Privacy Notice on the Protection of Personal Data

01Data Controller

HTM Dizayn Fuarcılık Dekorasyon Sanayi Ticaret Limited Şirketi

Address: Yeşilköy Mah. Atatürk Cad. No:5/4, Hall 3, Inner Door No:15, IFM Expo Center, Bakırköy, Istanbul, Turkey

Email: info@insideexhibition.com

Phone: +90 212 476 01 75

02Personal Data Processed

If you fill in the project/contact form on our website, the following personal data may be processed:

• Identity: first name, last name
• Contact: email address, phone number
• Project and request details: company name, fair and city, fair date, stand area, requested scope of services and project notes

Please do not enter special categories of personal data unrelated to your request, or personal data belonging to third parties, in the form fields.

03Purposes of Processing

Your personal data is processed for the purposes of:

• receiving and evaluating your project and service requests,
• contacting you about your request,
• preparing a quote for your request,
• conducting pre-contract discussions and business processes,
• carrying out communication related to your request,
• fulfilling obligations arising from the applicable legislation where required.

Your personal data is processed in a manner that is relevant, limited and proportionate to these purposes.

04Method of Collection and Legal Basis

Your personal data is collected when you fill in and submit the project/contact form on our website electronically.

Your personal data is processed on the grounds set out in Article 5 of the Law, depending on the nature of the specific processing activity. For evaluating your project request, preparing a quote and conducting pre-contract discussions, the ground in Article 5(2)(c) of the Law — processing being necessary, provided that it is directly related to the establishment or performance of a contract — may apply.

Where a specific processing activity requires it, the other legal grounds set out in Article 5 of the Law may also apply.

As a rule, processing your personal data through this form does not depend on your separate explicit consent. If a separate processing activity legally requires explicit consent, it will be obtained separately and independently of this Privacy Notice.

05Transfer of Personal Data

Limited to the purposes above, your personal data may be transferred to:

• Cloudflare, Inc. services used to operate the website and the form infrastructure,
• Google LLC / Gmail services for email communication and storage,
• authorised public authorities, upon request or where there is a legal obligation,
• authorised service providers, where necessary for conducting business processes.

Your personal data is not sold or shared with third parties for marketing purposes.

06Transfer of Personal Data Abroad

As the infrastructure of the relevant services provided by Cloudflare and Google may be located abroad, personal data obtained through the project/contact form may be transferred abroad.

Transfers abroad are carried out in accordance with the conditions set out in Article 9 of Law No. 6698 and the related secondary legislation.

The adequacy decision, appropriate safeguard or other transfer condition provided for in the Law that applies to a transfer abroad is determined according to the relevant service provider and the specific nature of the transfer.

07Retention of Personal Data

Your personal data is kept for as long as the purposes of processing require and within the retention periods set out in the applicable legislation.

When the retention period ends or the reason requiring the processing no longer exists, your personal data is deleted, destroyed or anonymised in accordance with the Law and the applicable legislation.

08Your Rights as a Data Subject

Detailed information on your rights regarding your personal data under Article 11 of the Law, and on how to apply, can be obtained through the contact channels below.

Accordingly, you have the right to learn whether your personal data is processed and, if so, to request information about it; to learn the purpose of processing; to know the third parties to whom it is transferred; to request correction if it is incomplete or inaccurate; to request deletion or destruction under the conditions set out in Article 7 of the Law; to request that these actions be notified to third parties; to object to an outcome against you arising solely from analysis by automated systems; and to claim compensation for damage arising from unlawful processing.

09How to Apply

You can submit your requests under the KVKK, in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller,

in writing to HTM Dizayn Fuarcılık Dekorasyon Sanayi Ticaret Limited Şirketi Yeşilköy Mah. Atatürk Cad. No:5/4, Hall 3, Inner Door No:15, IFM Expo Center, Bakırköy, Istanbul, Turkey

or by email to info@insideexhibition.com, in line with the application procedures and conditions set out under the KVKK.

Your applications are evaluated within the periods set out in the Law and the applicable legislation.