Everything,
clearly in writing.

1. Introduction

This Membership Agreement has been concluded and entered into force electronically between ONE HUMAN YAZILIM VE BİLİŞİM DANIŞMANLIĞI SANAYİ TİCARET ANONİM ŞİRKETİ, resident at “Reşitpaşa Mahallesi, Katar Caddesi, İTÜ ARI Teknokent 3 Binası No: 4, İç Kapı No: B109, Sarıyer/İstanbul”, and the Member who approves the terms and rules set out in this Membership Agreement and its inseparable annexes, and on the Platform, in order to become a member of the Platform operating under the domain onenewone.com.

This Membership Agreement sets out the terms and conditions governing the Member's use of the Platform and, accordingly, regulates the rights and obligations of the Parties.

By becoming a Member of the Platform, you accept, declare and undertake that you have read this Membership Agreement, fully understood its content, and unconditionally accepted all matters set out in the Membership Agreement. If you do not accept these conditions, please refrain from using the Platform.

By accepting the Membership Agreement, you declare that you hold all legal permissions and requirements needed to use the Platform, and that, if you will use the Platform on behalf of a company you are authorized to represent, you hold all the authority required to represent that company and act on its behalf.

OneNewOne reserves the right to change, update and renew the entire content of this Membership Agreement at any time, without any prior notice. The current Membership Agreement will take effect as soon as it is published on the Platform. For this reason, please review the "Membership Agreement" page regularly.

Should you breach the Membership Agreement, OneNewOne may suspend your account or terminate your use of the Platform; remove any content you have provided from publication; and/or pursue legal action or litigation against you in the event of unlawful conduct.

2. Definitions

OneNewOne: ONE HUMAN YAZILIM VE BİLİŞİM DANIŞMANLIĞI SANAYİ TİCARET ANONİM ŞİRKETİ

Platform: The website operating under the domain onenewone.com and its sub-domains, all of whose intellectual and industrial property rights belong to OneNewOne, through which Members can benefit from the services offered by OneNewOne.

User: Any natural person who accesses the Platform.

Member(s): A "User" who opens a membership account on the Platform and benefits from the services offered on the Platform under the conditions set out in this agreement.

Party(ies): The Member and/or OneNewOne.

Membership Account: The set of web pages exclusive to the Member, accessed with a "username" and "password" determined by the Member and undertaken to be used solely by that Member, through which the Member carries out the actions and transactions necessary to benefit from the services offered on the Platform.

Services: The services offered to Users within the scope of the content available on the Platform.

3. General Terms

1. OneNewOne cannot be held responsible for any error, system slowdown, or inability to use the Platform arising from the device and/or internet connection used by Members. The Member accepts that access to the Platform may be temporarily blocked in order to implement improvements to the Platform.
2. OneNewOne, its group companies, affiliates, employees or other representatives are in no way liable for any direct, indirect, special, incidental, consequential, punitive and/or exemplary damages — including but not limited to loss of profit/revenue, loss of data and/or loss of business — arising from the use or inability to use the Platform, or reliance on its content.
3. OneNewOne does not guarantee the validity, accuracy or timeliness of the information contained on the Platform. Members must make sure to verify the accuracy of any information before making decisions based on it.
4. All information provided on this Platform is provided "as is", without any warranty, guarantee or undertaking of any kind. To the fullest extent permitted by law, OneNewOne expressly disclaims all express, implied, statutory or other warranties, guarantees or undertakings.
5. OneNewOne reserves the right to remove and modify content on the Platform at its own discretion and without stating any reason.
6. OneNewOne may restrict use of the Platform by natural/legal persons who act in breach of the obligations set out in this Membership Agreement or the general rules announced on the Platform, while reserving its legal rights against them.
7. It is prohibited to use the Platform or its content for unlawful purposes, to access any part of it using a robot or similar automated mechanism, or to copy or monitor it for commercial or non-commercial purposes.
8. This Platform may contain links to third-party websites; however, OneNewOne is not responsible for any content on those websites. A link to any third-party website does not imply that OneNewOne endorses that site or its products/services.

