INFORMATION NOTICE ON THE PROCESSING OF YOUR PERSONAL DATA AND OUR PERSONAL DATA PROTECTION POLICY

ERALP YAZILIM VE OTOMASYON SİSTEMLERİ SANAYİ VE TİCARET A.Ş. ("Eralp Yazılım") attaches great importance to its customers' personal data and the rights arising therefrom. The following items include which personal data are collected on the heoxa.com website, for which purposes the said data are collected, how they are used, how you can change this information, and how you can contact us.

1. Legal basis for processing personal data

The Law No. 6698 on the Protection of Personal Data (KVKK), the Law No. 6563 on the Regulation of Electronic Commerce, the Law No. 6502 on the Protection of Consumers, the Regulation on Service Providers and Intermediary Service Providers in Electronic Commerce, and the Regulation on Commercial Communication and Commercial Electronic Messages contain provisions regarding the processing or protection of personal data. The Turkish Penal Code No. 5237 provides for certain sanctions regarding the processing and confidentiality of personal data. As Eralp Yazılım, within the framework of the Law No. 6502 on the Protection of Consumers and the Regulation on Distance Contracts, we need to process the personal data of our members and customers in order to fulfill our obligations arising from the agreements we will conclude with our customers and to provide the best service.

2. Method used in processing personal data

Eralp Yazılım: attaches great importance to the security of our customers’ and members’ information and works with state-of-the-art tools to ensure this. All kinds of physical, electronic, and administrative measures have been taken to ensure the security of our site. All information is stored and backed up on secure servers.

Google: and third-party providers need to collect information regarding Namevertisements, optimize Namevertisements, and publish them in order to displmonth them in banner areas where heoxa.com and Eralp Yazılım’s publisher sites on the internet feature them. For this purpose, first-party cookies and third-party cookies are used together by heoxa.com and third-party providers, including Google.

Cookies,: are files in which information and passwords are recorded while browsing websites, and when you re-enter that website, your information is remembered and you log in. You can delete all cookies or site data from your internet browser’s tools section or reject all cookies from the help section.

3. Purpose of processing your personal data

3.1 In cases such as subscribing to our e-newsletters and our site that announce our services and campaigns, making a demo or product purchase via the site and applications, or canceling the product you purchased, we will need some of your personal information such as name, surname, e-mail address, phone number, invoice and delivery addresses in order to serve you better. Apart from this information, aggregate statistical data that do not contain personal information, such as site visit frequency and times, are also collected and used to analyze and understand visitor movements and preferences.

3.2 Personal information collected on the heoxa.com site is used to ensure communication and customer satisfaction with our customers, to inform about campaigns, and to provide the services you request or authorize, or to carry out the transactions.

3.3 To support these uses, heoxa.com may use personal information to provide its customers with more effective service, to improve the site and other related Eralp Yazılım products or services, and to make the use of the site easier. We may use your personal information, including notifications, to provide information about the products or services you are using. We may also send you information about other Eralp Yazılım products and services. When you subscribe to a newsletter or agree to receive promotional e-mails, the heoxa.com site may use customized links or similar technologies to track the e-mails you click. Each e-mail contains unsubscribe links that allow you to stop receiving such communications.

4. Institutions to which your personal data are transferred and the purpose of transfer

4.1 Eralp Yazılım may share the personal data it collects with program partner institutions and organizations with which it cooperates to carry out its activities, with persons and institutions domestically/abroad from whom it receives the service of storing data in the cloud environment, with the Interbank Card Center, with TURK Elektronik Para A.Ş., with auxiliary tools within the scope of various marketing activities in order to provide better service to its customers and ensure customer satisfaction, with various domestic and foreign agencies and Namevertising companies, with survey companies, with other domestic/foreign third parties, and with relevant business partners.

4.2 Without explicit consent, processing of your personal data by Eralp Yazılım is only possible in the cases enumerated in a limited manner in the Law No. 6698 on the Protection of Personal Data. We use other companies, intermediaries, or contractors (“Service Providers”) to help us deliver services or to provide services on our behalf. For example, to ensure the continuity of subscription services and uninterrupted service to our users, users’ payment information (credit or debit card information) is recorded by “Lidio”, a secure, easy, and fast payment system. This information will be used to automatically collect subscription fees without requiring users to re-enter payment information in each subscription period. This information, recorded only by Lidio, is not shared with Heoxa and is not stored on its servers. The information recorded by “Lidio” does not have the authority to be used or disclosed for purposes other than service provision. Users consent to the recording and processing of payment information during the subscription process. This consent becomes legally valid and binding together with the acceptance of the user agreement.

5. Your Rights Regarding Your Personal Data

a) As Eralp Yazılım, we would like to remind you of your rights regarding your personal data recognized under the Law No. 6698 on the Protection of Personal Data:

b) a) To learn whether personal data are processed,

c) b) If personal data have been processed, to request information regarding this,

d) c) To learn the purpose of processing personal data and whether they are used in accordance with their purpose,

e) ç) To know the third parties to whom personal data are transferred domestically or abroad,

f) d) To request the correction of personal data if they are incomplete or incorrectly processed,

g) e) To request the deletion or destruction of personal data under the conditions stipulated in Article 7,

h) f) To request that the transactions carried out pursuant to subparagraphs (d) and (e) be notified to third parties to whom personal data have been transferred,

ı) g) To object to a result arising to the detriment of the person by analyzing the processed data exclusively through automated systems,

i) ğ) To request compensation for damages in case of loss due to the unlawful processing of personal data

6. Personal Data Processing Period

a) Your personal data will be processed in accordance with KVKK, the relevant personal data protection legislation, and other legislation for the periods required and, at most, as long as the legitimate purposes above do not cease to exist.

7. Updating Your Personal Data and Your Right to Apply

a) As Eralp Yazılım, under the Law No. 6698 on the Protection of Personal Data, we have an obligation to ensure that your processed personal data are accurate and up-to-date. Within the scope of this obligation, we kindly ask you to contact us through the communication channels in the contact section of heoxa.com when your information changes so that we can update it. Apart from this, when you want to exercise your rights specified above, you can contact us in the same way and apply to us. As Eralp Yazılım, we undertake to make the necessary updates following any changes that may be made in the legislation regarding personal data.

b) Complaints to be made by our customers whose personal data are processed by Eralp Yazılım will be responded to and finalized by Eralp Yazılım as soon as possible and within 30 days at the latest. However, in case an Additional cost arises, Eralp Yazılım reserves the right to request a fee from you according to the tariff to be determined by the Personal Data Protection Board.

c) Our customers can make their requests and complaints to heoxa.com in accordance with the Law No. 6698 on the Protection of Personal Data and the relevant legislation. In this context, you can submit your requests regarding your rights listed under the heading “5. Your Rights Regarding Your Personal Data” together with documents identifying your identity to the Company by the methods specified below.

d) (i) By submitting in person with a wet signature or via a notary to our postal address below, which may be updated over time,

e) address: Namealet Mahallesi, Şehit Fethi Sekin Caddesi, No: 1 Martı Tower Floor: 13 Apartment No: 1304 BURAKLI/İZMİR

f) (ii) By e-mail sent from the e-mail address you previously notified us and which is registered in our system (please check your registered e-mail address).

g) E-mail address: info@heoxa.com