ON THE PROTECTION AND PROCESSING OF PERSONAL DATA**

As DREAMLAND REAL ESTATE INVESTMENT AND TRADE LIMITED COMPANY, headquartered at Levent Mah. Cömert Sk. Yapı Kredi Blokları Sitesi C Block No:1C Inner Door No:40 Beşiktaş / Istanbul (Tax ID No: 3131428593) (“DREAMLAND” or the “Company”), we attach the utmost importance to the security of your personal data.

With this awareness, we give the highest priority to ensuring that personal data belonging to real persons with whom we interact is processed and safeguarded in full compliance with the Turkish Personal Data Protection Law No. 6698 (“Law” or “KVKK”), its secondary legislation (regulations, communiqués, etc.), and the binding decisions of the Personal Data Protection Board.

Data Controller Capacity and Security Measures

With full acknowledgment of our responsibilities and acting in our capacity as Data Controller as defined under the Law, we process your personal data strictly within the scope explained below and within the limits prescribed by applicable legislation. In this context, we implement all necessary technical and administrative measures to ensure an appropriate level of security, including:

• Preventing unlawful processing of personal data
• Preventing unauthorized access to personal data
• Ensuring the secure retention and protection of personal data

Purpose and Scope of This Information Notice

This Information Notice aims to transparently disclose, via our website, the personal data processing activities conducted by DREAMLAND in relation to individuals it interacts with while performing its core business activities.

Accordingly, this Notice serves as a general disclosure regarding personal data processing activities carried out within DREAMLAND’s primary fields of operation and business processes.

Information Regarding the Data Controller

DREAMLAND is a corporate formation established to provide fast, reliable, and professional services to its customers in the field of land and real estate investments.

Purposes of Processing Personal Data

Your personal data is processed by the Company within the limits set forth by the Law, in compliance with the principles of legality, good faith, relevance, proportionality, and purpose limitation, for the following purposes:

• Conducting the Company’s commercial activities in compliance with applicable legislation and Company policies
• Determining, planning, and implementing the Company’s short-, medium-, and long-term commercial strategies
• Managing corporate communication and information security processes
• Ensuring the commercial and legal security of real and legal persons with whom the Company maintains business relationships
• Conducting business continuity, service production, and operational processes
• Managing risk management and ensuring the security of data controller operations
• Carrying out reporting related to control, data management, analysis, social responsibility activities, process development, and similar initiatives

Method of Collection and Legal Grounds for Processing Personal Data

Your personal data is collected directly from you through verbal, written, or electronic means, as well as via the Company’s website and related applications and software, within the scope of Company activities. Data processing is carried out either fully or partially by automated means or non-automated means provided that it forms part of a data recording system.

Within this framework, the general categories of personal data listed below are processed based on the legal grounds specified under Article 5/2 of the Law.

While establishing the classification below, both the Company’s internal business processes and website-related activities have been taken into account. Separate information notices and/or explicit consent texts specific to each process are provided to relevant data subject groups through layered disclosures or other appropriate means.

Personal Data Categories, Types, and Legal Grounds

Upon request, detailed information regarding the processing purposes of each data category and type may be provided to you through the Company’s internal personal data inventory.

All information notices specific to website-related processes may be accessed under the KVKK section of our website.

Transfer of Personal Data and Purposes of Transfer

Your personal data may be transferred, when necessary, for the fulfillment of the purposes stated above and to ensure uninterrupted execution of the Company’s commercial operations and business processes, based on:

• Your explicit consent pursuant to Article 8/1 of the Law, and/or
• Article 8/2(a) of the Law, where transfer is explicitly stipulated by law, required for fulfilling legal obligations, necessary for the establishment, exercise, or protection of a right, or mandatory for the legitimate interests of the data controller without harming fundamental rights and freedoms

In such cases, all required technical and administrative security measures are duly implemented.

Recipients may include:

• Legally authorized public institutions and organizations, judicial and administrative authorities
• Private legal entities and natural persons permitted by applicable legislation
• Authorized audit firms and regulatory authorities
• Business partners with whom cooperation is established for operational purposes
• Suppliers, only when necessary
• DREAMLAND affiliates, partners, group companies, and shareholders for coordination of shared management and operational structures

You may withdraw your explicit consent for domestic data transfers at any time and consult Company representatives accordingly. Relevant information and consent texts are provided to data subjects through layered disclosures or other appropriate methods.

Rights of Data Subjects Under the Law

At any time, by applying to DREAMLAND, you may exercise your rights under Article 11 of KVKK, including the right to:

• Learn whether your personal data is processed
• Request information regarding processed data
• Learn the purpose of processing and whether data is used in accordance with such purpose
• Know third parties to whom data is transferred domestically or abroad
• Request correction of incomplete or inaccurate data
• Request deletion or destruction of personal data
• Request notification of such actions to third parties
• Object to results arising against you through automated processing
• Claim compensation for damages arising from unlawful processing

Applications may be submitted by completing the application form available at www.dreamland.com or by using the following methods:

• Submitting a wet-signed written request to Konacık Mah. Cevahir Sok. Bina 9/B No:10, 48800 Bodrum – Muğla via notary, registered mail, postal service, or in person
• Sending an email to info@dreamland.com.tr using the email address previously registered with the Company

Applications must include mandatory information as required under the Communiqué on the Procedures and Principles of Application to the Data Controller. Incomplete applications may be rejected or redirected.

Intellectual Property and Final Provisions

All intellectual property rights on this Website, including titles, trade names, trademarks, patents, logos, designs, information, and methods—whether registered or unregistered—belong to the site operator or the relevant rights holder and are protected under national and international law. Visiting or using this Website does not grant any rights to such intellectual property.

No content on the Website may be reproduced, published, copied, transferred, or used in whole or in part without prior authorization.

All DREAMLAND employees are trained, periodically informed, and fully aware of personal data protection principles. DREAMLAND conducts all its activities with heightened awareness and sensitivity throughout the lifecycle of personal data.

DREAMLAND reserves the right to amend this Information Notice due to legislative changes, secondary regulations, board decisions, or operational requirements. Updates may be made without prior notice and apply to all services, pages, information, and visual content.

By visiting www.dreamland.com, all data subjects are deemed to have accepted the terms set forth herein.

THIS TEXT WAS LAST UPDATED ON 02/08/2024.