NOTICE ON THE PROCESSING OF PERSONAL DATA (KVKK PRIVACY NOTICE)

1. Data Controller. Under Law No. 6698 on the Protection of Personal Data ("KVKK"), your personal data is processed by Otol Models (MERSİS: 0292122621100001, Address: Atakent, Küçükçekmece / İstanbul 34307, E-mail: info@iranianturkey.org) (the "Company"), as data controller, in connection with the "Iranian Istanbul" platform consisting of https://iranianistanbul.com and its sub-pages (the "Platform"), as described below.

2. Categories of Personal Data Processed. Identity (name, surname, Turkish ID / foreigner ID / passport number – only for invoicing and payment), contact (e-mail, phone, address), customer transaction (order, payment and invoice details; your card details are never seen or stored by the Company – only a masked card number and payment references are kept), professional/commercial information (listing content, profession, title, business details), visual (profile/logo photo), transaction security (IP address, log records, device/browser information), marketing (contact preferences, only if you have given explicit consent), legal transaction (request and complaint records).

3. Purposes of Processing. Providing membership and listing services; selling premium listings and advertising space and concluding and performing the contract; carrying out payments through a payment institution; issuing invoices and fulfilling accounting/tax obligations; service-related notifications including renewal reminders; managing requests and complaints; information security, fraud prevention and keeping log records (including under Law No. 5651); responding to requests from competent authorities; and, where you have given explicit consent, sending commercial electronic messages and using analytics/marketing cookies.

4. Legal Grounds and Method of Collection. Your personal data is collected electronically through the forms on the Platform, the account panel, the payment page, e-mail and cookies, on the legal grounds in KVKK art. 5/2 – (c) establishment/performance of a contract, (ç) legal obligation (VUK, 6502, 6563, 5651), (e) establishment/protection of a right, (f) legitimate interest – and, for commercial messages and non-essential cookies, on your explicit consent under art. 5/1.

5. Transfers. Limited to the purposes above, your personal data may be shared with: the payment service provider iyzi Ödeme ve Elektronik Para Hizmetleri A.Ş. (iyzico) and banks; our e-invoice/e-archive private integrator Luca e-Arşiv and the Revenue Administration (GİB); our hosting and e-mail service providers; our financial advisers and legal counsel; and competent public authorities. Where our service providers' servers are located abroad, the transfer is based on one of the mechanisms provided for in KVKK art. 9 (e.g. a standard contract notified to the Board). Listing information that you ask us to publish on the Platform (name/title, profession, contact details, address, photo) can be viewed by anyone on the internet.

6. Your Rights. Under KVKK art. 11 you have the right to: learn whether your personal data is processed; request information if it is; learn the purpose of processing and whether it is used in line with that purpose; know the third parties in Turkey or abroad to whom it is transferred; request correction if it is incomplete or inaccurate; request erasure/destruction under the conditions of KVKK art. 7 and notification of these actions to the third parties to whom the data was transferred; object to a result to your detriment arising from analysis exclusively by automated systems; and claim compensation if you suffer damage due to unlawful processing.

7. How to Apply. You may send your requests in Turkish in writing to Atakent, Küçükçekmece / İstanbul 34307 or from the e-mail address registered with us to info@iranianturkey.org. Requests are concluded free of charge within 30 days at the latest (if the action requires an additional cost, the Board's tariff may apply).