This declaration and consent form is an annex and an integral part of the Personal Data Protection Law No. 6698 and the disclosure form within the scope of this law, any service contract you have signed with our company and your requests for service procurement. Pursuant to the "Law No. 6698 on the Protection of Personal Data" and the "Regulation on the Processing of Personal Health Data and Ensuring Privacy", to the processing of my personal data, sensitive personal data, health data, and to the processing of all kinds of personal data, including those that identify or serve to identify me given by me verbally / in writing and / or electronically, by Kıvanç Enerji Üretim Anonim Şirketi and its group of companies and all its affiliates, to share the personal file during the selection of candidates for the purpose of making an employment contract, the signing of the employment contract and the provision of health services in accordance with the employment contract, in cases required by the employer's financial liability insurance policy and for the purpose of planning these services, to share the personal file during the insurance entry-exit transactions between other companies under the same roof of the company within the consent of the employee, and to share it with other persons and organizations where sharing is required within the scope of the relevant legislation; I hereby accept, declare and undertake that I consent to the processing of my personal and sensitive personal data detailed below within the scope defined in the "Personal Data Protection Law" numbered 6698 and the "Regulation on the Processing of Personal Health Data and Ensuring Privacy". I hereby accept, declare and undertake that I have read this information letter and within the scope of the Law No. 6698 on the Protection of Personal Data, I hereby accept, declare and undertake that I consent in advance to the collection, recording, processing and storage of personal data by Kıvanç Enerji Üretim Anonim Şirketi and its group of companies and all affiliates within the framework of the principles in the law. I have read and accept the information text on the website on the Protection and Processing of Personal Data by Kıvanç Enerji Üretim Anonim Şirketi and its group of companies and all its subsidiaries and my rights

KIVANÇ ENERJİ ÜRETİM ANONİM ŞİRKIRKETİ CLARIFICATION TEXT ON THE PROTECTION AND PROCESSING OF PERSONAL DATA

A) WHAT IS THE IDENTITY INFORMATION OF THE DATA CONTROLLER AND REPRESENTATIVE?

1.DATA CONTROLLER As Kıvanç Enerji Üretim Anonim Şirketi ("DATA RESPONSIBLE"), we show the utmost sensitivity to your Constitutional rights regarding the confidentiality, security, lawful processing of your personal data and securing your fundamental rights and freedoms. In accordance with the Law No. 6698 on the Protection of Personal Data and in the capacity of "Data Controller" as defined in the KVK Law, we would like to inform you about the processing, including but not limited to the collection, storage, transfer of the data obtained and the purpose of the transaction in question. Pursuant to KVKK No. 6698, you may provide all kinds of personal data (identity, contact, location, personal, legal transaction, customer transaction, physical space security, transaction security, risk management, finance, professional experience, audio-visual records, IBAN information, telephone records, network records on devices connected to the company network, marketing, shopping history information, survey, cookie records, information obtained through campaign work, health information, criminal conviction and security measures, SSI number, address, signature information, All kinds of information and documents including vehicle license plate, e-mail address, security camera records) can be processed, recorded, stored, stored and stored in order to continue services, services, stored and stored in order to continue, transferred to third parties, shared and anonymized by Kıvanç Enerji Üretim Anonim Şirketi as the data controller in accordance with the regulations in the Constitution, International conventions, KVKK No. 6698 and the relevant laws and regulations to which this law refers. As the data controller, it takes all necessary administrative and technical measures to protect personal data processed in accordance with the relevant laws and legislation.

B) FOR WHAT PURPOSES DO WE PROCESS YOUR PERSONAL DATA? In order to use your personal data in the necessary processes, all information and documents, fulfillment, maintenance, execution, development of our activities in accordance with all relevant laws and regulations, protection and supervision of commercial data, fulfillment of the requirements of the contracts issued or to be issued, ensuring security, e- mails in electronic media, special quality personal data collected according to the nature of the business, maintenance of the legal and commercial security of persons with whom we have a business relationship, legal and financial affairs and similar trade and business strategies, human resources, execution of accounting policies, ensuring physical security and audit, compliance with domestic and international legislation, compliance with information transfer, storage and reporting obligations required by public institutions or other authorities, providing better and more reliable service to you and maintaining it uninterruptedly. and 6 of the Law in order to comply with the information transfer, storage, reporting obligations requested by public institutions or other authorities, to provide better and more reliable service to you and to maintain uninterrupted.

C) TO WHOM AND FOR WHAT PURPOSE CAN THE PROCESSED PERSONAL DATA BE TRANSFERRED? Your personal data may be transferred to real persons or private legal entities, other companies under the umbrella of the company with the consent of the employee in order to fulfill the objectives within the framework of the activities of Kıvanç Enerji Üretim Anonim Şirketi, to determine and implement strategies, to ensure the execution of human resources policies, and to the personnel files, Company officers, shareholders, employees, service providers or third parties, legal, financial and tax consultants and other consultants, auditors, organizations or individuals, authorities such as SSI, ministries, judicial authorities, all public institutions and organizations authorized by law. and 9. of the Law within the framework of the conditions and purposes listed in Articles 8 and 9 of the Law.

Ç) WHAT IS THE METHOD AND LEGAL REASON FOR COLLECTING PERSONAL DATA? Your personal data is obtained in all kinds of verbal, written or electronic media, in accordance with the personal data processing conditions and purposes specified in Articles 5 and 6 of the KVK Law in order to provide the products and services we offer by the Company within the legal framework determined in line with the above-mentioned purposes, and in this context, in order for our company to fulfill its obligations arising from the contract and the law completely and accurately, and for our company to work more effectively, by sharing it directly by you.

D) WHAT ARE YOUR OTHER RIGHTS LISTED IN ARTICLE 11? As personal data subjects, you may submit your written request regarding your rights to Ulucami Mh. Abidinpaşa Cd. No: 54/18 Seyhan/ADANA with wet signature or to info@kivancsolar.com signed with secure electronic signature. Your application will be answered within thirty days at the latest from the date of your written application to us. If the transaction requires an additional cost, we reserve the right to demand the fees in the tariff determined by the Personal Data Protection Authority. In this context, personal data owners;

• Learn whether personal data is processed or not,

• Request information if their personal data has been processed,

• Learning the purpose of processing personal data and whether they are used in accordance with their purpose

 • To know the third parties to whom personal data are transferred domestically or abroad,

• To request correction of personal data in case of incomplete or incorrect processing and to request notification of the transaction made within this scope to third parties to whom personal data is transferred,

• Although it has been processed in accordance with the provisions of the KVK Law and other relevant laws, to request the deletion or destruction of personal data in the event that the reasons requiring its processing disappear and to request notification of the transaction made within this scope to third parties to whom personal data is transferred,

• To object to the emergence of a result to the detriment of the person himself/herself by analyzing the processed data exclusively through automated systems,

• In case of damage due to unlawful processing of personal data, it has the right to demand compensation for the damage.