<h2>About Us&nbsp;</h2><p>We deliver thousands of everyday items to wherever you wish, day and night, within minutes!<br><br>Minutes matter. We are here to make your lives easier. Thanks to our constantly widening product range, we bring thousands of everyday items like baby diapers, chocolate, chips, beverages, shaving cream, detergent, deodorant, cat &amp; dog food, batteries, and light bulbs to your location in minutes.<br><br>As Getir delivers the products you consume the most, GetirMore brings your weekly or monthly grocery shopping and GetirFood unites you with the food you are craving for, all within minutes. Also, our water brand Kuzeyden which we created just for you, is brought to you in 19 L size by GetirWater, day and night, including Sundays.<br><br>You don’t need to get out of your house to satisfy your needs. You don’t need to go to a convenience store, supermarket or restaurant. We are here.</p><h3>&nbsp;</h3><h3>CONTACT INFORMATION</h3><p>Address: Etiler Mah. Tanburi Ali Efendi Sok. Maya Residences Sit. T Blok No:13/334 Beşiktaş/İstanbul, Turkey 34337</p><p>Email: <a href="mailto:info@getir.com">info@getir.com</a></p><p>Customer Services: <a href="tel:08505325050">0850 532 50 50</a></p><p>Trade Name: Getir Perakende Lojistik A.Ş.</p><p>Mersis No: 0394048265800010</p><p>Trade Registry No: 969158-0</p><p>Tax Office/No: Beşiktaş/3940482658&nbsp;</p><p>Registered email (KEP Address): <a href="mailto:getir@hs01.kep.tr">getir@hs01.kep.tr</a></p>

<h2>Customer Personal Data Protection Policy</h2><p>Customer Personal Data Protection Policy (“Policy”) includes information about how Getir Perakende Lojistik A.Ş. (“Getir”) protect customers' personal data (any information that identifies or serves to identify a person), the rules we comply with when processing personal data and our processing processes of personal data.</p><p>In the first part of the Policy, we included technical rules such as the principles we comply with when processing personal data and the legal grounds we based on. In the second part, we include explanations about the processing processes of customers’ personal data.</p><p><a href="http://static.getir.com/kvkk_en.html">Click here</a> to access the privacy statement about the processing of customer personal data.</p><p>For explanations of the terms we use in the Policy, you may review the last part of this document.</p><p>For all your questions regarding the processing of your personal data, you may contact us at <a href="mailto:kisiselveriler@getir.com">kisiselveriler@getir.com</a>.</p><h4><a href="http://static.getir.com/protection_en.html#1.-rules-of-personal-data-processing">1. RULES OF PERSONAL DATA PROCESSING</a></h4><ul><li>Principles of Personal Data Processing</li><li>Legal Grounds for Personal Data Processing</li><li>Factors Considered When Asking for Explicit Consent</li><li>Personal Data Security</li><li>Rights of the Data Subjects</li></ul><h4><a href="http://static.getir.com/protection_en.html#2.-processes-of-personal-data-processing">2. PROCESSES OF PERSONAL DATA PROCESSING</a></h4><ul><li>Sample Processes of Data Processing and Descriptions</li><li>Processed Personal Data</li><li>Purposes of Personal Data Processing</li><li>Transfer of Personal Data</li><li>Use of Identification Technologies</li></ul><h2>1. RULES OF PERSONAL DATA PROCESSING</h2><h3>Principles of Personal Data Processing</h3><p>While processing your personal data, we ensure compliance with the data processing principles stated below.</p><ul><li><strong>Being in compliance with the law and good faith principle.</strong> → We conduct our data processing activities in accordance with the legislation and good faith principles.</li><li><strong>Being accurate and up-to-date when necessary.</strong> → We always keep channels open to ensure your personal data is accurate and up-to-date.</li><li><strong>Processing for specific, explicit and legitimate purposes.</strong> → We determine for what purposes the personal data will be processed and present these purposes in a transparent and understandable manner for your information.</li><li><strong>Being connected, limited and restrained with processing purposes.</strong> → We do not process personal data that are not related to processing purposes or needed, and we do not perform personal data processing activities to meet possible needs.</li><li><strong>Storing for the period required by the relevant legislation or for the purpose for which they are processed</strong>.→ If there is a period set forth in the legislation for the storage of personal data, we comply with this period; if such a period is not provided, we only store personal data for the time required for processing purposes.</li></ul><h3>Legal Grounds for Personal Data Processing</h3><p>We process your personal data based on the legal grounds specified in Articles 5 and 6 of <a href="https://www.mevzuat.gov.tr/MevzuatMetin/1.5.6698.pdf">the Law on the Protection of Personal Data</a>. We explicitly state these legal grounds in the privacy statements we provide them to the data subjects.</p><p>The legal grounds we based on when processing our customers' personal data are as follows:</p><ul><li>Personal data processing is necessary for <strong>the establishment or performance of a contract</strong> signed between you and Getir.</li><li>Processing personal data for the <strong>establishment, execution or protection of a right</strong>.</li><li>Processing personal data <strong>to fulfill our legal obligations</strong>.</li><li>Personal data processing is mandatory <strong>for our legitimate interests</strong>.</li><li><strong>Explicit consent of the data subject</strong> to process her/his personal data.</li></ul><p>While making this assessment, we perform <strong>balance tests by comparing the fundamental rights and freedoms of the person with the legitimate interest that will arise</strong>, based on the criteria specified in <a href="https://www.kvkk.gov.tr/Icerik/5434/2019-78">the Decision of the Board dated 25/03/2019 and numbered 2019/78</a>.</p><p>If there is at least one of the legal grounds specified in the Law so that personal data can be processed, we do not ask for explicit consent of the data subject. We only ask explicit consent in the absence of legal grounds stated in the Law.</p><h3>Factors Considered When Asking for Explicit Consent</h3><p>Explicit consent is described in the Law as "consent on a particular subject, based on the information and disclosed with free will". When asking the explicit consent of data subject, we consider the following three factors:</p><ol><li><strong>Being related to a particular subject </strong>→ We ask for the explicit consent of the data subject for specific data processing activity/activities and ensure that the consent letters are understandable.</li><li><strong>Information-based </strong>→ We present consent letters and privacy statements together/on the same channel; we support the data subject to understand the results of the data processing activity.</li><li><strong>Disclosure with free will </strong>→ While asking for their consent, we avoid misleading statements that may defect their will.</li></ol><h3>Personal Data Security</h3><p>We take the necessary technical and organizational measures to ensure the protection of your personal data. For example, we use detection and prevention softwares to detect and prevent potential cyber-attacks; we determine employees' access to personal data and use data loss prevention software.</p><h3>Rights of the Data Subjects</h3><p>Article 11 of <a href="https://www.mevzuat.gov.tr/MevzuatMetin/1.5.6698.pdf">the Law on the Protection of Personal Data</a> regulates the rights of the data subjects (natural persons whose personal data are processed). These rights are as follows:</p><ol><li>To learn whether Getir processes your personal data,</li><li>To request information if your personal data is processed,</li><li>To learn the purpose for processing your personal data and whether these are processed in accordance with intended purposes,</li><li>To learn whether your personal data has been transferred to third parties; if it is transferred, learning the third parties within the country or outside the country to which it is transferred,</li><li>In case your personal data is processed incompletely or inaccurately, to request rectification of these and to request the notification of the transactions made in this respect, if any, to third parties with whom we shared your personal data,</li><li>Despite the fact that we have processed your personal data in accordance with the Law and the relevant legislation, to request the deletion or destruction of your personal data in case where the grounds of processing is no longer present and to request the notification of the transactions made in this respect, if any, to third parties which we shared your personal data,</li><li>To object to occurrence of any unfavorable consequence for you by means of analysis of the processed personal data exclusively through automated systems,</li><li>If you incurred losses due to the unlawful processing of your personal data, to request the compensation of your loss.</li></ol><p>You can choose the methods below to exercise your rights and submit your requests to Getir:</p><ol><li>You may send your request to <a href="mailto:kisiselveriler@getir.com">kisiselveriler@getir.com</a> by using your e-mail address registered in our systems.</li><li>You may send your requests in written to Etiler Mah. Tanburi Ali Efendi Sok. Maya Residences Sit. T Blok No:13/334 Beşiktaş/İstanbul.</li><li>You may use the other methods stated in <a href="https://www.mevzuat.gov.tr/mevzuat?MevzuatNo=24455&amp;MevzuatTur=9&amp;MevzuatTertip=5">the Communiqué on the Application Procedure and Principles to the Data Controller</a>.</li></ol><h2>2. PROCESSES OF PERSONAL DATA PROCESSING</h2><p>In this part of the Policy, we included sample processes to better express how we process your personal data. In addition, we have specified topics such as which personal data Getir processes, and for what purposes this personal data processes.</p><figure class="table"><table><thead><tr><th>Process</th><th>Descriptions</th><th>Personal Data</th></tr></thead><tbody><tr><td><i>Account Registration</i></td><td>Performing mobile application membership/registration, verifying the identity and address of the user.</td><td>Name-surname, phone number, e-mail address, password information.</td></tr><tr><td><i>Order and Payment</i></td><td>Receiving the payment, confirming order and delivering your products as selected via the mobile application to your address.</td><td>Name-surname, address, order and payment information.</td></tr><tr><td><i>Mobile Application Notifications</i></td><td>Sending mobile application notifications about products you have purchased/interested in (you can change your notification preferences at any time in the "Communication Options" section of the application).</td><td>Personal data about your name, surname, preference, likes, interests and usage habits.</td></tr><tr><td><i>Request/Complaint Management</i></td><td>In case you send us your requests/comments/complaints about our products or delivery, following and concluding the request/complaint process.</td><td>Name-surname, request/complaint information.</td></tr><tr><td><i>Marketing Communication</i></td><td>Informing you about the most suitable products and opportunities for you in accordance with your communication preferences, examining your preferences, likes, interests, and usage habits.</td><td>Personal data about your name, surname, preference, likes, interests and usage habits.