Processing and Protection of Personal Data

**Data Protection Information by Allbatross Yatırım**

Allbatross Yatırım Menkul Değerler A.Ş. ("Allbatross Yatırım"), as a Data Controller, is committed to safeguarding the privacy and security of your personal data in accordance with Law No. 6698 on the Protection of Personal Data ("PDPL"). We prioritize adherence to legal requirements and the protection of fundamental rights and liberties concerning privacy.

**Collection of Personal Data**

At Allbatross Yatırım, we collect personal data from our clients, potential clients, and third parties directly or through their representatives in various formats—written, verbal, visual, electronic, and non-electronic. We gather data through our direct channels such as our headquarters, branches, website, social media platforms, and mobile services, as well as through collaborations with other entities and service providers.

**Purposes and Legal Basis for Data Processing**

Our data processing activities are designed to meet our legal obligations and provide you with optimal services in investment and related services. We process personal data for the following key purposes:

- To verify identity and contact information and ensure it is up to date.
- To perform risk analyses and manage data security and internal audit functions.
- To comply with the legal and regulatory requirements of various supervisory and governmental bodies.
- To enhance our service delivery, fulfill contractual obligations, and manage customer relations.

**Data Security Measures**

Allbatross Yatırım adopts stringent security measures to protect personal data against unauthorized access, alteration, and loss. We implement both technical and administrative safeguards in line with industry standards.

**Data Subject Rights**

You have the right to:
- Learn whether your personal data is processed.
- Request information if your personal data is processed.
- Know the purposes of data processing and whether data is used for intended purposes.
- Request correction or deletion of incorrectly processed data.
- Object to negative consequences arising from automated data processing.

**Third-Party Services and Cookie Policy**

Our website may link to external sites and use cookies to enhance user experience. Our Cookie Policy provides detailed information on how we use cookies and how you can manage your preferences.

**Changes to Our Privacy Policy**

Allbatross Yatırım reserves the right to update this policy as necessary. Updates will be effectively immediately upon posting on our website.