLLER REPORTAGE
In accordance with the above explanations, the data controller is REPORTAGE. Under the title of data controller, REPORTAGE informs and illuminates you in this Illumination Text regarding by whom and for what purpose personal data may be processed, to whom and for what purpose they may be transferred, the method and legal reason for collecting data, and the rights possessed by the data owner towards the protection of personal data.

4. PURPOSES OF PROCESSING YOUR DATA BY REPORTAGE
Your personal data are processed within the limits stipulated by the Personal Data Protection Law No. 6698 and based on the principles of the law. Within the framework of the law, our data processing purposes as REPORTAGE are: To enable you to benefit from our website in the best way and to increase our service quality offered to you in this context by determining personal needs and usage purposes. To be able to inform you quickly about the innovations, products, and services offered within REPORTAGE, To carry out commercial activities and to provide you with complete performance in this context, To inform you about our changing and developing products and services and to make illumination when necessary, To be able to communicate with you regarding the requests and complaints you have conveyed to REPORTAGE and to resolve the negativities experienced quickly, To develop, determine, and place our commercial partnerships and strategies on a secure foundation, to make correct decisions in our commercial policies and administrative functioning, To put our corporate identity on a solid foundation and to ensure corporate functioning as REPORTAGE, To achieve the targets of our internal company policies and thus to increase the satisfaction of our customers, To ensure compliance with the provisions regarding the Privacy Policy located on our website www.reportage.com.tr, To carry out the financial processes related to offers and payments, To carry out pre-sales and post-sales finance and accounting activities, including the arrangement and tracking of promissory notes and invoices, To manage current account processes, To realize notifications regarding company campaigns and projects, To ensure brand awareness and carry out marketing activities, To carry out the relevant contract and protocol processes, To ensure information security, To create and track cargo shipments, To supply electricity, water, and natural gas after real estate sales, To create a deed of consent, power of attorney, certificate of authority, and other relevant documents for the execution of legal processes regarding company projects, To establish the physical security of the company, They are processed within the personal data processing conditions and purposes specified in the Law and other relevant legislation for the purposes of tracking and executing the relevant legal actions. Furthermore, your personal data specified above can be transferred to the physical archive and information systems belonging to REPORTAGE and kept under protection in both digital and physical environments.

5. PRINCIPLES REGARDING THE PROCESSING OF YOUR DATA
a. Preserving them for the period stipulated in the relevant legislation or required for the purpose for which they are processed; b. Processing in accordance with the law; c. Ensuring the up-to-dateness of the data; d. Acting in accordance with the rules of honesty; e. Not using them outside the purpose of processing; f. Being measured and limited to the purpose for which they are processed; g. Processing in accordance with general morality, customs, and traditions; h. Processing in accordance with all relevant legislation provisions, primarily the provisions of the Personal Data Protection Law No. 6698; We have adopted these as principles as REPORTAGE.

6. DATA PROCESSING PROCEDURE
Your personal data can be processed by REPORTAGE in the presence of two situations. These two situations are as follows: COMPLIANCE WITH THE EXPLICIT CONSENT LAW (SITUATIONS NOT REQUIRING EXPLICIT CONSENT) SITUATIONS NOT REQUIRING EXPLICIT CONSENT The Personal Data Protection Law No. 6698 stated that in some cases explicit consent is not required for processing personal data. These cases specified in the 2nd paragraph of Article 5 of the Law are as follows: It is expressly stipulated in the laws. It is necessary for the protection of life or physical integrity of the person or someone else, who is unable to express his consent due to actual impossibility or whose consent is not granted legal validity. It is necessary to process the personal data of the parties to a contract, provided that it is directly related to the establishment or performance of the contract. It is mandatory for the data controller to fulfill his legal obligation. It has been made public by the person concerned himself. Data processing is mandatory for the establishment, exercise, or protection of a right. Data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the person concerned. In the presence of these situations, we have the right to process data as REPORTAGE without your explicit consent. We have the right to process your personal data other than health and sexual life from your special category personal data without seeking explicit consent in cases stipulated by the laws. Personal data relating to health and sexual life may only be processed without seeking the explicit consent of the data subject by persons subject to the obligation of secrecy or competent public institutions and organizations, for the purposes of protection of public health, operation of preventive medicine, medical diagnosis, treatment, and care services, planning and management of health services and financing.

