KVKK Information Notice

This Disclosure Text has been prepared by Zgen Technology LTD. (“Company”) to inform the Company’s customers about the processing of their personal data by the Company within the scope of the Personal Data Protection Law No. 6698 (“Law”).

You can access detailed information regarding the processing of your personal data within the scope of this Disclosure Text from the Personal Data Protection and Processing Policy available at [www.plyr.com].

a) Methods and Legal Reasons for Obtaining Personal Data

Your personal data is collected in electronic or physical environments. The personal data collected for the legal reasons specified in this Disclosure Text can be processed and shared within the framework of the personal data processing conditions specified in Articles 5 and 6 of the Law.

b) Purposes of Processing Personal Data

Your personal data is processed by the Company to customize and recommend products and services offered by the Company according to the preferences, usage habits, and needs of the relevant individuals, to plan and execute necessary activities for the promotion of these products and services, to enable relevant individuals to benefit from the products and services offered by the Company, to conduct necessary work by business units and execute related business processes, to perform commercial activities carried out by the Company, to plan and execute the Company’s commercial and/or business strategies, and to ensure the legal, technical, and commercial-business security of the Company and the relevant individuals with whom the Company has a business relationship.

c) Parties to Whom Personal Data Can Be Shared and Purposes of Sharing

Your personal data can be shared with the Company’s business partners and suppliers, legally authorized institutions and organizations, and legally authorized private law entities within the framework of the personal data processing conditions and purposes specified in Articles 8 and 9 of the Law. This sharing is done to customize and recommend products and services offered by the Company according to the preferences, usage habits, and needs of the relevant individuals, to plan and execute necessary activities for the promotion of these products and services, to enable relevant individuals to benefit from the products and services offered by the Company, to conduct necessary work by business units and execute related business processes, to perform commercial activities carried out by the Company, to plan and execute the Company’s commercial and/or business strategies, and to ensure the legal, technical, and commercial-business security of the Company and the relevant individuals with whom the Company has a business relationship.

d) Rights of Data Subjects and Exercise of These Rights

If you submit your requests regarding your rights as personal data subjects to the Company using the methods specified under the title Exercise of Rights by Data Subjects, your requests will be evaluated and concluded by our Company as soon as possible and in any case within 30 (thirty) days.

According to Article 11 of the Law, as a personal data subject, you have the following rights:

To learn whether your personal data is processed,

If your personal data has been processed, to request information regarding this,

To learn the purpose of processing your personal data and whether they are used in accordance with their purpose,

To know the third parties to whom your personal data is transferred domestically or abroad,

If your personal data is processed incompletely or inaccurately, to request correction and to request that the transaction carried out within this scope be notified to the third parties to whom your personal data is transferred,

Despite being processed in accordance with the provisions of the Law and other relevant laws, to request the deletion or destruction of your personal data in the event that the reasons requiring processing are eliminated and to request that the transaction carried out within this scope be notified to the third parties to whom your personal data is transferred,

To object to the occurrence of a result against you by analyzing the processed data exclusively through automated systems,

To request compensation for the damage in case you suffer damage due to unlawful processing of your personal data.

Article 28, paragraph 2 of the Law lists the cases where data subjects do not have the right to request, and within this scope;

Personal data processing is necessary for the prevention of crime or for a criminal investigation,

Processing of personal data made public by the relevant person,

Personal data processing is necessary for the execution of supervision or regulation duties and for disciplinary investigation or prosecution by authorized and competent public institutions and organizations and professional organizations that have the status of public institutions, based on the authority granted by the law,

Personal data processing is necessary for the protection of the economic and financial interests of the State regarding budget, tax, and financial matters,

in such cases, the above-mentioned rights cannot be exercised regarding the data.

According to Article 28, paragraph 1 of the Law, in the following cases, the data will be outside the scope of the Law, and the requests of data subjects will not be processed regarding these data:

Processing of personal data by real persons within the scope of activities related to themselves or their family members living in the same residence, provided that they are not given to third parties and obligations regarding data security are complied with.

Processing of personal data for purposes such as official statistics and research, planning, and statistics by making them anonymous.

Processing of personal data for artistic, historical, literary, or scientific purposes or within the scope of freedom of expression, provided that it does not violate national defense, national security, public security, public order, economic security, privacy of private life, or personal rights, or constitute a crime.

Processing of personal data within the scope of preventive, protective, and intelligence activities carried out by public institutions and organizations authorized by law to ensure national defense, national security, public security, public order, or economic security.

Processing of personal data by judicial authorities or execution authorities regarding investigation, prosecution, trial, or execution proceedings.

Exercise of Rights by Data Subjects

Data subjects can use the “Form for Applications to Data Controller by Personal Data Owner” available at [www.plyr.com] to exercise the above-mentioned rights.

Applications will be made with documents identifying the relevant data subject, using one of the following methods:

By delivering a wet-signed copy of the form by hand, through a notary, or by registered mail to [Adalet Mah. Manas Bulvarı, Folkart Towers Business İç Kapı No: 2808 İzmir/Bayraklı],

By sending it via registered electronic mail signed with a secure electronic signature issued under the Electronic Signature Law No. 5070 to [[email protected]],

By following a method prescribed by the Personal Data Protection Board.

The Company responds to data subjects wishing to exercise these rights within the limits set forth in the Law, again as prescribed by the Law, within a maximum of thirty (30) days. For third parties to submit an application on behalf of personal data owners, a special power of attorney issued through a notary on behalf of the person to apply must be available.

While applications by data subjects are processed free of charge as a rule, a fee may be charged based on the fee schedule determined by the Personal Data Protection Board[1].

The Company may request information from the relevant person to determine whether the applicant is the personal data owner and may ask questions to the personal data owner to clarify the issues specified in the application.