Terms &
Policies

Purpose, Scope and Management Commitment

Ulaq Global Otonom Sistemler A.Ş. and its subsidiaries (ULAQ GLOBAL) regard corporate information as an extremely valuable asset. Information is critical to the continuity of business activities and must be protected appropriately.

ULAQ GLOBAL aims to minimise risks related to the Confidentiality, Integrity, and Availability of corporate information by implementing the Information Security Management System (ISMS) in accordance with ISO 27001 standards. This policy has been approved by Ulaq Global GM, who is committed to ensuring the following:

• Ensuring the confidentiality, integrity, and availability of Ulaq Global information and information systems
• Identifying risks to information assets and managing those risks systematically
• Fulfilling the requirements of Information Security Standards
• Complying with all legislation related to Information Security
• Evaluating and pursuing continuous improvement opportunities to sustain the ISMS
• Conducting training to develop technical and behavioural competencies and raise information security awareness
• Preparation and publication of sub-procedures linked to this policy by the CTO

Ulaq Global's Information Security Policies apply to all Ulaq Global personnel who use Ulaq Global information or business systems, regardless of geographic location or business unit, whether full-time, part-time, permanent, or contractual. All persons outside these classifications who require access to Ulaq Global information — such as third-party service providers and their associated support staff — must comply with the general principles of this policy and with all other applicable security responsibilities and obligations.

Responsibilities of All Employees

The purpose of Information Security and this policy is to protect, maintain, and manage the confidentiality, integrity, and availability of information and all supporting business systems, processes, and applications. This means keeping Ulaq Global's information in authorised hands; ensuring that information is complete, accurate, and available; and ensuring that information and systems are ready for use when required.

Therefore, all Ulaq Global and externally sourced personnel — including interns, dealer users, and sub-industry personnel — regardless of their positions or duties, are responsible for performing their work in a manner that safeguards Ulaq Global's information. In addition, all Ulaq Global personnel must comply with the protection of confidential information and Ulaq Global's Business Ethics Principles as specified in the Ulaq Global Personnel Regulations.

Policy Ownership and Guidance

The functional ownership of this policy and all standards, supporting documents, and training activities will be carried out by ICT Governance and Information Security Management, which will also serve as the advisory source and guide for implementation of the policy throughout Ulaq Global. ICT Governance and Information Security Management will ensure that all employees receive appropriate training to achieve proper awareness on Information Security matters, and will provide guidance in handling information security incidents.

The CTO is responsible for establishing and maintaining the overall Information Security management framework and for continuously reviewing this policy to ensure it remains current and reflects changes in the risk environment. Information Security policies are reviewed at least once a year in line with asset and risk updates. Any Ulaq Global employee may submit a request to ICT Governance and Information Security Management to propose changes to the policies.

Auditing and Compliance

Each unit manager is primarily responsible for taking necessary measures to ensure compliance with the Information Security Policy and for overseeing the system. ICT Governance and Information Security Management is responsible for periodically auditing compliance with all published policies and procedures and for reporting to relevant parties.

Violations of the Information Security Policy may cause Ulaq Global to suffer losses as a result of failing to implement the required controls against risks, and may give rise to criminal liability and material damage compensation responsibilities under the Turkish Penal Code. Such violations also constitute a breach of Ulaq Global Personnel Regulations and may result in disciplinary action up to and including termination of employment or the initiation of judicial and criminal proceedings.

Objectives

Ulaq Global's Information Security aims to:

• Fully ensure the continuity of information systems
• Maximise employee awareness, consciousness, and compliance with security requirements
• Ensure full compliance with third-party agreements
• Minimise information security breach incidents and convert them into learning opportunities
• Ensure that information is produced, accessed, and stored in full compliance with the law
• Implement the most current and effective technical security controls

Each Ulaq Global employee is responsible for contributing to these objectives.

ULAQ GLOBAL OTONOM SİSTEMLER ANONİM ŞİRKETİ ("ULAQ GLOBAL") uses tracking technologies such as cookies to improve the experience you have during your visit to our online channels. This cookie policy informs you about the personal data obtained through the use of cookies during your visit to ulaq.global and explains how you can control these cookies.

Pursuant to Law No. 6698 on the Protection of Personal Data ("Law"), your personal data collected through cookies on the website may be processed by ULAQ GLOBAL as the data controller and by other third-party data controllers for the purposes described below.

What is a Cookie?

Cookies are small text files transmitted to you by the websites you visit through your internet browser. The cookie file is stored in your web browser, recognises you, and facilitates your next visit while making the web service more useful. Cookies may be stored during the web session (session cookies) or for a longer but limited period (persistent cookies).

Cookies on Our Website and Their Purposes

Your personal data may be processed through cookies on the website using fully automated methods, based on the legal grounds of your explicit consent and/or the necessity of processing data for the Company's legitimate interests without prejudicing your fundamental rights and freedoms.

Mandatory Cookies: Cookies that remember choices made on previous pages as you navigate the site and retain your login information. The website cannot function properly without these cookies.

Statistical Cookies: Cookies that help improve the site by using anonymised statistical information such as the number of site visits and menu clicks. Processed with your explicit consent.

Advertising & Marketing Cookies: Cookies added to the site through third parties to present relevant advertisements based on your activity on the page. These may involve the processing and international transfer of your personal data by third-party data controllers and are processed with your explicit consent.

Mandatory Cookies

Statistical Cookies

Advertising & Marketing Cookies

Managing Your Cookie Preferences

You can change your cookie preferences using the buttons in the cookie management panel. Please note that restricting cookies may prevent you from fully benefiting from all features available on the site.

For requests under Article 11 of Law No. 6698, which regulates the rights of data subjects, please contact ULAQ GLOBAL as described in the Privacy Notice on the website.

