Legal Notices

Website Information Text Under Law No. 6698 on the Protection of Personal Data
Last Update: May 25, 2026

Dear Website Member/Visitor,
As SusdeX Sustainability Rating Services OÜ (hereinafter referred to as “SusdeX”), the confidentiality and security of your personal data is among our top priorities. In this context, in order to fulfill our obligation to inform you as required by Article 10 of Law No. 6698 on the Protection of Personal Data (hereinafter referred to as “KVKK”), we would like to inform you about the use and protection of your personal data processed by us.

Identity of the Data Controller:

As SusdeX Sustainability Rating Services OÜ, we inform you that we process your personal data as the data controller under Law No. 6698 on the Protection of Personal Data and other relevant legislation.

Data Controller

SusdeX Sustainability Rating Services OÜ
Ahtri tn 12 15551 Tallinn Estonia
info@susdex.earth

Your Personal Data Processed and the Purposes of Processing Your Personal Data:

This Information Text, prepared within the scope of the "Obligation to Inform" imposed on the Data Controller by the Law No. 6698 on the Protection of Personal Data, concerns the personal data of individuals who are members of or visit www.susdex.earth. We record and use your personal data for the following purposes, based on the stated legal grounds;

Purpose

Legal Basis
• Announcement of General/Specific Promotions and Advertisements about Products and Services
• Sharing Content such as Presentations and Newsletters, and Current Developments
• Conducting Service Sales and Advertising/Campaign/Promotion Processes

KVKK Article 5 (1): Explicit Consent
• Conducting Service Purchase Processes
• Conducting Service Sales Processes
• Conducting Activities Aimed at Customer Satisfaction
• Conducting Customer Relationship Management Processes
• Conducting Communication Activities

KVKK Article 5 (2) (c): The processing of personal data belonging to the parties of a contract is necessary, provided that it is directly related to the establishment or performance of the contract. • Conducting Activities in Compliance with Legislation
• Conducting Financial and Accounting Operations
• Conducting Contract Processes
• Conducting Storage and Archiving Activities
• Providing Information to Authorized Persons, Institutions and Organizations
KVKK Article 5 (2) (c): Necessary for the data controller to fulfill its legal obligations.
• Monitoring and Conducting Legal Affairs
• Monitoring Requests/Complaints
KVKK Article 5 (2) (e): Necessary for the establishment, exercise or protection of a right.

To Whom and for What Purpose Personal Data May Be Transferred:

Our priority is to prevent the transfer and disclosure of your personal data. However, your personal data may be transferred to our business partners and suppliers for the purpose of conducting our commercial activities, if necessary or requested. Personal data may be shared with our lawyers as needed, within the framework of confidentiality obligations, to enable the monitoring of legal processes. It may also be shared with notaries, enforcement offices, and/or courts as necessary for the collection of fees for services, for the purpose of conducting financial and/or accounting operations, and for fulfilling legal obligations in accordance with relevant legislation.

Method of Personal Data Collection:

Your personal data is obtained through automated methods to fulfill the purposes stated above. In this context, we collect your personal data through:

Visiting the SusdeX Platform, and by the data subject entering their information into the system as a member of the SusdeX Information Services and Rating Platform.

Other Rights of the Data Subject as Listed in Article 11 of the Law:

As a data subject, within the scope of Article 11 of Law No. 6698, you have the right to:

Learn whether your personal data is being processed,
Request information regarding the processing of your personal data if it has been processed,
Learn the purpose of the processing of your personal data and whether it is being used in accordance with its purpose,
Know the third parties to whom your personal data has been transferred, domestically or abroad,
Request the correction of your personal data if it has been processed incompletely or incorrectly, and request that the action taken in this regard be notified to the third parties to whom your personal data has been transferred,
Request the deletion or destruction of your personal data if the reasons requiring its processing have ceased to exist, even if it has been processed in accordance with the KVKK and other relevant laws, and request that the action taken in this regard be notified to the third parties to whom your personal data has been transferred,
Object to a result that is detrimental to you arising from the analysis of the processed data exclusively through automated systems,
In case you suffer damage due to the unlawful processing of your personal data We would like to inform you that you have the right to claim compensation for damages.

Your rights under Article 11 of the Personal Data Protection Law are reserved; you can submit your requests regarding these rights, preferably by filling out all the information specified in the Data Subject Application Form available on our website,

In writing via a notary public or registered mail with return receipt requested, in order to verify your identity and prevent the disclosure of information to the wrong persons,
By sending an email to info@susdex.earth using a secure electronic signature, mobile signature, or (if applicable) the email address you previously notified to SusdeX Information Services and Rating Platform and which is registered in our systems, or by other methods that the Board may determine in the future.

Changes and Updates

This Information Text has been prepared within the scope of the Personal Data Protection Law No. 6698 and other relevant legislation. Necessary changes may be made to this information text in line with changes in the relevant legal legislation and/or the Company's personal data processing purposes and policies.