ÖNDER DEFENSE INDUSTRY AEROSPACE AND TECHNOLOGY INC. - CLARIFICATION TEXT UNDER THE LAW ON THE PROTECTION OF PERSONAL DATA

Data Controller and Its Representative
ÖNDER DEFENSE INDUSTRY AEROSPACE AND TECHNOLOGY INC. ("ÖNDER DEFENSE" or the "COMPANY") attaches the utmost importance to the security of your personal data. With this awareness, the Company takes great care in processing and preserving all types of personal data belonging to real persons related to ÖNDER DEFENSE INDUSTRY AEROSPACE AND TECHNOLOGY INC. in accordance with the Personal Data Protection Law No. 6698 (“KVKK”). Your personal data may be processed by ÖNDER DEFENSE INDUSTRY AEROSPACE AND TECHNOLOGY INC., as the data controller, within the scope described below.

Purpose of Processing Personal Data
Your personal data may be processed—verbally, in writing, or electronically—in line with Articles 5 and 6 of the KVKK for the following purposes:

Execution of human resources processes within the legal framework,

Planning, auditing, and executing information security processes,

Establishment and management of IT infrastructure,

Tracking finance and/or accounting processes,

Ensuring facility and personnel security,

Conducting efficiency and suitability analyses of commercial activities, including planning and execution,

Determining and implementing commercial and business strategies,

Fulfilling contractual and legal obligations of ÖNDER DEFENSE appropriately and completely,

Evaluating and responding to suggestions, requests, and complaints submitted via our website, and conducting improvements based on feedback.

Recipients and Purposes of Data Transfer
Your personal data collected may be shared—limited to the purposes stated above—with our shareholders, subsidiaries, affiliates, business partners, suppliers, authorized public institutions, or third parties within the scope permitted under Articles 8 and 9 of the KVKK, both domestically and internationally.

Scope of Personal Data
As a data controller, ÖNDER DEFENSE may collect and process personal data—including name-surname, address, profession, education, marital status, date and place of birth, CV, email, phone number, gender, vehicle plate number, geolocation data accessed during website visits, IP address, and campus CCTV footage—within the framework of our obligations under the Turkish Commercial Code No. 6102, KVKK, Labor Law No. 4857, Code of Obligations No. 6098, Penal Code No. 5237, Law No. 5651, and other relevant laws and regulations.
These data may be obtained, recorded, stored, updated, rearranged, transferred to third parties (domestic or abroad) when permitted by law, and processed by taking all necessary administrative and technical measures, subject to your explicit consent or under legal grounds (contract necessity, legal obligations, or legitimate interest).

Method and Legal Basis of Data Collection
Your personal data is collected and retained by ÖNDER DEFENSE via various communication channels for legal or commercial reasons, in physical or electronic environments, for purposes including fulfilling legal obligations, enabling internal operations, and improving services.

Rights of Data Subjects under Article 11 of Law No. 6698
As a data subject, you may exercise the following rights by contacting ÖNDER DEFENSE through the methods outlined in the Personal Data Protection and Processing Policy:

Learn whether your data is being processed,

Request information if processed,

Learn the purpose of processing and whether it is used appropriately,

Know the third parties to whom data is transferred domestically or abroad,

Request correction of inaccurate or incomplete data,

Request deletion or destruction of personal data if processing reasons no longer exist and request notification of third parties,

Object to outcomes generated solely via automated systems if harmful to you,

Claim damages if data is processed unlawfully and causes loss.

Retention Period of Personal Data
Your personal data shared with ÖNDER DEFENSE through the aforementioned channels shall be retained for the period prescribed under KVKK or other relevant legislation. If no such period is defined, data will be kept for two years.

Application Method to Data Controller
Pursuant to Article 13(1) of the KVKK, you may submit your request in writing or through other methods specified by the Personal Data Protection Board to ÖNDER DEFENSE INDUSTRY AEROSPACE AND TECHNOLOGY INC. You can submit your application by:

Sending a signed form to: info@ondersavunma.com.tr,

Delivering in person to: Mutlukent Mah. 1966. Cad. No:10, Çankaya / Ankara,

Sending via notary or registered electronic mail (KEP): ondersavunma@hs01.kep.tr,
accompanied by your identity verification documents and explanations regarding the rights you wish to exercise.