As MÖRDAK PRODÜKSİYON VE AJANS HİZMETLERİ TİC. LTD. ŞTİ. (“Mördak”), we attach great importance to the protection of personal data. In processing your personal data, we act in compliance with the Constitution of the Republic of Turkey, the international conventions to which our country is a party, Law No. 6698 on the Protection of Personal Data (“KVKK”), secondary legislation, and the guidelines and decisions published by the Personal Data Protection Board. We fully comply with the data processing principles and obligations set out in the relevant legislation. Within this scope, as the “data controller” under KVKK, we process your personal data in accordance with the purposes and limitations described below, taking all necessary administrative and technical measures with utmost care. Accordingly, this “Privacy Notice on the Processing of Personal Data” (the “Notice”) aims to inform you about how we process your personal data within the scope of our cooperation and interactions with you.

Personal Data We Process

We collect and process your personal data through our website www.mordak.com.tr, during the purchase of training programs, or during the course of the training itself — verbally and/or in writing. The categories, types, purposes, and legal bases of the personal data we process (collectively referred to as “Personal Data”) are listed below:

Processed Data and Data Categories

Data Category	Data Types	Purpose of Processing	Legal Basis
Identity Information	Full name, date and place of birth, Turkish ID number	To obtain information about the training participant, to issue a participation certificate, and to contact the training purchaser	Formation of a remote/direct sales contract; based on Article 5/2(f) of the KVKK — processing is necessary for the legitimate interests of our Company as the data controller and of the participant, provided that such processing does not harm fundamental rights and freedoms.
Contact Information	Email address, mobile phone number, full address
Other	Education level, employment status, foreign language proficiency, social media usernames, (for online training) IP address	To assess the participant’s skills, career, and development, to analyze the necessity of the training, to manage career and talent development activities, and to facilitate job/internship recommendation processes.

Please note: In online training purchases, your credit card details provided during the “payment” step are processed directly by the relevant bank system through our secure integrated payment interface. These details are never shared with or stored by our Company.

Retention Period, Data Transfer, and Purpose of Transfer

Your personal data will be processed only for the purposes and legal reasons stated above, retained for 2 years following the training purchase and completion of the training, and used to fulfill our legal obligations. During this period, your data may be accessed or shared by authorized personnel, business partners, consultants, group companies, and/or official authorities for reporting, evaluation, or analysis purposes, in order to coordinate and sustain training operations.

Except for these circumstances and transfers based on your consent, your personal data will not be shared with third parties in Turkey or abroad. However, for IT service purposes, we may work with external service providers. These companies may, from time to time, have limited technical access to our systems solely to provide technical support. Such access is controlled, and these companies are not permitted to copy, process, or store your personal data on their own systems. In the event of a lawful request by public authorities during the retention period, your personal data may be shared with competent institutions or judicial bodies for the purpose of fulfilling legal obligations in effect at the time of the request.

Your Rights under the Law on the Protection of Personal Data (KVKK)

As a data subject under the KVKK, you have the following rights in accordance with the law and relevant regulations:

1. To learn whether your personal data are being processed,
2. To request information if your personal data have been processed,
3. To learn the purpose of the processing and whether your data are used for their intended purpose,
4. To know the third parties to whom your data are transferred domestically or abroad,
5. To request correction of incomplete or inaccurate data,
6. To request deletion or destruction of your data within the framework of legal conditions,
7. To request notification of such corrections or deletions to third parties to whom your data have been transferred,
8. To object to the processing of your data exclusively by automated systems that result in an outcome against you,
9. To request compensation for damages arising from unlawful processing of your personal data.

How to Submit a Request to Mördak

In accordance with the “Communiqué on the Procedures and Principles of Application to the Data Controller,” you may submit your requests regarding the rights listed above by providing documents verifying your identity, either: (i) in person, (ii) through a notary, to our registered address at Maslak Mah. Ahi Evran Cad. Rentaş İş Merkezi No 29 / 145 Sarıyer, Istanbul, or (iii) via email with a secure electronic signature to academy@mordak.com.tr. Your request will be evaluated and concluded as soon as possible, and in any event within 30 (thirty) days from receipt. No fee will be charged for processing your request unless it requires additional cost, in which case fees may be charged based on the tariff determined by the Personal Data Protection Board.

We respectfully present this information for your attention. By accepting this Privacy Notice, you are deemed to have read and understood its contents.

MÖRDAK PRODÜKSİYON VE AJANS HİZMETLERİ TİC. LTD. ŞTİ.