INFORMATION NOTICE UNDER THE PERSONAL DATA PROTECTION LAW

Last Updated: 1 July 2026

This Information Notice has been prepared pursuant to the Turkish Personal Data Protection Law No. 6698 (“KVKK”) by ARASS ORGANİZASYON İNŞAAT TURİZM TİCARET A.Ş., acting as the data controller, in order to inform you about the processing of personal data submitted by you through the iicfair.com website.

This notice applies to personal data collected through the free online registration form, registration/accommodation form, stand application form, sponsorship application form, contact forms, and similar application or communication areas available on our website.

1. Data Controller

Pursuant to KVKK, your personal data may be processed by our company, acting as the data controller, whose details are provided below:

2. Personal Data Processed

Based on the information you provide through the forms available on our website, the following personal data may be processed:

• First name and last name,
• Telephone number,
• Email address,
• Company name,
• Company title,
• Job title / position information,
• Stand, sponsorship, registration or accommodation application information,
• Selected participation or accommodation package,
• Information voluntarily provided by you in message fields,
• Application date and time, IP address and technical transaction records,
• Other information relating to form submissions and communication processes.

3. Purposes of Processing Personal Data

Your collected personal data may be processed for the following purposes:

• Managing registration processes relating to events, fairs, congresses and similar organisations,
• Receiving and evaluating free online registration applications,
• Receiving and evaluating stand applications and carrying out related communication processes,
• Receiving and evaluating sponsorship applications and carrying out related communication processes,
• Receiving, planning and organising registration and accommodation requests,
• Communicating with applicants,
• Providing information about events and fairs,
• Managing event and organisation operations,
• Evaluating requests, suggestions, complaints and information enquiries,
• Improving service quality,
• Conducting statistical analysis, reporting and planning activities,
• Complying with legal obligations,
• Retaining records as evidence in the event of potential disputes,
• Managing information security, system security and misuse prevention processes.

4. Method of Collecting Personal Data

Your personal data is collected electronically through forms and electronic application areas available on iicfair.com, email communications, telephone calls, digital registration systems, server records and, where necessary, technical infrastructures used during the organisation process.

5. Legal Grounds for Processing Personal Data

Your personal data may be processed on the basis of the following legal grounds set out under Article 5 of KVKK:

• Processing being directly related to the establishment or performance of a contract,
• Processing being necessary for the data controller to fulfil its legal obligations,
• Processing being necessary for the establishment, exercise or protection of a right,
• Processing being necessary for the legitimate interests of the data controller, provided that such processing does not prejudice the fundamental rights and freedoms of the data subject,
• Your explicit consent, where required.

Where separate consent is required, such as for the sending of commercial electronic communications, no commercial electronic communication will be sent to you unless your separate consent has been obtained in accordance with applicable legislation.

6. Transfer of Personal Data

Your personal data may be shared, solely to the extent necessary for the purposes stated above and in accordance with KVKK, with the following persons, institutions and organisations:

• Organisation and event teams,
• Fair, congress and event business partners,
• Service providers involved in stand, sponsorship and registration processes,
• Accommodation and hotel service providers,
• Suppliers providing technical infrastructure, hosting, email, software, form management and data storage services,
• Financial advisers, legal advisers and other consultants,
• Authorised public institutions and organisations,
• Private-law entities authorised by law,
• Competent legal authorities where required.

Your personal data will only be transferred to the extent required by the relevant processing purposes and in accordance with applicable legislation.

7. Transfer of Personal Data Abroad

Where the servers of technical service providers used for website services, email, hosting, form management, analytics, reporting or cloud-based registration systems are located outside Türkiye, your personal data may be transferred abroad.

In such cases, the transfer will be carried out in accordance with the conditions prescribed under KVKK and subject to the necessary security measures.

8. Retention Period of Personal Data

Your personal data is retained for the period required by the relevant processing purposes, taking into account the completion of organisation processes, fulfilment of legal obligations, evidentiary requirements in potential disputes and retention periods prescribed by applicable legislation.

When the applicable retention period expires or the purpose of processing ceases to exist, your personal data will be erased, destroyed or anonymised in accordance with applicable legislation.

9. Security of Personal Data

Our company takes the necessary technical and administrative measures to prevent the unlawful processing of your personal data, prevent unlawful access to personal data and ensure the appropriate safeguarding of personal data.

These measures include access authorisation controls, system security measures, authorised-user restrictions, logging and audit procedures, and other security measures considered necessary.

10. Information Regarding Commercial Electronic Communications

Information relating to events, fairs, congresses, sponsorships, campaigns, announcements and similar matters may be communicated to you by email, SMS or telephone only where you have separately provided the required consent in accordance with applicable legislation.

Reading this KVKK Information Notice and being informed about the processing of your personal data within the scope of your application does not, by itself, constitute consent to receive commercial electronic communications.

11. Your Rights Under KVKK

Pursuant to Article 11 of KVKK, you have the following rights regarding your personal data:

• To learn whether your personal data is being processed,
• To request information if your personal data has been processed,
• To learn the purpose of processing your personal data and whether it is being used in accordance with that purpose,
• To know the third parties to whom your personal data has been transferred in Türkiye or abroad,
• To request correction of your personal data where it has been processed incompletely or inaccurately,
• To request the erasure or destruction of your personal data within the scope of Article 7 of KVKK,
• To request notification of correction, erasure or destruction operations to third parties to whom your personal data has been transferred,
• To object to a result arising against you as a result of your processed data being analysed exclusively through automated systems,
• To claim compensation for damages where you have suffered damage as a result of the unlawful processing of your personal data.

12. Application Method

You may submit requests relating to your rights under KVKK to our company, together with documents verifying your identity, through the following channels:

Your applications will be concluded as soon as possible depending on the nature of your request and, in all cases, within the applicable statutory time limits.

13. Amendments to this Information Notice

Our company may amend this Information Notice in line with changes in legislation, organisation processes, technical infrastructure or personal data processing activities.

The current version of this Information Notice will be published on iicfair.com.