NUROL HOLDİNG ANONİM ŞİRKETİ
INFORMATION FORM RELATING TO THE PROTECTION AND PROCESSING OF THE PERSONAL DATA OF EMPLOYEE CANDIDATES

1. DATA CONTROLLER
Acting in its capacity of data controller, Nurol Holding Anonim Şirketi (“Company”) may process your personal data in accordance with Personal Data Protection Law Number 6698, for the purposes specified below. You can find detailed information concerning the processing of your personal data by our Company in the Nurol Holding A.Ş. Policy on the Protection and Processing of Personal Data, which is publicly available at the website www.nurol.com.tr.

2. PURPOSES BEHIND THE PROCESSING OF YOUR PERSONAL DATA
Your personal data may be processed in accordance with the fundamental principles of the Law, and within the framework of the conditions stipulated for the processing of personal data found in Articles 5 and 6 of the said Law, for the stated purpose (collectively referred to as the “Purposes”) of (1) carrying out the application, selection and assessment processes of employee candidates; (2) performing the necessary internal and external communication processes for the placement of employee candidates; (3) conducting reference check and intelligence activities for employee recruitment and company security processes; (4) planning and/or carrying out the human resources policies and processes of our Company; (5) planning and/or carrying out the necessary activities aimed at ensuring the legal and technical safety of our Company, and of the relevant persons in business relationships with our Company.

3. PARTIES TO WHICH YOUR PERSONAL DATA IS TRANSFERRED AND THE PURPOSES OF THE TRANSFER
With the intention of fulfilling the aforementioned Purposes, your personal information that we collect may be transferred to the group companies, shareholders, suppliers, legally authorized public institutions and organizations, and legal persons specially authorized by the law, in compliance with the conditions relating to the processing personal of data specified in Articles 8 and 9 of the Law.

4. METHODS AND LEGAL REASONS FOR COLLECTING YOUR PERSONAL DATA
In the event of you coming into contact with our Company, your personal data will be collected from electronic and/or physical environments through (1) the hardcopy or electronic/digital application form that you submit; (2) the curriculum vitae that you submit to the company via e-mail, courier or fax, Internet websites, references and similar methods; and (3) employment agencies or consultancy companies working on our behalf. Furthermore, your personal data is collected through the preparation and execution of an agreement in accordance with Articles 5 and 6 of the Law, and with your prior explicit consent, as defined in the law, in the event of there being a legitimate interest in their collection.

5. YOUR RIGHTS AS THE OWNER OF PERSONAL DATA ACCORDING TO ARTICLE 11 OF THE LAW

As the sole owner of your personal data, we want to inform you that you hold the following rights pursuant to Article 11 of the Law:

• To learn about any processing of your personal data,
• To request information about how your data has been processed,
• To learn the purpose behind the processing of your personal data, and whether it is being used in accordance with this purpose,
• To learn about any third parties, both in Turkey and abroad, to which your personal data is being transferred,
• To request corrections to your personal data in the event of it being incomplete or being processed erroneously, and demand that third parties receiving your personal data are informed about such corrections,
• Even if your data has been processed in accordance with the Law and the provisions of other laws, to request that your personal data be deleted or destroyed in the event of the initial reasons that required them to be processed becoming invalid, and demand that third parties receiving your personal data are informed about such requests,
• To raise an objection in case the analysis of your processed data by exclusively automatic systems results in an outcome that is disadvantageous for you,
• To ask for compensation in the event of you suffering harm due to the processing of your personal data in a manner that is contrary to the law.

You may forward to our Company any applications you may have pertaining to your rights listed above by completing and submitting the Nurol Holding A.Ş. Data Owner Application Form, which can be found at the website www.nurol.com.tr. Depending on the nature of your request, we will respond to your application as soon as possible, and within 30 days at the latest, free of any charges. However, should the requested procedure involve additional costs, we will request a fee from you based on a rate to be determined by the Personal Data Protection Board.