BAB TEKNOLOJİ PERSONAL DATA PROTECTION LAW (KVKK) PRIVACY NOTICE

1. Identity of the Data Controller

Pursuant to the Turkish Personal Data Protection Law No. 6698 (“KVKK”), your personal data shared through the babteknoloji.com website may be processed within the scope explained below by BAB Teknoloji Bilişim Elektrik İnşaat Sanayi ve Ticaret Ltd. Şti. (the “Company”), acting as the data controller.

2. Personal Data Processed and Purposes of Processing

The following personal data is collected through the application forms available on our website:

• Identity and Contact Information: First name, surname, date of birth, telephone number, e-mail address, and city of residence.

• Educational Information: School, department/program, grade point average, and achievement/ranking information contained in student certificates, transcripts, and YKS placement result documents.

• Financial Information: Documents demonstrating household income, including salary slips of the student or family members, income statements, and similar documents.

• Special Categories of Personal Data (Criminal Convictions and Security Measures): Criminal record certificates requested for the purpose of assessing the criminal background of scholarship candidates and determining their compliance with the scholarship program criteria, including the requirement of having no criminal record.

Such data is processed for the purposes of receiving scholarship applications, evaluating candidates’ educational status, financial circumstances and criminal record eligibility, conducting the scholarship selection process fairly, and communicating with students who are awarded scholarships.

The applicant is responsible for ensuring the lawful sharing with our Company of personal data relating to family members contained in household income documents.

3. Transfer of Personal Data

Your personal data may be transferred, subject to the conditions stipulated under Articles 8 and 9 of the KVKK, to internal Company evaluation committees for the purpose of conducting scholarship assessment processes, to legally authorized public institutions and authorities for the fulfillment of our legal obligations, and to technology service providers from whom support is obtained for the website infrastructure and data security.

4. Method and Legal Grounds for the Collection of Personal Data

Your personal data is collected electronically through the Scholarship Application Form available on the babteknoloji.com website by means of candidates entering their information and uploading the relevant documents to the system.

Such personal data is processed pursuant to the legal grounds set forth in Article 5 of the KVKK, namely:

• processing being necessary for the legitimate interests of the data controller, provided that the fundamental rights and freedoms of the data subject are not harmed; and

• processing being necessary for the establishment, exercise, or protection of a right.

Special categories of personal data, such as criminal record information relating to criminal convictions and security measures, as well as detailed financial information, are processed solely on the legal basis of explicit consent within the scope of Article 6 of the KVKK.

5. Rights of the Data Subject

Pursuant to Article 11 of the KVKK, everyone has the right to apply to our Company regarding their personal data and:

a) learn whether their personal data is being processed,

b) request information if their personal data has been processed,

c) learn the purpose of processing their personal data and whether such data is being used in accordance with its intended purpose,

ç) know the third parties to whom their personal data has been transferred domestically or abroad,

d) request the correction of personal data if it has been processed incompletely or inaccurately,

e) request the deletion or destruction of personal data under the conditions stipulated in Article 7 of the KVKK,

f) request that the actions carried out pursuant to subparagraphs (d) and (e) be notified to third parties to whom the personal data has been transferred,

g) object to any adverse consequence arising against the data subject as a result of the analysis of processed personal data exclusively through automated systems,

ğ) request compensation for damages suffered as a result of the unlawful processing of personal data.

You may submit your requests in writing and with a wet signature, either in person or through a notary public, to the following address:

Yenişehir Mah. Mustafa Akyol Sok. MVK Square, A1 Blok Kat: 5 Daire: 162, Pendik/İstanbul

Alternatively, you may send your request to:

info@babteknoloji.com

Your request will be concluded free of charge within 30 days at the latest.