</td></tr></tbody></table></figure><h3>Processed Personal Data</h3><p>As part of the service we offer to our customers, we process your personal data listed below:</p><figure class="table"><table><thead><tr><th>Identity &amp;Contact</th><th>Finance</th><th>Customer Transaction</th><th>Location</th><th>Transaction Security</th></tr></thead><tbody><tr><td><i>Name-surname, customer ID, advertisement ID, gender, age, phone number, e-mail and address</i></td><td><i>Information regarding payments and payment methods</i></td><td><i>Shopping history, order information, number of orders, application usage information, invoice information, request/complaint information, comment, rating and review information</i></td><td><i>Your location information processed with permission granted at mobile application opening or via device settings</i></td><td><i>Device operating system and version, device type, device ID, hardware model, IP address, user transaction records, password information</i></td></tr></tbody></table></figure><p>In addition to this information, we process your personal data regarding your preferences, likes, interests and usage habits and your information obtained as a result of the analysis of your data mentioned above (for example, the most ordered products in the Getir mobile application).</p><h3>Collecting Methods of Personal Data</h3><p>We collect mobile application users' personal data via the Getir mobile application by automatic and partially automatic methods.</p><p>If you contact us through the following channels, we collect your personal data through these channels:</p><ul><li>When you call Getir Customer Service</li><li>When you fill out the contact form on our website,</li><li>When you reach us via Getir social media accounts.</li></ul><h3>Purposes of Personal Data Processing</h3><p>As Getir, we process your personal data within the country or outside the country for the following purposes:</p><ul><li>To conduct the signing up process to the mobile application</li><li>To communicate with our customers and manage relationships with our customers,</li><li>To conduct the processes of receiving orders and payments and delivering orders,</li><li>To offer the most suitable product options for your preferences, likes, interests, usage habits, and location; to inform you about the most suitable products and opportunities,</li><li>To conduct communication between Getir couriers, GetirFood restaurants, GetirLocals businesses and customers (your contact information is not shared with Getir couriers),</li><li>To perform analysis for improving our products and services,</li><li>To conduct activities for customer satisfaction,</li><li>To introduce the products and services offered by Getir; to conduct marketing activities,</li><li>To receive and evaluate feedback on the improvement of our products/services,</li><li>To follow up and conclude requests/complaints,</li><li>To conduct our activities in accordance with the legislation,</li><li>Review and audit of our business activities,</li><li>To prevent and detect security concerns, fraud and abuse of promos/discounts,</li><li>To conduct financial and accounting affairs related to payments.</li></ul><h3>Transfer of Personal Data</h3><p>We share your personal data with the following parties within the country or outside the country, for the following purposes:</p><figure class="table"><table><tbody><tr><th><i>Getir Distributors, Couriers, GetirFood Restaurants and GetirLocals Businesses</i></th><td>Conducting communication between distributors, couriers, restaurants, businesses and customers, conducting customer order transactions, informing the couriers about the address to which the order will be delivered.</td></tr><tr><th><i>Business Partners &amp; Suppliers</i></th><td>Getting support from suppliers related to the products and services offered by Getir to its customers, conducting financial and accounting processes, managing business partner and supplier relations.</td></tr><tr><th><i>Authorized Persons, Institutions or Organizations</i></th><td>Providing information to authorized persons, institutions, or organizations, fulfilling our legal obligations, conducting legal processes and conducting our activities in accordance with the legislation.</td></tr></tbody></table></figure><p>Please note that your comments and ratings may be published if deemed appropriate in accordance with our <a href="http://static.getir.com/terms_en.html">Terms &amp; Conditions</a>. Within the scope of your comments, we would like to express that your identity or contact information will not be published to protect your privacy.</p><h3>Use of Identification Technologies</h3><p>We use identification technologies that enable us to record user transactions and match the device information with the transactions performed in the application in order to ensure that users perform their mobile application experiences in the best way. For information about the use of identification technologies, you may review the <a href="http://static.getir.com/idtech_en.html">Information Regarding Identification Technologies</a>.</p><h3>Terms</h3><p>Descriptions of the terms we use in the Policy are as follows:</p><ul><li><strong>Data Subject</strong>: The natural person whose personal data is processed.</li><li><strong>Destruction</strong>: Deletion, destruction, or anonymization of personal data.</li><li><strong>Law</strong>: The Law on Protection of Personal Data numbered 6698, dated 24 March 2016.</li><li><strong>Personal Data Processing</strong>: Any operation performed on personal data such as collection, recording, storage, retention, alteration, re-organization, disclosure, transferring, taking over, making retrievable, classification or preventing the use thereof, fully or partially through automatic means or provided that the process is a part of any data registry system, through non-automatic means.</li><li><strong>Board</strong>: Personal Data Protection Board.</li><li><strong>Authority</strong>: Personal Data Protection Authority.</li><li><strong>Customer</strong>: Potential or existing customers that Getir offers products/services through its mobile application.</li><li><strong>Data Controller</strong>: Natural or legal person who determines who determines the purpose and means of processing personal data and is responsible for establishing and managing the data registry system.</li></ul><p><br><br>&nbsp;</p><p><i><strong>Last Update: 04/06/2021</strong></i></p>

<h2>Getir – Privacy Notice for Customers</h2><p>As Getir Perakende Lojistik A.Ş. (“<strong>Getir</strong>”), we take utmost care to process and protect the personal data of our customers, in accordance with the Personal Data Protection Law No. 6698 (“<strong>PDPL</strong>”), its secondary legislation and decisions of the Personal Data Protection Board. We have prepared this privacy notice (“<strong>Notice</strong>”) to inform you about how we process your personal data as a data controller through&nbsp;Getir mobile application (“<strong>Application</strong>”) managed by Getir.&nbsp;</p><p>Please review our <a href="http://static.getir.com/protection_tr.html">Personal Data Protection Policy</a> for further information about the measures we take to protect your personal data and the rules we comply with when processing your personal data.</p><h4>Your Personal Data Processed by Getir&nbsp;</h4><p>Your personal data we process within the scope of the services we provide to you, are as follows:</p><figure class="table"><table><tbody><tr><td><strong>Identity Information</strong></td><td>Full name</td></tr><tr><td><strong>Account Information</strong></td><td>Customer ID</td></tr><tr><td><strong>Contact Information</strong></td><td>The phone number that is registered to your Getir account, e-mail address, address</td></tr><tr><td><strong>Profile Picture</strong></td><td>The profile picture that you uploaded to the Application</td></tr><tr><td><strong>Payment Information</strong></td><td>Information about your payment methods and payment details</td></tr><tr><td><strong>Transactional Data</strong></td><td>Information about your orders, shopping/order history, number of orders, Application usage information, the domains you visit within the Application, your preferences, likes, interests and usage habits,&nbsp;advertisement ID,&nbsp;invoice details, requests/complaints, comments, ratings, and reviews</td></tr><tr><td><strong>Visual and Audio Recordings</strong></td><td>Audio recordings of your correspondence with the call center</td></tr><tr><td><strong>Location</strong></td><td>Your location data, automatically collected by the Application should you allow it when you launch the Application or through your device settings or added manually by you.</td></tr><tr><td><strong>Transaction Security Information</strong></td><td>Information about your device including its model, operating system and version, IP address, user transaction records, your log-in method to the Application (via Google/Facebook/Apple ID)</td></tr><tr><td><strong>Legal Transaction Information</strong></td><td>Correspondence with judicial and administrative authorities and authorized public institutions and organizations, case and enforcement file contents</td></tr></tbody></table></figure><h4>Purposes, Legal Grounds, and Methods for Processing Your Personal Data&nbsp;</h4><p>We process your personal data, which we obtain through wholly automatic and partly automatic methods, via the Application, through the phone via the call center, and through e-mail if you contact us via e-mail, based on the legal grounds specified in Article 5 of the PDPL.&nbsp;The purposes of processing your personal data and the legal grounds on which we rely for such processing are as below:</p><figure class="table"><table><tbody><tr><td><strong>Your Personal Data</strong></td><td><strong>Purposes of the Processing&nbsp;</strong></td><td><strong>Legal Grounds for Processing&nbsp;</strong></td></tr><tr><td>Identity Information, Account Information, Contact Information, Payment Information, Transactional Data, Visual and Audio Recordings, Transaction Security Information, Legal Transaction Information</td><td>To examine, evaluate and conclude your legal requests and applications; to resolve possible legal disputes and to provide the authorized persons, institutions, and organizations with the relevant personal data to resolve legal disputes.</td><td rowspan="3">Processing of your personal data is governed under the law (Article 5/2-a of the PDPL)</td></tr><tr><td>Identity Information, Contact Information, Payment Information, Transactional Data</td><td>To conduct contract and sales processes in relation to the orders you place on the Website; to carry out financial and accounting operations related to payments, to issue invoices.</td></tr><tr><td>Identity Information, Account Information, Contact Information, Payment Information, Transactional Data, Transaction Security Information, Legal Transaction Information</td><td>To carry out our business operations in accordance with the legislation and to store the data that is required to be retained within the scope of our legal obligations.</td></tr><tr><td>Identity Information, Account Information, Contact Information, Profile Picture, Transaction Security Information</td><td>To verify your information, to create your account and to provide access to your account for the provision of our services.</td><td rowspan="5"><p>Processing of your personal data is necessary for the constitution and performance of a contract to provide you with our services</p><p>(Article 5/2-c of the PDPL)<i>&nbsp;</i></p></td></tr><tr><td>Identity Information, Payment Information, Transactional Data, Location</td><td>To create your orders and manage the payment processes, to confirm the order, to receive a payment for delivery of the products you ordered to your address, to deliver your product.</td></tr><tr><td>Location</td><td>To offer you the range of products available at your location and displaying the restaurants and GetirLocals shops which serve at your location.</td></tr><tr><td>Contact Information, Account Information</td><td>To provide access to the domains within the Application.</td></tr><tr><td>Identity Information, Contact Information, Transactional Data</td><td>To contact you about your membership, orders, and use of the Website; to carry out the communications between you and Getir couriers, GetirFood restaurants and GetirLocals shops (Your phone number registered with Getir is not shared with Getir couriers).