The protection of the privacy of those who visit “https://turkishtechnic.com” web site of Turkish Airlines Technic Inc. (“Company”) is one of the leading principles of our Company.

The principles regarding the processing of your personal data under possession of Turkish Airlines Technic Inc. (“Company”) which is located in “Sanayi Mahallesi, Havaalanı İç Yolu Caddesi, Sabiha Gökçen Havalimanı E Kapısı No:3, Pendik/İstanbul” and is being data controller are specified below in this Clarification Text within the scope of Personal Data Protection Law (“Law”).

1. Purpose of Personal Data Processing

Your personal data obtained from your visit to our website may be able to process by the Company for the purposes listed below in accordance with Article 5 and 6 of PDPL (Personal Data Protection Law):

• In case of the relevant person requests from the communication portal, able to provide getting information, to assess the wishes/suggestions and to make a compliant,

• To carry out the necessary work by our relevant business units for the realization of commercial activities carried out by the company and to execute the relevant business processes,

• To plan and execute the commercial and/or business strategies of the Company,

• To include to the customer relations system in order to provide a better service to you,

• To provide legal, technical and commercial business security of the Company and relevant people who have business relations with the Company.

1. Places Where the Processed Data is Transferred and Purpose of Transfer

Your personal data obtained may be able to transfer to our business partners (such as outsourcing service providers, hosting service providers, research companies, call center etc.), our company subsidiaries pursuant to the purpose of your personal data processing and legally authorized public institutions and natural person within the conditions and purposes of personal data processing specified in Article 8 and 9 of PDPL (Personal Data Protection Law).

1. Collection Method of Personal Data and Legal Reason

Your personal data is collected by the Company automatically through cookies being technical communication file due to you visit our web-site and via the forms that you have filled pursuant to the purposes specified in this Clarification Text. For detailed information on cookies, please review Cookie Clarification Text.

Your personal data is processed in accordance with the below mentioned legal reason:

• Data processing is required due to it is directly related to the conclusion or execution of an agreement in accordance with the provision of Article 5/2 (c) of PDPL,

• Data processing is required for legitimate interests of the Company provided that it does not harm your fundamental rights and freedoms in accordance with the provision of Article 5/2 (f) of PDPL.

1. Ways of Application to Data Controller and Your Rights

You may have right a) to learn whether your personal data was processed or not, b) to request information if data was processed, c) to learn the purpose of processing and whether it was used in accordance with its purpose or not, d) to learn the parties to which it was transferred at home and abroad, e) to request correction if it was processed incompletely / incorrectly, f) to request deletion / destruction pursuant to the conditions stipulated in Article 7, g) to request notifying of the transactions made to the third parties to whom it was transferred in accordance with the above-mentioned (e) and (f) sub paragraphs, h) to object to the emergence of a result against you due to the analysis exclusively by automated systems and i) to request indemnifying of the loss due to unlawful processing by applying to our Company in accordance with Article 11 of the Law.

You may transmit your information and application requests regarding your above-mentioned rights to our Company in accordance with Communiqué on Principles and Procedures for the Request to Data Controller. You may also direct your information and application requests to us by filling Application Form in the below mentioned link or sending to “Sanayi Mahallesi, Havaalanı İç Yolu Caddesi, Sabiha Gökçen Havalimanı E Kapısı No: 3, Pendik/İstanbul” or transmitting to kvkkmasasi@thy.com mail address.

Our Company concludes your requests as the first request is free of charge as soon as possible and within thirty days at the latest according to the nature of the request. However, a fee may be charged in the case of subsequent requests on the same subject or if the transaction requires a separate fee upon the first request. Our company may put the request into process by accepting or may reject the request in written form by explaining the reason.

In cases where the application made by following the above-mentioned procedure is rejected, the reply given is insufficient, or the application is not replied in due time; there is a right to make a complaint to the Personal Data Protection Board (“Board”) within thirty days from notification date of the reply and sixty days from the date of application in any case. However, any complaint cannot be made without exhausting the application way.

The Board makes necessary examination ex officio on the issues falling into its area responsibility upon the complaint or in case of alleged violation. Upon the compliant, the Board examines the request and gives a reply to the relevant parties. If no reply is given within sixty days from the date of complaint, the request is deemed as rejected. In case of the existence of the violation is understood as a result of examination made ex officio or upon complaint the Board serves notice to the relevant persons by deciding elimination of the unlawful violations detected by the data controller. This decision is implemented without delay from the notification and within thirty days at the latest. The Board may decide to stop the processing of data or the transfer of data abroad in case of irrecoverable or impossible damage and in case of a clear violation of the law.

We state that your personal data is protected under possession of our Company sensitively and we thank you for the trust that you have placed to us.