This Privacy Policy (“Policy”), SOCAR Türkiye Enerji A.Ş. (“SOCAR Türkiye”) determines the rules regarding the personal data processed by SOCAR Türkiye during the use of the site named http://www.SOCAR.com.tr (“Website”), which is made available and operated. The purpose of the Policy is to ensure that the personal data of the Data Owners (whose personal data are processed during the use of the Website, hereinafter referred to as the "Data Owner") are processed in accordance with the Law on the Protection of Personal Data No. 6698 and other relevant legislation.

Use of the Website means that this Policy has been read, understood and accepted. If you do not accept the rules set forth in this Policy, immediately terminate the use of the Website.

In case of linking to third party websites or applications or similar elements through the website, the websites, applications or similar items accessed as a result of the use of the said link are outside the scope of this Policy. In such cases, the privacy policy of the relevant website, application or similar element may find application area.

Data that do not constitute personal data and anonymized data are outside the scope of this Policy.

Changing the Policy

SOCAR Türkiye reserves the right to change the Policy whenever it wishes. The new version of the Policy will enter into force, unless otherwise stated, at the time the amended policy is published on the Website or at the time of informing the Data Owners via other communication methods.

Who is the Data Controller for the Processing of Your Personal Data?

In terms of the processing of your personal data, within the scope of the Law on Protection of Personal Data No. 6698, the data controller is SOCAR Plaza, Vadistanbul Bulvar, Ayazağa Mah. Cendere Cad. No: 109-E, 1D Blok, 34485, Sarıyer / Istanbul, SOCAR Türkiye Enerji A.Ş.

• Compliance with the law and the rules of honesty,
• Being accurate and up-to-date when necessary,
• Processing for specific, explicit and legitimate purposes,
• Being connected, limited and restrained with the purpose for which they are processed,
• To be kept for the period required by the relevant legislation or for the purpose for which they are processed.

Our Basic Principles Regarding the Processing of Your Personal Data

We act in accordance with the following principles when processing your personal data:

• Compliance with the law and the rules of honesty,
• Being accurate and up-to-date when necessary,
• Processing for specific, explicit and legitimate purposes,
• Being connected, limited and restrained with the purpose for which they are processed,
• To be kept for the period required by the relevant legislation or for the purpose for which they are processed.

Which Personal Data of Yours Are Processed?

The following personal data are collected and processed by SOCAR Türkiye within the scope of this Policy:

• Your name and your surname,
• E-Mail Address,
• Your request/suggestion/complaint sent to SOCAR Türkiye via the contact form,
• your IP address,
• Your CV information that you have submitted through the Human Resources section.

What are the Collection Methods and Purposes of Processing Your Personal Data?

Your personal data is collected by SOCAR Türkiye through Cookies during your use of the Website or by filling in the relevant fields as Data Owners.

SOCAR Türkiye may use your personal data to evaluate, analyze and respond to your requests/suggestions/complaints. In addition, your collected personal data may be processed for the purposes of SOCAR Türkiye to fulfill its legal obligations, to determine usage habits for Data Owners, to carry out marketing and sales activities, to manage human resources, to develop and improve the Website, and to correct software-related errors.

With Whom Is Your Personal Data Shared?

SOCAR Türkiye, your personal data within the scope of this Policy and your new personal data obtained by processing them, with third parties (including cloud computing service providers) and other SOCAR Türkiye companies from which it receives support or service in order to realize the data processing purposes specified in the relevant section. will be able to share to provide.

In addition, your personal data may be shared with third parties for the purpose of improving and developing the Website and eliminating software-related errors. Finally, your personal data may also be shared with judicial and administrative authorities or institutions and organizations that make a request in accordance with the rules of law.

Your personal data may be stored on servers located in various countries.

Storage of Your Personal Data

Your personal data will be stored for as long as required by the purposes of processing your personal data described in the relevant section above or for legally required periods.

Information on the Measures Taken for the Security of Your Personal Data

In order to ensure that your personal data is not processed unlawfully, that your personal data is not illegally accessed, and that your personal data is stored securely, SOCAR Türkiye undertakes to take all necessary technical and administrative measures and to carry out the necessary audit work to ensure the appropriate level of security.

Your personal data will not be processed by SOCAR Türkiye in violation of the rules set forth in this Policy and the Law on Protection of Personal Data No. 6698 and will not be shared with third parties.

Warning Regarding Personal Data of Persons Under 13

What Rights Do You Have Regarding Your Personal Data?

You can exercise the following rights regarding the processing of your personal data with a request you make to SOCAR Türkiye:

• Learning whether your personal data is processed,
• If your personal data has been processed, requesting information about it,
• To learn the purpose of processing your personal data and whether your personal data is used in accordance with the purpose of processing,
• Knowing the third parties to whom your personal data is transferred, in the country or abroad,
• Requesting correction of your personal data if it is incomplete or incorrectly processed,
• Requesting the deletion or destruction of your personal data within the framework of the conditions stipulated in the relevant legislation,
• Request notification of the correction, deletion and destruction of your personal data to third parties in accordance with the relevant legislation,
• Objecting to the emergence of a result against you by analyzing your processed personal data exclusively through automated systems,
• In case you suffer damage due to unlawful processing of your personal data, requesting the compensation of the damage.

Your requests to exercise your rights regarding your personal data will be finalized by notifying you within thirty (30) days at the latest.

As the Data Owner, you can update your personal data within the scope of this Policy if there is any change in such personal data. Otherwise, SOCAR Türkiye will not bear any responsibility.

If you make requests to prevent the use of your personal data by SOCAR Türkiye, you may not be able to benefit from all or some of the functions of the Website. Communication

You can contact SOCAR Türkiye to convey your questions regarding this Policy and to exercise your rights regarding your personal data. However, communications made without using legal means and without complying with the form and content conditions stipulated by the relevant law may not be taken into account by SOCAR Türkiye.