Clarification Text On The Processing Of Visitor Personal Data

1. Data Controller

Vodatech Çağrı Merkezi Anonim Şirketi (“Company”), in its capacity as the data controller pursuant to Article 10 of the Law No. 6698 on the Protection of Personal Data (“KVKK”), processes the personal data of visitors within the framework of the principles stated below.

Address: Helis Gold Ofis Yeşilbağlar Mah. Dumanlar Sk. No:1 Kat:10 34893 Pendik/Istanbul

Phone / E-mail: +90 216 578 6565 / kvkk@vodatech.com.tr

2. Processed Personal Data, Purposes, and Legal Grounds

Your personal data processed within the scope of your visit and the grounds for processing are as follows:

Data Category	Processed Data	Processing Purpose	Legal Ground
Identity	Name, surname, T.C. ID number, signature	Visitor authentication, access authorization	Art. 5/2-ç, 5/2-f
Communication	Mobile phone number	Emergency communication, visit confirmation	Art. 5/2-f
Physical Space Security	Entry-exit date and time, location, reason for visit, temporary card no, CCTV images	Physical security, visitor registration, preventing unauthorized access	Art. 5/2-ç, 5/2-f, 5/2-e
Professional / Company	Name of the employer company/institution, name of the visited personnel	Creation and tracking of visitor records	Art. 5/2-f
Employee / Visitor Status	Status information of the person entering	Access authorization management	Art. 5/2-ç, 5/2-f

3. Retention Periods and Disposal

CCTV recordings: 45 days
Visitor records: 2 years (10 years within the scope of the Turkish Commercial Code when necessary)
Temporary card records: Until the return of the card; log records for 2 years

At the end of these periods, the data is deleted, destroyed, or anonymized in accordance with Article 7 of the KVKK and the provisions of the relevant regulation.

4. Transfer of Personal Data

Your personal data is transferred only to authorized public institutions and law enforcement forces within the scope of legal obligations, to technical service providers (limited to CCTV data), and to consultants in legal processes. As a rule, no data transfer is made abroad.

5. Your Rights and Application Method (KVKK Art. 11)

Within the scope of KVKK, you have the right to receive information regarding your personal data, to request correction, deletion, or destruction, to object to processing, and to demand compensation for damages. You may submit your requests to Helis Gold Ofis Yeşilbağlar Mah. Dumanlar Sk. No:1 Kat:10 34893 Pendik/Istanbul in person, via the kvkk@vodatech.com.tr e-mail address, or through a notary public. Your applications will be finalized within 30 days at the latest; your right to complain to the Board is reserved if legal conditions are met.