POLICY ON THE PROTECTION AND PROCESSING OF PERSONAL DATA

1. PURPOSE AND SCOPE
In each of our businesses within the scope of Happy Citizenship, maximum sensitivity is shown to the security of personal data. With this awareness, we attach great importance to the processing, recording, transfer, sharing and storage of all kinds of personal data belonging to all persons related to our Companies, including those who benefit from our products and services, in accordance with the Personal Data Protection Law No. In line with the importance Happy Citizenship attaches to the protection of personal data, the Happy Citizenship KVK Policy and the basic principles regarding the compliance of the activities carried out by Happy Citizenship with the regulations in the "KVK Law" are determined. With the implementation of Happy Citizenship KVK Policy regulations, the data security principles adopted by Happy Citizenship will be made sustainable. Happy Citizenship KVK Policy is for natural persons and Happy Citizenship employees, whose personal data is processed by Happy Citizenship by automatic or non-automatic means, provided that they are part of any data system.

2. TARGET
With the Happy Citizenship KVK Policy, it is aimed to establish the necessary systems and to establish the necessary order to ensure compliance with the legislation in line with the goal of raising awareness about the legal processing and protection of personal data within Happy Citizenship. In this context, the Happy Citizenship KVK Policy aims to guide the implementation of the regulations set forth by the KVK Law and the relevant legislation.

3. DEFINITIONS
The definitions that are important and used in the Happy Citizenship KVK Policy are as follows: Explicit Consent: Consent on a specific subject, based on information and expressed with free will. Anonymization: Making personal data incapable of being associated with an identified or identifiable natural person in any way, even by matching it with other data. Communiqué on the Procedures and Principles to be Complied with in Fulfilling the Lighting Obligation: Communiqué on the Procedures and Principles to be Complied with in Fulfilling the Lighting Obligation, which was published in the Official Gazette dated 10 March 2018 and numbered 30356. Employee(s) Happy Citizenship employee(s). Customer(s)(s) benefiting from Happy Citizenship services.

Regulation on the Processing of Personal Health Data: Regulation on the Processing of Personal Health Data and Ensuring Privacy, published in the Official Gazette dated 20 October 2016 and numbered 29863.
Personal Health Data: All kinds of information about the physical and mental health of an identified or identifiable natural person, and information about the health service provided to the person.
Personal Data: Any information relating to an identified or identifiable natural person.
Personal Data Owner: The real person whose personal data is processed. E.g; customers and employees.
Personal Data Protection Unit: The unit that will provide the necessary coordination within the Company within the scope of ensuring, maintaining and maintaining compliance with the personal data protection legislation by Happy Citizenship.
Processing of Personal Data: Obtaining, recording, storing, preserving, changing, rearranging, disclosing, transferring, taking over, making available personal data by fully or partially automatic or non-automatic means provided that it is a part of any data recording system, All kinds of operations performed on data such as classification or prevention of use.

KVK Law: Law No. 6698, dated March 24, 2016, published in the Official Gazette dated 7 April 2016 and numbered 29677.
KVK Board: Personal Data Protection Board.
KVK Authority: Personal Data Protection Authority.
KVK Compliance Program: A program to ensure compliance with the legislation on the protection of personal data, put into effect by Happy Citizenship.
Special Quality Personal Data: Data related to race, ethnicity, political opinion, philosophical belief, religion, sect or other beliefs, dress, association, foundation or union membership, health, sexual life, criminal conviction and security measures, and biometric and genetic data .
Happy Citizenship: All companies included in Happy Citizenship.
Happy Citizenship Business Partners: Parties with whom Happy Citizenship has business partnerships for various purposes while carrying out its commercial activities.
Happy Citizenship Personal Data Retention and Disposal Policy: Pursuant to the Regulation on the Deletion, Destruction, Anonymization of Personal Data, the basis for the deletion, destruction and anonymization of personal data by determining the maximum period required for the purpose for which personal data is processed. “Happy Citizenship Personal Data Retention and Disposal Policy”.
Happy Citizenship Suppliers Parties that provide services to Happy Citizenship on a contract basis.
Happy Citizenship Data Owner Application Form: The application form that data owners will use when using their applications regarding their rights in Article 11 of the KVK Law.
Data Processor: The natural and legal person who processes personal data on behalf of the data controller, based on the authority given by the data controller.
Data Controller: The person who determines the purposes and means of processing personal data and manages the place where the data is kept systematically.
Data Controllers Registry: The Data Controllers Registry, which is open to the public and kept under the supervision of the Personal Data Protection Authority, under the supervision of the KVK Board.
Communiqué on Procedures and Principles of Application to Data Controller: Communiqué on Procedures and Principles for Application to Data Controller, which came into force after being published in the Official Gazette dated 10 March 2018 and numbered 30356.