7. METHOD AND LEGAL REASON FOR COLLECTING YOUR DATA
Under developing and changing technological conditions, data is collected by our company from different channels. The website is also one of the areas where we collect personal data by automatic means. Personal data and/or special category personal data collected via the website within REPORTAGE are processed based on one or more of the legal reasons in Articles 5 and 6 of the Law No. 6698 or the explicit consent condition. Depending on the category and type of the processed data, we would like to state that illumination is made to the relevant person, in these illumination texts it is explained for what purpose the data will be processed, to whom and for what purpose the processed data may be transferred, the method and legal reason of collecting data, and in accordance with the rights possessed by the relevant person, and explicit consent is obtained when necessary.

8. TRANSFER AND PROTECTION OF DATA
a. TRANSFER Your data are transferred to third parties when necessary in accordance with the conditions in our confidentiality agreements, in compliance with the Personal Data Protection Law No. 6698. For every transferred data, a detailed explanation is made about to whom and for what purpose the data can be transferred in the Illumination Text made before the data is obtained. However, in any case, REPORTAGE acts in accordance with Articles 8 and 9 of Law No. 6698 while transferring data. In addition, it takes necessary technical and administrative measures. b. PROTECTION The Personal Data Protection Law No. 6698 mainly aims to protect data and prevent unauthorized transfer. In order to prevent the transfer of data to unauthorized third parties, primarily the relevant law provisions, we take the necessary technical and administrative measures as REPORTAGE. In this context, we especially align our internal company policies with the Personal Data Protection Law and maintain all kinds of technical software and hardware for the protection of personal data within our body. In order to ensure all these, we try to prevent both our employees within the company and the third parties we do business with from acting contrary to our Privacy Policy, which you can access from the link www.reportage.com.tr.

9. RIGHTS OF THE DATA OWNER CONCERNED PERSON
a. GENERAL INFORMATION ABOUT THE APPLICATION The Personal Data Protection Law No. 6698 has ruled the rights of the data owner in Article 11. In the Law, the data owner is deemed as the 'relevant person'; and the right to make some requests regarding the processing of their data is stipulated. The demand rights of the relevant person in accordance with this article are as follows: Learning whether personal data is processed or not, Requesting information if personal data has been processed, Learning the purpose of processing personal data and whether they are used in accordance with their purpose, Knowing the third parties to whom personal data is transferred domestically or abroad, Requesting correction of personal data in case of incomplete or incorrect processing, Requesting the deletion or destruction of personal data within the framework of the conditions stipulated in Article 7 of the Law titled 'Deletion, destruction or anonymization of personal data', Requesting notification of the third parties to whom personal data has been transferred regarding the correction of incomplete or incorrectly processed data or the deletion or destruction of the data upon the request of the relevant person, Objecting to the emergence of a result against the person himself by analyzing the processed data exclusively through automated systems, Requesting the compensation of the damage in case of suffering damage due to unlawful processing of personal data. You can convey your requests regarding your rights arising from the Personal Data Protection Law explained above to our company within the framework of the procedure specified in this Illumination Text. Your said requests will be answered by REPORTAGE as soon as possible or within thirty days at the latest. Applications must be made personally by the data owner himself. REPORTAGE will only consider the application made by the data owner and will share information about the applicant. b. APPLICATION PROCEDURE You can convey your requests regarding your rights stated above to REPORTAGE, which bears the title of data controller, in writing or by using a registered electronic mail (KEP) address, secure electronic signature, mobile signature, or the electronic mail address previously notified to the data controller by the relevant person and registered in the data controller's system. To be able to exercise your demand rights regarding personal data, you can review the information on our website and again use the 'Information Request Form Pursuant to the Personal Data Protection Law No. 6698' which you can access from the link https://www.reportage.com.tr/. c. INFORMATION TO BE INCLUDED IN THE APPLICATION The information that must be included in your application is as follows: Your Name and Surname Your T.R. Identity Number If You Are a Foreign National, Your Nationality, Passport No or Identity Number if any Your Wet Signature Under the Request Form If Written Application is to be Made The Content of Your Request in Accordance with Article 11 of KVKK Your E-Mail Address Through Which We Can Reach You Your Place of Residence or Workplace Address for Notification

