BUBBLES ISTANBUL DIJITAL YAZILIM MEDYA PLANLAMA VEDANISMANLIK HiZMETLERi LiMiTED SiRKETi,

Dear Customer/ Visitor;

This clarification text was prepared by BUBBLES ISTANBUL DIJITAL YAZILIM MEDYA PLANLAMA VEDANISMANLIK HiZMETLERi LiMiTED SiRKETi as “Data Controller” under Article 10 of the Law No. 6698 on “the Protection of Personal Data” (“KVKK”) and “Communiqué On Principles And Procedures To Be Followed In Fulfillment Of The Obligation To Inform”.

We, as BUBBLES ISTANBUL DIJITAL YAZILIM MEDYA PLANLAMA VEDANISMANLIK HiZMETLERi LiMiTED SiRKETi, act responsibly towards the protection of your personal data by carefully processing them in the best possible way. We process your personal data as “Data Controller” as per purposes and limits in accordance with the Law on the Protection of Personal Data (the KVKK) No. 6698 and pay special attention to accordingly taking appropriate administrative and technical measures. We hereby inform you about our processing of your personal data, the purposes of processing your personal data, legal reasons, methods of collection, to whom and for what purposes the data can be transferred, and your rights under the KVKK.

We, as BUBBLES ISTANBUL DIJITAL YAZILIM MEDYA PLANLAMA VEDANISMANLIK HiZMETLERi LiMiTED SiRKETi, process your personal data as stated below in Article 5 of the KVKK for the purposes to be stated in detail below;

• • It is explicitly consented by the data subject,
• • It is expressly permitted by any law,
• • It is necessary to process the personal data of parties of a contract, provided that the processing is directly related to the execution or performance of the contract,
• • It is necessary for compliance with a legal obligation which the controller is subject to,
• • It is necessary for the legitimate interests of the data controller, provided that the fundamental rights and freedoms of the data subject are not harmed.

Personal data is defined as “any information relating to an identified or identifiable natural person” in the KVKK. Your name, surname, date of birth, identification number, e-mail address, telephone number, and similar information that you share with us are accordingly referred to as personal data.

Your personal data refer to all kinds of information and documents, including your private personal data, which are obtained during written and/or oral and/or electronic communication at the time and/or after you make contact with us and this information is stored in physical and digital media. Your personal data can be processed in and transferred to the country and abroad with the natural and legal persons stated in this text in accordance with the basic principles expressly permitted by the KVKK, within the scope of the terms and purposes of the processing of personal data set forth in Articles 5 and 6 of the KVKK.

BUBBLES ISTANBUL DIJITAL YAZILIM MEDYA PLANLAMA VEDANISMANLIK HiZMETLERi LiMiTED SiRKETi , as the controller, collects your personal data, including sensitive personal data, through the processes of services provided in oral, written, or electronic media such as website, mobile applications, operator, social media, direct or authorized communication channels, and physical channels depending on explicit consent to provide you with our quality services and carry out our business and commercial activities in this context within the framework of legal reasons arising on the basis of relevant legislation, contracts, demand, commercial practice and honesty rules.

In this context, your personal data can be obtained by BUBBLES ISTANBUL DIJITAL YAZILIM MEDYA PLANLAMA VEDANISMANLIK HiZMETLERi LiMiTED SiRKETi or by or legal persons processing data on its behalf in written or electronic media, but not limited to those deemed, by the following methods:

• • The contact form you have filled out to contact us on our website,
• • Various contracts you have signed with our company and e-mails, faxes, and letters you have sent to our company,
• • Our employees, our customer service channels.

• Your personal data are collected and processed for the following purposes:
• a- Taking necessary actions on the subject for which you have contacted with BUBBLES ISTANBUL DIJITAL YAZILIM MEDYA PLANLAMA VEDANISMANLIK HiZMETLERi LiMiTED SiRKETi,
• b- Fulfillment of law and/or legal obligations within the scope of relevant legislation,
• C- Meeting the demands of legally authorized institutions and organizations
• ç- Being able to determine the preferences and needs of our visitors and shape the services we provide within this context, update, carry out market research and statistical studies and for our customers to benefit from our services.
• d- Informing you about the information, activities and services that you will request,
• e- Copying/making a backup to prevent data loss,
• f- Evaluating job applications, making corporate communication, contacting with people who are in business relations with the company,
• g- Being able to establish better service standards for you, evaluating and processing all kinds of complaints, determining and implementing commercial and business strategies,
• h- Improving our services, communication methods and functionality of our websites,
• i- Ensuring the fulfillment of legal obligations, as required by legal regulations,
• i- Other purposes set forth in the KVKK.

In accordance with the purposes stated above, BUBBLES ISTANBUL DIJITAL YAZILIM MEDYA PLANLAMA VEDANISMANLIK HiZMETLERi LiMiTED SiRKETi proceeds and stores your personal data with respect to your explicit consent or on the basis of the establishment or performance of our contract with you for the purposes and the scope set forth herein, where required by our legitimate interest in case it is directly related or it does not violate your fundamental rights and freedoms.

Your personal data which are collected in accordance with the KVKK and the above states article are transferred to;

domestic/foreign business partners, suppliers, service providers, natural and/or legal shareholders of companies, legally authorized public institutions and natural persons by BUBBLES ISTANBUL DIJITAL YAZILIM MEDYA PLANLAMA VEDANISMANLIK HiZMETLERi LiMiTED SiRKETi and other domestic/foreign companies/organizations, including foreign companies/organizations and subsidiaries that it will be a shareholder in the future, in accordance with the basic principles set forth by the KVKK and within the terms and purposes of personal data processing specified in Articles 8 and 9 of the KVKK, and for the purposes listed above.