This notice is made by Ulaq Global Otonom Sistemler A.Ş. ("Ulaq Global") as the data controller, within the framework of Article 10 of Law No. 6698 on the Protection of Personal Data ("Law") and the "Communiqué on the Procedures and Principles to be Followed in the Fulfilment of the Obligation to Inform." It covers the purposes of processing personal data you share through the website, the recipient groups to whom it may be transferred, the method of collection, the legal grounds for data processing activities, and your rights under the Law.

Processed Personal Data and Processing Purposes

Ulaq Global's website processes personal data through "Cookies," "IP Address," and "Server Access Logs." The personal data obtained and their processing purposes are as follows:

• Cookies: Used to remind visitors of certain information and to ensure the site operates smoothly.
• IP Address: Used to enable the web server to send a response.
• Server Access Logs: Used for security, error analysis, and to ensure the system operates properly.

Transfer of Personal Data

Your personal data may be transferred to the following third parties for the stated purposes, pursuant to the provisions of the Law regarding domestic and international data transfers:

• Public institutions and organisations authorised to obtain information and documents from Ulaq Global in order to fulfil legal obligations under relevant legislation
• Regulatory and supervisory authorities to respond to their requests
• Law firms and judicial authorities authorised to process data and conduct transactions on behalf for legal proceedings
• Competency assessment firms authorised to process data on behalf

Methods and Legal Grounds for Collection of Personal Data

Your personal data is collected electronically through automated means via forms on the website and is processed based on the following legal grounds:

• The existence of your explicit consent
• Being stipulated in applicable legislation, primarily Law No. 5202 on Defence Industry Security
• The necessity of processing personal data of the contracting parties, provided it is directly related to the establishment or performance of a contract
• Being mandatory for the fulfilment of legal obligations
• Having been made public by the data subject
• Being mandatory for the establishment, use, or protection of a right
• Being mandatory for data processing for the Company's legitimate interests, provided it does not harm the fundamental rights and freedoms of the data subject
• In cases of actual impossibility, data processing being mandatory to protect the life or bodily integrity of a person

Rights of the Data Subject

Pursuant to Article 11 of the Law, every person has the right to apply to the data controller to:

• Learn whether personal data is being processed
• Request information if personal data has been processed
• Learn the purpose of processing personal data and whether it is used in accordance with that purpose
• Know the third parties to whom personal data has been transferred domestically or abroad
• Request correction of personal data if it has been processed incompletely or inaccurately
• Request deletion or destruction of personal data under the conditions set forth in Article 7 of the Law
• Request notification of corrections or deletions to third parties to whom personal data has been transferred
• Object to a result detrimental to the person arising from analysis of processed data by automated systems exclusively
• Request compensation for damages arising from unlawful processing of personal data

To exercise these rights, please complete the "Ulaq Global Otonom Sistemler Anonim Şirketi Personal Data Owner Application Form" and submit it by notarised post to:

Applications will be finalised free of charge as soon as possible and within thirty days at the latest.

The application process covers only requests related to the implementation of the Law listed above. Job applications, internship applications, and related questions and requests are outside the scope of this process.

In line with the company's vision, mission, and values, the fundamental aim is to provide the products and services offered to meet customer needs while maintaining the highest level of customer satisfaction; to instil a risk-based thinking approach without compromising time, cost, and performance targets; and to establish a quality management system oriented towards continuous improvement.

Quality is not merely an outcome — it is a sustainable management approach at the centre of all processes. The fundamental principles are as follows:

• Implementing relevant national and international standards and legal regulations across all processes
• Increasing efficiency and elevating the sector to higher levels in international competition
• Encouraging personnel through innovative and creative approaches; developing personnel competencies, knowledge, and skills through training; and providing the necessary technological infrastructure
• Fully understanding and timely meeting the expectations of customers for products and services; responding to requests and complaints as promptly as possible
• Maintaining product quality and reliability throughout the product's lifecycle with a full awareness of the importance of customer satisfaction
• Exceeding established targets through continuous improvement; strengthening the sector in the competitive environment; establishing mutual trust with customers, employees, and suppliers
• Being a model organisation that respects the society and environment in which it operates, complies with occupational health and safety rules, and contributes to the national economy by continuously developing business volume
• Documenting, certifying, and continuously improving the quality management system to meet the requirements of standards — this is the fundamental objective of the institution

ALL content published on this website ("Website"), including but not limited to text, technical articles, whitepapers, datasheets, images, diagrams, graphics, illustrations, photographs, videos, audio, logos, page layout, design elements, source code, and the selection and arrangement thereof (collectively, the "Content"), is the property of ULAQ GLOBAL ("Company," "we," "us") or its licensors and is protected under the Turkish Law on Intellectual and Artistic Works No. 5846 (Fikir ve Sanat Eserleri Kanunu), the Industrial Property Law No. 6769 (Sınai Mülkiyet Kanunu), and applicable international copyright treaties.

All rights are expressly reserved. No part of the Content may be reproduced, distributed, republished, transmitted, displayed, modified, adapted, translated, or otherwise exploited in any form or by any means — electronic, mechanical, or otherwise — without the prior written permission of the Company.

The Company's trademarks, trade names, logos, and service marks (including "ULAQ" and "ULAQ KAMA") are registered or pending registration and may not be used without prior written authorization. Reference on this Website to any third-party trademarks is for identification purposes only and does not imply endorsement or affiliation.

Requests to reproduce or republish Content beyond the limited license below should be sent to ulaq@ulaq.global. Where short excerpts are quoted for legitimate journalistic, academic, or review purposes consistent with FSEK Article 35, attribution must read: "Source: ULAQ GLOBAL, ulaq.global."