REPORTAGE TURKEY GAYRİMENKUL GELİŞTİRME YATIRIM SATIŞ PAZARLAMA TİCARET ANONİM ŞİRKETİ

PRIVACY POLICY

FOREWORD
Within the scope of the Personal Data Protection Law, as REPORTAGE TURKEY GAYRİMENKUL GELİŞTİRME YATIRIM SATIŞ PAZARLAMA TİCARET ANONİM ŞİRKETİ (hereinafter referred to as 'REPORTAGE' or the 'Company'), we attach importance to the protection of your personal data and/or special category personal data. We show sensitivity regarding the storage of all your personal data and/or special category personal data transmitted to our Company through various channels. In this context, as REPORTAGE, we have taken the necessary technical and administrative measures in order to comply with the provisions of the T.R. Constitution and other legislation, primarily the Personal Data Protection Law No. 6698. We share with you our Privacy Policy, which has been put into effect within REPORTAGE, which is particularly important in terms of the protection of your personal data.

1. DEFINITIONS
Data Controller: Refers to REPORTAGE TURKEY GAYRİMENKUL GELİŞTİRME YATIRIM SATIŞ PAZARLAMA TİCARET ANONİM ŞİRKETİ, which determines the purposes and means of processing personal data and is responsible for the establishment and management of the data recording system. Data Owner-Relevant Person: Refers to the natural person whose personal data is processed. Company: Refers to REPORTAGE TURKEY GAYRİMENKUL GELİŞTİRME YATIRIM SATIŞ PAZARLAMA TİCARET ANONİM ŞİRKETİ in accordance with this policy. Law: Refers to the Personal Data Protection Law No. 6698. Personal Data: Refers to any information relating to an identified or identifiable natural person. Special Category Personal Data: Refers to data relating to race, ethnic origin, political opinions, philosophical beliefs, religion, sect or other beliefs, appearance and dressing, membership of association, foundation or trade-union, health, sexual life, criminal conviction and security measures, and biometrics and genetics data. Board: Refers to the Personal Data Protection Board. Policy: Refers to this 'Privacy Policy'. Processing of Personal Data: Refers to any operation performed upon personal data such as collection, recording, storage, retention, alteration, re-organization, disclosure, transferring, taking over, making retrievable, classification or preventing the use thereof, fully or partially through automatic means or provided that the process is a part of any data registry system, through non-automatic means. Explicit Consent: Refers to freely given, specific and informed consent. Destruction: Refers to making personal data inaccessible, irretrievable, and unusable by anyone in any way. Deletion: Refers to making personal data inaccessible and unusable for the relevant users in any way. Anonymization: Refers to rendering personal data impossible to link with an identified or identifiable natural person, even through matching them with other data. Disposal: Refers to the deletion, destruction, or anonymization of personal data. Data: Refers to personal data and special category personal data together.

2. PURPOSE OF THE PRIVACY POLICY
The protection of personal data and compliance with the law are our fundamental principles. In all the works we do as REPORTAGE, the personal data and/or special category personal data we have received from you have been kept confidential and have not been shared with third parties. In this context, our company has always shown the necessary sensitivity regarding the protection of personal data and/or special category personal data. Again, our internal company regulations have been remade in accordance with the Personal Data Protection Law No. 6698 (hereinafter referred to as the 'Law' or 'KVKK'); technical and administrative measures have been taken. In the ongoing process, as REPORTAGE, we accept, declare, and commit to complying with all obligations imposed by the law.

3. SCOPE OF THE PRIVACY POLICY
This Privacy Policy of ours has been prepared in accordance with the Personal Data Protection Law No. 6698. Your personal data and/or special category personal data are processed with your consent or within the scope of legal compliance situations. Your said data are used for the purposes of; Ensuring company security, Offering you complete service, Carrying out our commercial activities, Resolving your problems quickly, Increasing our quality. Some personal data and/or special category personal data coming from you are depersonalized and anonymized in the procedures stipulated by the Law. Data used for statistical purposes are not currently included in the regulation of the Law and the scope of our policy. We have the right to change this policy as REPORTAGE for the purpose of protecting personal data within the scope of compliance with the Law. The privacy policy aims to protect the data of real and legal persons with whom REPORTAGE has a solution partnership, its customers, its employees, and all other persons, obtained through any means. In this context, it contains various regulations to achieve the intended goal.

