At THE SANSASYONEL ("Data Controller" or "THE SANSASYONEL"), our purpose in preparing this privacy notice is to inform you in the most transparent way about the methods of collection, purposes of processing, parties with whom your personal data is shared, legal reasons for processing, and your rights, in accordance with Article 10 of the Personal Data Protection Law No. 6698. Oxygen ensures that your personal data is processed, stored, and shared in compliance with the law, and takes the highest level of security measures possible to protect your privacy.

By subscribing to our general marketing newsletters through the THE SANSASYONEL website at https://thesansasyonel.com/en, the following categories of your data ("Personal Data") processed by Economy Corner:

• Identity Information (Name, Surname)
• Contact Information (Email Address)
• Customer Transaction Information (Username, Password)

are processed in a fully or partially automated manner (in electronic form) based on the legal reason of "Explicit Consent" as specified in Article 5 of the Law.

Your personal data is processed for the following purposes:

• Execution of Advertising/Campaign/Promotion Processes,
• Management of Customer Relations Processes,
• Conducting Activities Aimed at Customer Satisfaction,

and is processed for the durations necessary for these purposes. Additionally, your personal data is processed based on the legal grounds of "establishing, exercising, or protecting a right" for use as evidence in legal disputes.

If you have given your explicit consent, your personal data will be stored domestically by our local partner data centers and will also be transferred daily to Amazon (AWS) data centers located in EU West (Ireland) for backup purposes for security reasons.

Furthermore, upon subscribing to Economy Corner, the following categories of your data processed by Oxygen:

• Customer Transaction Information (Invoice Type (Individual/Corporate), Name, Surname, Turkish/Foreign ID Number, Country, City, Address, Phone Number)

are processed based on the legal grounds that "processing of personal data belonging to the parties of a contract is necessary for the formation or performance of that contract," and for the purposes of "Conducting Activities in Compliance with the Legislation" and "Management of Financial and Accounting Affairs."

As the data subject, you can submit your requests under Article 11 of the Law, which regulates the rights of the data subject, to Oxygen in accordance with the Communiqué on Procedures and Principles of Application to Data Controller:

• By mail to 2 Hardman St., Manchester M3 3HF,
• By using a secure electronic signature, mobile signature, or an email address previously approved by Oxygen at [email protected] .

In your application, it is mandatory according to Article 5/2 of the Communiqué to include your name, surname, signature if the application is in writing, your Turkish ID number for Turkish citizens, nationality, passport number or any identity number for foreigners, address for notification of your residence or place of business, your email address for notification if available, phone and fax numbers, and the subject of your request; including any relevant information and documents to your request is important for your application to be concluded in a timely and accurate manner. We reserve the right to verify your identity before responding. 23/04/2024.