Third Party Disclosure Statement

This informative text has been prepared by URBANMEDİA ADVERTISING AND COMMUNICATION SERVICES INC. (“Company”) as the data controller in accordance with Article 10 of Law No. 6698 on the Protection of Personal Data (“Law”) and the procedures and principles to be followed in fulfilling the Obligation of Disclosure.

The Purpose of Processing Personal Data

Your identity, contact, visual, and auditory recording data will be processed for the following purposes:

· Conducting Activities in Compliance with Regulations

· Conducting Financial and Accounting Operations

· Conducting Processes Related to Firm / Product / Services Reliability

· Ensuring Physical Space Security

· Following and Conducting Legal Operations

· Conducting Communication Activities

· Conducting / Auditing Business Activities

· Receiving and Evaluating Suggestions for Improving Business Processes

· Conducting Business Continuity Activities

· Conducting Logistics Activities

· Conducting Processes for Purchasing Goods / Services

· Conducting Post-Sales Support Services for Goods / Services

· Conducting Sales Processes for Goods / Services

· Conducting Production and Operations Processes for Goods / Services

· Conducting Customer Relationship Management Processes

· Conducting Activities Aimed at Customer Satisfaction

· Organization and Event Management

· Conducting Marketing Analysis Works

· Conducting Advertising / Campaign / Promotion Processes

· Conducting Social Responsibility and Civil Society Activities

· Conducting Contract Processes

· Following Demand / Complaints

· Conducting Marketing Processes for Products / Services

· Ensuring the Security of the Data Responsible Operations

· Providing Information to Authorized Persons, Institutions and Organizations

· Conducting Management Activities

· Creating and Following Visitor Registrations

· Conducting Activities in Compliance with Regulations

· Conducting Financial and Accounting Operations

· Conducting Processes Related to Firm / Product / Services Reliability

· Ensuring Physical Space Security

· Following and Conducting Legal Operations

· Conducting Communication Activities

· Conducting / Auditing Business Activities

· Receiving and Evaluating Suggestions for Improving Business Processes

· Conducting Business Continuity Activities

· Conducting Logistics Activities

· Conducting Processes for Purchasing Goods / Services

· Conducting Post-Sales Support Services for Goods / Services

· Conducting Sales Processes for Goods / Services

· Conducting Production and Operations Processes for Goods / Services

· Conducting Customer Relationship Management Processes

· Conducting Activities Aimed at Customer Satisfaction

· Organization and Event Management

· Conducting Marketing Analysis Works

· Conducting Advertising / Campaign / Promotion Processes

· Conducting Social Responsibility and Civil Society Activities

· Conducting Contract Processes

· Following Demand / Complaints

· Conducting Marketing Processes for Products / Services

· Ensuring the Security of the Data Responsible Operations

· Providing Information to Authorized Persons, Institutions and Organizations

· Conducting Management Activities

· Creating and Following Visitor Registrations

· Conducting Activities in Compliance with Regulations

· Conducting Financial and Accounting Operations

· Conducting Processes Related to Firm / Product / Services Reliability

· Ensuring Physical Space Security

· Following and Conducting Legal Operations

· Conducting Communication Activities

· Conducting / Auditing Business Activities

· Receiving and Evaluating Suggestions for Improving Business Processes

· Conducting Business Continuity Activities

· Conducting Logistics Activities

· Conducting Processes for Purchasing Goods / Services

· Conducting Post-Sales Support Services for Goods / Services

· Conducting Sales Processes for Goods / Services

· Conducting Production and Operations Processes for Goods / Services

· Conducting Customer Relationship Management Processes

· Conducting Activities Aimed at Customer Satisfaction

· Organization and Event Management

· Conducting Marketing Analysis Works

· Conducting Advertising / Campaign / Promotion Processes

· Conducting Social Responsibility and Civil Society Activities

· Conducting Contract Processes

· Following Demand / Complaints

· Conducting Marketing Processes for Products / Services

· Ensuring the Security of the Data Responsible Operations

· Providing Information to Authorized Persons, Institutions and Organizations

· Conducting Management Activities

· Creating and Following Visitor Registrations

Method of Collecting Your Personal Data and Legal Reason

Your personal data is collected and processed physically, through non-automated means, by declarations made by you or through the delivery of documents pertaining to you;

by using the information technology systems of our Company or through email, processed through automated means. The legal grounds for the collection and processing of your personal data are specified below.

