As YPFX Limited (YPFX) Data Controller, it respects your constitutionally guaranteed personal rights and freedoms regarding your personal data, makes the best effort to protect such personal rights and freedoms, and attaches great importance to keeping customer information confidential and not sharing this information with third parties. All of our employees undertake to protect the confidentiality of the information they obtain while performing their duties and to use such information only within the scope of the legislation and in the fulfillment of their professional duties. All employees fully comply with the restrictions and regulations regarding the sharing of customer secret and personal information with third parties, which are regulated within the framework of the Personal Data Protection Law, Capital Market Law and/or other relevant legislation.

Your personal data that you provide or that we provide as YPFX through various channels in order to receive investment services from YPFX Limited, to procure products or to get information about YPFX and its services and products are processed as "Data Controller" within the scope of the "Personal Data Protection Law".

Your personal data through our Head Office or Branches, websites applications, our internet branches, social media, customer calls, Identity Sharing System, Address Sharing System, SMS channels, digital applications to websites, all our mobile applications, direct through methods such as written/digital applications to sales teams, etc. Our institution communicates with its customers or communicates in the future. It is collected through other channels through which it can pass, and further in the relevant laws for a long period of time or a dispute arises due to the statute of limitations. event subject to dispute, but not limited to this period. It is stored and processed as long as your customer relationship with YPFX continues, excluding the period until it is concluded.

YPFX, your personal data;

• required by law,
• being directly related to the conclusion or performance of a contract,
• fulfillment of our legal obligations,
• The establishment, exercise or protection of a right in YPFX is necessary or,
• Existence of a legitimate interest in favor of YPFX without prejudice to your rights and freedoms regarding your personal data,

conditions and to be able to offer products and services by our institution, To be able to communicate about the product and service you have received / will receive, also in marketing activities if you have given your consent in this regard. product/service offering, modelling, reporting, scoring, risk monitoring, intelligence, current or new product studies of our institution and are processed in connection with potential customer identification and capital market activities.

Your personal data must be transferred to administrative and official authorities legally, to judicial bodies and other legal authorities, where permitted by legislation. Domestic and international financial support services or services provided by our company institutions or other legal and natural persons, independent audit companies, in accordance with the capital market legislation, information transfer is required. It can be transferred to the organizations it is affiliated with due to legal obligations and within the framework of legal restrictions.

YPFX, illegal processing of your personal data, unauthorized blocking access of people and keeping them in secure environments for the purpose of restricting authorization access, encryption, signing confidentiality agreements, personal data kept in physical environment necessary administrative and technical measures, such as taking physical security measures has taken the necessary precautions and shows the necessary sensitivity about the security of your personal data.

• Regarding the processing of your personal data by our Institution;
• learn whether your personal data is processed,
• requesting information about your personal data if it has been processed,
• To learn the purpose of processing your personal data and whether it is used accordingly,
• Knowing the third parties to whom personal data is transferred at home and abroad,
• to request correction of personal data in case of incorrect processing,
• Requesting the deletion or destruction of personal data in case the reasons requiring the processing of personal data disappear,
• request that the correction or deletion processes be notified to the third parties to whom the personal data has been transferred,
• object to the emergence of a result against you by analyzing the processed data exclusively through automated systems,
• requesting the compensation of the damage in case you suffer damage due to the unlawful processing of personal data

you have rights.

In order to demand these rights, it is sufficient to send an e-mail to [email protected].