Data Subject Application Form

ROOF STACKS YAZILIM ANONİM ŞİRKETİ

DATA SUBJECT APPLICATION FORM

Pursuant to Law No. 6698 on the Protection of Personal Data ("KVKK"), individuals defined as 'Data Subjects' are granted certain rights under Article 11 titled 'Rights of the Data Subject.' Accordingly, and in line with Article 13 of the KVKK, applications to exercise these rights must be submitted to our Company, acting as the Data Controller, either in writing or via other methods to be determined by the Personal Data Protection Board.

Applications may be submitted using this form via:

• Registered mail with return receipt

• Through a notary public

• By signing this form with a 'secure electronic signature' as defined under Law No. 5070 and sending it to our Company's registered email address.

Our Company will respond to applications within the scope of Article 13 of the Law as soon as possible and no later than thirty days from the date of receipt. Applications will be processed free of charge; however, if the process requires additional cost, a fee may be charged according to the tariff set by the Personal Data Protection Board. If the Company accepts or rejects the request, a response will be sent in writing or electronically, with reasons if rejected.

If the information and documents submitted by the data subject are incomplete or unclear, or if it is necessary to verify the identity of the data subject or ensure data security, our Company may request additional information/documents or ask further questions related to the request.

1. APPLICANT'S IDENTITY AND CONTACT INFORMATION:

Full Name
ID / Passport Number
Phone Number
Address
E-Mail Address

2. INFORMATION ON THE RIGHT TO BE EXERCISED BY THE DATA SUBJECT:

In accordance with Article 11 of the KVKK, you may apply to our Company to:

1. Learn whether your personal data is being processed,

2. Request information regarding the processing of your personal data,

3. Learn the purpose of the processing of your personal data and whether it is being used in accordance with that purpose,

4. Know the third parties to whom your personal data has been transferred, either domestically or abroad,

5. Request the correction of your personal data if it has been processed incompletely or inaccurately,

6. Request the deletion or destruction of your personal data if the reasons for its processing no longer exist, in accordance with the principles of purpose, duration, and legitimacy,

7. Request that third parties to whom your personal data has been transferred be informed of any corrections, deletions, or destructions made,

8. Object to decisions made solely by automated systems that negatively affect you,

9. Request compensation for any damages incurred as a result of the unlawful processing of your personal data.

These are your rights under the KVKK.

3. DETAILS OF THE REQUEST:

In accordance with the Personal Data Protection Law, please specify in detail below the personal data to which your request relates, within the scope of your rights listed above:

4. ATTACHMENTS (If you have any documents you would like to submit in support of your application, please specify.)

5. Please select how you would like to receive our response to your application:

☐ Sent to my address.

☐ Sent to my email address.

☐ I will collect it in person.

This application form has been prepared to determine your relationship with our Company and, if any, to identify your personal data processed by our Company in full, so that your application can be responded to correctly and within the legal time limit. In order to eliminate legal risks that may arise from unlawful and unfair data sharing, and in particular to ensure the security of your personal data, our Company reserves the right to request additional documents and information (such as a copy of your identity card or driver's licence) for the purpose of identity and authorisation verification. If the information you provide in the form is inaccurate or outdated, or if an unauthorised request is made, our Company shall not be held liable for any claims arising from such inaccurate information or unauthorised requests. All liability arising from unlawful, misleading, or inaccurate requests shall be your responsibility.

6. DECLARATION

I hereby request that my application, submitted to your Company acting in the capacity of Data Controller, be evaluated in accordance with Article 13 of Law No. 6698 on the Protection of Personal Data, and that I be informed via the email address I have provided above.

Date :
Full Name :
Signature :

Update Date: 22/07/2025