This notice has been prepared by İzmir Metropolitan Municipality, in its capacity as data controller, under Article 10 of the Personal Data Protection Law No. 6698 (the "Law") and the Communiqué on the Procedures and Principles to be Followed in Fulfilling the Obligation to Inform. The purpose of this policy, which includes the Privacy Notice, is to inform you about which types of cookies we use and for what purposes, the legal basis, and your rights regarding the processing of personal data obtained automatically through cookies placed on your device by our website.

What is a cookie?

A cookie is a small data file placed on your computer by a web server through your browser. Websites use cookies to recognise you when a connection is established between your browser and the server. Cookies are designed to make a website easier to use for its visitors.

For what purposes are cookies used?

The Municipality uses cookies on its websites and mobile applications for various purposes, and personal data is processed through these cookies. The main purposes are:

• Performing the basic functions required for the website to work. For example, signed-in members do not need to enter their password again while visiting different pages of the website.
• Analysing the website and improving its performance. For example, integrating the different servers the website runs on, determining the number of visitors and adjusting performance settings accordingly, or making it easier for visitors to find what they are looking for.
• Improving the functionality of the website and making it easier to use. For example, sharing content on third-party social media platforms through the website, or remembering a visitor's user name or search queries on their next visit.

How is personal data collected and on what legal basis?

Your personal data is obtained through cookies when you visit our website or use our application. In line with the purposes of processing, your personal data may be processed without your consent where one of the following lawful processing conditions set out in the second paragraph of Article 5 of the Law applies:

• it is expressly provided for by law,
• processing is necessary for the legitimate interests of the Municipality, provided that it does not harm the fundamental rights and freedoms of the data subject (for example, functional and security requirements for operating the website, analyses and measurements of website performance, and the development of the website, products and services),
• processing is necessary for our Municipality to fulfil its legal obligations. In all other cases, your personal data will be processed only with your explicit consent.

When visitors open our websites, they are first shown a screen where cookie settings can be made and where the related policy and privacy notice can be accessed. On this screen, all cookies can be accepted, only strictly necessary cookies can be accepted, or cookie preferences can be managed. Once a choice is made, the preferences are saved with the Confirm button and the website can be accessed.

To whom and for what purposes may we transfer your personal data?

Your personal data processed by our Municipality may be transferred, within legal limits and under a Protocol or Confidentiality Agreement, to persons, institutions and/or organisations as required or permitted by the law we are subject to and by other laws and regulations; to district municipalities for the purpose of carrying out services provided to citizens; to universities, public institutions and non-governmental organisations within the scope of the applicable laws or with the approval of the İzmir Metropolitan Municipal Council; and to third parties from whom services are procured to carry out our municipal activities.

Which cookies do we use?

Below you can find the different types of cookies used on our websites. Our websites use both first-party cookies (placed by the website you visit) and third-party cookies (placed by servers other than the website you visit). In the mobile application, the Google and Criteo SDKs (Software Development Kits) are used instead of cookies.

Information on the cookies used on the website is provided in the table below:

How can I control the use of cookies?

When you visit our websites, a notice informing you about the use of cookies is displayed, and by clicking "I accept all cookies" you consent to all cookies on our website. By clicking "Change settings" you can choose the types of cookies according to your preference. Depending on your internet browser, you can also follow the steps below to obtain information about cookies and exercise your right to allow or refuse them:

• Google Chrome: Click the "lock" icon or the letter "i" in the address bar of your browser and allow or block cookies under the "Cookies" tab.
• Internet Explorer: Click the "Security" tab under "Tools" in the upper right corner of your browser and manage cookies as "allow" or "block".
• Mozilla Firefox: Click "Open menu" in the upper right corner of your browser, then click "Settings" and manage cookies using "Privacy & Security".
• For other browsers (such as Opera or Microsoft Edge), you can refer to the help or support pages of the browser concerned.
• Safari: Select "Safari" in the "Settings" of your phone and manage all cookies under "Privacy & Security".
• In mobile applications, you can follow the instructions in the Privacy or Settings section of your device to manage cookies or SDKs (Software Development Kits).

What are your rights as a data subject?

Under Article 11 of the Law, you have the right to:

• learn whether personal data relating to you is being processed,
• request information if personal data relating to you has been processed,
• learn the purpose of the processing of your personal data and whether it is used in accordance with that purpose,
• know the third parties in Türkiye or abroad to whom your personal data is transferred,
• request the correction of your personal data if it is incomplete or inaccurately processed,
• request the deletion or destruction of your personal data under the conditions set out in the relevant legislation,
• request that the actions taken upon correction, deletion or destruction requests be notified to the third parties to whom your personal data has been transferred,
• object to a result against you arising from the analysis of the processed data exclusively by automated systems,
• request compensation for damages if you suffer damage due to the unlawful processing of your personal data.

If data subjects submit their requests regarding their rights, in particular requests to withdraw explicit consent, through the application methods available on the corporate website www.izmir.bel.tr under the e-services centre and the "Protection of Personal Data" heading, the requests are concluded by our Municipality free of charge within thirty days at the latest.

As a data subject, you may submit your request, containing the information necessary to identify you and your explanations, digitally through the e-services centre at www.izmir.bel.tr; or you may fill in the Application Form under the "Protection of Personal Data" heading and deliver a signed copy in person, together with identifying documents, to İzmir Metropolitan Municipality Directorate of Correspondence, Mimar Sinan Mahallesi 9 Eylül Meydanı No:9/1 Kültürpark içi 1 no'lu Hol Konak PK:35250 İzmir, send it through a notary public, or send the form with a secure electronic signature to izmirbuyuksehirbelediye@hs01.kep.tr.