Disclosure Text

This Disclosure Text has been prepared by Goat Analytics Software Technologies Limited Company (“Company”), in its capacity as the data controller, in accordance with Article 10 of the Law No. 6698 on the Protection of Personal Data (“KVKK”) titled “Disclosure Obligation of the Data Controller.”

As the data controller, your personal data are processed, recorded, transferred, shared, and stored within the limits of the current legislation. This text provides information regarding the purposes of processing your personal data, the parties to whom they may be transferred, the methods and legal grounds for collection, and your rights under Article 11 of the KVKK.

Our Company reserves the right to update this Disclosure Text in line with any changes that may be made to the current legislation.

I. Identity of the Data Controller

II. Purposes of Processing Personal Data

Within the scope of our Company's activities, your personal data are collected verbally, in writing, or electronically and processed for the following purposes:

• Presentation and development of products and services
• Execution of sales, marketing, and operational activities
• Fulfillment of data storage, reporting, and information obligations
• Planning and execution of business activities
• Execution of finance and accounting processes
• Establishment and performance of contract processes
• Management of request, complaint, and suggestion processes
• Planning of human resources and business processes
• Execution of information security processes
• Fulfillment of legal obligations

Your personal data will not be used for purposes other than those specified without your explicit consent and will not be shared with third parties except for legal obligations.

III. Method and Legal Grounds for Collecting Personal Data

Your personal data are collected electronically or physically through the website, mobile applications, email, social media, contracts, solution partners, business partners, official institution notifications, and other communication channels.

Your data are processed within the scope of the following legal grounds specified in Articles 5 and 6 of the KVKK:

• Existence of your explicit consent
• Explicitly provided for in the laws
• Being necessary for the establishment or performance of a contract
• Fulfillment of legal obligations
• Protection of our legitimate interests
• Establishment, exercise, or protection of a right

IV. Special Categories of Personal Data

Your special categories of personal data are processed only if you have provided explicit consent and by taking adequate security measures determined by the Personal Data Protection Board.

V. Transfer of Personal Data

In line with the realization of processing purposes and in accordance with the legislation, your collected personal data may be shared with:

• Business partners and solution partners
• Suppliers
• Company officials
• Authorized public institutions and organizations

and may be processed domestically or abroad.

VI. Rights of the Data Subject

Within the scope of Article 11 of the KVKK, personal data subjects have the following rights:

• To learn whether personal data is processed
• To request information if it has been processed
• To learn the purpose of processing
• To know the third parties to whom it is transferred
• To request correction of incomplete or incorrect data
• To request deletion or destruction
• To object to processing
• To request compensation in case of damage

VII. Storage Period of Personal Data

Your personal data are deleted, destroyed, or anonymized when the purpose requiring processing no longer exists and when the periods specified in the relevant legislation expire.

VIII. Application and Contact

You can forward your requests regarding your rights under the KVKK to our Company in writing or via email.