4. BASIC PRINCIPLES REGARDING THE PROCESSING OF PERSONAL DATA AND/OR SPECIAL CATEGORY PERSONAL DATA
Our basic principles regarding the processing of personal data and/or special category personal data are as follows. In this context, these principles will be valid in the data processed by REPORTAGE based on explicit consent or within the scope of legal compliance situations. Lawfulness: REPORTAGE questions the source and lawfulness of the personal data and/or special category personal data coming to it from real and legal persons and collected by various means. In this context, obtaining data in accordance with the law is important for REPORTAGE. Compliance with the Rules of Honesty: REPORTAGE questions the source of the personal data and/or special category personal data coming to it from real and legal persons and collected by various means. In this context, obtaining data within the framework of honesty rules is important for REPORTAGE. Being Limited, Measured, and Related to the Purpose for which They are Processed: REPORTAGE uses the personal data and/or special category personal data it has obtained by various means in accordance with the purpose for which they are processed, limited to the purpose of processing, measuredly, and to the extent required by the performance of the service. Accuracy of Personal Data and/or Special Category Personal Data: REPORTAGE attaches importance to the fact that the personal data and/or special category personal data coming to it from real and legal persons and collected by various means do not contain incorrect information and are correct. However, REPORTAGE does not have to investigate the accuracy of the personal data and/or special category personal data declared by its customers or the real and legal persons it is in contact with. Because this matter is legally and in line with our working principles not possible. Being Up-to-Date When Necessary: REPORTAGE attaches importance to the notification of the said change to the company if there is a change in the personal data and/or special category personal data it has obtained in various ways, and to updating the data if notified. Processing for Specific and Legitimate Purposes: REPORTAGE processes personal data and/or special category personal data without obtaining explicit consent within the framework of the explicit consent given by the data owner or the exceptions stipulated by law. The processing purpose of each data is specific, and no personal data processing activity is carried out for any illegitimate purpose. Preserving for the Period Stipulated in the Law and/or Required for the Purpose for which They are Processed: REPORTAGE stores the personal data and/or special category personal data it obtains for the periods stipulated in the relevant laws and/or required for the purpose for which they are processed. When the said purposes end, it anonymizes, destroys, or deletes the data.

5. DELETION, DESTRUCTION, AND ANONYMIZATION OF PERSONAL DATA
Your personal data and/or special category personal data are deleted, destroyed, or anonymized with the expiration of the limitation and retention periods stipulated in the Law, the completion of judicial processes, or the termination of other requirements appropriate to the purpose. Deletion, destruction, and anonymization processes are carried out upon the request of the relevant data owner or ex officio (automatically) by REPORTAGE.

6. PRINCIPLE OF PARSIMONY
The principle of parsimony is also known as the principle of maximum savings. Personal data and/or special category personal data reaching through various channels are transferred to our company's system. In accordance with the said principle, data are processed into the system as much as necessary. The data to be collected by REPORTAGE are determined in accordance with the purpose and vary. In this context, data are collected in accordance with the purpose, and data that are not parallel to the purpose are not collected. Excess data outside its purpose are not recorded in the company system, deleted, destroyed, or anonymized. However, such data can be used for statistical purposes.

7. PRIVACY AND SECURITY OF DATA
As REPORTAGE, we attach importance to the confidentiality of your personal data and/or special category personal data. In this context, your personal data and/or special category personal data reaching our Company through any channel are confidential. REPORTAGE complies with the confidentiality of the said data at every stage of conducting its commercial activities. In this context, full compliance with this company privacy policy is ensured. Necessary technical and administrative measures are taken to prevent personal data and/or special category personal data collected through various channels from falling into the hands of unauthorized persons, to prevent damage to the rights of the data owner-not to be victimized, and to protect the data. Additionally, data protection is requested from third parties with whom we share personal data and/or special category personal data within the framework of legal compliance, when necessary. Again, our software programs are updated and continuously renewed. In order to provide high-level protection, technological requirements are met and compliance with standards is ensured.

