/ Information Notice

PERSONAL DATA PROTECTION AND PROCESSING INFORMATION NOTICE

1. Identity of the Data Controller In accordance with the Personal Data Protection Law No. 6698 (“KVKK”), as Novacon Bilişim Danışmanlık Ve Dış Tic. Ltd. Şti. (“Novacon” or “Company”), we process your personal data as the data controller within the scope and purposes explained below.

2. Your Processed Personal Data The following data are collected through the contact and demo request forms on our website (www.novaconglobal.com):

• Identity Information: Your name, surname.

• Contact Information: Your email address, business phone number.

• Professional Information: Your company name, your role in the company, the area where the system will be used (Finance, Production, etc.).

• Other: The content of the message you send to us.

3. Purposes of Processing Personal Data Your personal data are processed for the following purposes:

• Receiving and scheduling your demo requests related to Oracle NetSuite and other consulting services,

• Preparing preliminary assessments to offer the most suitable ERP solution for your company’s needs,

• Responding to your questions, requests, or complaints submitted via contact forms,

• Improving our products and services and managing customer relationship processes,

• If you give your explicit consent, sending commercial electronic communications such as newsletters, campaigns, or service updates.

4. Method and Legal Basis for Collecting Personal Data Your personal data are collected electronically and automatically when you fill out the forms on our website. These data are processed based on the legal grounds specified in Article 5 of KVKK:

• “Processing of personal data belonging to the parties of a contract is necessary, provided that it is directly related to the establishment or performance of the contract,”

• “Processing is mandatory for the data controller to fulfill its legal obligation,”

• “Processing is necessary for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject.”

5. Transfer of Personal Data Your personal data may be shared with authorized public institutions and organizations for the fulfillment of legal obligations, with trusted suppliers providing infrastructure services (server, cloud, CRM) for the execution of our business processes, and with business partners only to the extent necessary and under confidentiality agreements.

6. Your Rights under KVKK In accordance with Article 11 of KVKK, you have the right to learn whether your personal data are processed, request information if they have been processed, learn the purpose of processing and whether they are used accordingly, know the third parties to whom they are transferred domestically or abroad, request correction of incomplete or incorrect data, and request deletion or destruction of your data.

To exercise these rights, you may submit your requests in writing to “Cevizli, Bağdat Cad. Turan İş Merkezi No:460 Kat:7 Daire:13, 34846 Maltepe/İstanbul” or via email to info@novaconbilisim.com.tr.