Protection of Personal Data

GFLIGHT SIMULATOR TECHNOLOGY SOFTWARE HARDWARE TRADE LTD.CO.

WEBSITE INFORMATION TEXT

Protecting the privacy of visitors to the websites operated by Gflight Simulator Technology Software Hardware Trade Ltd. ("Gflight Simulator" or "Company") is one of the leading principles of our Company.

In this Disclosure Text, the principles regarding the processing of your personal data in accordance with the Personal Data Protection Law No. 6698 ("Law") and relevant legislation, by the data controller Company located at the address "Nişantepe Mh. 29 Ekim Cd. No:29/19 İç Kapı No:16 Çekmeköy/İstanbul" are stated below.

1. Purpose of Processing Personal Data

Your personal data obtained through your visit to our website may be processed by our Company in accordance with Articles 5 and 6 of the Personal Data Protection Law for the purposes listed below:

• - Ensuring that information is received, requests/suggestions are evaluated and complaints can be made in case a request is made by the relevant person through the communication portal,

• - Planning and carrying out the activities required to recommend and introduce the services offered by the Company to the relevant people by customizing them according to their tastes, usage habits and needs,

• - Carrying out the necessary work by our relevant business units and carrying out the related business processes in order to carry out the commercial activities carried out by the Company,

• - Planning and execution of the Company's commercial and/or business strategies,

• - Included in the customer relations system to provide you with better service,

• - If you give your explicit consent, we can send you commercial electronic messages and you can benefit from our e-bulletin services,

• - Ensuring the legal, technical and commercial-occupational security of the Company and the relevant persons who have business relations with the Company.

Places to Which Processed Personal Data Are Transferred and Purpose of Transfer

Your personal data obtained may be transferred to our business partners (outsource service providers, hosting service providers), our company affiliates, and legally authorized public institutions and private individuals in accordance with the personal data processing conditions and purposes specified in Articles 8 and 9 of the Personal Data Protection Law, in line with the purposes for which they are processed. Your personal data will be transferred to Gflight Simulator if you provide your explicit consent to receive commercial electronic messages.

Method and Legal Reason for Collection of Personal Data

Your personal data is processed by our Company through cookies, which are technical communication files, when you visit our website, and as specified in this Information Text.

Your personal data is collected automatically through the forms you fill out for the purposes specified. For detailed information about cookies, please review our Cookie Policy. Personal data collected outside of cookies is collected non-automatically by filling in forms on the website.

Your personal data is processed in accordance with the following legal grounds:

• - In accordance with Article 5/2 (f) of the KVKK, data processing is necessary for the Company's legitimate interests, provided that it does not harm your fundamental rights and freedoms.

• - Data processing is mandatory for the establishment and execution of a contract in accordance with Article 5/2 (c) of the KVKK,

• - If you give your consent in accordance with Article 5/1 of the KVKK, we will obtain your explicit consent for sending you commercial electronic messages and for the processing of your non-mandatory cookies.

1. Ways to Apply to the Data Controller and Your Rights

Pursuant to Article 11 of the Law, by contacting our Company, you have the right to: a) learn whether your personal data has been processed, b) request information if processed, c) learn the purpose of processing and whether it is being used in accordance with its purpose, d) learn the parties to whom it has been transferred domestically or internationally, e) request correction if processed incompletely or incorrectly, f) request deletion/destruction under the conditions stipulated in Article 7 of the Law, g) request notification of the actions taken pursuant to subparagraphs (e) and (f) above to third parties to whom it has been transferred, h) object to any adverse outcome arising from analysis of your personal data exclusively by automated systems, and i) request compensation for any damages you incur due to unlawful processing. You can also unsubscribe from our e-bulletin list free of charge by clicking the link in the e-mail.

You can submit your requests for information and applications regarding your rights specified above to our Company in accordance with the Communiqué on the Procedures and Principles for Applications to the Data Controller. You can send your applications to "Nişantepe Mh. 29 Ekim Cd. No:29/19 İç Kapı No:16 Çekmeköy/İstanbul" by using your registered electronic mail (KEP) address and secure electronic signature or mobile signature. Sending to our registered e-mail address gflightsimulator@hs01.kep.tr and from the e-mail address previously notified to Gflight Simulator Technology Software Hardware Trade Ltd. ("Gflight Simulator") by the relevant Person and registered in our system. info@gflight.com.tr You can also direct us to our address by sending methods.

Our company will process your requests as quickly as possible, depending on the nature of the request, and within thirty days at the latest. The first request is free of charge. However, a fee may be charged for subsequent requests regarding the same issue or if the initial request requires additional costs. Our company may accept and process the request or reject the request in writing, explaining the reason.

If the application submitted following the procedure outlined above is rejected, the response is deemed insufficient, or the application is not responded to within the timeframe, the applicant has the right to file a complaint with the Personal Data Protection Board ("Board") within thirty days following notification of the response, or in any case, within sixty days from the application date. However, a complaint cannot be filed before exhausting the avenue of appeal.

The Board, upon receiving a complaint or upon learning of an alleged violation, conducts the necessary investigation within its scope of responsibility. Upon receiving a complaint, the Board reviews the request and provides a response to the relevant parties. If no response is received within sixty days of the date of the complaint, the request is deemed rejected. If, as a result of the complaint or upon its own initiative, a violation is determined, the Board decides that the data controller must remedy any unlawful violations it has identified and notifies the relevant parties. This decision shall be implemented without delay and within thirty days of notification. The Board may decide to suspend data processing or transfer abroad if irreparable or impossible damages arise or if there is a clear unlawful violation.

We would like to state that your data is protected with utmost care by our Company; we thank you for your trust in us.