NART INSURANCE AND REINSURANCE BROKERAGE INC.

VISITOR PRIVACY NOTICE UNDER THE LAW ON THE PROTECTION OF PERSONAL DATA

We, NART Insurance and Reinsurance Brokerage Inc. (“NART” or the “Company”), understand the importance of your personal data. In carrying out our activities, we consider your personal data as entrusted to us and, with the responsibility of a “Trustee,” we take all necessary administrative and technical measures to protect your personal data against any unlawful processing activities, ensuring their security and confidentiality.

This Privacy Notice has been prepared by NART as the data controller under Article 10 of the Law on the Protection of Personal Data No. 6698 to inform and enlighten you about the personal data you may share with us during your visit to our company for purposes such as the promotion and procurement of NART products and services, business partnerships, interviews, and other meetings, as well as participation in company meetings and events.

With this Privacy Notice, we aim to inform you about NART’s identity (Article 10.a of the Law), the purposes for which your personal data may be processed (Article 10.b), the recipients and purposes of the data transfer (Article 10.c), the methods and legal grounds for data collection (Article 10.ç), and your rights (Article 10.d) regarding the personal data you may share with us.

1. Identity of the Data Controller (Article 10.a)

Your personal data will be processed, stored, and protected by NART Insurance and Reinsurance Brokerage Inc. as the data controller.

2. Purpose of Processing Your Personal Data (Article 10.b)

During your visit to our premises for the purposes of the promotion and procurement of products and services, business partnerships, interviews, and other meetings, or participation in company meetings and events, the following personal data may be processed by NART in accordance with the personal data processing conditions specified in Articles 5 and 6 of the Law: name, surname, institution/company title of the visitor, name, surname, and title of the person to be visited, and visit times.

Your collected personal data will be processed by NART for purposes such as tracking visitors, preparing appropriate meeting spaces, conducting other organizational tasks, informing the relevant persons about the visit, ensuring the security of the building, employees, visitors, and assets within the premises, controlling building traffic based on entry and exit times, managing occupational health and safety processes, taking measures in case of emergencies, recording and delivering shipments made through courier and other channels, identifying and obtaining evidence in case of potential legal violations, and ensuring the execution of our company’s legal and commercial policies.

3. Transfer and Purpose of Transferring Your Personal Data (Article 10.c)

The personal data you share with us may be transferred to company officials, shareholders, our independent service providers who work with us under confidentiality agreements, our suppliers, service providers, business partners, consultants, and other solution partners, as well as, if necessary, relevant third parties, public institutions and authorities, and judicial bodies, such as the General Directorate of Security, for purposes such as controlling building traffic and visitor tracking, managing occupational health and safety processes, ensuring physical security, recording delivery processes, obtaining necessary products and services, identifying potential legal violations, and providing evidence.

4. Method and Legal Grounds for Collecting Personal Data (Article 10.ç)

The personal data you share with us is processed by our company through the visitor logbook maintained physically by our reception and/or security staff at the building entrance, in whole or in part, non-automatically, based on the legal grounds specified in Article 5 of the Law, such as “the necessity for compliance with a legal obligation to which the data controller is subject,” “the necessity for processing to protect the legitimate interests of the data controller, provided that such processing does not harm the fundamental rights and freedoms of the data subject,” “it is explicitly prescribed by laws,” and “the necessity for the establishment, exercise, or defense of legal claims.”

5. Your Legal Rights (Article 10.d)

Your rights under Article 11 of the Law on the Protection of Personal Data include:

a) To learn whether your personal data is being processed; b) To request information if your personal data has been processed; c) To learn the purpose of processing your personal data and whether they are being used in accordance with that purpose; ç) To know the third parties to whom your personal data is transferred, domestically or internationally; d) To request the correction of your personal data if it is incomplete or inaccurate; e) To request the deletion or destruction of your personal data under the conditions set forth in Article 7 of the Law; f) To request notification of the actions taken regarding the correction, deletion, or destruction of your personal data to third parties to whom your data has been transferred; g) To object to any unfavorable outcome resulting from the automated processing of your personal data; ğ) To seek compensation for damages resulting from the unlawful processing of your personal data.

You can submit your requests regarding your rights to NART Insurance and Reinsurance Brokerage Inc. by following the procedures and principles outlined in the Communiqué on the Procedures and Principles of Application to the Data Controller. You may also use the KVKK Request Form, which we have prepared for you and is available on our website.

This Privacy Notice may be updated as necessary to ensure compliance with legal obligations and to protect the rights and privacy of individuals. Any updates will be communicated to you via email and/or announced on our website.