Moreover, third parties work for BUBBLES ISTANBUL DIJITAL YAZILIM MEDYA PLANLAMA VEDANISMANLIK HiZMETLERi LiMiTED SiRKETi to provide services of information technology, cleaning, food, safety, transportation, clothing, etc., and they may have access to corporate systems from time to time and thus access your personal data under these systems.

Your personal data may be transferred to administrative institutions such as Social Security Institution, public institutions, and organizations or jurisdictions, if necessary within the framework of legal obligations.

Your personal data processed for the purposes set out in this text shall be deleted, destroyed or used anonymously by the data controller in accordance with the KVKK when the purpose that requires processing on the basis of Article 7/f.1. ceases to have effect and/or the statute of limitations we are required to process your data as per legislation expires. BUBBLES ISTANBUL DIJITAL YAZILIM MEDYA PLANLAMA VEDANISMANLIK HiZMETLERi LiMiTED SiRKETi Surveillance of Facilities with Camera

Entrances and exits of our company premises and its affiliated facilities, corridors, public areas, and exterior facades of the facilities are monitored with cameras for the purpose of facility safety and occupational health, and these records are only accessible by our company's security department and its respective departments and the records are stored for a period for security purposes and at the end of this period they are destroyed.

Within the framework of the KVKK and other applicable legislation, you have the rights;

• a. to learn whether his/her personal data are processed or not,
• b. to demand for information as to your personal data have been processed,
• c. to learn the purpose processing of your data and whether these personal data are used in compliance with the purpose
• d. to know the third parties to whom his personal data are transferred in country or abroad,
• e. to request the rectification of the incomplete or inaccurate data, if any,
• f. to request the erasure or destruction of his/her personal data under the conditions referred to in Article 7,
• g. to request reporting of the operations carried out in compliance with sub-paragraphs (d) and e) to third parties to whom your personal data have been transferred,
• h. to object to the occurrence of a result against you by analyzing the processed data solely through automated systems,,
• i. to claim compensation for the damage arising from the unlawful processing of his/her personal data.

Your requests shall be concluded as soon as possible and within thirty days at the latest, according to the nature of the demand.

Where stipulated by law, you may withdraw any consent you previously granted to us, or at any time, you can object to the processing of your personal data for legal reasons relating to your particular situation, and you may change your preferences in the future. To help protect your privacy and protect security, we may request additional information or paperwork to verify your identity before providing you with access to your information. We may charge charges before providing you with a copy of your personal information to the extent permitted by applicable law.

In accordance with Article 5 of the KVKK, your personal data stated above and obtained in accordance with the law may be processed without your explicit consent if:

• • It is expressly provided for by the laws,
• • It is necessary for the protection of life or physical integrity of yourself or of any other person, who is unable to explain his/her consent due to the physical disability or whose consent is not deemed legally valid,
• • Processing of personal data of the parties of a contract is necessary, provided that it is directly related to the establishment or performance of the contract with BUBBLES ISTANBUL DIJITAL YAZILIM MEDYA PLANLAMA VEDANISMANLIK HiZMETLERi LiMiTED SiRKETi or other national/overseas companies/organizations and subsidiaries that it will be a shareholder in the future,
• • It is necessary for compliance with a legal obligation to which our company is subject,
• • Personal data have been made public by you,
• • Data processing is necessary for the establishment, exercise or protection of any right,
• • Processing of data is necessary for the legitimate interests pursued by our company, provided that this processing shall not violate your fundamental rights and freedoms.

When you visit the website, we may obtain certain information through automated means, such as browser cookies. The information we obtain in this way may include the IP address of your device, domain name, identifier associated with your devices, device and operating system type and its features, features of the web browser, language preferences, click data, your interactions with the site (the web pages you visit, the links you click, and the features you use). It also includes pages that direct or refer you to the website, the date and time of access to the website, and other information about your use of the website.

A “cookie” is a text file sent by websites to a visitor's computer or other device connected to the Internet to store a visitor's browser or information or settings in the browser.

The use of cookies is not required to visit our site; there is a possibility of customization. You can change your preferences for cookies by changing your browser settings.

If you set your browser to block all cookies, you may continue to use our site; however, you may not be able to use some features. Your access or accessing to all functions of the website may be limited and quality of website experience may be reduced.

Please contact us by email at info@bubblesistanbul.com to updating your preferences, update or edit your information, submit a request for the use of rights set forth in the Law on the Protection of Personal Data No. 6698, ask questions about this Privacy Policy, or exercise other applicable privacy rights, or send your message to the following address by post.

Data subject shall make requests to us within the scope of their rights specified in Article 11 of the Law on the Protection of Personal Data No. 6698 in writing or by registered electronic mail (KEP) address, secured electronic signature, mobile signature or by the e-mail address which has been previously submitted by the data subject himself/herself to BUBBLES ISTANBUL DIJITAL YAZILIM MEDYA PLANLAMA VEDANISMANLIK HiZMETLERi LiMiTED SiRKETi or recorded in the system of BUBBLES ISTANBUL DIJITAL YAZILIM MEDYA PLANLAMA VEDANISMANLIK HiZMETLERi LiMiTED SiRKETi

Sincerely.