This Public Disclosure Text has been prepared in order to enlighten personal data of users regarding its processing within the scope of the Law on the Protection of Personal Data ("Law") Law no: 6698 by omchain.io which belongs to Open Money Teknoloji ve Yatırım Anonim Şirketi (the "Company") (MERSİS No: 0644078523800001) You can find detailed information about the processing of your personal data within the scope of this Public Disclosure Text from omchain.io Personal Data Protection and Processing Policy at omchain.io.com/en/kvkk

Your personal data is collected in electronic or physical environment. Your personal data collected for legal reasons specified in this Public Disclosure Text can be processed and shared within the framework of the personal data processing conditions specified in Articles 5 and 6 of the Law.

Your personal data is customized according to the likes, usage habits and needs of the relevant persons, within the framework of the personal data processing conditions specified in Articles 5 and 6 of the Law, and the planning and execution of the activities required by the company to carry out the necessary work by the business units to make use of the products and services by the business units and the relevant business processes together with carrying out the necessary work by the relevant business units for the realization of the commercial activities carried out by the Company and carrying out the related business processes, planning the commercial and / or business strategies of the company and execution and for the purpose of ensuring the legal, technical and commercial-occupational safety of the Company and the relevant persons in business relations with the Company.

Planning and execution of the activities required for the promotion and promotion of your personal data by customizing the products and services offered by the Company according to the likes, usage habits and needs of the relevant persons within the framework of the personal data processing conditions and purposes specified in Articles 8 and 9 of the Law Carrying out the necessary work by business units to benefit the relevant persons from the products and services offered by the company and carrying out the relevant business processes, carrying out the necessary work by the relevant business units for the realization of the commercial activities carried out by the Company and carrying out the related business processes, for the planning and execution of business strategies and to ensure the legal, technical and commercial-business security of the Company and the relevant persons in business relations with the Company, the Company's business partners and suppliers and legally authorized institutions and organizations. can be shared with authorized private law legal entities.

As personal data owners, if you submit your requests regarding your rights stated below to the Company using the methods specified under the heading of Exercise of Rights by Data Owners, your requests will be evaluated and concluded by the Company as soon as possible and in any case within 30 (thirty) days.

As a personal data owner in accordance with Article 11 of the Law, you have the following rights:

• Learning whether your personal data is being processed,
• If your personal data has been processed, to request information regarding this,
• Learning the purpose of processing your personal data and whether they are used appropriately for their purpose,
• To know the third parties in the country or abroad to whom your personal data has been transferred
• To request correction of your personal data in case of incomplete or incorrect processing and to request notification of the transaction made within this scope to third parties to whom personal data are transferred
• To request the deletion or destruction of your personal data in the event that the reasons requiring its processing disappear, despite the fact that it has been processed in accordance with the provisions of the law and other relevant laws, and to notify the third parties to whom the personal data has been transferred,
• Object to the occurrence of a result against the person himself by analyzing your processed data exclusively through automatic systems,
• To request the compensation of the damage in case your personal data is damaged due to unlawful processing.
• Paragraph 2 of Article 28 of the Law lists the cases where data owners do not have the right to request, and within this scope;
• Processing of personal data is necessary for the prevention of crime or for criminal investigation,
• Processing personal data made public by the person concerned,
• Processing of personal data is necessary for the execution of supervision or regulation duties and disciplinary investigation or prosecution by the authorized and authorized public institutions and organizations and professional organizations that have the quality of public institutions, based on the authority granted by the law,
• In cases where the processing of personal data is necessary for the protection of the economic and financial interests of the State in relation to budget, tax and financial issues, the above rights regarding data cannot be used.
• According to paragraph 1 of Article 28 of the Law, as the data will be outside the scope of the Law in the following cases, the requests of the data owners will not be processed in terms of these data:
• Processing of personal data by real persons within the scope of activities related to him or his family members living in the same residence, provided that they are not given to third parties and obligations regarding data security are complied with.
• Processing personal data for purposes such as research, planning and statistics by anonymizing them with official statistics.
• Processing of personal data for artistic, historical, literary or scientific purposes or within the scope of freedom of expression, provided that it does not violate national defense, national security, public security, public order, economic security, privacy of private life or personal rights or constitute a crime.
• Processing of personal data within the scope of preventive, protective and intelligence activities carried out by public institutions and organizations authorized by law to ensure national defense, national security, public security, public order or economic security.
• Processing of personal data by judicial authorities or execution authorities in relation to investigation, prosecution, trial or execution proceedings.

• Data owners can send an e-mail to [email protected] to use the rights mentioned above.
• Applications will be made by one of the following methods, together with the documents that will determine the identity of the relevant data owner:
• Filling in the Form (to be sent by e-mail) for the Applications to be made by the Personal Data Owner to the Data Controller and delivering the wet signed copy by hand, via a notary public or by registered mail to the address specified in the form.
• Following a method prescribed by the Personal Data Protection Board
• The Company responds within thirty (30) days to the data owners who want to use the said rights within the framework of the limits stipulated in the Law, as stipulated in the Law. In order for third parties to make an application request on behalf of personal data owners, a special power of attorney issued by the data owner through a notary public must be available on behalf of the applicant.
• While data owner applications are processed free of charge as a rule, they may be charged over the fee schedule stipulated by the Personal Data Protection Board.
• The company may request information from the relevant person in order to determine whether the applicant is the owner of personal data, and in order to clarify the matters specified in the application, it may ask a question to the personal data owner about his application.
• In accordance with the "Communiqué on the Procedures and Principles of Application to the Data Controller" published in the Official Gazette dated 10.03.2018 and numbered 30356, if the application of data owners is to be answered in writing, no fee is charged up to ten pages. A transaction fee of 1 Turkish Lira may be charged for each page above ten pages. If the answer to the application is given in a recording medium such as CD or flash drive, the fee that may be requested by the Authority cannot exceed the cost of the recording medium.