4. Membership Terms

1. In order to create a Platform member account, the information in the relevant registration form must be entered completely, accurately and up to date. OneNewOne cannot in any way be held responsible for information entered in the registration form being incomplete, incorrect or out of date.
2. The Member accepts full responsibility for the security and safekeeping of the system access tools they use (username, password, etc.) and for keeping this information away from third parties. It is the Member's own responsibility not to share credit card or other payment information with third parties.
3. Where a Member is able to choose a username, they (i) may not select or use another person's username with the intent to impersonate that person; (ii) may not select a username subject to another party's rights without appropriate authorization; and (iii) may not use an offensive, vulgar, obscene or unlawful username. OneNewOne has the right to cancel or refuse the registration of any username it believes violates this Agreement, Company policies, or the law.
4. Once their account has been created, Members can use the Platform by logging in with their username/contact address and password and by approving this Membership Agreement. Users without a membership account can view the publicly accessible parts of the Platform.
5. Members may upload information of their choosing in order to include details of their experience, expertise and CV in the area made available to them, and may update it at any time. Members themselves are responsible for the accuracy and timeliness of the information uploaded to the Platform.
6. Information shared by Members may be shared with companies and/or groups of companies offering job opportunities, in line with the candidates' consent. Members have the right to withdraw their consent regarding the positions they have approved at any time.
7. Members will not share any information, document or other content obtained within the scope of the Services with third parties.
8. Login credentials must be used by one person only; a single login may not be shared by multiple people. The Member bears all legal and criminal liability that may arise from sharing this information with third parties.

5. Other Terms

1. Responsibility for the content provided by Platform Members belongs solely to the Member who provides that content. It is the Members' responsibility to ensure that all rights and permissions necessary to use the content have been obtained.
2. OneNewOne may need to review content in order to comply with legal obligations. OneNewOne may modify, delete, or block access to any content it believes violates the law or this Agreement.
3. Members may not share comments, posts or other content through the Platform within the following scope:
   • Any content that is objectionable or contrary to law.
   • Content that is harmful, defamatory, damaging to personal rights and/or offensive to other users and/or third parties.
   • Content that threatens any person or institution.
   • Content that disturbs or may disturb users in general.
   • Content unrelated to the topic or page content that is posted repeatedly.
   • Identical, repetitive content (spam).
   • Advertising content on behalf of another brand or institution.
   • Any comment, link or content that supports or encourages unlawful activity.
   • Any content that infringes the rights of any third party or institution.
4. Members are solely responsible for any content they provide to the Platform. Members acknowledge and undertake that the content they upload (i) complies with the law; (ii) does not infringe any right of third parties, including intellectual property rights; and (iii) that they hold all rights necessary to provide such content.
5. The Member accepts and undertakes to act in accordance with the law, morality, good faith and the principles of honesty in all their transactions on the Platform, and not to engage in conduct that could hinder the operation of the Platform or acts that infringe the rights of third parties.
6. When accessing the Platform, it is prohibited to: use the Platform for a fraudulent, unlawful or illegal purpose; attempt unauthorized access; carry out vulnerability testing; collect information about other users; interfere with the operation of the servers; reproduce, modify, create derivative works from, sell or rent the Platform without OneNewOne's authorization; reverse engineer the Platform; act contrary to proprietary rights; or use the content to develop a competing product.
7. Members are responsible for procuring and maintaining all hardware, telecommunications and other services required to use the Platform.

6. Intellectual Property Rights

1. Content you provide through the Platform: Other than the limited rights that allow us to provide our services to you, you retain the intellectual property rights to the content you provide. The content belongs to you; however, by providing it, you grant us a non-exclusive, worldwide, royalty-free, transferable and irrevocable license to use, reproduce and display your content in order to provide services through the Platform.
2. Content belonging to OneNewOne: All registered and unregistered intellectual property rights on the Platform, such as titles, trade names, trademarks, patents, logos, designs, information and methods, belong to the Platform owner, OneNewOne, and are protected under national and international law. Visiting or using the Platform does not confer any rights to these.
3. The Platform, in whole or in part, may not be used on another website/medium without permission.
4. It is prohibited to use the design, source code, interface, content and database of the Platform, in whole or in part.

7. Protection of Personal Data

1. Personal data relating to natural persons may be processed as a result of using and visiting the Platform and creating a membership account. For detailed information, if you are registering as a candidate, you may review the Candidate Membership Form Disclosure Notice; if you are registering as a company employee, you may review the Company Employee Membership Form Disclosure Notice.
2. The Member accepts that all information they have provided is complete, accurate and up to date in every respect, and agrees to update it without delay in the event of any change.

