KVKK

KVKK - Protection of Personal Data Law Information

Pursuant to the Turkish Law No. 6698 on the Protection of Personal Data ("KVKK"), this notice provides information on how your personal data is processed by Citio Dijital Teknoloji ve Tic A.Ş. (operating the Citio Istanbul app), acting as the Data Controller.

Data Controller: Citio Dijital Teknoloji ve Tic A.Ş. (Citio Istanbul app)

Commitment to Data Protection: We are committed to protecting the fundamental rights and freedoms of individuals, particularly the right to privacy, in accordance with KVKK. Citio Dijital Teknoloji ve Tic A.Ş. implements necessary technical and administrative measures to ensure an appropriate level of security to prevent unlawful processing of your personal data, prevent unlawful access to your data, and ensure its safeguarding.

Personal Data Processed:

As the Data Controller, we may process the following types of personal data (this list is not exhaustive):

• Name, surname
• Passport number
• Address, postal code
• Telephone number
• E-mail address

Purposes and Legal Basis for Processing Personal Data:

Your personal data is processed based on the legal grounds stipulated in KVKK and for the following purposes, depending on business needs:

• To enable you to benefit from the products and services offered by our Company.
• To carry out administrative operations for communication purposes initiated by our Company.
• In relation to your interactions with our Company, such as calling our call center or using our website and application.

The legal basis for this processing is primarily your consent and the necessity for the performance of the service contract as outlined in Law No. 6698 (KVKK).

Data Security Measures:

We implement necessary business processes and technical security infrastructure developments to protect your personal data stored by us against unauthorized access, manipulation, loss, or damage. All necessary information security measures are taken, ensuring your data is not used outside the notified purposes and scope.

Data Retention and Deletion:

Your personal data will be processed and stored for the duration required by the relevant legal retention periods or, if no such period is specified, for the period necessary to fulfill the processing purpose. Once this period expires, your personal data will be removed from our Company's data flows using secure deletion or destruction methods.

Your Rights under KVKK:

Under KVKK, you have rights regarding your personal data. These generally include the right to:

• Learn whether your personal data is processed;
• Request information if your personal data has been processed;
• Learn the purpose of processing and whether data is used in accordance with its purpose;
• Know the third parties to whom your personal data is transferred domestically or abroad;
• Request correction of incomplete or inaccurate data;
• Request the deletion or destruction of your personal data under the conditions stipulated in KVKK;
• Request notification of correction, deletion, or destruction operations to third parties to whom data has been transferred;
• Object to unfavorable results arising from automated analysis;
• Claim compensation for damages due to unlawful processing.

You can exercise these rights by contacting us. Please refer to the "Contact Us" section of our main Privacy Policy for details on how to reach us.

Contact Information:

For any questions or requests regarding your personal data under KVKK, please contact us using the details provided in the main Privacy Policy:

• Via Email: info@citioapp.com
• Via this Link: https://citioapp.com/
• Via this Address: Ayazağa Mah. Mimar Sinan Sk. No:21A/35 Sarıyer, Türkiye