TÜRKİYE EĞİTİM GÖNÜLLÜLERİ VAKFI

PRIVACY NOTICE REGARDING THE PROTECTION AND PROCESSING OF PERSONAL DATA FOR DONORS/CUSTOMERS

1. Data Controller

With this Privacy Notice Regarding the Protection and Processing of Personal Data (“Privacy Notice”), we, Türkiye Eğitim Gönüllüleri Vakfı (“TEGV” and/or the “Foundation”), in our capacity as the data controller, would like to inform you, our valued donors and customers, within the scope of our obligation to inform under the Law No. 6698 on the Protection of Personal Data (“PDPL”).

Under PDPL, personal data means any information relating to an identified or identifiable natural person (“Personal Data”), and special categories of personal data include data relating to race, ethnic origin, political opinion, philosophical belief, religion, sect or other beliefs, appearance and clothing, membership to associations, foundations or trade unions, health, sexual life, criminal convictions and security measures, as well as biometric and genetic data (“Special Categories of Personal Data”).

2. Method of Collection of Personal Data and Legal Basis for Processing

Your Personal Data is collected in connection with your transactions with TEGV and for the purposes and within the scope set forth in Section 4 below, by automated or non-automated means, verbally, in writing or electronically, and through the methods and third parties listed below. In this respect, the methods and means of collection of personal data are as follows:

i. Through the forms you fill out during your visits to the Foundation’s website, during membership or registration processes, and while making donations,

ii. Through the forms filled out at events organized by the Foundation or third parties and/or at donation collection points affiliated with the Foundation,

iii. Through your purchases made via the TEGV Dükkan (“TEGV Store”)

iv. Through your suggestions, requests, or complaints submitted to us verbally via the call center or in writing via the Foundation’s website, social media platforms, or similar channels,

v. Through the satisfaction surveys you have completed,

vi. Through third parties from whom the Foundation receives services and maintains a contractual relationship in connection with its donors/customers.

The Personal Data collected from you will be processed within the scope of your relationship with TEGV, in accordance with the personal data processing conditions and purposes set forth in Articles 5 and 6 of the PDPL, and for the purposes and legal bases specified in Section 4 below. As required by Article 4 of the PDPL, your data will be processed in a manner that is “relevant, limited, and proportionate to the purposes for which they are processed.”

3. Collected Personal Data

The Personal Data we collect from you are processed in proportion to the purposes of processing set forth in Section 4 below.

4. Purposes of Processing of Personal Data

Your Personal Data is processed by TEGV for the purposes listed below and based on the legal grounds regulated under the PDPL:

i. For the purpose of enabling in-kind and/or cash donations within the scope of establishing a donor relationship (identity information, contact information, donor transaction information, financial information, transaction security information). (Legal ground: Necessary for the establishment or performance of a contract, Legitimate interest)

ii. For the purpose of sending a certificate of appreciation following a donation, within the scope of maintaining the donor relationship (identity information, contact information, donor transaction information). (Legal ground: Legitimate interest)

iii. For the purpose of executing product sales through the TEGV Store and ensuring the delivery of purchased products (identity information, contact information, transaction security information, customer transaction information). (Legal ground: Necessary for the establishment or performance of a contract)

iv. For the purpose of managing post-sale support services via the TEGV Store, including the handling of product returns (identity information, contact information, customer transaction information, transaction security information, suggestion/request/complaint information). (Legal ground: Performance of a contract, Compliance with legal obligations, Establishment/Exercise/Protection of a right, Publicly disclosed by the data subject)

v. For the purpose of carrying out financial and accounting operations following donations and purchases through the TEGV Store, and fulfilling related tax and other legal obligations, including issuing and retaining donation receipts and sales invoices (identity information, contact information, financial information, donor transaction information, customer transaction information). (Legal ground: Explicitly provided for by law, Performance of a contract, Establishment/Exercise/Protection of a right)

vi. For the purpose of conducting donation promotion and product marketing activities within the scope of TEGV’s operations and contacting individuals via electronic means or by phone (identity information, contact information, donor transaction information, customer transaction information, transaction security information, marketing information). (Legal ground: Explicit consent)

vii. For the purpose of identifying and announcing donations and donors made to TEGV, carrying out analysis studies in this regard, and planning and managing the execution of marketing activities (identity information, contact information, donor transaction information, marketing information). (Legal ground: Explicit consent)

viii. For the purpose of identifying purchases and customers through the TEGV Store, carrying out analysis studies in this regard, and planning and managing the execution of marketing activities (identity information, contact information, customer transaction information, marketing information, professional experience information). (Legal ground: Explicit consent)

ix. For the purpose of organizing satisfaction surveys in electronic and/or physical environments to improve the satisfaction of our donors/customers (identity information, contact information, donor transaction information, customer transaction information, professional experience information, marketing information, suggestion/request/complaint information). (Legal ground: Explicit consent)

x. For the purpose of evaluating and tracking donor/customer requests, suggestions, and complaints submitted via the TEGV website, call center, social media platforms, and similar channels (identity information, contact information, customer transaction information, donor transaction information, suggestion/request/complaint information, social media account information). (Legal ground: Necessary for the establishment, exercise, or protection of a right)

xi. For the purpose of making announcements and invitations related to events, projects, meetings, and similar activities organized or to be organized within TEGV, as well as sending event invitations, magazines, activity reports, and agendas (identity information, contact information, marketing information). (Legal ground: Explicit consent)

xii. For the purpose of conducting processes related to the resolution and follow-up of legal disputes (identity information, contact information, legal transaction information, customer transaction information, donor transaction information, transaction security information, suggestion/request/complaint information). (Legal ground: Necessary for the establishment, exercise, or protection of a right, Legitimate interest)

xiii. For the purpose of providing information to authorized persons, institutions, and organizations in the context of fulfilling legal obligations and responding to the requests of authorized administrative bodies (identity information, contact information, customer transaction information, donor transaction information, legal transaction information, transaction security information, suggestion/request/complaint information). (Legal ground: Compliance with legal obligations)

xiv. In addition, for the purpose of completing payment transactions, your credit card and bank card information is processed by TEGV’s licensed partner companies, within the framework of applicable security measures.