8. Effective Date and Acceptance

This Membership Agreement takes effect on the date it is published on the Platform by OneNewOne. Members are deemed to have accepted this Agreement and any changes made to it over time by opening a membership account on the Platform.

9. Miscellaneous Provisions

1. This Membership Agreement is governed by and shall be interpreted in accordance with the laws of the Republic of Turkey.
2. The Istanbul (Central) Courts and Enforcement Offices have exclusive jurisdiction to resolve any disputes arising from the implementation of this Agreement.
3. The Parties agree that, in any dispute, OneNewOne's official books and commercial records, together with the electronic information, computer and voice recordings kept in its database and on its servers, shall constitute evidence, and that this clause constitutes an evidentiary agreement within the meaning of Article 193 of the Code of Civil Procedure (HMK).
4. All notices to be sent to the Parties will be made via the Members' email address(es) on file with OneNewOne.

1. Parties

Seller — Trade name: ONE HUMAN YAZILIM VE BİLİŞİM DANIŞMANLIĞI SANAYİ TİCARET ANONİM ŞİRKETİ (hereinafter referred to as "ONENEWONE" or the "SELLER"). Address: Reşitpaşa Mahallesi, Katar Caddesi, İTÜ ARI Teknokent 3 Binası No: 4, İç Kapı No: B109, Sarıyer/İstanbul. Email: info@onenewone.com

Buyer — The person whose name-surname, address, phone number and email information are stated in the Pre-Information Form.

2. Subject

The subject of this Pre-Information Form (the "Form") is to provide information, pursuant to Law No. 6502 on the Protection of Consumers and the Regulation on Distance Contracts published in Official Gazette No. 29188 dated 27 November 2014, regarding the sale and delivery of the Products ("Products") whose nature and sale price are specified.

3. Product Features, Payment and Validity Period

• Information regarding the description, unit price, quantity and payment terms of the Products is as stated in the Pre-Information Form and has been approved by the Buyer.
• Shipping or freight charges will be paid by the Seller.
• Advertised prices and offers are valid until updated or changed. Prices advertised for a limited period are valid until the end of the stated period.

4. General Provisions

1. The BUYER declares that they have read and are informed of the pre-information regarding the essential characteristics of the product subject to the contract as stated on the Website, the sale price including all taxes, the method of payment, the delivery terms and costs, the delivery period, and the SELLER's full trade name, address and contact information, and that they have given the necessary confirmation electronically.
2. The SELLER accepts no liability whatsoever for any direct or indirect damage that may arise from breach of contract, tort or other reasons due to the use of the Website; nor for interruption of transactions, error, negligence, deletion, loss, computer virus, telecommunications failures, theft, or unauthorized access to records.
3. The SELLER reserves the right to change, reorganize and discontinue publication of any service, product and terms of use on the Website without prior notice. Changes take effect on the date of publication.
4. The Website may contain links to other websites not under the SELLER's control; the SELLER is not responsible for the content of those sites.
5. The intellectual and industrial property rights to the overall appearance and design of the Website, and to all information, images, trademarks, domain names, logos, icons and materials, belong to the SELLER; they may not be copied, reproduced or distributed without prior permission.
6. The BUYER's personal information may only be disclosed to official authorities when duly requested by them and where there is an obligation to disclose it under applicable mandatory legislation.
7. The product subject to the contract is delivered by the contracted courier company (Yurtiçi Kargo) to the BUYER or the person/institution at the address indicated by the BUYER, within the period stated in the pre-information — depending on the distance to the BUYER's place of residence — not exceeding 30 days from the order date. The shipping/delivery fee is itemized on the invoice under "Delivery Fee".
8. As the shipping date may change for custom-made and imported products, up-to-date shipping information will be shared with the customer.
9. If the product is to be delivered to a person/institution other than the BUYER, the SELLER cannot be held responsible if that person refuses to accept delivery.
10. The SELLER cannot be held responsible for damages arising from the courier company's errors or negligence. The Buyer is obliged to inspect the Products at the time of delivery and to immediately notify the Seller of any defects observed.
11. The SELLER is responsible for delivering the product intact, complete, in accordance with the qualities specified in the order, and with any warranty documents, if applicable.
12. If it becomes impossible to fulfil the order, the SELLER shall notify the BUYER before the performance period expires, and may supply a different product of equal quality and price if available in stock.
13. If, following delivery, the bank does not pay the amount to the SELLER due to unauthorized use of the BUYER's payment instrument by third parties, the BUYER must return the relevant product to the SELLER within 3 days.
14. If the purchased product is out of stock with the supplier and no equivalent is available, the SELLER reserves the right to refund the amount paid.
15. If the product cannot be delivered on time due to force majeure, the SELLER shall notify the BUYER; if the BUYER cancels the order, the amount paid is refunded via an appropriate payment method within 14 days.
16. For credit card payments, following cancellation the product amount is refunded to the relevant bank within 14 days; reflection of the amount in the BUYER's account may take 2–3 weeks depending on bank procedures.
17. The SELLER reserves the right to cancel wholesale-type purchases exceeding the BUYER's needs (more than 3 units), or to ship only the retail-limited quantity of 3 units.
18. If a transaction fails due to 3 incorrect password entries, the SELLER may request documents confirming identity and card details; if the information does not match, the order may be cancelled.
19. Where the product price has been listed well below market price as a result of an error that would be obvious to an average person, such orders may be cancelled by the SELLER.

