PRIVACY POLICY

PREFACE
Within the scope of the Personal Data Protection Law, as MOSA Legal, we attach importance to the protection of your personal data and / or personal data of special nature. We are sensitive to the storage of all personal data and / or personal data of special nature that are transmitted to our company in various ways. In this context, especially the Personal Data Protection Law No. 6698, T.C. As MOSA Legal, we have taken all technical and administrative measures in order to comply with the provisions of the Constitution and other legislation. We would like to emphasize that we will protect your rights guaranteed by laws. In this context, you can safely share your personal data with our company, and convey your suggestions, complaints and hesitations to us.
We share with you our Privacy Policy, which has been put into effect in our Company, which is particularly important for the protection of your personal data.
MOSA Legal

1. PURPOSE OF THE PRIVACY POLICY
Our basic principle is to protect personal data and to comply with laws. Our company has always shown the necessary sensitivity regarding the protection of personal data and / or personal data of special nature. The personal data and / or personal data of special nature that we have received from you in all the works we do as MOSA Legal (hereinafter referred to as "MOSA Legal" or the "Company") are kept confidential and not shared with third parties. Again, in accordance with the Personal Data Protection Law No. 6698, our internal regulations have been made again; all technical and administrative measures have been taken. In the ongoing process, as MOSA Legal, we accept, declare and undertake to comply with all responsibilities brought by the laws.

2. SCOPE OF THE PRIVACY POLICY
This Privacy Policy has been prepared in accordance with the Personal Data Protection Law No.6698.
Your personal data and / or special quality personal data are obtained with your consent or within the scope of compliance with the law. Your said data;
- Ensuring company security,
- To be able to provide you with full service,
Conducting our consultancy activities,
-Solving your problems quickly,
-It is used to increase our quality.

Some personal data and / or personal data of special nature from you are de-personalized and anonymized in the procedures stipulated by the Law. The data used for statistical purposes are currently not included in the regulation of the Law and the scope of our policy. As MOSA Legal, we have the right to change in order to protect personal data within the scope of compliance with the Law in accordance with our data policy, regulation and directive.
The privacy policy aims to protect the data obtained by any means of the customers, employees and all other persons of real and legal persons with whom MOSA Legal is a solution partner. In this context, it contains various regulations in order to achieve the intended goal.

3. BASIC PRINCIPLES REGARDING THE PROCESSING OF PERSONAL DATA AND / OR PERSONAL DATA OF SPECIAL QUALITY
Our basic principles regarding the processing of personal data and / or special quality data are as follows. In this context, these principles will also apply to the data collected or processed by MOSA Legal based on consent or in accordance with the Law.
-Compliance with Law: MOSA Legal questions the source and legal compliance of personal data and / or private personal data received from real and legal persons and collected by various means. In this context, obtaining the data in accordance with the law is important for MOSA Legal.
- Compliance with the Rules of Integrity: MOSA Legal interrogates the source of personal data and / or personal data of special nature received from real and legal persons and collected in various ways. In this context, it is important for MOSA Legal to obtain the data within the framework of honesty rules.
- Being Limited, Measured and Connected with the Purpose of Processing: MOSA Legal uses personal data and / or special quality personal data obtained through various means in accordance with the purpose for which they are processed, limited for processing purposes, measured and to the extent required by the performance of the service.
- Correctness of Personal Data and / or Special Quality Personal Data: MOSA Legal attaches importance to the fact that the personal data and / or special quality personal data received from real and legal persons and collected in various ways do not contain false information and are accurate.
- Being Up-to-Date when Necessary: ​​If MOSA Legal has obtained changes in personal data and / or special personal data in various ways, it attaches importance to forwarding the change to the company and updating the data if it is transmitted.
- Processing for Specific and Legitimate Purposes: MOSA Legal processes the data within the framework of the consent of the data owner in order to carry out the consultancy activity and to ensure the performance of the work. It does not process and use personal data except for the purpose of conducting consulting activities and ensuring the performance of the work. It does not allow the use and processing of third parties.
- Preservation for the Period Stipulated by the Law and / or Required for the Purpose of Processing: MOSA Legal stores the personal data and / or personal data of special nature for the periods stipulated in the relevant laws. In this context, it preserves contractual personal data as much as the statute of limitations and dispute arising periods stipulated by the Laws, as required by the Commercial, Obligations and Tax Law. When the said purposes are over, it anonymizes, destroys or deletes the data. These data are deleted and destroyed in line with the "PERSONAL DATA STORAGE, TRANSFER, DELETION AND ANONYMIZATION POLICY".