</td></tr><tr><td>Identity Information, Payment Information, Transactional Data</td><td>To carry out financial and accounting operations related to payments, to issue invoices.</td><td rowspan="2">Processing of your personal data is necessary for fulfilling our legal obligations (Article 5/2-ç of the PDPL)</td></tr><tr><td>Identity Information, Account Information, Profile Picture, Payment Information, Transactional Data, Transaction Security Information</td><td>To carry out our business operations in accordance with the legislation and to store the data that is required to be retained within the scope of our legal obligations.</td></tr><tr><td>Identity Information, Account Information, Transactional Data, Visual and Audio Recordings</td><td>To receive and conclude your requests/complaints about your order.</td><td>Processing of your personal data is necessary for the establishment, exercise or protection of your rights and ours (Article 5/2-e of the PDPL)</td></tr><tr><td>Visual and Audio Recordings</td><td>To record your correspondence and conversations with Getir and the call center for the management of requests and complaints and improvement of our service quality.</td><td rowspan="4">Processing of your personal data is necessary for our legitimate interests (Article 5/2-f of the PDPL)</td></tr><tr><td>Identity Information, Contact Information, Transactional Data</td><td>To manage customer relations, to contact you through surveys and similar like/request/complaint detection methods within the scope of customer satisfaction measures; to examine, evaluate, and conclude your written or verbal requests, complaints, and feedbacks for the improvement of our products/services; to organize raffles and competitions, to carry out the necessary transactions for your participance at these events, to deliver the prizes, gifts, etc. to you.</td></tr><tr><td>Account Information, Contact Information, Payment Information, Transactional Data, Location, Transaction Security Information</td><td>To perform analysis for the improvement of our products and services; to review and audit business operations, to conduct reporting activities regarding our products and services.</td></tr><tr><td>Identity Information, Account Information, Contact Information, Transactional Data, Visual and Audio Recordings, Transaction Security Information, Location</td><td>To detect and prevent fraud and abuse of our campaigns, discounts, and the services.</td></tr><tr><td>Account Information, Contact Information, Payment Information, Transactional Data</td><td>To offer the most suitable range of products that match your past orders and usage habits to provide a better user experience.</td><td>&nbsp;</td></tr><tr><td>Contact Information, Transactional Data, Location</td><td>To offer special products and campaigns suitable to your preferences, taste, interests, usage habits and location; to conduct marketing activities.</td><td><p>Your consent to processing of your personal data&nbsp;(Article 5/1 of the PDPL)</p><p>&nbsp;</p></td></tr></tbody></table></figure><h4>Transfer of Your Personal Data to Third Parties</h4><p>Your personal data are transferred to third parties in Turkey or abroad in the following cases, being limited, associated and restrained with the purposes of the processing, in accordance with Articles 8 and 9 of the PDPL:</p><figure class="table"><table><tbody><tr><td><strong>Your Personal Data</strong></td><td><strong>Purpose of the Transfer</strong></td><td><strong>Recipients</strong></td><td><strong>Legal Grounds for the Transfer</strong></td></tr><tr><td>Identity Information, Contact Information, Payment Information, Transactional Data, Location</td><td>To carry out the correspondence between the warehouses, couriers, restaurants, and customers, to carry out the processes regarding orders, to inform the couriers about the delivery addresses.</td><td>Getir and GetirWater Warehouses, Couriers, GetirFood Restaurants and GetirLocals Shops</td><td><p>Processing of your personal data is necessary for the constitution and performance of a contract to provide you with our services</p><p>(Article 5/2-c of the PDPL)</p></td></tr><tr><td rowspan="3">Identity Information, Account Information, Contact Information, Profile Picture, Payment Information, Transactional Data, Transaction Security Information, Location, Legal Transaction Information</td><td rowspan="3">To get support from our suppliers, including those providing infrastructure and information services, for the provision of our products and services, to carry out financial and accounting operations, and to manage business relations with our business partners and suppliers.</td><td rowspan="3">Business Partners &amp; Suppliers</td><td>Processing of your personal data is necessary for the constitution and performance of a contract to provide you with our services (Article 5/2-c of the PDPL)</td></tr><tr><td>Processing of your personal data is necessary for our legitimate interests (Article 5/2-f of the PDPL)</td></tr><tr><td>Your consent to the transfer of your personal data&nbsp;(Article 9/1 of the PDPL)</td></tr><tr><td rowspan="3">Contact Information</td><td rowspan="3">To verify your information and to provide you access to the domains within the Application should you log in to these domains.&nbsp;</td><td rowspan="3">Getir Group Companies, Business Partners and Suppliers</td><td>Processing of your personal data is necessary for the constitution and performance of a contract to provide you with our services (Article 5/2-c of the PDPL)</td></tr><tr><td>Processing of your personal data is necessary for our legitimate interests (Article 5/2-f of the PDPL)</td></tr><tr><td>Your consent to the transfer of your personal data&nbsp;(Article 9/1 of the PDPL)</td></tr><tr><td>Identity Information, Account Information, Contact Information, Payment Information, Transactional Data, Legal Transaction Information, Transaction Security Information and&nbsp;Other Personal Data That May Be Requested by Authorized Persons, Institutions, and Organizations&nbsp;</td><td>To fulfill our legal obligations, to inform authorized persons, institutions, or organizations within the scope of our legal obligations, to carry out legal processes, and to conduct our business operations in accordance with the legislation.</td><td>Authorized Persons, Institutions or Organizations</td><td><p>Processing of your personal data is governed under the law (Article 5/2-a of the PDPL)</p><p>Processing of your personal data is necessary for fulfilling our legal obligations (Article 5/2-ç of the PDPL)</p></td></tr></tbody></table></figure><h4>Your Rights Regarding Your Personal Data</h4><p>Article 11 of the PDPL&nbsp;regulates the rights of the data subjects (real persons whose personal data are processed). You may exercise the rights pursuant to Article 11 of the PDPL which are as follows:</p><ol><li>To be informed whether your personal data is processed or not</li><li>If your personal data has been processed, to request information regarding the same</li><li>To be informed on the purpose of processing your personal data and whether it is used in accordance with its purpose</li><li>To be informed on the third parties to whom your personal data is transferred in the country or abroad</li><li>To request the correction of your personal data if it is incomplete or incorrectly processed</li><li>To request the deletion or destruction of your personal data within the scope of the conditions stipulated in Article 7 of the PDPL</li><li>If your personal data is deleted or destroyed within the scope of Article 7 of the PDPL and your personal data is incomplete or incorrectly processed, to request the notification of the third parties to whom the personal data has been transferred to</li><li>To object to the emergence of a result against you due to the analysis of your personal data exclusively by automated systems</li><li>To request compensation of the damage in case you suffer damage due to unlawful processing of your personal data</li></ol><h4>How to Use Your Rights Regarding Your Personal Data</h4><p>You may use the following methods to exercise your rights specified in the Article 11 of the PDPL and submit your requests to Getir;</p><ol><li>Via&nbsp;email to <a href="mailto:kisiselveriler@getir.com">kisiselveriler@getir.com</a> using your e-mail address registered in our system,</li><li>Via registered e-mail (KEP) address to&nbsp;<a href="mailto:getir@hs01.kep.tr">getir@hs01.kep.tr</a></li><li>In writing, including the documents proving your identity to Etiler Mah. Tanburi Ali Efendi Sok. Maya Residences Sit. T Blok No:13/334 Beşiktaş/İstanbul<i>.</i></li></ol><p>In accordance with Article 13 of the PDPL, Getir will finalize your requests within <strong>30 days at the latest</strong>, depending on the nature of the request. If the transaction requires cost, the tariff determined by the Personal Data Protection Board will be applied. If your request is rejected, the reason(s) for the rejection will be communicated to you within <strong>30 (thirty) days at the latest.</strong></p><h4>About This Notice</h4><p>This Notice may be updated to comply with changing conditions and relevant legislation. Updates to be made to this Notice will be notified to you via the Application.</p><p><strong>Last Updated:</strong> May 2023&nbsp;</p>

<h2>Information Regarding Identification Technologies</h2><p>As Getir Perakende Lojistik A.Ş. (“<strong>Getir</strong>”), we use identification technologies to ensure that users make the best of their mobile application experiences.</p><p>With this notice we aim to inform you about what personal data we collect through these technologies, how we process this personal data and your rights.</p><p>For all your questions regarding the processing of your personal data, you may contact us at <a href="mailto:kisiselveriler@getir.com">kisiselveriler@getir.com</a>.</p><h3>What are the Identification Technologies?</h3><p>Identification technologies enable us to record certain actions of the Getir mobile application users. Identification technologies allow us to match the device ID with the actions you perform in the application.</p><h3>What are my personal data that Getir processes through identification technologies?</h3><p>Through identification technologies, your personal data related to device ID, user ID, the movements/operations you perform on the application (for example, the areas you click on in the mobile application, the products you add to the basket) are processed.</p><p>Besides, if you fill in your address information or add a favorite product before logging in/creating a membership, this information is also processed. Your location information is also processed via your mobile device.</p><p>Analyzes are conducted to ensure you get the most out of our services. In this context, your information obtained as a result of the analysis of your above-mentioned data is also processed.</p><h3>How is personal data collected through identification technologies?</h3><p>Identification technologies are used in both cases where you use the Getir mobile application with or without account registration. The transactions you perform in the application before creating an account are matched with your device ID. After you create an account, the transactions you perform after registration are matched for the same device ID.</p><p>Personal data is collected through identification technologies via automated methods.</p><h3>Why identification technologies are used?</h3><p>Our purposes for using identification technologies are as follows:</p><ul><li>To ensure that users realize their mobile application experiences in the best way,</li><li>To learn the interaction of users with the mobile application and how they use the mobile application,</li><li>In case you create an account, to ensure that your information and transactions before the account registration can be used,</li><li>To speed up your transactions the next time you use the mobile application,</li><li>To improve the mobile application operation and content,</li><li>To statistically evaluate the use of mobile application,</li><li>To conduct analyzes to ensure you get the most out of our services,</li><li>To ensure that the content in the mobile application is presented in the most effective way for you and your device.