5. Right of Withdrawal

In distance contracts relating to the sale of goods, the Buyer may exercise their right of withdrawal from the contract within 14 (fourteen) days from the delivery date of the product to themselves or to the person/institution at the address indicated, by rejecting the goods without incurring any legal or criminal liability and without stating any reason. In determining the withdrawal period, the day on which the last item/part was received is taken as the basis.

• The Buyer may notify their withdrawal within the 14-day period by registered mail or email. If the Seller does not make an offer, the Buyer must send the product to the Seller's address within 10 days of the notification.
• For a return, the return section of the invoice must be completed in full, signed, and sent to the Seller.
• Products to be returned must not have suffered any impairment to their salability, and must be delivered with their box, packaging and any standard accessories.
• The Seller is obliged to refund the total amount and any documents that place the Buyer under debt no later than 14 days after receiving the withdrawal notice.
• Return shipping costs arising from withdrawal are covered by the Seller (via the contracted Yurtiçi Kargo).
• A decrease in the value of the received goods does not prevent the right of withdrawal; however, if the decrease in value results from the consumer's fault, the Buyer must compensate for it. Changes arising from normal use are not considered a decrease in value.

6. Products for Which the Right of Withdrawal Cannot Be Exercised

Unless otherwise agreed by the Parties, the consumer cannot exercise the right of withdrawal for the following types of contracts:

• Custom-made goods prepared according to the consumer's requests or personal needs (except in the case of defects).
• Goods whose protective elements, such as packaging, tape, seal or wrapping, have been opened after delivery, and whose return is not appropriate for health and hygiene reasons.
• Goods that, after delivery, become mixed with other products and cannot by their nature be separated.
• Services performed immediately in electronic form, or intangible goods delivered immediately.
• Services whose performance has begun with the consumer's approval before the withdrawal period ends.

7. Complaints and Competent Court

The Buyer may submit any suggestions and complaints regarding the goods or services sold via the Seller's email address above; the Seller aims to review and resolve them within legal limits.

The Buyer may file their complaints and objections with the Consumer Arbitration Committee or Consumer Court of the place where they purchased the goods or where they reside, within the monetary limits determined annually by the Ministry of Trade. The Buyer declares that they accept the terms of this Pre-Information Form and Distance Sales Agreement electronically.

1. General Principles

1. If you place an order electronically through the website, you are deemed to have accepted the pre-information form and distance sales agreement presented to you.
2. Buyers are subject to the provisions of Law No. 6502 on the Protection of Consumers and the Distance Contracts Regulation (Official Gazette: 27.11.2014/29188), as well as other applicable laws, regarding the sale and delivery of the product they purchase.
3. Shipping fees for product delivery will be paid by the buyers.
4. Each purchased product is delivered to the person/institution at the address indicated by the buyer, provided the statutory 30-day period is not exceeded. If not delivered within this period, the Buyer may terminate the contract.
5. The purchased product must be delivered complete, in accordance with the qualities specified in the order, and together with any warranty certificate and user manual, if applicable.
6. If it becomes impossible to sell the product, the seller must notify the buyer in writing within 3 days of becoming aware of this, and refund the total amount within 14 days.