For the transfer of data abroad, explicit consent is required pursuant to Article 5(1) of the Law, and for other personal data processing activities mentioned in the personal data inventory, Article 5(2) of the Law applies;

a) As explicitly stipulated in the laws.

c) Provided that it is directly related to the establishment or performance of a contract, the processing of personal data of the parties to the contract is necessary.

ç) It is mandatory for the data controller to fulfill a legal obligation.

f) Provided that it does not harm the fundamental rights and freedoms of the relevant person, it is necessary to process data for the legitimate interests of the data controller.

To Whom and for What Purposes Your Personal Data May Be Transferred

Your personal data is collected and processed physically, through non-automated means, by declarations made by you or through the delivery of documents pertaining to you;

by using the information technology systems of our Company or through email, processed through automated means. The legal grounds for the collection and processing of your personal data are specified below.

For the transfer of data abroad, explicit consent is required pursuant to Article 5(1) of the Law, and for other personal data processing activities mentioned in the personal data inventory, Article 5(2) of the Law applies;

a) As explicitly stipulated in the laws.

c) Provided that it is directly related to the establishment or performance of a contract, the processing of personal data of the parties to the contract is necessary.

ç) It is mandatory for the data controller to fulfill a legal obligation.

f) Provided that it does not harm the fundamental rights and freedoms of the relevant person, it is necessary to process data for the legitimate interests of the data controller.

To Whom and for What Purposes Your Personal Data May Be Transferred

Your personal data is collected and processed physically, through non-automated means, by declarations made by you or through the delivery of documents pertaining to you;

by using the information technology systems of our Company or through email, processed through automated means. The legal grounds for the collection and processing of your personal data are specified below.

For the transfer of data abroad, explicit consent is required pursuant to Article 5(1) of the Law, and for other personal data processing activities mentioned in the personal data inventory, Article 5(2) of the Law applies;

a) As explicitly stipulated in the laws.

c) Provided that it is directly related to the establishment or performance of a contract, the processing of personal data of the parties to the contract is necessary.

ç) It is mandatory for the data controller to fulfill a legal obligation.

f) Provided that it does not harm the fundamental rights and freedoms of the relevant person, it is necessary to process data for the legitimate interests of the data controller.

To Whom and for What Purposes Your Personal Data May Be Transferred

Your personal data is collected and processed physically, through non-automated means, by declarations made by you or through the delivery of documents pertaining to you;

by using the information technology systems of our Company or through email, processed through automated means. The legal grounds for the collection and processing of your personal data are specified below.

For the transfer of data abroad, explicit consent is required pursuant to Article 5(1) of the Law, and for other personal data processing activities mentioned in the personal data inventory, Article 5(2) of the Law applies;

a) As explicitly stipulated in the laws.

c) Provided that it is directly related to the establishment or performance of a contract, the processing of personal data of the parties to the contract is necessary.

ç) It is mandatory for the data controller to fulfill a legal obligation.

f) Provided that it does not harm the fundamental rights and freedoms of the relevant person, it is necessary to process data for the legitimate interests of the data controller.

To Whom and for What Purposes Your Personal Data May Be Transferred

Your personal data is collected and processed physically, through non-automated means, by declarations made by you or through the delivery of documents pertaining to you;

by using the information technology systems of our Company or through email, processed through automated means. The legal grounds for the collection and processing of your personal data are specified below.

For the transfer of data abroad, explicit consent is required pursuant to Article 5(1) of the Law, and for other personal data processing activities mentioned in the personal data inventory, Article 5(2) of the Law applies;

a) As explicitly stipulated in the laws.

c) Provided that it is directly related to the establishment or performance of a contract, the processing of personal data of the parties to the contract is necessary.

ç) It is mandatory for the data controller to fulfill a legal obligation.

f) Provided that it does not harm the fundamental rights and freedoms of the relevant person, it is necessary to process data for the legitimate interests of the data controller.

To Whom and for What Purposes Your Personal Data May Be Transferred

Your personal data may be shared as required by the personal data processing activities,

· To banks, for the purpose of executing payment transactions,

· With institutions that the Company has a commercial, administrative, or contractual relationship with,

· To public institutions and organizations legally authorized, for the purpose of fulfilling our obligations arising from legislation,

· With companies providing information technology and archiving services,

· To companies abroad that our Company is a part of, with servers located overseas and companies providing support for these servers, as well as to companies providing cloud computing services when cloud computing is used, for the purpose of fulfilling the requirements of the information technologies used by our Company,

· To other suppliers, for the purpose of ensuring the functionality of the common database established by the Company,

· With professional consultants, accountants, and auditors that the Company receives services from,