5. Transfers of Personal Data: Recipients and Purposes

TEGV may transfer and/or provide access to your Personal Data, in accordance with the PDPL and for the purposes set out in Article 4, to domestic third parties with whom it collaborates and/or receives services in fields such as sales, marketing, call center operations, customer/donor relations, legal, accounting, software, research, and similar areas. Your data may also be transferred to other third parties where such transfer is necessary for the specified purposes (such as companies providing SMS and e-mail delivery services, CRM (Customer Relationship Management), advertising, social media, public relations, cloud computing, backup, and software support). Additionally, your data may be transferred to authorized institutions and organizations or, upon request, to judicial authorities or relevant law enforcement agencies for the purposes of resolving legal disputes and fulfilling obligations arising from the applicable legislation.

Your data may also be transferred abroad in accordance with the PDPL and the Regulation on the Procedures and Principles Regarding the Transfer of Personal Data Abroad. This includes transferring data to business partners and service providers with whom we cooperate and/or receive services, including those who provide storage, archiving, and information technology support services (such as server, hosting, cloud computing, e-mail services), as well as to servers used in the course of TEGV’s data processing activities.

6. Rights of the Data Subject Under Article 11 of the PDPL

As a data subject, you may request at any time from TEGV, in its capacity as data controller, your rights specified below pursuant to Article 11 of the PDPL.

i. to learn whether any of the personal data is processed,

ii. to request information in relation to the activities if your personal data is processed,

iii. to learn the purposes of the processing of the personal data and whether these personal data are used in compliance with these purposes,

iv. to be informed on the third parties within the country or abroad, that your personal data are transferred to,

v. in case personal data are processed incompletely or inaccurately, to request the rectification of such incomplete or inaccurate data and to request that the action taken in this regard be notified to the third parties to which personal data are transferred,

vi. even though the personal data are processed in compliance with the PDPL and other relevant provisions of law, in case the basis for processing cease to exist, to request the deletion, destruction or anonymization of the personal data within 30 (thirty) days pursuant to the provisions of the Regulation on Deletion, Destruction or Anonymization of Personal Data and to request that the action taken in this regard be notified to the third parties to which personal data are transferred,

vii. to object to the unfavorable results which may occur as a result of analyzing of the personal data by automated means, and

viii. in case any damages due to unlawful processing of the personal data are suffered, to request the compensation of the damage.

You may submit your requests regarding the rights listed above to TEGV. Depending on the nature of your request, it will be concluded as soon as possible and at the latest within thirty (30) days, free of charge. However, if the relevant process requires an additional cost, a fee may be charged in accordance with the tariff determined by the Personal Data Protection Board.

Data Controller: Türkiye Eğitim Gönüllüleri Vakfı

Address: Kosifler İş Merkezi, İçerenköy Mah. Askent Sok. No: 3/A / K.10, 34752 Ataşehir /İstanbul

E-mail: [email protected]

TÜRKİYE EĞİTİM GÖNÜLLÜLERİ VAKFI

PROTECTION OF PERSONAL DATA DONOR/CUSTOMER EXPLICIT CONSENT FORM

The Donor/Customer Privacy Notice prepared by Türkiye Eğitim Gönüllüleri Vakfı (“TEGV” or the “Foundation”) within the scope of Law No. 6698 on the Protection of Personal Data (“PDPL”) has been presented to me.

Within the scope of the PDPL and Privacy Notice, I hereby consent to the processing of my personal data specified below by TEGV for the purposes set out below,

- For the purpose of conducting donation promotion and product marketing activities within the scope of TEGV’s operations and contacting me via electronic means or by phone in this context, my identity, contact, donor transaction, customer transaction, transaction security, and marketing information;

- For the purpose of identifying and announcing donations and donors made to TEGV, carrying out analysis activities in this regard, and planning and managing the execution of marketing activities, my identity, contact, donor transaction, and marketing information;

- For the purpose of identifying purchases and customers through the TEGV Dükkan (“TEGV Store”), carrying out analysis activities in this regard, and planning and managing the execution of marketing activities, my identity, contact, customer transaction, marketing, and professional experience information;

- For the purpose of organizing satisfaction surveys in electronic and/or physical environments to increase the satisfaction of TEGV’s donors/customers, my identity, contact, customer transaction, donor transaction, professional experience, marketing, and suggestion/request/complaint information;

- For the purpose of making announcements and invitations regarding events, projects, meetings, and similar activities organized or to be organized within TEGV, and sending event invitations, magazines, activity reports, and agendas, my identity, contact, and marketing information;

and I hereby consent to the transfer of my personal data specified above to entities providing storage, archiving, and information technology support services (including but not limited to server, hosting, cloud computing, and email services), as well as to third-party companies with which we cooperate.

Donor/Customer Name and Surname:

Signature:

TÜRKİYE EĞİTİM GÖNÜLLÜLERİ VAKFI

COMMERCIAL ELECTRONIC COMMUNICATION CONSENT

Date:

I hereby consent to the sending of commercial electronic communications to my contact information provided to Türkiye Eğitim Gönüllüleri Vakfı (TEGV), for the purpose of direct and/or indirect marketing and fundraising activities, including promotion, information, advertising, and campaigns related to TEGV’s events, projects, meetings, and similar activities, as well as its products.