Privacy and personal data notice

1 Data controller and scope

The data controller is İFA GRUP ENERJİ SANAYİ VE TİCARET ANONİM ŞİRKETİ (“İFA Grup”). This notice explains personal data processing under Türkiye’s Personal Data Protection Law No. 6698 (KVKK). Global Squawk is currently a public website preview: account registration, subscriptions and payments are not available. Descriptions of those future services below apply only if they are introduced with the required information and legal safeguards. This notice is not consent or marketing permission; visiting the website alone does not give consent.

Registered company name: İFA GRUP ENERJİ SANAYİ VE TİCARET ANONİM ŞİRKETİ

Postal address: İzzet Paşa Mah. Yeni Yol Cad. Nurol Tower No: 3, Suite 303, Şişli, Istanbul, Türkiye

MERSİS registration number: 0644037458700019

Trade registry: Istanbul Trade Registry Directorate, file no. 921140-0

Privacy, support and contact email: info@globalsquawk.com

Telephone: +90 544 269 0454

Registered electronic mail (KEP): ifa.grupenerji@hs01.kep.tr

Website: https://globalsquawk.com

2 Data categories and legal grounds

Accounts and access: This preview does not collect usernames, passwords, verification details, contractual consents or subscription records. If account services are introduced, data necessary to establish and perform the contract may be processed under KVKK Article 5(2)(c). Mandatory consumer subscription identity, address and telephone details may be processed under Article 5(2)(ç); necessary email and account data under Article 5(2)(c). Necessary business representative details depend on the contractual relationship or a proportionate legitimate interest. Providing account information does not grant marketing permission.

Payments and invoices: No payment or billing information is collected in this preview. If paid subscriptions are introduced, necessary identity, billing, tax, order, payment and refund records would be processed for contractual performance under Article 5(2)(c) and legal accounting obligations under Article 5(2)(ç). The payment provider and the information it receives must be disclosed before any purchase. No card details are requested or stored by this website.

Security and support: IP addresses, device and browser information, security events and correspondence may be processed where necessary and proportionate to protect the website under Article 5(2)(f), without overriding your fundamental rights. Contract-related support may rely on Article 5(2)(c); establishing, exercising or protecting rights may rely on Article 5(2)(e). This preview has no account sessions, verification codes or password recovery records.

Operation and improvement: Necessary technical security and error records may be processed proportionately under Article 5(2)(f) to correct faults and protect the service. Visitor analytics and click tracking are disabled in this preview. This purpose does not authorise unrestricted use of personal data for AI training or advertising profiles.

Optional marketing: This preview does not collect marketing consents or operate mailing lists. Any future promotional processing of names, email addresses, telephone numbers or channel preferences would require the applicable separate consent under Article 5(1). Email, SMS and voice-call permissions must be managed separately. Legally required consent and objection records may rely on Article 5(2)(ç), and records necessary to protect rights on Article 5(2)(e). Withdrawing consent ends processing based on that consent.

Non-essential cookies: No analytics or advertising cookies are used. If introduced, this notice will be updated and any required separate consent obtained beforehand.

If future subscriptions require certain personal data, withholding that necessary information may prevent delivery of the account or service. Refusing optional marketing consent must not prevent access to the core subscription. Please do not send sensitive personal data unrelated to your request.

3 Collection methods

This preview serves static pages and local sample audio. Technical connection information is processed by the hosting infrastructure. Information you voluntarily send through contact channels may also be processed. Registration, login, payment and feedback forms do not submit data. Any future collection through such features will be described before activation. Written requests may also be handled manually.

4 Data sharing

Information necessary for the service may be shared only with relevant recipients and only for the stated purpose and data scope. Applicable grounds under KVKK Article 8 depend on the recipient and may include contractual performance, legal obligations, protection of rights or a qualifying legitimate interest. Sharing that requires explicit consent will not take place without it.

Hosting and security provider: Cloudflare, Inc. (United States). Technical connection and security information is processed on its infrastructure to serve and protect this website. The preview does not use an account database.

Payment and accounting providers: This preview has no payment service and sends no customer payment information to a processor. If sales are introduced, the provider and the necessary identity, contact, invoice, order, payment and refund data shared with it and with accounting services will be disclosed before purchase.

Email services: Information you choose to send by email may be handled by the company’s email provider. This preview sends no automated verification, password reset, service or promotional messages. Promotional messages require the applicable separate permission.

Commercial message permissions: If marketing channels are introduced, legally required identity, contact and consent or objection records may be shared with Türkiye’s Message Management System (İYS) under Articles 5(2)(ç) and 8. This preview does not collect such permissions.