</li></ul><h3>What are the legal grounds of processing personal data through identification technologies?</h3><p>We process your personal data collected through identification technologies based on the legal grounds stated in the Article 5 of the Law on the Protection of Personal Data. We stated these legal grounds below:</p><ul><li>Establishment, execution or protection of a right,</li><li>Processing is necessary for Getir’s legitimate interests.</li></ul><h3>Is personal data collected though identification technologies transferred to third parties?</h3><p>We get services from third-parties within the country and outside the country for the use of some identification technologies. In this context, we transfer your personal data to suppliers and business partners for the purpose of receiving product/service support from third parties, improving the operation and content of our mobile application and conducting analyzes to make the most of our services.</p><h3>How Can I Use My Rights Regarding My Personal Data?</h3><p>Article 11 of <a href="https://www.mevzuat.gov.tr/MevzuatMetin/1.5.6698.pdf">the Law on the Protection of Personal Data</a> regulates the rights of data subjects (natural persons whose personal data are processed). You may use the following methods to exercise your rights specified in this Article and submit your requests to Getir:</p><ol><li>You may send your request to <a href="mailto:kisiselveriler@getir.com">kisiselveriler@getir.com</a> by using your e-mail address registered in our systems.</li><li>You may send your requests in written to Etiler Mah. Tanburi Ali Efendi Sok. Maya Residences Sit. T Blok No:13/334 Beşiktaş/İstanbul.</li><li>You may use the other methods stated in <a href="https://www.mevzuat.gov.tr/mevzuat?MevzuatNo=24455&amp;MevzuatTur=9&amp;MevzuatTertip=5">the Communiqué on the Application Procedure and Principles to the Data Controller</a>.</li></ol><p><br><br>&nbsp;</p><p><i><strong>Last Update: 18/08/2020</strong></i></p>

<h2>Confidentiality Policy</h2><p>As Getir Perakende Lojistik A.Ş. (“<strong>Getir</strong>”), we attach importance to the protection and confidentiality of the information of the users of the Getir mobile application ("<strong>User</strong>").</p><p>This confidentiality policy ("<strong>Policy</strong>") aims to inform the Users about how Getir uses the information obtained through the mobile application, responsibilities of the Users and the rules and procedures of Getir for the protection of confidential information.</p><h3>1. INFORMATION WE COLLECT</h3><p>We collect the following information for you to use the application;</p><p>When you use the Getir mobile application, certain information is collected for processes such as registering your account, providing you products/services you request and conducting payment processes.</p><p>Users provide their information to Getir when they want to use the mobile application, convey their requests, suggestions and complaints to Getir or for other reasons. In this case, certain information of Users such as name-surname, payment information, request, suggestion and complaint information is collected.</p><p>We use identification technologies that enable us to record user transactions and match the device information with the transactions performed in the application in order to ensure that users perform their mobile application experiences in the best way. For information about the use of identification technologies, you may review the <a href="http://static.getir.com/idtech_en.html">Information Regarding Identification Technologies</a>.</p><h3>2. PURPOSES OF USE OF INFORMATION</h3><p>The information that Getir collects through the mobile application is mainly used for the following purposes:</p><ul><li>To provide services to users through the mobile application,</li><li>To communicate with users; to conclude the requests and complaints,</li><li>To conduct financial and accounting processes related to payments,</li><li>To promote our services; conducting advertising and campaign processes,</li><li>To develop/improve our products and services in accordance with user feedbacks,</li><li>To personalize our services according to users' preferences, usage habits and interests,</li><li>To identify and fix system problems regarding mobile application; conducting information security</li><li>Measuring user experiences through identification technologies, improving mobile application performance.</li></ul><p>The purposes set out in this section refers to the general use of information collected through the mobile application. For detailed information about Getir’s purposes of processing customer personal data and other issues related to the processing of personal data, please review "<a href="http://static.getir.com/protection_en.html">Customer Personal Data Protection Policy</a>".</p><h3>3. INFORMATION SHARING WITH THIRD PARTIES</h3><p>The information you provide on the mobile application may be shared with third parties in order to achieve the above-mentioned purposes (for example, your information may need to be shared with service providers in order to get technical service). In this context, your information may be shared with our business partners and service providers which support us within the scope of the supply of goods/services. However, when we are asked to share your information in order to fulfill our legal obligations, your information may also be shared with authorized persons, institutions and organizations.</p><p>The information provided by the Users will not be transferred to third parties, except for the purposes specified in the texts provided to the users and when necessary to provide the service.</p><h3>4. STORING AND PROTECTING YOUR INFORMATION</h3><p>Your information is retained for the time required by our purpose to collect information. If a special period is stipulated in the legislation for us to store your information, this period is respected. Getir takes the necessary technical and organizational measures to protect the systems and databases where your information is stored against data security threats (cyberattack, hash, etc.).</p><p>The payment infrastructure is provided by MasterCard and BKM Express. Getir maintains the first six and last two digits of the credit card in its systems. In order to match the existing MasterPass and BKM Express memberships and enable the Users to use their cards as a payment tool in Getir, a membership query is made via MasterPass and BKM Express with the mobile phone number registered and if the User has a membership, the User is informed and directed to add the relevant card.</p><p>The User acknowledges that he/she is fully responsible for the security, storage and prevention of learning by third parties of the system access tools (username, password, etc.) used in order to benefit from the services offered by Getir through the mobile application.</p><h3>5. KEEPING YOUR INFORMATION ACCURATE AND UP TO DATE</h3><p>It is the User’s responsibility to keep the information provided to Getir accurate and up to date. The information requested from you must be conveyed accurately and updated if there is any change. You may update the information you share with Getir at any time via the mobile application or by calling Getir customer service.</p><p>When you provide information to Getir on behalf of someone else, you undertake that you have the right to share this information with Getir / you are authorized to do so.</p><h3>6. REDIRECTING TO THIRD PARTIES</h3><p>Getir mobile application may redirect to other links that is not operated by Getir. During your visit to any of these links, you are subject to the privacy policies and terms of use of the third party that you visit. Getir is not responsible for the policies and practices of these third parties.</p><h3>7. CHANGES TO APPLICATION AND THIS POLICY</h3><p>Getir, reserves the right to change, suspend or stop all products and services, information, images and other items on the mobile application without prior notice.</p><p>Getir reserves the right to make changes and updates to this Policy. It is the User's responsibility to follow the current version of the Policy.</p><h3>8. RESPONSIBILITY</h3><p>Getir is not responsible for any direct or indirect damages and expenses that may occur as a result of any errors, interruptions, delays, viruses, line and/or system failures that may occur during the use of the mobile application.</p><p><br><br>&nbsp;</p><p><i><strong>Last Update: 18/08/2020</strong></i></p>

<h3>What is Getir?</h3><p>Getir is an ultrafast grocery delivery app serving 81 provinces of Turkey. With Getir, you can get the products you want most in minutes. You can also do your weekly or monthly shopping with GetirMore and order takeaways with GetirFood. You can even order a carboy with GetirWater, call a taxi whenever you want with GetirBiTaksi, and shop from your neighborhood stores with GetirLocals. Our services may vary depending on where you are. If the service you want is not available in your location yet, you can send an e-mail to <a href="mailto:info@getir.com">info@getir.com</a> and request it!</p><h3>How do I sign up?</h3><p>You can download Getir free from the App Store, Google Play and Huawei App Gallery. After downloading the app, you can sign up with your mobile number or social accounts.</p><h3>How do I use Getir?</h3><p>After downloading the Getir app to your Apple, Android or Huawei device, turn on location services for a better experience. After clicking the register button, you can register on the app by entering your information or by connecting your Facebook, Google or Apple account. Press ‘Select delivery address’ on the homepage and add an address. After specifying your address, add the products you want to your basket by tapping the plus button. Then add a payment method and place your order. Our service options may vary depending on your address.</p><h3>How do I pay?</h3><p>You can pay digitally or at the door. Payment at the door is only for the orders you place with the 'Restaurant Delivery' option from GetirFood. You can pay cash, by pos device or meal cards. For digital payments you can use your debit, credit or Istanbul Card that you added on the app. Nobody, including Getir, can see your credit card information. Your card information is protected by Mastercard's payment infrastructure, Masterpass or BKM (Interbank Card Center). When you confirm your order, the order amount is automatically withdrawn from your card.&nbsp;</p><h3>Is my personal information safe?</h3><p>We care about your personal data and protect them in accordance with Personal Data Protection Authority. Your payment information is kept secure by being transmitted directly to MasterCard or BKM servers. Noone can reach these inforamtion including Getir.</p><h3>Where is Getir available?</h3><p>You can use Getir and GetirFood in all cities. The rest of our services (GetirBiTaksi, GetirWater, GetirLocals and GetirMore) may not be available at the moment depending on your address. We aim to reach all cities in Turkey with all of our services. You can send an e-mail to <a href="mailto:info@getir.com">info@getir.com</a> with the services you want to have in your city.</p><h3>I have a problem with the app, what should I do?</h3><p>You can reach our customer service team 24/7 by calling <a href="tel:08505325050">0850 532 5050</a> or sending an e-mail to <a href="mailto:info@getir.com">info@getir.com</a>.</p><h3>When can I use Getir?</h3><p>You can use Getir 24/7 and GetirMore between 08:00-03:00 in all cities. You can use GetirWater between 08:00-24:00 in Istanbul, and in other cities between 08:00-19:00. Our GetirFood and GetirLocals services may vary depending on the restaurant and operating hours.</p>

