Personal Data Protection and Processing Disclosure Text (PDPL)

1. Data Controller, Data Subject

Citys Real Estate Development Inc. ("Data Controller") holds the title of Data Controller within the scope of Law No. 6698 on the Protection of Personal Data ("PDPL"), and you, as a natural person, are accepted and defined as the Data Subject. We would like to inform you, as the Data Subject, regarding the processing of your Personal Data specified below, that we process them as the Data Controller in compliance with the general principles set forth in Article 4 of the PDPL, that we attach importance to the security of personal data belonging to the Data Subject, and that we have an obligation to inform pursuant to Article 10 of the PDPL.

2. Processed Personal Data, Processing Purposes, Legal Bases, Transfer and Collection

The responsibility for obtaining the Explicit Consent of References for the transfer of data to your References for the purpose of confirming Personal Data belongs to you. In addition, we do not accept any legal liability as the Data Controller in case Personal Data belonging to your References are obtained unlawfully.

2.1 Processed Personal Data:

• Identity: Name Surname – Date of Birth – Gender
• Contact: Address – Phone – E-Mail
• Professional Experience: Company Worked – Title
• Customer Transaction: Reference Information

2.2. Processing Purposes of Your Personal Data

Your collected personal data may be processed by the Company for the matters below in compliance with the personal data processing conditions specified in Articles 5 and 6 of the Law, primarily for the fulfillment of the obligations of the Company and the real and legal persons in business relations with the Company, making notifications regarding updates, establishment and fulfillment of contracts to be made with you, carrying out various advertising and marketing activities, obtaining your opinion through surveys and polls, determining products, projects and services suitable for you, customizing and developing them, providing effective customer service, carrying out necessary work to enable you to benefit from products and services offered by our Company and conducting related business processes:

• Realization of price quotation processes and collection of payments.
• Ensuring the legal, technical and commercial-business security of the Company and relevant persons in business relations with the Company,
• Fulfillment of official institution requests and providing information to authorized organizations arising from legislation,
• Ensuring compliance with storage obligations foreseen in legislation,
• Responding to data subject applications in accordance with legislation and carrying out necessary procedures,
• Storage of data for the purpose of constituting evidence in possible disputes,
• Ensuring the security of Company premises and/or facilities,
• Tracking and management of customer requests and complaints,
• Conducting customer satisfaction studies,
• Tracking and conducting legal affairs,
• Conducting audit / ethics activities,
• Conducting operational activities.

2.3. Personal Data Based on Explicit Consent

Your collected personal data may be processed with your explicit consent for marketing, analysis, customization, promotion and similar purposes.

2.4. Transfer of Processed Personal Data

Processed personal data may be transferred to certain persons and organizations provided that relevant legal conditions are complied with and security measures are taken.

2.5. Collection Method and Legal Basis

Your personal data may be collected physically and digitally through different channels and are processed based on the legal bases specified in Article 5 of the PDPL.

3. Destruction Policy

Processed personal data are stored for periods determined by legislation or reasonable periods, and are deleted, destroyed or anonymized when the period expires.

4. Your Rights as Data Subject

You have the following rights within the scope of PDPL:

• Learning whether personal data are processed,
• Requesting information if processed,
• Learning the processing purpose,
• Knowing third parties to whom data are transferred domestically/abroad,
• Requesting correction if processed incompletely/incorrectly,
• Requesting deletion/destruction if reasons requiring processing no longer exist,
• Objecting to analysis results through automated systems,
• Requesting compensation in case of damage.

You can submit your applications to www.citysresidences.com, info@citysresidences.com, citysgayrimenkul@hs02.Kep.tr or physically to "Teşvikiye Mah. Teşvikiye Cd. Nişantaşı City's No: 12 İç Kapı No: K.5 Şişli/ İstanbul". Applications must be in Turkish, identity information and relevant documents must be attached. Applications made by proxy must include a power of attorney.

This text is an integral part of the contract you have made with the Company. It may be updated in accordance with PDPL and board decisions.