Information is shared with public authorities and courts only where legally required or necessary to exercise legal rights. Relevant records may be shared with lawyers and accountants subject to confidentiality. Membership of a corporate group alone does not authorise a transfer. Selling personal data for independent advertising purposes is outside this service.

5 International transfers

Cloudflare, Inc. is established in the United States and operates infrastructure in multiple countries. Serving and protecting the website may involve transferring technical connection and security data abroad. Such transfers must meet KVKK Article 9, including an applicable adequacy decision or appropriate safeguard. The company remains responsible for establishing and documenting the applicable transfer mechanism before processing; this notice alone is not that safeguard.

Remote access from abroad counts alongside overseas server hosting. Regular international transfers require an applicable adequacy decision or appropriate safeguard; exceptional transfer grounds cannot be used as a general basis for routine service operations. Reading this notice or accepting general membership terms is not consent to international transfers.

6 Cookies and preferences

Essential security technologies may be used only to the extent necessary to provide the requested service, under the relevant contractual or legitimate-interest ground. Non-essential analytics and advertising technologies must not run before any required consent. Encoding or hashing an identifier does not automatically make personal data anonymous.

No non-essential cookies are used, so this preview has no cookie preference panel. If such cookies are introduced, a preference panel and the required consent will precede their use. Consent boxes will not be pre-selected.

Cookies: The preview creates no account session cookie. Cloudflare may use essential security cookies to distinguish malicious traffic. No analytics or advertising cookies are installed by the site.

Blocking essential security cookies in your browser may affect security-related website functions.

7 Service and marketing messages

Necessary, non-promotional service or legal communications may be sent through appropriate channels where the law permits them without prior marketing consent. This preview has no account, subscription or payment notifications. If those services are introduced, relevant account, security, billing, service-change, support, cancellation and refund notices will be limited to what the transaction requires.

Any future Global Squawk campaigns, offers, newsletters, events or surveys will use only channels for which the necessary permissions are valid. Content, timing and frequency must remain within those permissions and applicable law. Commercial message consent is separate from a subscription and optional. Required consent and objection records are managed through İYS. Permission may remain valid after a subscription ends only while it has not been withdrawn and lawful retention conditions continue.

You may opt out of promotional messages using their free opt-out method or İYS where available. Withdrawal ends processing based on that consent. Commercial electronic messages must cease within the applicable maximum of three business days after an objection and the permission records must be updated. Opting out does not itself end a subscription or legally required service notices. Permission for Global Squawk does not give blanket permission for other group companies or additional advertising channels.

8 Retention and security

Data is retained only as long as needed for the purpose and applicable legal obligations. When all lawful processing conditions cease, it is deleted, destroyed or anonymised according to legal disposal requirements. Records needed for refunds, claims, invoices or statutory obligations have restricted access. Different categories have different retention periods.

If future sales create such records, invoices and accounting records are retained for ten years under Turkish Commercial Code Article 82, and distance-contract information and documents for three years under Article 20 of the Distance Contracts Regulation.

Where commercial messaging is introduced, consent records are retained for three years after the consent expires and other commercial message records for three years after creation. Retention does not authorise marketing after an objection.

Technical and organisational safeguards proportionate to the processing risks must protect against unlawful processing and access. Using processors does not remove the controller’s legal obligations.

Neither this notice nor acceptance of subscription terms transfers ownership of your personal data to İFA Grup. Lawfully obtained data may be used for improvement, research, planning and reporting only when aggregated and anonymised so it cannot identify anyone, even when combined with other information. Reports based on genuinely anonymous data may be published or licensed within the company’s rights, including after a subscription ends. Removing a name or using a user number or hashed email is not sufficient anonymisation.

9 Your rights and requests

Under KVKK Article 11, you may request information about processing, its purpose and recipients; correction; deletion or destruction where conditions are met; notification of these actions to recipients; objection to adverse outcomes based solely on automated analysis; and compensation for unlawful processing.

Send a request to the postal address above, through registered electronic mail (KEP), a secure electronic or mobile signature, or a previously supplied email address registered with us. Only the information necessary to verify your identity will be requested.

Requests are answered in writing or electronically as soon as practicable and within 30 days. If a separate cost arises, only the fee set by the Personal Data Protection Board may be charged. Refusals must give reasons. Your right to complain to the Board within the applicable legal conditions and time limits is preserved where a response is inadequate, refused or late.

10 Updates and links

Changes in processing require an updated notice and any necessary information before processing begins. Continued website use is not consent to a new activity requiring explicit consent. Independent processing on linked third-party sites is their responsibility; this does not remove our obligations for our own transfers.