PERSONAL DATA PROTECTION LAW (KVKK) DISCLOSURE STATEMENT

PROCESSING OF INFORMATION AND PERSONAL DATA OBTAINED DURING JOB APPLICATIONS TO FİBA PORTFÖY YÖNETİMİ A.Ş.

a) Data Controller

Pursuant to the Personal Data Protection Law No. 6698 (“Law No. 6698”), your personal data are processed by FİBA PORTFÖY YÖNETİMİ A.Ş. (“Company”) as the data controller.

b) Purpose of Processing Personal Data

The personal data collected via the job application form are processed for the following purposes:

• Evaluation of your job application and suitability for the relevant position,
• Conducting recruitment processes in line with human resources policies and contacting you,
• Fulfilling the legal and commercial obligations of our Company and its business partners,
• Determining company strategies and improving recruitment processes.

c) Recipients and Purposes of Personal Data Transfer

Your collected personal data may be shared with the following parties for the indicated purposes:

• Relevant departments for evaluating recruitment processes and determining suitable candidates,
• Legally authorized public institutions and private legal entities,
• Our business partners, shareholders, and affiliates, provided that you have given explicit consent.

ç) Methods of Personal Data Collection and Legal Basis

The Company collects your personal data through the following methods:

• Websites that allow you to submit job applications,
• Our Company’s website and mobile applications,
• Telephone conversations and physical forms.

The processing of personal data is carried out in accordance with the legal grounds set forth in Articles 5 and 6 of Law No. 6698.

d) Rights of Personal Data Owners

As a personal data owner, you have the following rights:

• To learn whether your personal data are being processed,
• To request information if your personal data have been processed,
• To learn the purpose of processing and whether personal data are used in accordance with that purpose,
• To know the third parties to whom personal data are transferred domestically or abroad,
• To request correction of incomplete or inaccurate data,
• To request deletion of personal data if the reasons for processing no longer exist.

You may submit your requests regarding these rights in writing or via kvkk@fibaportfoy.com.tr.

For submission via KEP, you may use fibaportfoyyonetimi@hs01.kep.tr.

Required Information for Your Request:

• Your full name and signature (if in written form),
• T.C. identification number for Turkish citizens, or nationality, passport number, or ID number for foreigners,
• Address for notification or workplace,
• Your email address, phone, and fax number (if any),
• Subject of your request,
• Any supporting information or documents related to your request.

Written requests should be sent to the Fiba Portföy Headquarters, as the data controller, with the necessary documents attached.

Email requests should be sent to kvkk@fibaportfoy.com.tr, and KEP requests to fibaportfoyyonetimi@hs01.kep.tr.

Access the Personal Data Protection and Processing Policy here.

Depending on the nature of your request, information and documents that allow identity verification must be provided accurately and completely. Failure to provide the requested information and documents may result in delays or deficiencies in processing your request. The Company reserves all legal rights in such cases. Therefore, your request should be submitted with complete and accurate information and documents according to its nature.