KVKK Disclosure Notice

In accordance with the Turkish Personal Data Protection Law No. 6698 ("KVKK"), your personal data will be processed by SkipperDesk ("Company") as the data controller within the scope explained below.

The following personal data is processed through the Platform: • Identity data: first name, last name • Contact data: email address, phone number • Customer transaction data: vessel information, voyage records, financial data • Employee data: crew information, task assignments • Transaction security data: IP address, login/logout records, password information • Marketing data: cookie data, preference information

Your personal data is processed for the following purposes: • Creating and managing membership accounts • Providing Platform services • Delivering vessel and crew management services • Executing and reporting financial transactions • Fulfilling legal obligations • Ensuring Platform security • Conducting communication activities • Improving service quality

Your personal data is processed based on the following legal grounds specified in Articles 5 and 6 of KVKK: • Your explicit consent • Necessity for the establishment or performance of a contract • Necessity for compliance with a legal obligation • Necessity for our legitimate interests where data processing is required

Your personal data may be transferred for the purposes stated above to: • Authorized public institutions and organizations in case of legal obligation • Supplier companies and business partners from whom services are obtained • Server infrastructure service providers Transfers are made in accordance with the conditions specified in Articles 8 and 9 of KVKK.

Your personal data is stored for the duration required by the processing purposes and for the statute of limitations periods prescribed by relevant legislation. After the expiration of the retention period, your personal data will be deleted, destroyed, or anonymized.

Under Article 11 of KVKK, you have the following rights: • To learn whether your personal data has been processed • To request information if your personal data has been processed • To learn the purpose of processing and whether it is used in accordance with its purpose • To know the third parties to whom your personal data is transferred domestically or abroad • To request correction if your personal data has been processed incompletely or incorrectly • To request deletion or destruction within the framework of conditions stipulated in Article 7 of KVKK • To request notification of correction, deletion, and destruction operations to third parties to whom your data has been transferred • To object to any adverse result arising from the analysis of processed data exclusively through automated systems • To claim compensation for damages arising from the unlawful processing of your personal data

To exercise your rights stated above, you may apply through the following methods: Email: kvkk@skipperdesk.io Your application must include: • Your name, surname, and signature if the application is written • Your T.R. identity number (passport number for foreigners) • Your residential or business address for notification • Your email address for notification • Your request subject Applications will be concluded free of charge within 30 days at the latest.