8. UP-TO-DATENESS OF DATA
The principle of up-to-dateness is essential within REPORTAGE. Because personal data and/or special category personal data obtained in various ways can be updated when necessary or upon request. Necessary precautions regarding updating are also taken by REPORTAGE.

9. ACCURACY OF DATA
The principle of accuracy of the declared personal data and/or special category personal data has been adopted by REPORTAGE. REPORTAGE does not have to investigate the accuracy of the personal data and/or special category personal data declared by its customers or the real and legal persons it is in contact with. Because this matter is legally and in line with our working principles not possible. In this context, transactions are carried out on the premise that the declared data are correct.

10. PURPOSES OF PROCESSING PERSONAL DATA AND/OR SPECIAL CATEGORY PERSONAL DATA
The processing of personal data and/or special category personal data is carried out in parallel with the purposes in the Illumination Texts belonging to REPORTAGE. The said Illumination Texts may vary according to the processed personal data and/or special category personal data. Parallel to the difference in the Illumination Texts, the purposes of processing personal data and/or special category personal data may also vary.

11. COLLECTION AND PROCESSING OF PERSONAL DATA AND/OR SPECIAL CATEGORY PERSONAL DATA WITHIN A CONTRACTUAL RELATIONSHIP
If a contractual relationship has been established with customers or potential customers, the personal data collected pursuant to the contract may be processed by REPORTAGE without explicit consent. In case the processing of special category personal data is in question, data can be processed based on explicit consent or legal reasons within the scope of Article 6 of the Law. The said data are used within the framework of the performance of goods and/or services, the execution of the contract, and the conduct of commercial activities. These data can always be updated by contacting customers.

12. PERSONAL DATA AND/OR SPECIAL CATEGORY PERSONAL DATA PROCESSED THROUGH AUTOMATED SYSTEMS
Data acquired from information obtained through automated systems without the explicit consent of the persons cannot be used against the persons. REPORTAGE acts in accordance with the relevant legislative provisions regarding personal data and/or special category personal data processed through automated systems.

13. PERSONAL DATA AND/OR SPECIAL CATEGORY PERSONAL DATA BELONGING TO REPORTAGE'S EMPLOYEES
PROCESSING CONDUCTED WITHIN THE FRAMEWORK OF LEGAL OBLIGATIONS: Personal data belonging to employees can be processed by REPORTAGE without seeking explicit consent in order to fulfill the legal obligation of the data controller or if there is an explicit provision in the relevant Law regarding the processing of data. PROCESSING OF PERSONAL DATA PURSUANT TO THE EMPLOYMENT CONTRACT AND EMPLOYMENT RELATIONSHIP: The personal data of the employees can be processed without seeking the explicit consent of the employees within the framework of proportionality as much as necessary for ensuring the employment relationship of the employees with the company. REPORTAGE commits to protecting the data of the employees, their confidentiality, and taking the necessary measures in this regard under all circumstances. PROCESSING OF SPECIAL CATEGORY PERSONAL DATA BELONGING TO EMPLOYEES: According to the Personal Data Protection Law No. 6698, for the processing of special category personal data, the explicit consent of the person whose data will be processed and additionally taking the necessary measures stipulated by the Board is required. While processing special category personal data within the framework of compliance with Law No. 6698 and the principles of the Board, REPORTAGE obtains both the explicit consent of the relevant person and takes the necessary measures determined by the Board when necessary. However, special category personal data can be processed without the explicit consent of the relevant person in exceptional cases stipulated in the Law, provided that it is limited and measured. PERSONAL DATA PROCESSED THROUGH AUTOMATED SYSTEMS: Some personal data of employees can be processed in automated systems. The said data are used in the performance evaluation of employees, keeping statistical data, promotions for the company, and scoring. Employees have the right to object to the unfavorable results that arise regarding them. The objection must be made in accordance with internal company rules and procedures. The said objection is subjected to evaluation within the company. PROCESSING OF PERSONAL DATA FOR THE BENEFIT OF EMPLOYEES: Personal data belonging to employees can be processed by REPORTAGE without explicit consent within the framework of the relationship provided by the employment contract for transactions relating to the benefit of the employee. Again, in disputes concerning the employment relationship with REPORTAGE, the Company can process personal data belonging to employees. IN-COMPANY TELECOMMUNICATION, INTERNET, AND COMMUNICATION: In order to ensure the easier performance of the work, computer, phone, car, applications, software, and e-mail can be allocated to employees within the company by REPORTAGE. REPORTAGE can control and audit the personal data on the vehicles allocated within the scope of illumination obligations. The employee, on the other hand, cannot use the vehicles allocated to him/her for private purposes. It is obligatory to use it only to ensure the performance of the work. Again, the employee accepts, declares, and commits that he/she will not keep any data or information other than the work and the necessity of the work in the allocated vehicles from the moment the working relationship with REPORTAGE begins.