<h2><strong>GetirJobs – Privacy Notice</strong></h2><p>As Getiriş Danışmanlık ve Ticaret Anonim Şirketi (“<strong>GetirJobs</strong>”), we take utmost care to process and protect the personal data of our customers, in accordance with the Personal<a href="https://www.mevzuat.gov.tr/mevzuat?MevzuatNo=6698&amp;MevzuatTur=1&amp;MevzuatTertip=5">&nbsp;Data Protection Law No. 6698</a> (“the&nbsp;<strong>PDPL</strong>”), its secondary legislation and decisions of the Personal Data Protection Board. We have prepared this privacy notice (“<strong>Notice</strong>”) to inform you about how we process your personal data as a data controller through GetirJobs mobile application (“<strong>Application</strong>”) managed by GetirJobs.&nbsp;</p><p>GetirJobs presents the Application that aim to gather job seekers and employee seekers on the same platform. The Application users may discover the job opportunities closest to them, postings as job seekers or employers, and communicate with each other through the Application.&nbsp;</p><p>&nbsp;</p><h3><strong>Your Personal Data That We Process</strong></h3><p>The categories of personal data we process within the scope of the services we provide are as follows:</p><p>&nbsp;</p><h4><strong>Personal Data of Job Seekers:</strong></h4><figure class="table"><table><tbody><tr><td><strong>Identity Information</strong></td><td>Full name, gender, birth year</td></tr><tr><td><strong>Contact Information</strong></td><td>E-mail address, the phone number that is registered to your GetirJobs account, city, and address if you publish a posting for a job&nbsp;</td></tr><tr><td><strong>Device and Security Information</strong></td><td>Information about your device such as device type, model, and software, user log data, method of log in to the Application (Facebook/Google/Apple ID)&nbsp;</td></tr><tr><td><p><strong>Professional Experience</strong></p><p>&nbsp;</p></td><td>Employment history, professional skills and talents, certificates, language skills and language level information, your applications to job postings within the Application&nbsp;&nbsp;</td></tr><tr><td><strong>Visual and Audio Recordings</strong></td><td>Profile picture (if you choose to upload), video footages, audio recordings of your conversations through the Application</td></tr><tr><td><strong>Chat and Call Data</strong></td><td>Contents of your chats with other users within the Application, call history (time and date information about your voice and video calls)</td></tr><tr><td><strong>Location&nbsp;</strong></td><td>Location data, if you give your permission to access your location when you launch the Application or from the settings of your phone&nbsp;</td></tr><tr><td><strong>Usage Information</strong></td><td>Usage habits, personal data arising from the use of the Application, such as the transactions you perform within the Application, requests, complaints, opinions, evaluations, comments and feedback, communication preferences&nbsp;&nbsp;</td></tr><tr><td><strong>Other Information on the Resume</strong></td><td>Resume, educational background such as school, faculty, date of registration and graduation, work experience, type of driver’s license, user status as job seeker/employee seeker, status of military enlistment (for male users)&nbsp;</td></tr><tr><td><strong>Information requested by the Authorized Persons, Institutions and Non-Governmental Organizations</strong></td><td>Driver’s license class information, whether you can drive your own vehicle when working voluntarily, and other information requested by the Authorized Persons, Institutions and Non-Governmental Organizations</td></tr></tbody></table></figure><p>&nbsp;</p><h4><strong>Personal Data of Employee Seekers:</strong></h4><figure class="table"><table><tbody><tr><td><strong>Identity Information</strong></td><td>Full name, gender, title, birth year&nbsp;</td></tr><tr><td><strong>Contact Information</strong></td><td>E-mail address, the phone number that is registered to your GetirJobs account, city, and address of the workplace if you publish a posting for a job&nbsp;</td></tr><tr><td><strong>Device and Security Information&nbsp;</strong></td><td>Information about the device such as device type, model, and software, user log data, method of log in to the Application (Facebook/Google/Apple ID)&nbsp;</td></tr><tr><td><strong>Visual and Audio Recordings</strong></td><td>Profile picture (if you choose to upload), video footages, audio recordings of your conversations through the Application</td></tr><tr><td><strong>Chat and Call Data</strong></td><td>Contents of your chats with other users within the Application, call history (time and date information about your voice and video calls)</td></tr><tr><td><strong>Location</strong></td><td>Location data, if you give your permission to access your location when you launch the Application or from the settings of your phone&nbsp;</td></tr><tr><td><strong>Usage Information</strong></td><td>Usage habits, personal data arising from the use of the Application, such as the transactions you perform within the Application, requests, complaints, opinions, evaluations, comments and feedback, communication preferences&nbsp;&nbsp;&nbsp;</td></tr></tbody></table></figure><p>To improve your experience in the Application and to ensure that you use the Application in the best way possible, we also use identification technologies that allow certain movements in the Application to be recorded and match your device information with your actions. You can read our<a href="http://static.getir.com/idtech_en.html">&nbsp;“Information Regarding Identification Technologies”</a> notice for further information.&nbsp;</p><p>&nbsp;</p><h3><strong>Purposes, Legal Basis, and Methods for Processing Your Personal Data?&nbsp;</strong></h3><p>We collect your personal data by means of fully automatic and partially automated methods, via the Application, call center, and e-mail if you contact us via e-mail. We process your personal data based on the legal reasons set forth in Article 5 of the PDPL. We have listed the purposes of processing your personal data and the legal basis for these purposes at the table below:&nbsp;&nbsp;</p><figure class="table"><table><tbody><tr><td><strong>Your Personal Data</strong></td><td><strong>Purpose of the Transfer</strong></td><td><strong>Legal Grounds for the Transfer</strong></td></tr><tr><td>Identity information, contact information, professional experience, usage information, visual and and audio records, device and security information</td><td>To examine, evaluate and conclude your legal requests and applications; to resolve possible legal disputes and to provide the authorized persons, institutions, and organizations with the relevant personal data to resolve legal disputes.</td><td rowspan="2">Processing of your personal data is governed under the law (Article 5/2-a of the PDPL)</td></tr><tr><td>Identity information, contact information, professional experience, usage information, device and security information</td><td>To carry out our business operations in accordance with the legislation and to store the data that is required to be retained within the scope of our legal obligations.&nbsp;</td></tr><tr><td>Identity information, contact information, device and security information, location, chat and call data, professional experience and other information on the resume for the job seekers&nbsp;</td><td><p>To verify your information for the use of the Application, to create your user account, and to provide access to your account;</p><p>To create your postings on the Application and to allow the review your postings by other users;</p><p>To inform you about the job opportunities for you in line with your skills, abilities, and experiences; job seeker users to reach employer users suitable for the conditions they are looking for; to match job postings with candidate users with suitable qualifications;&nbsp;</p><p>To share your information and your job postings with other users in the Application in line with your privacy preferences;</p><p>To provide the opportunity to communicate with other users through messaging, audio or video conversation methods over the Application.</p></td><td><p>Processing of your personal data is necessary for the constitution and performance of the contract between you and GetirJobs (Article 5/2-c of the PDPL)</p><p>&nbsp;</p></td></tr><tr><td>Identity information, contact information, device and security information, professional experience, visual and audio recordings, usage information, location, chat and call data, other information on the resume</td><td><p>To fulfill our legal obligations in cases where GetirJobs is obliged to notify authorized institutions or organizations, or when these institutions or organizations request information from GetirJobs;</p><p>To store the user log records in accordance with the relevant legislation;&nbsp;</p><p>To protect of the rights of GetirJobs and users and to take legal action, when necessary.</p></td><td><p>Processing of your personal data is necessary for fulfilling our legal obligations (Article 5/2-ç of the PDPL)</p><p>Processing of your personal data is necessary for the establishment, exercise or protection of your rights and ours (Article 5/2-e of the PDPL)&nbsp;&nbsp;</p></td></tr><tr><td>Identity information, contact information, device and security information, usage information, chat and call data</td><td><p>To send you notifications about new releases and changes in the Application;</p><p>To improve the Application experience by identifying problems and errors in the Application, receiving and finalizing questions/feedback/requests/complaints;</p><p>To conduct analyses, control and audit work to detect and prevent misuse of the Application, suspicious or illegal transactions, ensuring and improving information and transaction security; reviewing and auditing our business activities.&nbsp;</p></td><td rowspan="2">Processing of your personal data is necessary for our legitimate interests (Article 5/2-f of the PDPL)&nbsp;</td></tr><tr><td>Identity information, contact information, usage information, professional experience, other information on the resume</td><td>To contact with the users through surveys and similar like/request/complaint detection methods within the scope of users satisfaction measures.&nbsp;</td></tr><tr><td>Identity information, contact information, location, usage information, professional experience, other information on the resume</td><td>To detect special opportunities and benefits for you, informing you about our campaigns, promotions, and opportunities in line with your communication permission preferences.</td><td rowspan="2">Your explicit consent to the transfer of your personal data (Article 5/1 of the PDPL)</td></tr><tr><td>Visual and audio recordings, usage information, professional experience, other information on the resume&nbsp;</td><td>To publish content which are created by GetirJobs in public digital channels (social media, websites, mobile applications, media and communication platforms, etc.) owned by or determined by GetirJobs and content with user images within the scope of carrying out the promotion/advertising/campaign processes.&nbsp;</td></tr><tr><td>Identity information, contact information, device and security information, professional experience, visual and audio recordings, usage information, location, chat and call data, other information on the resume, information requested by the Authorized Persons, Institutions and Non-Governmental Organizations</td><td>To contact the application owners who applied to the job postings opened on a voluntary basis on the Getirjobs platform in order to provide support for disaster areas within the framework of coordinating and executing emergency and disaster processes; to share such applications and information provided in the “Volunteer Disaster Assistance” form within the scope of applications with authorized public institutions and non-governmental organizations to assist such states of emergency.