RIGHTS OF THE INTEREST REQUESTING INFORMATION ACCORDING TO ARTICLE 11 OF THE PERSONAL DATA PROTECTION LAW
In Article 11 of the Personal Data Protection Law No.6698, the rights of the data owner are governed. In the law, the data owner is deemed as the person concerned; The right to make some requests regarding the processing of data is provided. In accordance with this article, the claim rights of the relevant person are as follows:
a) Learning whether personal data is being processed,
b) To request information if personal data has been processed,
c) Learning the purpose of processing personal data and whether they are used appropriately for their purpose,
ç) To know the third parties to whom personal data is transferred domestically or abroad,
d) To request correction of personal data in case of incomplete or incorrect processing,
e) To request the deletion or destruction of personal data within the framework of the conditions stipulated in Article 7 of the law titled "Deletion, destruction or anonymization of personal data",
f) Request notification of the third parties to whom the personal data is transferred to the information that the missing or incorrectly processed data has been corrected or that the data has been deleted or destroyed upon the request of the relevant person,
g) To object to the occurrence of a result against the person himself by analyzing the processed data exclusively through automated systems,
h) To demand the compensation of the damage in case of damage due to the processing of personal data illegally.
The "Information Request Form Pursuant to Law No. 6698" regarding the application process enabling you to exercise your rights in question was prepared by MOSA Legal and uploaded to the website. You, whose personal data are processed, can exercise your rights mentioned above by following the application procedures and principles on our website.

5. DELETING, EXTINGUISHING AND ANONYMING PERSONAL DATA
Your personal data and / or your personal data of special nature are deleted, destroyed or anonymized after the expiry of the statute of limitations and retention periods stipulated in the Law, the completion of judicial processes or other requirements that are suitable for the purpose. These data are deleted and destroyed in line with the "PERSONAL DATA STORAGE, TRANSFER, DELETION AND ANONYMIZATION POLICY". Deletion, destruction and anonymization are carried out at the request of the relevant data owner or by MOSA Legal automatically (automatically).

6. THE MINISTRY PRINCIPLE
The stinginess principle, also known as the principle of maximum savings. Personal data and / or personal data of special nature that are accessed through various means are transferred to our Company's system. In accordance with the aforementioned principle, data are processed in the system as much as necessary.
The data collected by MOSA Legal is determined according to the purpose and varies. In this context, data are collected in accordance with the purpose and data that are not parallel to the purpose are not collected. Surplus data other than its purpose are not recorded in the company system, deleted or made anonymous. However, the said data can be used for statistical purposes.

7. CONFIDENTIALITY AND SECURITY OF DATA
As MOSA Legal, we attach importance to the privacy of your personal data and / or private personal data. In this context, your personal data and / or private personal data reaching our Company by any means are confidential. MOSA Legal respects the confidentiality of the aforementioned data at every stage of its consultancy activity. In this context, full compliance with this Company privacy policy is ensured. Necessary technical and administrative measures are taken to ensure that personal data and / or special personal data collected in various ways do not fall into the hands of unauthorized persons, the rights of the data owner are not harmed or victims, and the data are protected. In addition, data protection is requested from companies with whom we share personal data and / or private personal data within the framework of Compliance with Law. Again, our software programs are updated and constantly renewed. In order to provide high-level protection, all technological requirements are fulfilled and compliance with standards is ensured.

