1.1. OUR ONLINE VISITORS If you visit our website and fill out an information request form, the following personal data may be processed: Identity Information: Name and Surname, Contact Information: Address information, e-mail address, phone number, social media account. Transaction Security Information: IP address information, username and password, log information, internet login-logout information, traffic information,

1.2. OUR PHYSICAL VISITORS Within the scope of your visit to our office in Turkey or your meeting with our representatives; Identity Information: Name and Surname, ID Number, Contact Information: E-mail address, phone number, Transaction Security Information: If you are using guest WiFi, IP address information, username and password, log information, internet login-logout records, traffic information, Physical Space Security: Visitor entry-exit records, camera records,

1.3. OUR POTENTIAL CUSTOMERS/SUPPLIERS/BUSINESS PARTNERS Within the scope of your relationship with CSFB, the following personal data may be processed: Identity Information: Name and Surname, Contact Information: Address, e-mail address, phone number, social media account. Transaction Security Information: If you are using guest WiFi, IP address information, username and password, log information, internet login-logout records, traffic information, Physical Space Security: Visitor entry-exit records, camera records,

1.4. OUR CUSTOMERS Within the scope of your visit to our office in Turkey or your meeting with our representatives; Identity Information: Name and Surname, ID Document, ID Number, Citizenship, Date of Birth, Place of Birth Information, Contact Information: Address, e-mail address, phone number, social media account, Financial Information: Bank and account information, balance information, account and debt information, collection risk information, financial result information, credit and risk information, asset information, Customer Transaction Data: Order and request information, promissory note and check information, Transaction Security Information: If you are using guest WiFi, IP address information, username and password, log information, internet login-logout records, traffic information, Visual Records: Photograph, Physical Space Security: Visitor entry-exit records, camera records, Your Risk Management Data: Information processed for the management of commercial/technical/administrative risks, Data on Your Legal Transactions: File content information,

1.5. PURPOSES OF PROCESSING YOUR PERSONAL DATA Your personal data mentioned above can be processed for the following purposes in accordance with the relevant legislation: Planning and conducting corporate communication activities, Planning, auditing and executing information security processes, Executing service and product supply processes, Conducting advertising and marketing activities, Providing after-sales support services, Managing customer, supplier and business partner relationships, Evaluating and responding to suggestions, requests and complaints received by our company and conducting improvement studies, Developing and diversifying our company's business processes, Managing financial and accounting processes, including opening/changing and controlling the existing account, Managing contracts, finalizing legal transactions and following up legal processes, Fulfilling the obligations arising from Law No. 5651, Storing the information that must be kept as required by the legislation; copying and backing up the information to prevent data loss; Taking the necessary technical and administrative measures to ensure the integrity of your information and to ensure our network and information security, Providing information to regulatory and supervisory authorities and conducting legal proceedings in order to fulfill the legal obligations stipulated or required by law, Conducting analytical research and preparing reports, Taking camera records and monitoring for the purpose of ensuring physical security within the building, Salary/budget reporting process, Establishing and managing the employee network, If you are an applicant and have applied through our website, evaluating your application, Obtaining visitor information during the visitor card record report, Providing guest wireless internet service. Fulfilling legal obligations arising from legislation, Sending electronic mail or gifts on holidays and special occasions within the scope of customer relationship management, Carrying out event organization and execution activities, Conducting storage and archiving activities, Executing travel and accommodation processes, Providing information to authorized persons, institutions and organizations.