</td><td>Your explicit consent to processing of your personal data through your applications to job postings on a voluntary basis. (Article 5/1 of the PDPL)</td></tr></tbody></table></figure><p>&nbsp;</p><h3><strong>Transfer of Your Personal Data to Third Parties</strong></h3><p>Your personal data are transferred to third parties in the following cases, being limited, associated and restrained with the purposes of the processing, in accordance with Articles 8 and 9 of the PDPL:</p><p>&nbsp;</p><figure class="table"><table><tbody><tr><td><strong>Your Personal Data that is Transferred&nbsp;</strong></td><td><strong>Purpose of the Transfer&nbsp;</strong></td><td><strong>Recipients of Your Personal Data</strong></td><td><strong>Legal Grounds for the Transfer</strong></td></tr><tr><td>Identity information, contact information, visual and audio recordings, professional experience for the job seekers and other information on the resume&nbsp;</td><td>To share your information with other users in the Application in line with your privacy preferences, to allow the review of your postings by other users, to allow other users to reach out to you.</td><td>Other Users of the Application who are Seeking Employees or Jobs</td><td>Processing of your personal data is necessary for the constitution and performance of the contract between you and GetirJobs (Article 5/2-c of the PDPL)</td></tr><tr><td>Identity information, contact information, visual and audio recordings, device and security information, professional experience, chat and call data, location, usage information, other information on the resume</td><td>To get support from our suppliers including those providing infrastructure and information services, related to the products and services offered by GetirJobs, to conduct financial and accounting processes, to manage business partner and supplier relations.&nbsp;</td><td>Business Partners &amp; Suppliers Within the Country or Outside the Country</td><td><p>Processing of your personal data is necessary for the constitution and performance of the contract between you and GetirJobs (Article 5/2-c of the PDPL)&nbsp;</p><p>Processing of your personal data is necessary for our legitimate interests (Article 5/2-f of the PDPL)</p></td></tr><tr><td>Identity information, contact information, visual and audio recordings, device and security information, professional experience, chat and call data, usage information, other information on the resume&nbsp;</td><td>To fulfill our legal obligations, to inform authorized persons, institutions, or organizations within the scope of our legal obligations, to carry out legal processes, and to conduct our business operations in accordance with the legislation.</td><td>Authorized Persons, Institutions or Organizations</td><td><p>Processing of your personal data is governed under the law (Article 5/2-a of the PDPL)&nbsp;</p><p>Processing of your personal data is necessary for fulfilling our legal obligations (Article 5/2-ç of the PDPL)</p></td></tr><tr><td>Identity information, contact information, location, other information on the resume, information requested by the Authorized Persons, Institutions and Non-Governmental Organizations</td><td>To share the applications and information provided in the “Volunteer Disaster Assistance” form within the scope of applications submitted with respect to the job postings opened on a voluntary basis on the Getirjobs platform in order to provide support for disaster areas within the framework of coordinating and executing emergency and disaster processes, with the authorized public institutions and non-governmental organizations in order to assist such states of emergency with requested periods.</td><td>Authorized Persons, Institutions and Non-Governmental Organizations</td><td>Your explicit consent to processing of your personal data through your applications to job postings on a voluntary basis. (Article 5/1 of the PDPL)</td></tr><tr><td>Identity information, contact information&nbsp;</td><td><p>In line with your contact preferences, reaching you by the job seeker users who meet the conditions you are looking for.</p><p><br>&nbsp;</p></td><td><p>Job Seeking Employees &amp;</p><p>Business Partners&nbsp;</p><p><br>&nbsp;</p></td><td>Your explicit consent to processing of your personal data through your applications to job postings. (Article 5/1 of the PDPL)</td></tr></tbody></table></figure><p>&nbsp;</p><h3><strong>Your Rights Regarding Your Personal Data&nbsp;</strong></h3><p>Article 11 of the PDPL regulates your rights as a data subject as described hereinbelow:</p><ul><li>To learn whether your personal data are processed or not,</li><li>To request information about the processing of your personal data,</li><li>To learn the purpose of the processing of your personal data and whether your personal data are used in compliance with the purpose,</li><li>To know the third parties to whom your personal data are transferred domestically or abroad,</li><li>To request the rectification of the incomplete or inaccurate personal data, if any,</li><li>To request the erasure or destruction of your personal data under the conditions referred to in Article 7 of the PDPL,</li><li>To request reporting of the operations carried out pursuant to sub-paragraphs (d) and (e) of the Article 11 to third parties to whom your personal data have been transferred,</li><li>To object to the occurrence of a result against yourself by analyzing the data processed solely through automated systems,</li><li>To claim compensation for the damage arising from the unlawful processing of your personal data.</li></ul><p>&nbsp;</p><h3><strong>How to Use Your Rights Regarding Your Personal Data</strong></h3><p>In order to exercise your rights under Article 11 of the PDPL, we kindly request you to submit your requests:</p><ul><li>Using your e-mail address registered in our system to kisiselveriler@getiris.net,</li><li>Via your registered e-mail (KEP) address to getirisdanismanlik@hs01.kep.tr or</li><li>Including the documents proving your identity, in writing, to Etiler Mah. Tanburi Ali Efendi Sok. Maya Residences Sit. T Blok No:13/334 Beşiktaş/Istanbul.</li></ul><p>In accordance with Article 13 of the PDPL, Getir will finalize your requests within&nbsp;<strong>30 days at the latest</strong>, depending on the nature of the request. If the transaction requires cost, the tariff determined by the Personal Data Protection Board will be applied. If your request is rejected, the reason(s) for the rejection will be communicated to you within&nbsp;<strong>30 (thirty) days at the latest.</strong></p><p>&nbsp;</p><h3><strong>About This Notice</strong></h3><p>This Notice may be updated to comply with changing conditions and relevant legislation. Updates to be made to this Notice will be notified to you via the Application.</p><p><strong>Getiriş Danışmanlık ve Ticaret Anonim Şirketi</strong></p><p><strong>Last Updated:</strong> June 2023&nbsp;</p>

<p><strong>Getir Araç Dijital Ulaşım Çözümleri Ticaret Anonim Şirketi User Data Processing Notice</strong></p><p>&nbsp;</p><p>As Getir Araç Dijital Ulaşım Çözümleri Ticaret A.Ş. <strong>(“GetirDrive”)</strong>, we take utmost care to process and protect the personal data of our customers, in accordance with the Personal Data Protection Law No. 6698&nbsp;<strong>(“the PDPL”)</strong>, its secondary legislation and decisions of the Personal Data Protection Board. We have prepared this privacy notice&nbsp;<strong>(“Notice”)</strong>&nbsp;to inform you about how we process your personal data as a data controller through the website&nbsp;<a href="http://www.getirarac.com"><strong>www.getirarac.com</strong></a>&nbsp;<strong>(“Website”)</strong>&nbsp;and&nbsp;GetirDrive mobile application (“<strong>Application</strong>”) managed by GetirDrive.</p><p>&nbsp;</p><p>&nbsp;</p><h3><strong>Your Personal Data Processed by GetirDrive</strong></h3><p>Your personal data we process within the scope of the services we provide to you, are as follows:</p><p>&nbsp;</p><figure class="table"><table><tbody><tr><td><strong>Identity Information</strong></td><td>Full name, Turkish ID number, birth date, information on the driver's license (full name, Turkish ID number, date of birth, place of birth, date of issuance, date of validity, place of application, driver registration number, date of issuance of license class, date of validity of license class, codes for additional information and restrictions, blood group, prosthetic device usage information), passport number, date of country to the country, nationality</td></tr><tr><td><strong>Contact Information</strong></td><td>The phone number that you registered to your GetirDrive account, e-mail address, billing address</td></tr><tr><td><strong>Payment Information</strong></td><td>Information about your payment methods and payment details</td></tr><tr><td><strong>Transactional Data</strong></td><td>Information on rented vehicle, information on rental and use,&nbsp;vehicle usage history, number of uses,&nbsp;Website/Application usage information, services visited within the Website/Application, your preferences and usage habits,&nbsp;invoice details, requests/complaints, comments, ratings, and reviews&nbsp;</td></tr><tr><td><strong>Marketing Information</strong></td><td>Cookie records, advertisement ID, campaing&nbsp;usage information</td></tr><tr><td><strong>Visual and Audio Recordings</strong></td><td>Recordings during registration, photograph on driving license, audio recordings of your correspondence with the call center</td></tr><tr><td><strong>Location</strong></td><td>Your location data automatically processed by the Website should you allow it through your browser settings, or added manually by you</td></tr><tr><td><strong>Transaction Security Information</strong></td><td>Information about your device including its type, ID number, model, operating system and version, IP address, user transaction records, your log-in method to the Website (via Google/Facebook/Apple ID) and password information</td></tr><tr><td><strong>Legal Transaction Information</strong></td><td>Correspondence with judicial and administrative authorities and authorized public institutions and organizations, case and enforcement file contents</td></tr><tr><td><strong>Other Information</strong></td><td>Driving data collected through vehicle, information on safe driving habits, accident information</td></tr></tbody></table></figure><p>&nbsp;</p><p><strong>Purposes, Legal Grounds, and Methods for Processing Your Personal Data</strong></p><p>We process your personal data, which we obtain through wholly automatic and partly automatic methods, via the Website, through the phone via the call center, and through e-mail if you contact us via e-mail, based on the legal grounds specified in Article 5 of the PDPL. The purposes of processing your personal data and the legal grounds on which we rely for such processing are as below:</p><p>&nbsp;</p><figure class="table"><table><tbody><tr><td><strong>Your Personal Data</strong></td><td><strong>Purposes of the Processing of Your Personal Data</strong></td><td><strong>Legal Basis for Processing of Your Personal Data</strong></td></tr><tr><td>Identity Information, Contact Information, User Transaction Information, Location, Transaction Security Information, Other Information (Driving Data Collected Through Vehicle)</td><td>Provision of hourly, daily or monthly vehicle rental services; receiving your bookings and meeting your cancellation requests; operating goods / services sales activities; conducting goods / services production and operation activities.</td><td rowspan="2">Processing of your personal data is necessary for the performance of a contract within the scope of the provision of our services (Article 5/2-c of the PDPL)</td></tr><tr><td>Identity Information, Contact Information, User Transaction Information</td><td>Operating after sales support activities for goods / services conducting customer relationship management activities; meeting your requests regarding goods and services or responding to your complaints.