KVKK Disclosure Notice

Under Law No. 6698 on the Protection of Personal Data ("KVKK"), your personal data is processed in the capacity of "data controller" by the company whose details are set out below:

Legal name: WORDO AI YAZILIM VE TEKNOLOJİ LTD. ŞTİ.

Address: Ortabayır Mah. Şair Çelebi Sk. Gürtaş İş Merkezi, Kağıthane / Istanbul, Türkiye

Tax ID: 8141116791

MERSIS No: 0814111679100001

Email: contact@wordo.ai

Depending on the channel of interaction and the information you provide, we process the following categories of personal data:

• Identity data: Name and surname.
• Contact data: Email address, phone number, company name.
• Customer transaction data: Requests, complaints, and correspondence content.
• Security data: IP address, log records, cookie records.
• Marketing data: Preferences and interests-related analytics, cookie records.

Your personal data is processed in accordance with the general principles and legal grounds set out in Articles 4, 5, and 6 of KVKK, for the following purposes:

• To respond to your communications and answer your questions.
• To deliver our services and to establish and perform contracts.
• To manage customer relationships, support, and after-sales processes.
• To ensure the security of the Site and the Services, and to detect and prevent misuse.
• To produce site usage statistics and improve the user experience.
• To fulfill legal obligations and make required notifications to authorities.
• Where your explicit consent has been obtained, to carry out marketing and promotional activities for our products and services.

Your personal data is processed based on the following legal grounds set out in Articles 5 and 6 of KVKK:

• It is necessary for the conclusion or performance of a contract to which the data subject is a party (Art. 5/2-c).
• It is mandatory for the data controller to fulfill a legal obligation (Art. 5/2-ç).
• Processing is mandatory for the establishment, exercise, or protection of a right (Art. 5/2-e).
• Processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject (Art. 5/2-f).
• Explicit consent in other cases and for the processing of special-category personal data (Art. 5/1, Art. 6).

Your personal data may, to the extent necessary for the purposes described above, be transferred to our suppliers, business partners, and infrastructure providers (cloud services, analytics tools, communication tools), as well as to legally authorized public authorities.

In accordance with Article 9 of KVKK, international transfers are made only to countries with adequate protection, or where adequate protection has been undertaken in writing and authorized by the Turkish Personal Data Protection Authority. Where required, your explicit consent will be obtained.

Your personal data is collected through the contact form on our Site, email correspondence, phone calls, video meeting tools, contract documents, and the Site's automated log systems, by fully or partially automated or non-automated means.

Your personal data is retained for the period necessary for the purposes of processing and in compliance with minimum periods set out in applicable legislation. When the retention period expires or the reason for processing no longer exists, your personal data is deleted, destroyed, or anonymized using methods defined by the Turkish Personal Data Protection Authority.

General retention periods: Log records are retained for one year; customer correspondence is retained for up to three years after the relevant process ends; contract-related data is retained for the periods required by applicable legislation.

Under Article 11 of KVKK, by applying to the data controller, you may exercise the following rights regarding your personal data:

• To learn whether your personal data is being processed.
• To request information if it has been processed.
• To learn the purpose of processing and whether it is used in accordance with that purpose.
• To know the third parties, within the country or abroad, to whom the data has been transferred.
• To request correction of data that has been processed incompletely or incorrectly.
• To request deletion or destruction of data under the conditions set out in Article 7 of KVKK.
• To request that any correction, deletion, or destruction be communicated to third parties to whom the data has been transferred.
• To object to a result that is adverse to you arising from the analysis of your data solely through automated systems.
• To claim compensation for damage arising from the unlawful processing of your personal data.

To exercise the rights listed above, you may submit your request, prepared in accordance with the Communique on Principles and Procedures for Application to the Data Controller, through one of the following methods.

Your application should include your name and surname, contact details, the subject of your request, and any supporting documents. Applications will be concluded free of charge as soon as possible and within thirty days at the latest, depending on the nature of the request. If the transaction requires additional cost, a fee may be charged in line with the tariff set by the Turkish Personal Data Protection Authority.

• By email to contact@wordo.ai (if using the email address registered in our system).
• By post to Ortabayır Mah. Şair Çelebi Sk. Gürtaş İş Merkezi, Kağıthane / Istanbul, Türkiye, in a signed written petition.
• Through a notice delivered via notary.