As "Bookcars.com Information Technology Joint Stock Company" ("Bookcars.com" or "Company"), we prioritize the security of your personal data with the utmost sensitivity. In full awareness of this responsibility, as defined in the Law, we process your personal data as a "Data Controller" within the framework of the limits prescribed by legislation and as explained below in the context of account opening procedures.

1. Information About the Data Controller Bookcars.com is the Data Controller.

2. Purposes of Processing Personal Data Your personal data is processed by the Company's business units for the following purposes: conducting the commercial activities of the Company in compliance with legislation and Company policies, performing necessary work by the Company's business units in this regard, determining, planning, and implementing the Company's short, medium, and long-term commercial policies, designing and implementing the Company's human resources activities, fulfilling the obligations arising from relevant legislation, managing customer relations and corporate communication processes, and ensuring the commercial and legal security of the individuals and legal entities with whom the Company has business relations, within the framework of the limits prescribed by the Law, in a manner compatible with the law, honesty, and these purposes at all times.

3. Transfer of Personal Data Your personal data is transferred within the scope of the above-mentioned purposes, to competent public authorities authorized by law, judicial and administrative authorities, other legal entities and real persons allowed by special legislation, to authorized institutions and organizations for audit purposes, to payment institutions with which agreements are made for the fulfillment of payments and financial obligations, to business partners with whom services are received or with whom cooperation is carried out, and to suppliers of the Company, with the necessary data security measures being taken, as stipulated by the Law.

4. Method of Collection and Legal Basis for Processing Personal Data Your personal data is collected by the Company's authorized units and employees through automatic and non-automatic methods, in verbal, written, or electronic media. In this context, personal data falling into the categories of identity, communication, location, personal, legal transaction, customer transaction, physical space security, transaction security, risk management, finance, professional experience, marketing, visual, and auditory records are processed based on the legal reasons of it being mandatory to process personal data directly related to the establishment or performance of a contract, processing of personal data is mandatory for the data controller to fulfill its legal obligation, personal data is made public by the data subject, and processing of personal data is mandatory for the legitimate interests of the Holding, provided that it does not harm the fundamental rights and freedoms of the data subject.

5. Rights of Data Subjects Under the Law You can apply to Bookcars.com at any time to:

• Learn whether your personal data has been processed,

• Request information if your personal data has been processed,

• Learn the purpose of processing your personal data and whether they are used in accordance with the purpose,

• Know the third parties in the country or abroad to whom your personal data has been transferred,

• Request the correction of your personal data if it is incomplete or incorrectly processed,

• Request the deletion or destruction of your personal data,

• Request the notification of the third parties to whom your personal data has been disclosed,

• Object to a result against you arising from the analysis of your personal data exclusively by automated systems,

• Request the compensation of damages in case of suffering damage due to the unlawful processing of your personal data.