PRIVACY POLICY

POLICY ON PROTECTION OF PERSONAL DATA

ENLIGHTENMENT TEXT FOR PROTECTION OF PERSONAL DATA

1) Identity Of The Data Controller:

Lumidec Aydınlatma Proje Tasarım San. Tic. Ltd. Şti. (“Data Controller”, “Company”), exhibits maximum sensitivity to the protection of personal information along with the fundamental rights and freedoms specified in the Constitution; all kinds of personal data and personal data of special nature of the people who benefit from our services as a company, the people with whom we have commercial relations and our personnel, are processed and protected in accordance

with the Law on the Protection of Personal Data (“KVKK”).

Commercial Title: Lumidec Aydınlatma Proje Tasarım San. Tic. Ltd. Şti.

Address: Birlik Mah. 497.Cd. No:18/8 Çankaya 06610 Ankara, Turkiye

Trade Registry Office / Registry No: Ankara / 470452

Mersis Number : 0609*****6800001

Tax Office/No: Seğmenler VD / 609*****68

Phone-1: +90 530 551 47 22

Phone-2: +90 536 349 91 69

Website: www.lumidec.com.tr

E-mail: proje@ lumidec.com.tr

REM: lumidecaydinlatma@hs01.kep.tr

2) For What Purposes Your Personal Data Is Processed:

Your collected personal data are processed to enable you to benefit from the services offered by our company, due to our legal obligations regarding keeping records and for the purposes of carrying out the necessary work by our business units, recommending the services offered by our company by being customized according to your tastes, usage habits and needs, ensuring legal and commercial security of the people with whom our company has a business

relationship according to our company and the article 4 of KVKK, within the terms and purposes of personal data processing that are specified in Articles 5 and 6 of the same Law.

3) To Whom And For What Purposes The Processed Personal Data Are Transferred And What Are Legal Causes:

Your collected personal data are transferred to our companies subsidiaries, affiliates, insurance companies, domestic and foreign companies and organizations, public institutions and organizations, private partnerships, business partners with whom we work, suppliers and service providers who have a business relationship with our company, to third parties/organizations determined by them to benefit from private or public facilities within the terms, requirements and purposes of personal data processing, specified in the Articles 5, 6, 8 and 9 of KVKK for the fulfilment of our legal obligations, working in coordination with public institutions and organizations who work with affiliates and suppliers, the execution of human resources policies, the evaluation of your opinion, suggestion and communication request and informing you as such, ensuring the maintenance of the services and follow up and implementation of our customer satisfaction process.

4) Method And Legal Cause Of Personal Data Collection:

Your personal data and personal data of special nature may be collected, processed, recorded, stored, modifies, updated, periodically checked, rearranged, classified, retained orally, in writing or electronically through the services offered by our company, affiliated companies, state institutions and organizations, automatic or non-automatic means, our company's units and offices, website contact form, call centre, social media channels, mobile applications, business partners, service providers-suppliers, customer satisfaction surveys and similar tools. Your personal data and personal data of special nature are kept within our company in accordance with the requirements set out in the relevant legal legislation.

5) Rights Of The Personal Data Subject:

Each person has the right to apply to the controller and;

• To learn whether his personal data are processed or not,

• To request information if his personal data are processed,

• To learn the purpose of his data processing and whether this data is used for intended purposes,

• To know the third parties to whom his personal data is transferred at home or abroad,

• To request the rectification of the incomplete or inaccurate data, if any and notification to third parties,

• To request the erasure or destruction of his personal data and notification to third parties in accordance with the provisions of the KVKK and the provisions of other relevant laws, in case the causes which require the processing disappears,

• To object to the processing, exclusively by automatic means, of his personal data, which leads to an unfavourable consequence for the data subject,

• To request compensation for the damage arising from the unlawful processing of his personal data.

To exercise your foregoing right, you can send your request by e-mail to proje@lumidec.com.tr or the KEP address lumidecaydinlatma@hs01.kep.tr by using

secure electronic signature or to the address, Birlik Mah. 497.Cd. No: 18/8, Çankaya ,06610 Ankara, Turkey with a wet signature in accordance with the 1st paragraph of Article 13 of the KVKK and the Communiqué on Procedures and Principlesof the Application to Data Controller. Our company shall conclude your application without any charge not later than 30 days according to the nature of the request. However, if the underlying transaction separately

requires a cost for the Company, the fees in the tariff designated by the Personal Data Protection Board may be charged on you.