INFORMATION, DECLARATION AND CONSENT FORM REGARDING THE LAW ON THE PROTECTION OF PERSONAL DATA NO. 6698 AND YOUR RIGHTS WITHIN THE SCOPE OF THIS LAW

As BarclaysFST, in order to protect fundamental rights and freedoms, within the scope of the "Law on the Protection of Personal Data" regarding personal data, we would like to inform you about the ways your personal data is collected, the purposes of processing, the legal reasons, and your rights. Within the framework of this Law on the Protection of Personal Data:

Explicit Consent: Consent that is based on being informed regarding a specific subject and declared with free will,

Personal Data: All kinds of information relating to an identified or identifiable natural person,

Processing of Personal Data: Any operation performed on the data, such as obtaining, recording, storing, preserving, altering, rearranging, disclosing, transferring, taking over, making available, classifying, or preventing the use of personal data, whether fully or partially automatic, or through non-automatic means provided that it is part of a data recording system,

Data Processor: The natural or legal person who processes personal data on behalf of the data controller based on the authorization given by the data controller,

Data Recording System: The recording system in which personal data is processed by being structured according to certain criteria,

Data Controller: The natural or legal person who determines the purposes and means of processing personal data and is responsible for the establishment and management of the data recording system.

Within the scope of the Law, BarclaysFST acts as the data controller.

According to the Law on the Protection of Personal Data No. 6698 (GDPR), which entered into force on April 7, 2016, if our customers share their personal data with us in order to benefit from our services, our Company, in its capacity as Data Controller, may obtain, record, store, update, reorganize, disclose, transfer, take over, share, and process such personal data in other ways within the scope of the law, to the extent and in the situations permitted by the legislation, in order to continue its services.

The purposes and legal reasons for processing your personal data are; within the scope of relevant legislation, in order to provide and continuously sustain the products and services of our Company, which operates in the fields of distribution of securities, commodities and similar instruments data, derivative markets data, and software related to capital and money markets; to record identity, address, and other necessary information to identify the transaction owner; to prepare all records and documents that will form the basis of transactions in electronic or paper form; to comply with information retention, reporting, and information obligations stipulated by local and international legislation and official authorities such as Exchanges, CMB, laws and regulations, and other authorized institutions and organizations.

Your personal data will be used in billing, reporting to relevant exchanges, accounting transactions with our company’s sales and marketing units; also, in our CRM structure for providing you with better services, during the transfer of relevant exchange data. Your personal data may be collected through bilateral contracts our Company makes with customers, via the website, call center, and other similar channels, either automatically or non-automatically, in written, verbal, or electronic form. Your personal data may be shared, to the extent permitted by the relevant legislation, with individuals, institutions, and organizations; with domestic exchanges, foreign exchanges if requested and used by you, and authorities such as the CMB; with our subsidiaries, and with consultants and organizations from whom we receive services, work with, or cooperate with in order to carry out our activities.

Without prejudice to the cases stipulated in Article 28 titled “Exceptions” of the GDPR, within the framework of Article 11 of the Law, by applying to our Company, you have the right to:

1. learn whether your personal data has been processed,
2. request information if it has been processed,
3. learn the purpose of processing and whether it has been used in accordance with its purpose,
4. know the third parties to whom it has been transferred domestically / abroad,
5. request correction if it has been processed incompletely / incorrectly,
6. request deletion / destruction within the framework of the conditions stipulated in Article 7 of the GDPR,
7. request notification of the transactions made pursuant to (d) and (e) above to third parties to whom it has been transferred,
8. object to the emergence of a result against you due to analysis exclusively by automated systems,
9. request compensation if you suffer damage due to unlawful processing,

It is possible to exercise your rights as of 07.10.2016, the effective date of the regulation, and you are required to submit your requests to our company in writing regarding the implementation of this Law. However, in case the execution of your requests requires an additional cost, our Company reserves the right to demand the expenses to be incurred from you according to the tariff specified in Article 13 of the GDPR titled “Application to the data controller”.

This information and consent form is an annex and an integral part of any kind of contract you have signed on behalf of our organization.