2. Payment and Unforeseen Circumstances

• If the price is not paid: If the Buyer does not pay the product price or the payment is cancelled in bank records, the Seller's obligation to deliver the product ends.
• Unauthorized use of the credit card: If, after delivery, it is determined that the card was used unlawfully by unauthorized persons, and the price is not paid to the Seller by the bank, the Buyer must return the product within 3 days, with the shipping cost to be borne by the Seller.
• Force majeure: If the product cannot be delivered on time due to unforeseeable force majeure, the Buyer will be informed. The Buyer may request cancellation of the order, its replacement with a similar product, or postponement of delivery. In the event of cancellation, cash payments are refunded in cash within 14 days, and credit card payments are refunded to the bank within 14 days (reflection to the account may take 2–3 weeks).

3. The Buyer's Obligation to Inspect the Product

The Buyer will inspect the goods/services subject to the contract before accepting delivery, and will not accept damaged or defective goods/services — such as those that are dented, broken, or have torn packaging — from the courier company. Goods/services accepted at delivery are deemed to be undamaged and intact. After delivery, the goods/services must be carefully preserved. If the right of withdrawal is to be exercised, the goods/services must not be used, and the invoice must be returned together with the product.

4. Right of Withdrawal and Its Period

The BUYER may exercise their right of withdrawal from the contract within 14 (fourteen) days from the delivery date of the purchased product to themselves or to the person/institution at the address indicated, by rejecting the goods, provided they notify the Seller, without incurring any legal or criminal liability and without stating any reason.

Contact for withdrawal notice: ONE HUMAN YAZILIM VE BİLİŞİM DANIŞMANLIĞI SANAYİ TİCARET ANONİM ŞİRKETİ — Reşitpaşa Mahallesi, Katar Caddesi, İTÜ ARI Teknokent 3 Binası No: 4, İç Kapı No: B109, Sarıyer/İstanbul — info@onenewone.com

• If a service has been purchased, the 14-day period begins on the date the contract was signed. The right of withdrawal cannot be exercised for service contracts whose performance has begun with the consumer's approval before the withdrawal period ends.
• Costs arising from the exercise of the right of withdrawal are borne by the SELLER.
• Written notice of withdrawal must be given within the 14-day period by registered mail, fax or email, and the product must not have been used, in accordance with the provisions of "Products for Which the Right of Withdrawal Cannot Be Exercised".
• The invoice of the product to be returned (together with a return invoice if corporate), the return form, the box, the packaging, and any standard accessories must be delivered complete and undamaged.

5. Return Conditions

1. The SELLER is obliged to refund the total amount and any documents that place the BUYER under debt no later than 10 days after receiving the withdrawal notice, and to take back the goods within 20 days.
2. If the value of the goods decreases, or if return becomes impossible, due to a reason attributable to the BUYER's fault, the BUYER shall compensate the SELLER's losses in proportion to their fault. The BUYER is not liable for changes arising from proper use.
3. If, due to withdrawal, the amount falls below the campaign limit, the discount amount benefited from under the campaign is cancelled.

6. Products for Which the Right of Withdrawal Cannot Be Exercised

Products prepared according to the BUYER's request or personal needs and not suitable for return; lower underwear, swimsuit and bikini bottoms, cosmetics, single-use products; perishable goods or goods with a risk of expiry; products whose return is not appropriate for hygiene reasons once the packaging has been opened; goods mixed with other products in a way that cannot be separated; periodicals; services performed immediately in electronic form or intangible goods delivered immediately; and audio/video recordings, books, digital content, software and data storage devices whose packaging has been opened, cannot be returned.

For cosmetics and personal care products, underwear, swimwear, bikinis, books, copyable software/programs, DVD/VCD/CD/cassettes, and stationery consumables (toner, cartridges, ribbons, etc.) to be returned, their packaging must not have been opened, tried, damaged or used.

7. Default, Payment and Delivery

If the BUYER defaults where payment was made by credit card, they accept that they will pay interest under the credit card agreement between the cardholder and the bank, and will be liable to the bank accordingly. In such a case, the bank may resort to legal action and may claim the resulting costs and attorney's fees from the BUYER. The BUYER accepts that they will pay for any loss and damage arising from delayed performance of the debt.