14. TRANSFER OF PERSONAL DATA AND/OR SPECIAL CATEGORY PERSONAL DATA DOMESTICALLY AND ABROAD
REPORTAGE can transfer data domestically and abroad in accordance with the conditions stipulated in the Personal Data Protection Law and within the framework of the principles determined by the Board, within the scope of legal compliance situations or with the explicit consent of the relevant person. REPORTAGE acts in accordance with Articles 8 and 9 of the Law No. 6698 while transferring personal data and/or special category personal data.

15. AUDIT AND TRANSACTION SECURITY
Necessary technical and administrative measures are taken to prevent personal data and/or special category personal data collected through various channels from falling into the hands of unauthorized persons, to prevent damage to the rights of the data owner-not to be victimized, and to protect the data. Additionally, data protection is requested from companies with which we share personal data and/or special category personal data within the framework of legal compliance, when necessary. Again, our software programs are updated, continuously renewed, and developed. In order to provide high-level protection, all technological requirements are met, and compliance with standards is ensured. Parallel to all these, REPORTAGE has all necessary internal and external audits conducted for the protection of personal data and/or special category personal data.

16. NOTIFICATION OF DATA BREACHES
In case of any breach situation regarding the data, REPORTAGE acts immediately to do its part to remedy the breaches reported to it. It takes the necessary measures to minimize the damage of the relevant person. You can apply according to the procedures specified on our company's website for the notification of breaches. In addition, in the event that personal data and/or special category personal data are obtained by unauthorized third parties from outside, the company notifies the Personal Data Protection Board directly of the said matter.

17. RIGHTS OF the DATA OWNER RELEVANT PERSON REQUESTING INFORMATION
The rights of the data owner are ruled in Article 11 of the Personal Data Protection Law No. 6698. REPORTAGE accepts that in accordance with the law, the relevant person must be illuminated before data processing and, when necessary, their explicit consent must be obtained, and after the data is processed, the relevant person has the right to request information about their data, update, delete, destroy, and anonymize. The relevant persons have the following rights; Learning whether personal data is processed or not, Requesting information if personal data has been processed, Learning the purpose of processing personal data and whether they are used in accordance with their purpose, Knowing the third parties to whom personal data is transferred domestically or abroad, Requesting correction of personal data in case of incomplete or incorrect processing, Requesting the deletion or destruction of personal data within the framework of the conditions stipulated in Article 7 of the law titled 'Deletion, destruction or anonymization of personal data', Requesting notification of the third parties to whom personal data has been transferred regarding the correction of incomplete or incorrectly processed data or the deletion or destruction of the data upon the request of the relevant person, Objecting to the emergence of a result against the person himself by analyzing the processed data exclusively through automated systems, Requesting the compensation of the damage in case of suffering damage due to unlawful processing of personal data. Information requests made on behalf of someone else will not be answered by the company. If it is determined by REPORTAGE that an application is made on behalf of someone else in the information request; all rights of litigation and claim of REPORTAGE are reserved. It will be answered as soon as possible and within thirty days at the latest from the date the relevant person reaches REPORTAGE. If REPORTAGE deems it necessary, it may request other information and documents from the relevant person making the application.

REPORTAGE TURKEY GAYRİMENKUL GELİŞTİRME YATIRIM SATIŞ PAZARLAMA TİCARET ANONİM ŞİRKETİ