GDPR DATA PROTECTION NOTICE

Last Updated: 01.02.2026

This Data Protection Notice has been prepared in accordance with the General Data Protection Regulation (GDPR) to inform users in the European Union about how personal data is processed in connection with the Linke platform.

Linke is a digital platform operated by Hayat Grup Reklam A.Ş. Personal data is processed in compliance with applicable data protection laws, including the GDPR.

PERSONAL DATA WE PROCESS

When you use the Platform, create an account, request information, or interact with our services, we may process the following categories of personal data:

• Identity and contact details (such as name, email address, phone number)
• Account and subscription information
• Billing and payment details
• Usage and transaction records
• Technical data (such as IP address, browser type, device information, session logs)
• Information shared via contact forms or support requests

If Platform users upload personal data belonging to their own customers or third parties, those users act as data controllers for such data.

PURPOSES OF PROCESSING

Personal data may be processed for the following purposes:

• Providing and managing the Platform and its services
• Creating and maintaining user accounts
• Handling subscriptions, contracts, and billing processes
• Providing technical support
• Ensuring platform security and preventing abuse
• Improving and developing our services
• Responding to user requests
• Complying with legal obligations

AUTOMATED PROCESSING AND AI SYSTEMS

Some Platform features may involve automated processing or the use of artificial intelligence technologies. These systems may be used to analyze data, generate content, provide recommendations, or improve user experience.

Outputs generated by such systems may be automated and may not always involve direct human review. Users remain responsible for reviewing and validating outputs before relying on them for legal, commercial, or operational decisions.

LEGAL BASIS FOR PROCESSING

We process personal data based on one or more of the following legal grounds under the GDPR:

• Performance of a contract
• Compliance with legal obligations
• Legitimate interests pursued by the company
• Consent, where required

DATA SHARING

Personal data may be shared, where necessary, with:

• Hosting and infrastructure service providers
• Payment and financial service providers
• Email and communication service providers
• Artificial intelligence and data processing technology providers
• Public authorities where required by law

Some of these providers may be located outside the European Union. In such cases, appropriate safeguards are applied in accordance with GDPR requirements.

DATA SECURITY

We implement technical and organizational measures to protect personal data against unauthorized access, loss, misuse, or disclosure. However, no system can guarantee absolute security of data transmitted over the internet.

DATA SUBJECT RIGHTS

Under the GDPR, individuals have the right to:

• Access their personal data
• Request correction of inaccurate data
• Request deletion of their data
• Restrict processing
• Object to processing
• Request data portability
• Withdraw consent at any time where processing is based on consent

Requests regarding these rights can be submitted through the contact channels provided on the Platform.

CHANGES

This Data Protection Notice may be updated in line with legal or operational changes. The current version becomes effective as of its publication date on the Platform.