INFORMATION PURSUANT TO LAW NO. 6698 ON THE PROTECTION OF PERSONAL DATA

1. Identity of the data controller and its representative, if any;

   Within the scope of the Law No. 6698 on the Protection of Personal Data (“KVKK”), this information is provided in order to fulfill the obligation of “CNR Holding A.Ş.” (Mersis No: 0211048867600014), as the Data Controller, to inform its business partners, customers, fair visitors, real or legal persons with whom it communicates.

2. The purpose for which personal data will be processed;

   Your personal data may be processed by the data controller or legal/natural persons to be appointed by the data controller in the following cases and conditions;

• In order to improve, develop, diversify our products and services and to offer or inform legal/real persons with whom we have commercial relations,
• In order to increase the benefit and quality of our exhibitors who exhibit their products and services in our exhibitions,
• In order to inform our real or legal entity visitors who will visit the fair to contribute to their commercial activities, to strengthen their relations with suppliers or to follow the developments in the sector, who have visited the fair before or who operate in the sector subject to the fair, about the fairs and to increase their commercial interests,
• In order to plan the scope of fairs in accordance with the expectations of exhibitors and visitors, to monitor their effectiveness and to ensure their continuity,
• In order to increase the awareness of the fairs by exhibitors, visitors, press, relevant non-governmental organizations and relevant public institutions and organizations, to create business partnerships between them and to enrich their commercial or social activities,
• To evaluate new products and services developed and to determine and implement our company's commercial or business strategies,
• In order to increase the data, performance level and employee satisfaction of our employees, to determine training and career plans or to ensure occupational safety,
• In addition to these, for purposes such as conducting our required quality and standard audits or fulfilling our reporting and other obligations determined by laws and regulations,
• In addition, within the scope of the requirements and obligations determined to ensure the fulfillment of legal obligations specified in the KVKK, as required or obliged by regulatory and supervisory institutions and legal regulations.



3. To whom and for what purpose the processed personal data may be transferred,

   Your personal data processed for the above purposes and within the conditions determined by the KVKK;

• In order to fulfill and ensure the continuity of commercial activities, our company may transfer our shares to business partnerships or subsidiaries,
• To our suppliers on a limited basis in order to provide outsourced products and services,
• To audit firms within the scope of relevant contracts for the audit of our commercial activities in accordance with the provisions of the relevant legislation,
• To our shareholders for the limited purpose of designing strategies regarding the commercial activities of our Company,
• To legally authorized public institutions and organizations within the scope of their requests within the legal authority of the relevant public institutions and organizations,
• To institutions and organizations designated to ensure the fulfillment of legal obligations specified in the KVKK,

4. may be transferred with your explicit consent or within the framework of the conditions determined by law.

5. The method and legal reason for collecting personal data,

   Your personal data is collected with your explicit consent by our company or real or legal persons who process data on behalf of our company; through verbal, written or electronic channels, including but not limited to the website, various contracts, all kinds of interest information forms, surveys, job application forms, employment contracts, social media applications, call centers and those listed here.

   This information is obtained in order to present our commercial and administrative activities within the framework of the laws regulating business and social life, and in this context, to ensure that our company can continue its commercial life and fulfill its legal obligations completely and accurately.

6. Rights of the Data Subject,

   Within the scope of KVKK, you have the following rights regarding your personal data:

• Learn whether personal data is being processed,
• Request information if their personal data has been processed,
• To learn the purpose of processing personal data and whether they are used for their intended purpose,
• To know the third parties to whom personal data are transferred domestically or abroad,
• To request correction of personal data in case of incomplete or incorrect processing,
• In case the reasons requiring the processing of your personal data disappear, to request the deletion or destruction of the data,
• To request notification of your information corrected or deleted upon your request to third parties to whom personal data has been transferred, if transferred,
• To object to the emergence of a result to the detriment of the person himself/herself by analyzing the processed data exclusively through automated systems,
• In case of damage due to unlawful processing of personal data, to demand compensation for the damage.

In order to exercise your rights mentioned above, you may send your written request together with the necessary information identifying your identity and your explanations regarding the right you wish to exercise to “Maslak Mah. Büyükdere Cad. Nurol Plaza Site No: 255 Interior Door No: 1706 Sarıyer / Istanbul” with a wet signature or to our registered e-mail address ‘25959-88732-31158’ signed with a secure electronic signature.

In the application containing your explanations regarding the right you have as a personal data owner and that you will make in order to exercise your rights mentioned above and that you request to exercise; the matter you request must be clear and understandable, the subject you request must be related to your person or if you are acting on behalf of someone else, you must be specifically authorized in this regard and document your authority, the application must contain identity and address information and documents certifying your identity must be attached to the application.

Your applications within this scope will be finalized as soon as possible and within 30 days at most. These applications are currently free of charge. However, if the transaction requires an additional cost, the fee in the tariff determined by the Personal Data Protection Board may be charged.