PRIVACY NOTICE FOR PROCESSING PERSONAL DATA BY CHATBOT

Under Law No. 6698 on the Protection of Personal Data ("Law"), your personal data may be processed within the scope described below by Cerebrum Teknoloji Yazilim Sanayi ve Ticaret A.S. ("Company" or "Cerebrum"), as the data controller.

Your collected personal data may be processed by our Company in accordance with the personal data processing conditions and purposes specified in Article 5 of the Law ("Purposes") with the legal bases specified below:

Based on the legal basis that processing is necessary for the performance or execution of a contract to which the data subject is a party or in order to take steps at the request of the data subject prior to entering into a contract:

Based on the legal basis that processing is necessary for compliance with a legal obligation to which the data controller is subject:

Based on the legal basis that processing is necessary for the legitimate interests pursued by the data controller, provided that the fundamental rights and freedoms of the data subject are not overridden:

Based on the legal basis that processing is necessary for the establishment, exercise or protection of a right:

To Whom and for What Purpose Processed Personal Data May be Transferred

Your collected personal data may be transferred to our consultants and other technical, legal, and financial service providers, including technical infrastructure support, within the scope of our legitimate interest to provide services, as well as to authorized public institutions and private individuals as required by law and to fulfill our legal obligations, as explicitly provided in the laws.

Method of Personal Data Collection

Your personal data is collected via electronic channels such as our Chatbot application, email, phone, as well as offline and online forms for the purpose of fulfilling the purposes mentioned above.

Rights of the Data Subject as Listed in Article 11 of the Law

We hereby inform you that you have the following rights regarding your personal data under Article 11 of the Law:

• To learn whether your personal data is processed or not, • To request information about whether your personal data has been processed, • To learn the purpose of the processing of your personal data and whether they are used in accordance with that purpose, • To know the third parties to whom your personal data has been transferred, domestically or abroad, • To request the correction of any incomplete or inaccurate personal data and the notification of such correction to third parties to whom the personal data has been transferred, if any, • To request the erasure or destruction of your personal data, processed in accordance with the Law and other relevant laws, in case the reasons requiring processing cease to exist, and the notification of such erasure or destruction to third parties to whom the personal data has been transferred, if any, • To object to the occurrence of a result against the data subject's interests that arises solely from the analysis of the processed data through automated systems, • To demand compensation for any damages suffered as a result of the unlawful processing of your personal data.

You can submit your requests related to the above-mentioned rights to our company through the email address [email protected] . Depending on the nature of your request, your applications will be concluded free of charge as soon as possible and within a maximum of thirty days; however, if the process requires an additional cost, you will be charged in accordance with the tariff to be determined by the Personal Data Protection Board.