Payments may be made to the SELLER's accounts (in TL) via bank transfer/EFT, or by taking advantage of single online payment or installment options via credit card on the site. For online payments, the amount is charged from the credit card at the end of the order.

1. About This Policy

ONE HUMAN YAZILIM VE BİLİŞİM DANIŞMANLIĞI SANAYİ TİCARET ANONİM ŞİRKETİ uses cookies, pixels and similar cookie-like technologies (collectively referred to as "Cookies") on the onenewone.com website (the "Site") in order to ensure that visitors can browse the Site properly and to improve the visitor experience.

This Cookie Policy (the "Policy") aims to inform you, in accordance with the Law on the Protection of Personal Data (the "Law") and relevant legislation, about how your personal data collected through cookies is processed.

This Policy covers all natural persons who visit the onenewone.com website. We may need to update this Policy from time to time; we therefore recommend that you visit our website to check the latest version of the Policy.

2. Data Controller

Under Law No. 6698 on the Protection of Personal Data (the "Law"), the data controller is the natural or legal person who determines the purposes and means of processing personal data and is responsible for establishing and managing the data recording system.

The Company acts as the data controller with respect to the processing of visitors' personal data through the website. Our website may include links to certain third-party websites; we recommend that you review the relevant policies of those other data controllers to learn about their use of cookies.

3. What Are Cookies and How Do They Work?

A cookie is a small text file downloaded to a user's computer, phone or browser when they access a website. Cookies allow visitors to be recognized and allow certain information relating to their visit preferences or past transactions to be stored. This means that on your next visit, information relating to your previous visit (such as your username and preferences) will be remembered.

Cookie types are divided into two: cookies created by the website you are visiting (first-party cookies), or cookies created by other websites providing content on the page you are viewing (third-party cookies). Cookies are also divided into different categories according to their intended use:

4. First-Party Cookies

The first-party cookies used on our website, created directly by OneNewOne, and their purposes of use are as follows:

5. Personal Data Processing Purposes

Your personal data collected through cookies is processed for the following purposes:

• To track the actions of Site visitors,
• To ensure that you browse the Site properly and so that your information can be remembered on your next visit,
• To improve and develop the structure and content of the Site,
• To statistically evaluate visitor usage; to track website traffic,
• To ensure content is presented in the most effective way for you and your device,
• To be able to offer customized services in line with visitor preferences and needs.

6. Collection Method and Legal Basis

The Company processes your personal data collected through cookies on the legal basis that it is necessary for the Company's legitimate interests. Your data is collected through cookies using automated methods.

7. Blocking the Use of Cookies

You may enable or disable cookies by changing your browser settings. However, if you disable cookies, you may not be able to benefit from some features of the Site. It is not possible to block certain types of cookies that are necessary for the Site's functioning (such as technical cookies). You can refer to your browser's help page for information on how to disable cookies:

8. Data Subject Rights

Data subjects have certain rights set out in Article 11 of the Law:

• To learn whether their personal data is being processed,
• To request information regarding the processing, if any,
• To learn the purpose of processing and whether the data is used in accordance with that purpose,
• To know the third parties to whom their data is transferred, domestically or abroad,
• To request the correction of incomplete or inaccurate data,
• To request deletion or destruction of data if the reasons requiring its processing no longer exist,
• To object to a result arising against them from analysis carried out exclusively through automated systems,
• To request compensation for damage suffered as a result of unlawful processing.

You may submit your requests by sending an email from your email address registered in our systems to info@onenewone.com, or through other methods set out in the Communiqué on the Procedures and Principles of Application to the Data Controller.

1. Our Information Security Policy

ONE HUMAN YAZILIM VE BİLİŞİM DANIŞMANLIĞI SANAYİ TİCARET ANONİM ŞİRKETİ always places customer satisfaction at the core of its activities in "Ensuring Information Security in the Development, Consulting, Sales and Support Services of AI-Supported Human Resources Business Applications Software"; by paying maximum attention to information security, the protection of personal data and quality, it aims to understand regulations, standards, and customer expectations and needs, and to produce projects that anticipate probable future needs and expectations.

