Privacy Statement

Introduction

As Strategy& Türkiye, we highly value the privacy and security of your personal data. This Privacy Statement ("Privacy Statement") details the purposes for which your personal data will be processed and the method, legal basis of collection of personal data, as well as explaining in detail the rights you have over your personal data.

Data Controller:

“Strategy& Türkiye”¹ means Strategy& member firms² established in Türkiye, providing services under the Strategy& brands; Strategy& Türkiye’s partners, authorized representatives, and employees; subsidiaries and affiliates. Each firm in the Strategy& network is a separate legal entity. For detailed information on Strategy& member firms please check: https://www.pwc.com/gx/en/about/office-locations.html   

Strategy& Türkiye processes personal data in accordance with the data protection principles that the processing must be transparent and based on specified purposes. For more information about the processing activities, you can review the relevant sections.

_{¹ PwC Bağımsız Denetim ve Serbest Muhasebeseci Mali Müşavirlik A.Ş. (“PwC SMMM”)
PwC Yeminli Mali Müşavirlik A.Ş. (“PwC YMM”)
PwC Danışmanlık Hizmetleri A.Ş. (“PwC Danışmanlık”)
PwC Yönetim Danışmanlığı A.Ş. (“PwC Yönetim Danışmanlığı”)
PwC Serbest Muhasebeci Mali Müşavirlik Limited Şirketi (“PwC SMMM Ltd.”)}

_{² PricewaterhouseCoopers is a worldwide network of individual partnerships and companies. The institutions that carry out businesses under the name "PricewaterhouseCoopers", and all PricewaterhouseCoopers entities including shareholders, members, and employees of the relevant institutions, will be referred to as “Strategy& Member Firms”.}

Information Security Policy

Strategy& Türkiye pays great attention to the security of the data it keeps. Strategy& Türkiye adhere to internationally recognized security standards and our information security management system relating to client confidential data is independently certified as complying with the requirements of ISO/IEC 27001: 2013. Strategy& Türkiye has policies, procedures, and training in place for data protection, and regularly review the appropriateness of the measures it has in place to keep the data it holds secure.

Strategy& Türkiye Information Security Policy aims to protect information assets from internal or external threats whether deliberate or accidental, such that:

• Data subject rights are respected
• Confidentiality of information is maintained
• Integrity of information can be relied upon
• Information is available when the business needs it
• Relevant statutory, regulatory, and contractual obligations are met
• The Strategy& brand is protected
• Continual improvement of Information Security Management System is ensured

Changes to This Privacy Statement

This Privacy Statement was last updated in June 2024 and will be updated in regular basis.