Personal Data Storage and Destruction Policy

3. Basic Principles
The Company complies with the following basic principles in the storage and destruction of personal data:

• Compliance with law and honesty rules: Personal data is stored and destroyed in accordance with law and honesty rules.
• Time limit: Personal data is stored for the period necessary for the purpose for which they are processed.
• Confidentiality: Personal data is processed in accordance with the principle of confidentiality during storage and destruction processes.
• Security: Personal data is protected by taking security measures during storage and destruction processes.

4. Storage of Personal Data
The Company stores personal data for the period necessary for the purpose for which they are processed. The storage period of personal data is determined according to the relevant legislation provisions and the nature of the processed personal data.

The Company pays attention to the following points when storing personal data:

• Personal data is stored in a way that is accessible only to authorized persons.
• Personal data is stored in a way that protects against unauthorized access, use, disclosure, modification or destruction.
• Personal data is secured by taking technical and administrative measures.

5. Destruction of Personal Data
The Company destroys personal data in accordance with the relevant legislation provisions when the reasons requiring their processing cease to exist.

Destruction of personal data is carried out using the following methods:

• Physical destruction: Personal data is destroyed by being physically destroyed. This method is used in cases where it is appropriate for personal data to be physically destroyed.
• Anonymization: Personal data is destroyed by being anonymized. This method is carried out using techniques that allow personal data to be anonymized.

The Company pays attention to the following points when destroying personal data:

• Personal data is destroyed in a way that is accessible only to authorized persons.
• Personal data is destroyed in a way that protects against unauthorized access, use, disclosure, modification or destruction.
• Destruction of personal data is secured by taking technical and administrative measures.