INFORMATION NOTICE ON THE PROTECTION AND PROCESSING OF PERSONAL DATA

Last Updated: 02.02.2026

1. DATA CONTROLLER

This Information Notice has been prepared by Code and More ("Company"), acting as the data controller, in accordance with the Turkish Personal Data Protection Law No. 6698 ("KVKK").

Data Controller Information:

• Company Name: Code and More
• Website: https://codeandmore.com.tr
• Email: [email protected]

2. PURPOSES OF PROCESSING PERSONAL DATA

Your personal data are processed for the following purposes:

2.1. Website Usage

• Ensuring the functionality of the website
• Improving user experience
• Conducting statistical analysis
• Ensuring website security

2.2. Communication and Customer Relationship Management

• Responding to communication requests
• Ensuring customer satisfaction
• Evaluating feedback
• Managing requests and complaints

2.3. Service Delivery

• Providing offered services
• Managing contract processes
• Executing payment transactions
• Issuing invoices

2.4. Marketing Activities

• Conducting promotional and marketing activities
• Sending campaign and announcement notifications
• Performing customer segmentation
• Providing personalized content

2.5. Legal Obligations

• Fulfilling data retention obligations required by legal regulations
• Fulfilling the obligation to provide information to authorized institutions and organizations

3. PROCESSED PERSONAL DATA

Your personal data within the following categories may be processed:

3.1. Identity Information

• Name, surname
• Turkish ID number (when necessary)
• Date of birth
• Gender

3.2. Contact Information

• Email address
• Phone number
• Address information
• Business phone number

3.3. Customer Transaction Information

• Order information
• Payment information
• Contract information
• Invoice information

3.4. Technical Data

• IP address
• Cookie records
• Browser type and version
• Operating system information
• Device information
• Access date and time
• Visited pages

3.5. Marketing Information

• Areas of interest
• Preference information
• Survey and form responses
• Campaign participation information

4. LEGAL GROUNDS FOR PROCESSING PERSONAL DATA

Your personal data are processed based on the following legal grounds specified in Articles 5 and 6 of KVKK:

• Your explicit consent
• Being directly related to the establishment or performance of a contract
• Being mandatory for the fulfillment of our legal obligations
• Being made public by the data subject
• Being mandatory for the establishment, exercise, or protection of a right
• Being mandatory for our legitimate interests, provided that it does not harm your fundamental rights and freedoms

5. TRANSFER OF PERSONAL DATA

Your personal data may be transferred, to the extent necessary for the fulfillment of the purposes stated above and our legal obligations, to:

• Our business partners
• Our service providers
• Our suppliers
• Authorized public institutions and organizations as required by legal regulations
• Private legal entities as required by legal regulations

in accordance with Articles 8 and 9 of KVKK.

5.1. Transfer Abroad

Your personal data may be transferred abroad in accordance with the conditions stipulated in Article 9 of KVKK. In such cases, it is ensured that adequate protection exists and written undertakings are obtained.

6. METHODS OF COLLECTING PERSONAL DATA

Your personal data are collected through the following methods:

• Online forms via the website
• Email
• Phone calls
• Cookies
• Mobile applications
• Physical forms
• Contracts
• Automated systems

7. RIGHTS OF THE DATA SUBJECT

Pursuant to Article 11 of KVKK, you have the following rights:

• To learn whether your personal data are processed
• To request information if your personal data have been processed
• To learn the purpose of processing and whether they are used in accordance with that purpose
• To know the third parties to whom your personal data are transferred domestically or abroad
• To request correction if your personal data are incomplete or incorrectly processed
• To request deletion or destruction of your personal data under the conditions stipulated in Article 7 of KVKK
• To request notification of correction, deletion, or destruction to third parties to whom personal data have been transferred
• To object to the occurrence of a result against you by analyzing processed data exclusively through automated systems
• To request compensation for damages if you suffer damage due to unlawful processing of your personal data

8. EXERCISE OF RIGHTS

You may submit your applications to exercise your rights through the following methods:

8.1. Application Methods

• Written Application: In person or via a notary to [Company address]
• Electronic Application: Via registered electronic mail (KEP), secure electronic signature, mobile signature, or the email address previously notified and registered in our system, to [Company email address]
• Website: Via the application form available at https://codeandmore.com.tr/

8.2. Application Requirements

Your application must include:

• Your name, surname, and signature if the application is in writing
• Your Turkish ID number
• Your residential or workplace address for notification
• Your email address, phone number, and fax number, if available
• Your request subject

information.

8.3. Response Period

Your applications will be concluded free of charge within a maximum of 30 (thirty) days. If the process requires an additional cost, the fee determined by the Personal Data Protection Board may be charged.

9. SECURITY

To ensure the security of your personal data, the following measures are implemented:

• Technical security measures (encryption, firewall, antivirus, etc.)
• Administrative security measures (confidentiality agreements, authorization, training, etc.)
• Physical security measures (access controls, secure storage, etc.)

10. COOKIES

Cookie technology is used on our website. For detailed information on the use and management of cookies, please review our Cookie Policy.

10.1. Types of Cookies Used

• Strictly Necessary Cookies: Required for the basic functions of the website
• Performance Cookies: Used to measure and improve website performance
• Functional Cookies: Used to remember your preferences
• Marketing Cookies: Used to provide personalized content based on your interests

10.2. Cookie Management

You can manage your cookie preferences through your browser settings. However, disabling certain cookies may prevent you from benefiting from all website features.

11. THIRD-PARTY SERVICES

The following third-party services may be used on our website:

• Google Analytics (Website analytics)
• Google Drive (File storage)
• Payment systems (Payment processing)
• Email services (Communication)

These services have their own privacy policies and cookie practices.

12. SOCIAL MEDIA

Our website may include social media sharing buttons. When you click these buttons, the privacy policy and terms of use of the relevant social media platform will apply.

13. CHILDREN'S PRIVACY

Our website and services are not intended for individuals under the age of 18. We do not knowingly collect personal data from individuals under 18. If we become aware that we have collected personal data from a minor, such data will be deleted immediately.

14. CHANGES TO THIS INFORMATION NOTICE

This Information Notice may be amended in line with changes in legal regulations or updates to our company policies. Updates will be published on our website and notified to you when necessary.

15. CONTACT

If you have any questions or requests regarding the processing of your personal data, you may contact us:

Email: [email protected]
Website: https://codeandmore.com.tr

APPENDICES

APPENDIX-1: DATA SUBJECT APPLICATION FORM

As a data subject, you may access the application form to exercise your rights under Article 11 of KVKK.

APPENDIX-2: EXPLICIT CONSENT TEXT

If explicit consent is required for the processing of special categories of personal data or for marketing communications, your consent will be obtained through a separate explicit consent text.

IMPORTANT: The information indicated in square brackets [ ] in this information notice (company address, email, phone number, etc.) must be updated with your company’s actual details.

This information notice has been prepared in accordance with the Turkish Personal Data Protection Law No. 6698 and must be kept up to date.

This text was last updated on 02.02.2026.