CLARIFICATION TEXT (KVKK NOTICE)

I. Identity of the Data Controller

This Clarification Text has been prepared by **Goat Analytics Yazılım Teknolojileri Limited Company (“Company”)** in its capacity as the data controller, in accordance with Article 10 of the Law on the Protection of Personal Data No. 6698 (“KVKK”), titled “Disclosure Obligation of the Data Controller”.

As the data controller, your personal data is processed, recorded, transferred, shared, and stored within the limits of the applicable legislation. This text provides information regarding the purposes of processing your personal data, the parties to whom it may be transferred, the collection methods and legal reasons, and your rights under Article 11 of the KVKK.

Our Company reserves the right to update this Clarification Text in line with any changes that may be made to the applicable legislation.

II. Purposes of Processing Personal Data

Within the scope of our company's activities, your personal data is collected orally, in writing, or electronically and processed for the following purposes:

• Providing and developing products and services
• Carrying out sales, marketing, and operation activities
• Fulfilling information storage, reporting, and disclosure obligations
• Planning and execution of business activities
• Execution of finance and accounting processes
• Establishment and performance of contract processes
• Management of request, complaint, and suggestion processes
• Planning of human resources and business processes
• Execution of information security processes
• Fulfillment of legal obligations

Your personal data will not be used for purposes other than those specified without your explicit consent and will not be shared with third parties except for legal requirements.

III. Method and Legal Basis for Collecting Personal Data

Your personal data is collected in electronic or physical environments through our website, mobile applications, e-mail, social media, contracts, solution partners, business partners, notifications from official institutions, and other communication channels.

Your data is processed within the scope of the following legal reasons specified in Articles 5 and 6 of the KVKK:

• Existence of your explicit consent
• Explicitly prescribed by law
• Necessary for the establishment or performance of a contract
• Fulfillment of legal obligations
• Protection of our legitimate interests
• Establishment, exercise, or protection of a right

IV. Special Categories of Personal Data

Your special category personal data is processed only if you have explicit consent and by taking adequate security measures determined by the Personal Data Protection Board.

V. Transfer of Personal Data

Your collected personal data may be shared with:

• Business partners and solution partners
• Suppliers
• Company officials
• Authorized public institutions and organizations

for the realization of the processing purposes and in accordance with the legislation, and may be processed domestically or abroad.

VI. Rights of the Data Subject

Within the scope of Article 11 of the KVKK, personal data owners have the right to:

• Learn whether personal data is being processed
• Request information if it has been processed
• Learn the purpose of processing
• Know the third parties to whom it is transferred
• Request correction of missing or incorrectly processed data
• Request deletion or destruction
• Object to processing
• Claim compensation in case of damage

they have the rights.

VII. Retention Period of Personal Data

Your personal data is deleted, destroyed, or anonymized when the purpose requiring its processing disappears and when the periods specified in the relevant legislation expire.

VIII. Application and Contact

You can convey your requests regarding your rights under the KVKK to our Company in writing or by e-mail.

E-mail: info@goatanalytics.com

Applications will be finalized as soon as possible and within 30 days at the latest.