2. Our Policy Principles

Accordingly, our commitments are as follows:

• Managing information assets; determining the security value, needs and risks of assets, and developing and implementing controls for security risks.
• Defining the framework within which methods for identifying information assets, security needs, vulnerabilities and threats to assets will be determined.
• Defining a framework to assess the confidentiality, integrity and availability impact of threats on our processes and assets, as well as the privacy impact on personal data.
• Setting out working principles for the treatment of risks.
• Continuously monitoring risks by reviewing technological expectations in the context of the scope of services provided.
• Meeting information security requirements for internal and external stakeholders by fulfilling obligations arising from applicable national or international regulations and agreements.
• Reducing the impact of information security threats to service continuity and contributing to continuity.
• Having the competence to respond quickly to information security incidents that may occur and to minimize their impact.
• Maintaining and improving the level of information security over time through a cost-effective control infrastructure.
• Providing all personnel with awareness and training on Information Security Management System topics, and repeating this training at regular intervals.
• Continuously improving the system by taking into account the results of implementation, audits and corrective actions.
• Understanding and meeting the requirements of the Law on the Protection of Personal Data (KVKK); and, when working with international stakeholders and business partners subject to EU data protection laws, understanding and meeting GDPR requirements.
• Enhancing the Company's reputation and protecting it from negative effects related to information security.

3. Our Commitment

As ONE HUMAN YAZILIM VE BİLİŞİM DANIŞMANLIĞI SANAYİ TİCARET ANONİM ŞİRKETİ, we commit to the implementation, review and continuous improvement of practices related to the Information Security Management System.

General Manager
03.01.2025

1. Protection of Personal Data

As ONE HUMAN YAZILIM VE BİLİŞİM DANIŞMANLIĞI SANAYİ TİCARET ANONİM ŞİRKETİ, we place great importance on the security of your personal data. Below you can find our disclosure notices prepared within the scope of Law No. 6698 on the Protection of Personal Data (KVKK).

2. Disclosure Notices

As One Human Yazılım ve Bilişim Danışmanlığı San. Tic. A.Ş. ("OneNewOne" or the "Company"), protecting the personal data we obtain in carrying out our processes is one of our top priorities. We place great importance on ensuring the security of your personal data and processing it in compliance with the legislation.

This disclosure notice contains information on how we, as data controller, process your personal data within the scope of the candidate membership activity we carry out through our website candidate.onenewone.com/register (the "Website").

1. Data Processed, Purposes and Legal Grounds

Article 5 of the Law on the Protection of Personal Data (the "Law") sets out the legal grounds for processing personal data. We process your data based on the following purposes and legal grounds:

2. Who Do We Share Your Data With?

Your personal data is shared with the following parties in accordance with the transfer rules set out in the Law and relevant legislation:

• Authorized Institutions and Organizations: Fulfilling legal obligations where our Company is requested to provide information/documents, or where notification is required.
• Suppliers and Business Partners: Obtaining support from suppliers providing IT infrastructure, products and services in order to fulfil the stated purposes (e.g. storing data in the cloud).
• Employers with Open Positions: Where you have given your explicit consent, sharing in order to include your information in companies' talent pools.

Your data is transferred, limited to the purposes and parties above, in accordance with the rules set out in Articles 8 and 9 of the Law. In the case of transfer abroad, we act in accordance with Article 9 of the Law and take the necessary administrative and technical measures.

3. Which Channels Do We Collect Your Data Through?

When you visit our website and carry out transactions on the site, we collect your personal data through our websites and — where you give explicit consent — career platforms, using automated and partially automated methods.

4. How Can You Exercise Your Rights?

Under Article 11 of the Law, you have the following rights:

• To learn whether your personal data is being processed,
• To request information regarding the processing, if any,
• To learn the purpose of processing and whether the data is used in accordance with that purpose,
• To know the third parties to whom your data is transferred, domestically or abroad,
• To request correction if processed incompletely or incorrectly, and to have this notified to third parties,
• To request deletion or destruction of data if the reasons for processing no longer exist, and to have this notified to third parties,
• To object to a result arising against you from analysis carried out exclusively through automated systems,
• To request compensation for damage suffered as a result of unlawful processing.

You may submit your requests by sending an email from your email address registered in our systems to info@onenewone.com, or through other methods set out in the Communiqué on the Procedures and Principles of Application to the Data Controller.

