Data Controller: MASSIVE BIOINFORMATICS ARGE TEKNOLOJILERI A.S.
Address: UNIVERSITE CADDESI KAZIM DIRIK MAHALLESI NO: 79/24 BORNOVA/IZMIR
Tax ID: 6131473734
Mersis No: 0613147373400001

“MASSIVE BIOINFORMATICS ARGE TEKNOLOJILERI A.S.” will hereinafter be referred to as “COMPANY”. We
pay utmost attention to the processing and protection of your personal data. In accordance with the Protection of
Personal Data Law and the relevant legislation, as the data controller, all necessary technical and administrative
measures are taken to prevent the unlawful processing of personal data, to prevent unlawful access to personal
data, and to ensure the preservation of personal data.
This clarification text has been prepared by the “COMPANY” as the data controller within the scope of the
Communiqué on the Procedures and Principles to be Followed in Fulfilling the Disclosure Obligation of the
Protection of Personal Data Law (“Law”).
In this context, we would like to enlighten you in the capacity of “Data Controller” as defined in the PPD Law.
With the full realization of this responsibility, we process your personal data in the manner explained below and
within the limits ordered by the legislation. Your personal data that you share with our company as a customer,
potential service recipient and service recipient may be processed, transferred to third parties, stored, used for
profiling and classified in accordance with PPDL, in connection with our activity and service purposes and in
proportion.

1. Collection, Processing and Processing Purposes of Personal Data:
Your personal data collected in accordance with the Protection of Personal Data Law and the relevant legislation
are obtained, recorded, stored, changed, rearranged and processed, in whole or in part, automatically or by
non-automatic means as part of any data recording system, in accordance with the principles stipulated in the law.
Your personal data is processed within the scope of COMPANY activities for the following purposes in
accordance with Articles 4, 5, 6 of the Law and relevant legislation:
Your collected personal data will be processed for the following purposes;
● Managing the after-sales support processes of goods/services,
● Execution of Communication Activities,
● Receiving and evaluating suggestions for improving business processes,
● Execution of customer relationship management processes,
● Execution of marketing processes of products / services,
● Execution of Finance and Accounting Works
● Monitoring and Execution of Legal Affairs,
● Execution of Goods / Service Purchase Processes
● Execution of After-sales Support Services of Goods / Services
● Execution of Goods / Service Sales Processes
● Execution of Goods / Services Production and Operation Processes
● Execution of Customer Relationship Management Processes
● Execution of the Contract Processes
● Conducting Activities Aimed at Customer Satisfaction
● Execution of Customer Relationship Management Processes
● Ensuring the legal, technical and commercial-occupational security of our Company and the relevant
persons who have a business relationship with our Company
within the personal data processing conditions and purposes specified in Article 5 and 6 of the PPDL.
In cases where explicit consent is required to be obtained in accordance with the relevant articles, your explicit
consent is obtained. However, it is possible to process personal data without obtaining the
consent of the relevant person, provided that it complies with the conditions stated in the 2nd paragraph of Article In accordance with the mandatory provisions of the laws, it is essential to keep the information of natural persons accurate and up-to-date. Therefore, it may be requested to update your personal information at certain time intervals.

In line with the above-mentioned purposes and limited to COMPANY activities, your personal data listed
below is processed.
▪ Your Credentials (Your first and last name)
▪ Your contact information (Your phone number, contact address, e-mail address, Kep address)
▪ Financial Information (Your invoice information, check-bill information, IBAN, Account number, tax number,
tax office, credit card information, turnover information, current account agreements)
▪ Physical Environment Security (Camera recording)
▪ Legal Action Information (Your information in case and execution files)
▪ Request and Complaint Information
2. Period
Your personal data is stored by the Company for 10 (ten) years, not less than the expiry period of the legal
relationship to which the data is subject. After the expiration of the period, your personal data will be deleted,
destroyed and/or anonymized by the Company or upon your request, using methods within the scope of the
Protection of Personal Data Law and relevant regulations. You can revoke the permission you have given for the
processing of personal data at any time, except for the data that must be processed by law.
ARTICLE 5- Conditions of processing of personal data
(1) Personal data cannot be processed without the explicit consent of the person concerned.
(2) In the presence of one of the following conditions, it is possible to process personal data without seeking the
explicit consent of the person concerned:
1. It is clearly stipulated in the laws.
2. It is necessary for the protection of the life or physical integrity of the person or someone else who is
unable to express his/her consent due to actual impossibility or whose consent is not given legal validity.
3. It is necessary to process personal data of the parties to the contract, provided that it is directly related to
the establishment or performance of a contract.
4. It is mandatory for the data controller to fulfill its legal obligation.
5. It was made public by the Relevant Person himself/herself.
6. It is necessary to process data for the establishment, exercise or protection of a right.
7. It is necessary to process data for the legitimate interests of the data controller, provided that it does not
harm the fundamental rights and freedoms of the Relevant Person.
ARTICLE 5- Conditions of processing of sensitive personal data
(1) People’s race, ethnic origin, political thought, philosophical belief, religion, sect or other beliefs, appearance and
dress, association, foundation or union membership, health, sexual life, criminal conviction and security measures,
as well as biometric and genetic data are sensitive personal data.
(2) It is prohibited to process sensitive personal data without the explicit consent of the person concerned.
(3) Personal data other than health and sexual life listed in the first paragraph may be processed without the
explicit consent of the relevant person in cases stipulated by law. Personal data regarding health and sexual life
can only be processed without the explicit consent of the person concerned, by persons under the obligation of
confidentiality or authorized institutions and organizations, for the purpose of protecting public health, preventive
medicine, medical diagnosis, execution of treatment and care services, planning and management of health
services and their financing.
(4) In the processing of sensitive personal data, it is also necessary to take adequate measures determined by the
Board.
3. To Whom and for What Purposes the Processed Personal Data May be Transferred
Our company may transfer your personal data to real persons or private law legal entities, our suppliers,
organizations from which we receive information technology support, and authorized public institutions and persons
when necessary to achieve the purposes we have specified, within the framework of the personal data processing
conditions and purposes specified in Art. 8 and 9 of Law No. 6698 and provided that we comply with the stipulated
conditions and take the necessary measures.