8. UPDATE OF DATA
The principle of up-to-dateness is essential within MOSA Legal. Because personal data and / or personal data of special nature obtained in various ways are processed and updated upon request. Necessary measures are also taken by MOSA Legal.

9 ACCURACY OF DATA
The principle of accuracy of declared personal data and / or special quality data has been adopted by MOSA Legal. MOSA Legal is not obliged to investigate the accuracy of personal data and / or personal data of special nature declared by its customers or real and legal persons with whom it is in contact. Because this is not possible legally and in line with our working principles. In this context, all transactions are carried out with the bet that the declared data are correct.

10. PURPOSE OF PROCESSING PERSONAL DATA AND / OR SPECIAL QUALITY PERSONAL DATA
The processing of personal data and / or special quality data will be carried out in parallel with the purposes in the Clarification Text of MOSA Legal. You can access the Clarification Text on the website of MOSA Legal.

11. PROCESSING OF PERSONAL DATA AND / OR SPECIAL QUALITY PERSONAL DATA
MOSA Legal may process your personal data and / or personal data of special nature in order to carry out consultancy activities, to ensure the performance of the service and to realize legitimate purposes. The data in question are never used for illegal services and illegitimate reasons.
We also show sensitivity for the processing of special quality personal data. Our company complies with the "Personal Data Protection and Processing Policy" regarding the processing of special personal data. In addition, all necessary and sufficient measures determined by the Board are taken while processing special personal data.

12. PROCESSING OF PERSONAL DATA AND / OR PERSONAL DATA OF SPECIAL QUALITY FOR RISE PURPOSE
Electronic messages sent for advertising purposes must be approved by the buyer. In this context, electronic messages for advertising purposes can only be sent to people who have previously been approved. The subject matter is clearly regulated in the "Law on the Regulation of Electronic Commerce" and the "Regulation on Commercial Communication and Commercial Electronic Messages".
MOSA Legal acts in accordance with the provisions of the above-mentioned Law when sending electronic commercial messages for advertising purposes. Again, it complies with the approval and the details of the approval in accordance with the Law. Said approval; It can be received in any physical medium through any electronic communication means or in writing. The basis for the approval is the existence of a positive declaration of intent by the recipient of the commercial electronic message that he / she accepts the sending of commercial electronic messages, the electronic contact address and name-surname.
Approval received from the buyer, marketing and promoting the services of the Company, promoting its business, ensuring its recognition, celebration, wishes and congratulations, etc. It should cover all commercial electronic messages sent to electronic communication addresses in order to increase the recognition of the contents.

13. DATA PROCESSES DUE TO THE LEGAL LIABILITY OF THE COMPANY AND IT IS EXPRESSLY FORECAST IN THE LAW
Personal data can only be processed without further consent, for the purpose of explicitly stipulating the data processing in the relevant Law and / or to fulfill a legal obligation specified in the Law. The type and scope of the processed data must be necessary for the data processing activity permitted by law. In all circumstances, compliance with the relevant law provisions is essential.

14. COLLECTION AND PROCESSING OF PERSONAL DATA WITHIN THE CONTRACTUAL RELATIONSHIP
If a contractual relationship has been established with customers or potential customers, the data collected under the contract can be used by MOSA Legal without approval. The personal data in question are used in the performance of the service, the execution of the contract, the execution of the consultancy activity and the requirements. This data can be updated by contacting customers.

15. PERSONAL DATA SHARED WITH BUSINESS-SOLUTION PARTNERS AND BUSINESS PARTNERS
MOSA Legal has made it a principle to act in accordance with the Law regarding the sharing of personal data. In this context, it acts in accordance with the provisions of the relevant Law while sharing data with business-solution partners.
With its commitment to data privacy, MOSA Legal only shares the necessary personal data with its business-solution partners for the performance of the service, the execution of the business and the continuation of the consultancy activity. Along with the shared data, business-solution partners are required to take the necessary administrative and technical measures to ensure data security.