</td></tr><tr><td>Identity Information, User Transaction Information , Payment Information</td><td>Receiving payments and conducting collection activities; conducting finance and accounting processes.</td><td rowspan="3"><p>Processing of your personal data is necessary for the performance of a contract within the scope of the provision of our services (Article 5/2-c of the PDPL)</p><p>Processing of your personal data is necessary for our legitimate interests (Article 5/2-f of the PDPL)</p></td></tr><tr><td>Identity Information, Contact Information</td><td>Conducting Communication Activities</td></tr><tr><td>Identity Information, Contact Information, Visual and Audio Records, Transaction Security Information&nbsp;</td><td><p>Managing application registration activities; creating membership; conducting identity verification checks; managing contracting processes.</p><p>&nbsp;</p></td></tr><tr><td>Identity Information, User Transaction Information, Location, Transaction Security Information, Other Information (Accident Information)</td><td>Conducting our activities in accordance with the legislation.</td><td rowspan="2"><p>Processing of your personal data is necessary for fulfilling our legal obligations (Article 5/2-ç of the PDPL)</p><p>Processing of your personal data is necessary for our legitimate interests (Article 5/2-f of the PDPL)</p></td></tr><tr><td>Identity Information, User Transaction Information</td><td>Fulfilling our legal obligations in cases we are obliged to notify authorized institutions or organizations.</td></tr><tr><td>Identity Information, Contact Information, User Transaction Information, Legal Transaction Information, Location, Transaction Security Information, Other Information (Accident Information, Driving Data Collected Through Vehicle)</td><td>Monitoring and conducting dispute and legal processes; managing execution proceedings and cost, damage and loss collection activities arising from rentals.</td><td><p>Processing of your personal data is necessary for the establishment, exercise or protection of your rights and ours (Article 5/2-e of the PDPL)</p><p>Processing of your personal data is necessary for our legitimate interests (Article 5/2-f of the PDPL)</p></td></tr><tr><td>Identity Information, Contact Information, Visual and Audio Records, User Transaction Information, Location, Transaction Security Information, Other Information (Accident Information, Driving Data Collected Through Vehicle)</td><td><p>Conducting information security processes.</p><p>Operating / auditing business activities; managing retention and archiving processes.</p></td><td rowspan="2">Processing of your personal data is necessary for our legitimate interests (Article 5/2-f of the PDPL)</td></tr><tr><td>Identity Information, Contact Information, Visual and Audio Records, User Transaction Information, Location, Transaction Security Information, Other Information (Accident Information, Driving Data Collected Through Vehicle)</td><td>Ensuring the security of goods and resources; ensuring the security of the company operations; ensuring the safety of users.</td></tr><tr><td>Identity Information, Visual and Audio Records</td><td>Conducting identity verification checks.</td><td>Your consent to processing of your personal data (Article 5/1 of the PDPL)</td></tr><tr><td>Identity Information</td><td>Assessing vehicle driving eligibility status.</td><td>Your consent to processing of your personal data (Article 5/1 of the PDPL)</td></tr><tr><td>Identity Information, Contact Information, User Transaction Information, Location, Marketing Information, Other Information (Accident Information, Driving Data Collected Through Vehicle)</td><td>Provision of personalized campaigns, promotions and discounts; operating advertising, campaign and discount processes; conducting marketing activities for goods and services.</td><td>Your consent to processing of your personal data (Article 5/1 of the PDPL)</td></tr></tbody></table></figure><p><br>&nbsp;</p><p>&nbsp;</p><p><strong>Transfer of Your Personal Data to Third Parties</strong></p><p>Your personal data are transferred to third parties in the following cases, being limited, associated and restrained with the purposes of the processing, in accordance with Articles 8 and 9 of the PDPL:</p><p>&nbsp;</p><figure class="table"><table><tbody><tr><td><strong>Transferred Personal Data</strong></td><td><strong>Purpose of the Transfer of Your Personal Data</strong></td><td><strong>Recipients of Your Personal Data</strong></td><td><strong>Legal Basis for Transfer of Your Personal Data</strong></td></tr><tr><td>Identity Information, User Transaction Information</td><td>Fulfilling our legal obligations in cases we are obliged to notify authorized institutions or organizations.</td><td>Authorized Person, Institution, or Organizations</td><td>Processing of your personal data is necessary for fulfilling our legal obligations (Article 5/2-ç of the PDPL)</td></tr><tr><td>Identity Information, Contact Information, User Transaction Information</td><td>Managing rental and damage payment collection activities.</td><td>Third Parties Providing Services on Payment Collection</td><td rowspan="5"><p>Processing of your personal data is necessary for our legitimate interests (Article 5/2-f of the PDPL)</p><p>Your consent to the transfer of your personal data (Article 9/1 of the PDPL)</p></td></tr><tr><td>Identity Information, Contact Information, User Transaction Information, Legal Transaction Information, Location, Transaction Security Information, Visual and Audio Records, Marketing Information, Other Information (Accident Information, Driving Data Collected Through Vehicle)</td><td>Procuring finance, communication, technology solutions, business development and data analytics services for conducting the company’s operations.</td><td>Third Parties Providing Services on Conducting Day-to-Day Operations</td></tr><tr><td>Identity Information, Contact Information, User Transaction Information, Legal Transaction Information, Location, Transaction Security Information, Visual and Audio Records, Marketing Information, Other Information (Accident Information, Driving Data Collected Through Vehicle)</td><td>Procuring services for infrastructure, it and software to conduct company operations.</td><td>External Infrastructure and IT System Service Providers</td></tr><tr><td>Identity Information, Contact Information, User Transaction Information</td><td>Responding to your requests and complaints and managing customer relations.</td><td>Third Parties Providing Services on Call-Center and Survey Activities</td></tr><tr><td>Identity Information, Visual and Audio Records</td><td>Registering with our application; conducting identity verification checks.</td><td>Third Parties Providing Services on Verification Check</td></tr><tr><td>Identity Information, User Transaction Information, Other Information (Accident Information, Driving Data Collected Through Vehicle)</td><td>Notifying insurance service provider in cases of accidents and damage.</td><td>Third Party Insurance Service Providers</td><td><p>Processing of your personal data is necessary for our legitimate interests (Article 5/2-f of the PDPL)</p><p>Processing of your personal data is necessary for the establishment, exercise or protection of your rights and ours (Article 5/2-e of the PDPL)</p></td></tr><tr><td>Identity Information, Contact Information</td><td>Procuring assistance services in cases of accidents and damage.</td><td>Third Parties Providing Tow and Repair Services</td><td><p>Processing of your personal data is necessary for our legitimate interests (Article 5/2-f of the PDPL)</p><p>Processing of your personal data is necessary for the performance of a contract within the scope of the provision of our services (Article 5/2-c of the PDPL)</p></td></tr><tr><td>Identity Information, Contact Information, User Transaction Information, Legal Transaction Information, Location, Transaction Security Information, Other Information (Accident Information, Driving Data Collected Through Vehicle)</td><td>Procuring legal consultancy services.</td><td>Third Parties Providing Legal Consultancy Services</td><td><p>Processing of your personal data is necessary for our legitimate interests (Article 5/2-f of the PDPL)</p><p>Processing of your personal data is necessary for the establishment, exercise or protection of your rights and ours (Article 5/2-e of the PDPL)</p></td></tr><tr><td>Identity Information, Visual and Audio Records</td><td>Procuring software support services for registration and identity verification processes.</td><td>Third Parties Providing Software Support Services</td><td>Your consent to processing of your personal data (Article 5/1 of the PDPL)</td></tr><tr><td>Contact Information, Marketing Information</td><td>Procuring digital marketing services for conducting company operations.</td><td>Third Parties Providing Assistance Services Digital Marketing Activities</td><td>Your consent to processing of your personal data (Article 5/1 of the PDPL)</td></tr></tbody></table></figure><p>&nbsp;</p><p><strong>Your Rights Regarding Your Personal Data</strong></p><p>Article 11 of the PDPL regulates the rights of the data subjects (real persons whose personal data are processed). You may exercise the rights pursuant to Article 11 of the PDPL which are as follows:</p><ol><li>To be informed whether your personal data is processed or not</li><li>If your personal data has been processed, to request information regarding the same</li><li>To be informed on the purpose of processing your personal data and whether it is used in accordance with its purpose</li><li>To be informed on the third parties to whom your personal data is transferred in the country or abroad</li><li>To request the correction of your personal data if it is incomplete or incorrectly processed</li><li>To request the deletion or destruction of your personal data within the scope of the conditions stipulated in Article 7 of the PDPL</li><li>If your personal data is deleted or destroyed within the scope of Article 7 of the PDPL and your personal data is incomplete or incorrectly processed, to request the notification of the third parties to whom the personal data has been transferred</li><li>To object to the emergence of a result against you due to the analysis of your personal data exclusively by automated systems,</li><li>To request compensation of the damage in case you suffer damage due to unlawful processing of your personal data</li></ol><p>&nbsp;</p><p><strong>How to Use Your Rights Regarding Your Personal Data</strong></p><p>You may use the following methods to exercise your rights specified in the Article 11 of the PDPL and submit your requests to GetirDrive:</p><ul><li>Via email to&nbsp;<a href="mailto:kisiselveriler@getirarac.com"><strong>kisiselveriler@getirarac.com</strong></a>&nbsp;using your e-mail address registered in our system,</li><li>Via your registered e-mail (KEP) address to&nbsp;<a href="mailto:getirarac@hs01.kep.tr"><strong>getirarac@hs01.kep.tr</strong></a>,</li><li>In writing, including the documents proving your identity, to Etiler Mah. Tanburi Ali Efendi Sok. Maya Residences Sit. T Blok No:13/334 Beşiktaş/İstanbul.</li></ul><p>In accordance with Article 13 of the PDPL, GetirDrive will finalize your requests within 30 (thirty) days at the latest, depending on the nature of the request. If the transaction requires cost, the tariff determined by the Personal Data Protection Board will be applied. If your request is rejected, the reason(s) for the rejection will be communicated to you within 30 (thirty) days at the latest.</p><p><strong>About This Notice</strong></p><p>This Notice may be updated to comply with changing conditions and relevant legislation. Updates to be made to this Notice will be notified to you on the Website.</p><p><strong>Date of the Latest Update: July 2023</strong></p><p>&nbsp;</p>

