Information Text Regarding Bill Payments

This information text is used by Novatel Communication Solutions Inc. (“Novatel”). payment.novatel.com.tr It has been prepared to inform you about the purposes and manner in which the personal data of people who make invoice payments through the address are processed.

1. Data Controller

Novatel Haberleşme Çözümleri A.Ş. processes your personal data as the data controller within the scope of the Personal Data Protection Law No. 6698 (“LPPD”).

2. What Data Do We Process?

During the payment process, some data collected directly from you is processed:

· Name, surname

Invoice number and payment amount

Processing time and technical information (IP address, browser type, etc.)

The card information and sensitive financial data you enter during your payment transaction are not seen or stored by Novatel in any way. This information is directed directly to the Virtual POS system and the transaction is completed there.

3. For what purposes and legal basis do we process data?

Your personal data is processed for the following purposes:

KVKK art. 5/2-c: Directly related to the establishment or performance of the contract:

· Receiving and recording invoice payments

· Safe processing of payment transactions

Fulfillment of financial and legal obligations arising from relevant legislation

KVKK art. 5/2-ç: Fulfillment of legal obligation:

· Responding to information and documents requested by authorized public institutions (e.g. Finance, courts, enforcement offices)

KVKK article 5/2-e: Establishment, use or protection of a right:

· Protection of interests in resolving legal disputes that may arise in the future.

· Objection, refund, evidence submission and claim proof processes that may arise regarding payment transactions.

KVKK art. 5/2-f: Necessary within the scope of Novatel's legitimate interests:

· Being able to contact you when necessary

System security and prevention of abuse

4. With Whom and For What Purposes Do We Share Your Personal Data?

In order for your payment to be completed properly:

· Your card information and sensitive data processed during the payment step are processed and stored directly through the Virtual POS infrastructure. Novatel does not access or record such data.

In addition, in case of legal obligation, information may be shared with the tax office, audit authorities or other public institutions.

5. Data Collection Method

Your personal data is collected electronically through the information you enter directly on the payment screen.

6. Your Rights

Within the scope of Article 11 of the KVKK, you, as a data subject, have the following rights:

Learning whether your personal data is being processed

· Request information about it if it has been processed

· Learning whether it is used for its intended purpose

· Request correction if it is incomplete or incorrectly processed

· Request deletion or destruction

· Learning the parties to which it is transferred

· Objection to analyses made by automated systems

· Request compensation if damage has occurred

7. Applications

Your requests within the scope of KVKK:

· By e-mail: [email protected]

· Or you can send it in writing to our company headquarters address (Oruçreis Mah. Vadi Cad. İstanbul Ticaret Sarayı Apt. No: 108/301 Esenler/ İstanbul).

Your requests will be answered free of charge within 30 days at the latest.