As One Human Yazılım ve Bilişim Danışmanlığı San. Tic. A.Ş. ("OneNewOne" or the "Company"), protecting the personal data we obtain in carrying out our processes is one of our top priorities. We place great importance on ensuring the security of your personal data and processing it in compliance with the legislation.

This disclosure notice contains information on how we, as data controller, process your personal data within the scope of the company employee membership activity we carry out through our website company.onenewone.com/register (the "Website").

1. Data Processed, Purposes and Legal Grounds

Article 5 of the Law on the Protection of Personal Data (the "Law") sets out the legal grounds for processing personal data. We process your data based on the following purposes and legal grounds:

2. Who Do We Share Your Data With?

Your personal data is shared with the following parties in accordance with the transfer rules set out in the Law and relevant legislation:

• Authorized Institutions and Organizations: Fulfilling legal obligations where our Company is requested to provide information/documents, or where notification is required.
• Suppliers and Business Partners: Obtaining support from suppliers providing IT infrastructure, products and services in order to fulfil the stated purposes (e.g. storing data in the cloud).

Your data is transferred, limited to the purposes and parties above, in accordance with the rules set out in Articles 8 and 9 of the Law. In the case of transfer abroad, we act in accordance with Article 9 of the Law and take the necessary administrative and technical measures.

3. Which Channels Do We Collect Your Data Through?

When you visit our website and carry out transactions on the site, we collect your personal data through our websites, using automated and partially automated methods.

4. How Can You Exercise Your Rights?

Under Article 11 of the Law, you have the following rights:

• To learn whether your personal data is being processed,
• To request information regarding the processing, if any,
• To learn the purpose of processing and whether the data is used in accordance with that purpose,
• To know the third parties to whom your data is transferred, domestically or abroad,
• To request correction if processed incompletely or incorrectly, and to have this notified to third parties,
• To request deletion or destruction of data if the reasons for processing no longer exist, and to have this notified to third parties,
• To object to a result arising against you from analysis carried out exclusively through automated systems,
• To request compensation for damage suffered as a result of unlawful processing.

You may submit your requests by sending an email from your email address registered in our systems to info@onenewone.com, or through other methods set out in the Communiqué on the Procedures and Principles of Application to the Data Controller.

As One Human Yazılım ve Bilişim Danışmanlığı San. Tic. A.Ş. ("OneNewOne" or the "Company"), protecting the personal data we obtain in carrying out our processes is one of our top priorities. We place great importance on ensuring the security of your personal data and processing it in compliance with the legislation.

This disclosure notice contains information on how we process your personal data in connection with sending you commercial electronic messages.

1. Data Processed, Purposes and Legal Grounds

Article 5 of the Law on the Protection of Personal Data (the "Law") sets out the legal grounds for processing personal data. We process your data based on the following purposes and legal grounds:

2. Who Do We Share Your Data With?

Your personal data is shared with the following parties in accordance with the transfer rules set out in the Law and relevant legislation:

• Authorized Institutions and Organizations: Fulfilling legal obligations (for example, transfer to the Message Management System Inc. (İYS) for the notification obligation under the Regulation on Commercial Communication and Commercial Electronic Messages).
• Suppliers and Business Partners: Where you have given explicit consent, obtaining support from suppliers in order to send commercial electronic messages.

Where your personal data is transferred, we act in accordance with the rules set out in Articles 8 and 9 of the Law.

3. Which Channels Do We Collect Your Data Through?

We collect your personal data through forms filled out electronically on the website, SMS, email correspondence, and phone calls, using automated and partially automated methods.

4. How Can You Exercise Your Rights?

Under Article 11 of the Law, you have the following rights:

• To learn whether your personal data is being processed,
• To request information regarding the processing, if any,
• To learn the purpose of processing and whether the data is used in accordance with that purpose,
• To know the third parties to whom your data is transferred, domestically or abroad,
• To request correction if processed incompletely or incorrectly, and to have this notified to third parties,
• To request deletion or destruction of data if the reasons for processing no longer exist, and to have this notified to third parties,
• To object to a result arising against you from analysis carried out exclusively through automated systems,
• To request compensation for damage suffered as a result of unlawful processing.

You may submit your requests by sending an email from your email address registered in our systems to info@onenewone.com, or through other methods set out in the Communiqué on the Procedures and Principles of Application to the Data Controller.