<h2>PROCESS GUIDE</h2><h3>1. Order placement</h3><p>Once you have downloaded the app and started using it by entering the required information, select your delivery address and add the desired products to your cart. Then confirm your order by selecting your preferred payment method. After confirming your order, our couriers will deliver the products you want as soon as possible. For more detailed information, you can visit the Frequently Asked Questions page.</p><h3>2. Order modification</h3><p>Before checkout, you can see the products, delivery method, amount payable and campaign information. If you want to make changes to your order, you can go back to your cart by clicking the back arrow and make changes to your cart. If you change your address information, you will need to create your cart again.</p><h3>3. Privacy</h3><p>You can access how Getir uses the information it collects and the rules regarding the protection of information through the "<a href="https://getir.com/en/help/privacy-policy/">Privacy Policy</a>".</p><h3>4. Alternative dispute resolution mechanisms</h3><p>In disputes that may arise between Getir and the Customer, within the monetary limits determined within the framework of the legislation, the Consumer Arbitration Committees in the place where the Customer and Getir's registered address is located, and in disputes exceeding the monetary limit, Consumer Courts may be applied to.</p>

<h2><strong>Call Center Privacy Notice</strong></h2><p>As Getir Perakende Lojistik A.Ş.&nbsp;<strong>(“Getir”)</strong>, Getiriş Danışmanlık ve Ticaret A.Ş., Getir Araç Dijital Ulaşım Çözümleri Ticaret A.Ş., Bitaksi Mobil Teknoloji A.Ş. (collectively referred to as the “<strong>Getir Group Companies</strong>”) we take utmost care to process and protect your personal data, in accordance with the Personal Data Protection Law No. 6698&nbsp;<strong>(“the PDPL”)</strong>, its secondary legislation and decisions of the Personal Data Protection Board.&nbsp;</p><p>We have prepared this privacy notice&nbsp;<strong>(“Notice”)</strong>&nbsp;to inform you about how we process your personal data as a data controller within the scope of your communication with Getir on behalf of Getir Group Companies regarding the services we provide and the orders you place on the Getir mobile application and the Getir website at&nbsp;<a href="http://www.getir.com/"><strong>www.getir.com</strong></a>.&nbsp;</p><h3><strong>Your Personal Data</strong></h3><p>Your personal data we process through our call center are as follows:</p><figure class="table"><table><tbody><tr><td><strong>Identity Information</strong></td><td>Full name</td></tr><tr><td><strong>Contact Information</strong></td><td>Mobile phone number, delivery address</td></tr><tr><td><strong>Transactional Data</strong></td><td>Order information, requests and complaints, reviews and feedbacks</td></tr><tr><td><strong>Audio Recordings</strong></td><td>Audio recordings of your correspondence about the services we provide and the orders you place</td></tr></tbody></table></figure><h3><strong>Purposes, Legal Grounds, and Methods for Processing Your Personal Data</strong></h3><p>Your personal data is obtained through our call center via automatic and non-automatic methods and processed based on the legal grounds specified in Article 5 of the PDPL. The purposes of processing your personal data and the legal grounds on which we rely for such processing are as below:</p><figure class="table"><table><tbody><tr><td><strong>Your Personal Data</strong></td><td><strong>Purposes of the Processing</strong></td><td><strong>Legal Grounds of the Processing&nbsp;</strong></td></tr><tr><td>Identity Information, Contact Information, Transactional Data, Audio Recordings</td><td><p>To examine, evaluate and conclude your legal requests and applications; to resolve possible legal disputes and to provide the authorized persons, institutions, and organizations with the relevant personal data to resolve legal disputes.</p><p><br>&nbsp;</p></td><td><p>Processing of your personal data is governed under the law (Article 5/2-a of the PDPL)</p><p>Processing of your personal data is necessary for fulfilling our legal obligations (Article 5/2-ç of the PDPL)</p></td></tr><tr><td>Identity Information, Contact Information, Transactional Data, Audio Recordings</td><td>To record and conclude your requests and complaints about the services we provide and the orders you place.&nbsp;</td><td>Processing of your personal data is necessary for the constitution and performance of a contract to provide you with our services (Article 5/2-c of the PDPL)</td></tr><tr><td>Identity Information, Contact Information, Transactional Data, Audio Recordings</td><td>To record your requests and complaints about the services we provide and the orders you place to ensure customer satisfaction and improve our service quality; to review and audit business operations, to ensure security and continuity of our operations;&nbsp; to manage customer relations&nbsp; and communicate with customers to ensure customer satisfaction; to detect and prevent fraud and abuse of our campaigns, discounts, and the services.</td><td>Processing of your personal data is necessary for our legitimate interests (Article 5/2-f of the PDPL)</td></tr></tbody></table></figure><h3><strong>Transfer of Your Personal Data to Third Parties</strong></h3><p>Your personal data are transferred to third parties in the following cases, being limited, associated and restrained with the purposes of the processing, in accordance with Articles 8 and 9 of the PDPL:</p><figure class="table"><table><tbody><tr><td><strong>Your Personal Data Subject to Transfer</strong></td><td><strong>Purpose of the Transfer</strong></td><td><strong>Recipients</strong></td><td><strong>Legal Grounds of the Transfer</strong></td></tr><tr><td>Identity Information, Contact Information, Transactional Data, Audio Recordings</td><td>To fulfill our legal obligations, to inform authorized persons, institutions, or organizations within the scope of our legal obligations, to carry out legal processes, and to conduct our business operations in accordance with the legislation.</td><td>Authorized persons, institutions, or organizations</td><td><p>Processing of your personal data is governed under the law (Article 5/2-a of the PDPL)</p><p>&nbsp;</p><p>Processing of your personal data is necessary for fulfilling our legal obligations (Article 5/2-ç of the PDPL)</p></td></tr><tr><td>Identity Information, Contact Information, Transactional Data, Audio Recordings</td><td>To get support from our suppliers, including those providing infrastructure and information services, for the provision of our products and services, to carry out financial and accounting operations, and to manage business relations with our business partners and suppliers.</td><td>Domestic and Foreign Business Partners &amp; Suppliers</td><td>Processing of your personal data is necessary for our legitimate interests (Article 5/2-f of the PDPL)</td></tr></tbody></table></figure><h3><strong>Your Rights Regarding Your Personal Data</strong></h3><p>Article 11 of the PDPL regulates the rights of the data subjects (real persons whose personal data are processed). You may exercise the rights pursuant to Article 11 of the PDPL which are as follows:</p><ol><li>To be informed whether your personal data is processed or not,</li><li>If your personal data has been processed, to request information regarding the same,</li><li>To be informed on the purpose of processing your personal data and whether it is used in accordance with its purpose,</li><li>To be informed on the third parties to whom your personal data is transferred in the country or abroad,</li><li>To request the correction of your personal data if it is incomplete or incorrectly processed,</li><li>To request the deletion or destruction of your personal data within the scope of the conditions stipulated in Article 7 of the Law</li><li>If your personal data is deleted or destroyed within the scope of Article 7 of the Law and your personal data is incomplete or incorrectly processed, to request the notification of the third parties to whom the personal data has been transferred to,</li><li>To object to the emergence of a result against you due to the analysis of your personal data exclusively by automated systems,</li><li>To request compensation of the damage in case you suffer damage due to unlawful processing of your personal data.</li></ol><h3><strong>How to Use Your Rights Regarding Your Personal Data</strong></h3><p>You may use the following methods to exercise your rights specified in the Article 11 of the PDPL and submit your requests to Getir Group Companies:</p><figure class="table"><table><tbody><tr><td>Getir Perakende Lojistik A.Ş.</td><td><p>You can submit your requests,</p><ul><li>to&nbsp;<a href="mailto:kisiselveriler@getir.com"><strong>kisiselveriler@getir.com</strong></a>&nbsp;using your e-mail address registered in our system,</li><li>via your registered e-mail (KEP) address to&nbsp;<a href="mailto:getir@hs01.kep.tr"><strong>getir@hs01.kep.tr</strong></a>&nbsp;using secure e-signature or mobile signature,</li><li>in writing, including the documents proving your identity, to Etiler Mah. Tanburi Ali Efendi Sok. Maya Residences Sit. T Blok No:13/334 Beşiktaş/İstanbul.</li></ul></td></tr><tr><td>Getiriş Danışmanlık ve Ticaret A.Ş.</td><td><p>You can submit your requests,</p><ul><li>to&nbsp;<a href="mailto:kisiselveriler@getiris.com"><strong>kisiselveriler@getiris.com</strong></a> using your e-mail address registered in our system,</li><li>via your registered e-mail (KEP) address to&nbsp;<a href="about:blank"><strong>getirisdanismanlık@hs01.kep.tr</strong></a><strong>&nbsp;</strong>&nbsp;using secure e-signature or mobile signature,</li><li>in writing, including the documents proving your identity, to Etiler Mah. Tanburi Ali Efendi Sok. Maya Residences Sit. T Blok No:13/334 Beşiktaş/İstanbul.</li></ul></td></tr><tr><td>Getir Araç Dijital Ulaşım Çözümleri Ticaret A.Ş.</td><td><p>You can submit your requests,</p><ul><li>to&nbsp;<a href="mailto:kvkk@moovtr.com"><strong>kvkk@moovtr.com</strong></a><strong>&nbsp;</strong>using your e-mail address registered in our system,</li><li>via your registered e-mail (KEP) address to&nbsp;<a href="mailto:moovdijital@hs01.kep.tr"><strong>moovdijital@hs01.kep.tr</strong></a><strong>&nbsp;</strong>using secure e-signature or mobile signature,</li><li>in writing, including the documents proving your identity, to Etiler Mah. Tanburi Ali Efendi Sok. Maya Residences Sit. T Blok No:13/334 Beşiktaş/İstanbul.</li></ul></td></tr><tr><td>Bitaksi Mobil Teknoloji A.Ş.</td><td><p>You can submit your requests,</p><ul><li>to&nbsp;<a href="mailto:kisiselverilergrubu@bitaksi.com"><strong>kisiselverilergrubu@bitaksi.com</strong></a><strong>&nbsp;</strong>using your e-mail address registered in our system,</li><li>via your registered e-mail (KEP) address to&nbsp;<a href="mailto:bitaksi@hs01.kep.tr"><strong>bitaksi@hs01.kep.tr</strong></a><strong>&nbsp;</strong>using secure e-signature or mobile signature,</li><li>in writing, including the documents proving your identity, to Etiler Mah. Tanburi Ali Efendi Sok. Maya Residences Sit. T Blok No:13/334 Beşiktaş/İstanbul.</li></ul></td></tr></tbody></table></figure><p>In accordance with Article 13 of the PDPL, Getir Group Companies will finalize your requests within&nbsp;<strong>30 (thirty) days at the latest</strong>, depending on the nature of the request. If the transaction requires cost, the tariff determined by the Personal Data Protection Board will be applied. If your request is rejected, the reason(s) for the rejection will be communicated to you within&nbsp;<strong>30 (thirty) days at the latest</strong>.</p><h3><strong>About This Notice</strong></h3><p>This Notice may be updated to comply with changing conditions and relevant legislation. Updates to be made to this Notice will be notified to you on our website and mobile application.&nbsp;</p><p><strong>Last Updated: September 2022</strong></p>