16.PERSONAL DATA AND / OR SPECIAL QUALITY PERSONAL DATA PROCESSED BY AUTOMATIC SYSTEMS
Data obtained from information obtained through automated systems without the express consent of the persons cannot be used against individuals. MOSA Legal can only make decisions about the people it will transact with using the data in its system. On the basis of all these, MOSA Legal acts in accordance with all relevant legislation provisions regarding personal data processed through automatic systems and / or personal data of special nature.

17. TRANSFER OF PERSONAL DATA DOMESTIC AND ABROAD
MOSA Legal may share personal data with business-solution partners and controlling shareholders in order to carry out the service and consultancy activity. Again, MOSA Legal will be able to transfer personal data to external sources that are outsourced and in order to provide the necessary service for the consultancy activity.
In this context, MOSA Legal has the authority to transfer personal data domestically and abroad in accordance with the conditions stipulated in the Law and within the framework of the principles determined by the Board and with the approval of the relevant person.

19. RIGHTS OF INTERESTED BY REQUESTING INFORMATION
In Article 11 of the Personal Data Protection Law No.6698, the rights of the data owner are governed. According to the Law, MOSA Legal accepts that the consent of the relevant person must be obtained before the data is processed, and after the data is processed, the person concerned has the right to request information about his data, to be updated, deleted, destroyed and anonymized.
Relevant persons can access the "Information Request Form Pursuant to Law No. 6698" from the website of MOSA Legal and regarding their personal data;
a) Learning whether personal data is processed,
b) To request information if personal data has been processed,
c) Learning the purpose of processing personal data and whether they are used appropriately for their purpose,
ç) To know the third parties in the country or abroad to whom personal data have been transferred,
d) Request rectification in case personal data are processed incompletely or inaccurately,
e) To request the deletion or destruction of personal data within the framework of the conditions stipulated in Article 7 of the law titled "Deletion, destruction or anonymization of personal data",
f) Request notification of the third parties to whom the personal data is transferred to the information that the missing or incorrectly processed data has been corrected or that the data has been deleted or destroyed upon the request of the relevant person,
g) To object to the occurrence of a result against the person himself by analyzing the processed data exclusively through automated systems,
h) In case of damage due to unlawful processing of personal data, it has the right to demand the compensation of the damage.

Applications must be personal to the person concerned. An application cannot be made for information requests regarding the personal data of another person. In addition, information requests made on behalf of someone else will not be answered by the Company. If it is determined by MOSA Legal that the application made on behalf of someone else in the request for information; MOSA Legal reserves all kinds of lawsuits and claims. The requests of the relevant person will be answered within thirty days at the latest from the date they reach MOSA Legal. If MOSA Legal deems necessary, it will be able to request additional information and documents from the applicant. The person concerned with the personal data that is anonymized within the company does not have a right.

20. PRIVACY POLICY
All personal data and / or private personal data of employees and persons who have accessed MOSA Legal in various ways are confidential. No one can use, reproduce, transfer or copy personal data and / or personal data of special nature outside the scope of the contract, except for business purposes and without reasons for compliance with the law.

21. INSPECTION AND PROCESS SECURITY
Necessary technical and administrative measures are taken to ensure that personal data and / or special personal data collected in various ways do not fall into the hands of unauthorized persons, the rights of the data owner are not harmed or victims, and the data are protected. In addition, data protection is requested from companies with whom we share personal data and / or private personal data within the framework of Compliance with Law. Again, our software programs are updated, constantly renewed and developed. In order to provide high-level protection, all technological requirements are fulfilled and compliance with standards is ensured. Parallel to all these, MOSA Legal carries out all necessary internal and external inspections to protect personal data and / or special quality data.

22. NOTIFICATION OF PERSONAL DATA VIOLATIONS
In the event of any breach of personal data, MOSA Legal takes immediate action to remedy the violations reported to it. It takes all necessary measures to minimize the damage of the person concerned. In this context, it compensates by minimizing the damage.
In the event that personal data and / or special personal data are obtained by unauthorized third parties, the Company notifies the subject directly to the Personal Data Protection Board.
İyzico
Whatsapp