Privacy Notice

Pursuant to the Personal Data Protection Law No. 6698 (“KVKK”), your personal data is processed by the Data Controller within the scope described below and in accordance with the applicable legislation. This notice has been prepared to inform you about the data processing activities carried out through the Website.

1. Personal Data We Process

During your use of the Website and through contact, quotation, application, information request or enquiry forms, the following categories of personal data may be processed:

• Identity Information: Name and surname.
• Contact Information: E-mail address, telephone number, city, country and similar contact details.
• Customer Transaction / Enquiry Information: Message content, subject of enquiry, product or service of interest, application records and communication records.
• Transaction Security Information: IP address, log records, device information, browser information, and access date and time records.
• Marketing and Communication Preference Information: Commercial electronic communication consent records, cookie preferences and consent records.

2. Purposes of Processing Personal Data

Your personal data may be processed solely for the following purposes:

• Receiving, reviewing and responding to requests, applications, enquiries, complaints and suggestions submitted through the Website,
• Managing communication activities,
• Assessing requests for quotations, products or services,
• Managing and improving business relationship processes,
• Ensuring the security of the Website and preventing misuse, spam, bot traffic, unauthorised access attempts and cyberattacks,
• Measuring Website performance, improving user experience and enhancing technical infrastructure,
• Managing cookie preferences and user consents,
• Conducting campaign, announcement, promotional and commercial electronic communication activities where explicit consent has been provided,
• Complying with legal obligations towards authorised institutions and organisations.

3. Method and Legal Basis for Collecting Personal Data

Your personal data is collected, wholly or partially through automated means, via forms available on the Website, cookies, security tools, server logs, e-mail communications and similar electronic channels.

Your personal data is processed based on the following legal grounds specified under Article 5 of the KVKK:

• Being directly related to the establishment or performance of a contract: For the assessment of requests relating to quotations, products, services, applications or business relationships.
• Being necessary for the Data Controller to fulfil its legal obligations: For complying with legal obligations and responding to requests from authorised institutions and organisations.
• Being necessary for the legitimate interests of the Data Controller, provided that the fundamental rights and freedoms of the data subject are not harmed: For ensuring Website security, responding to requests, improving service quality and protecting the technical infrastructure.
• Explicit Consent: For sending commercial electronic communications, conducting marketing activities and using cookies that require consent.

4. Transfer of Processed Personal Data

Your personal data may be shared with the following persons, institutions and organisations for the purposes described above and to ensure the operation of the Website:

• Authorised public institutions, regulatory authorities and judicial bodies, solely within the scope of lawful requests,
• Business partners and service providers offering hosting, server, security, maintenance, backup, e-mail, form management, analytics, cookie management and technical infrastructure services,
• Individuals and organisations providing legal, financial or technical consultancy services, to the extent necessary.

As a general principle, your personal data is shared only to the extent necessary, proportionate and relevant to the purposes of processing. Where certain technical infrastructure, analytics, security, e-mail, cookie management or embedded content services are hosted on servers located outside Türkiye, your personal data may be transferred abroad in accordance with applicable legislation and subject to appropriate security measures.

5. Data Retention Period

Your personal data is retained for as long as necessary to fulfil the purposes of processing and in accordance with the retention periods prescribed by applicable legislation.

Records submitted through Website forms may be retained for a reasonable period for the purposes of completing requests, managing communication processes, improving service quality and establishing evidence in the event of potential disputes.

Once the purpose of processing ceases to exist or the applicable legal retention period expires, your personal data will be deleted, destroyed or anonymised in accordance with the KVKK and relevant legislation.

6. Rights of the Data Subject

Under Article 11 of the KVKK, you have the following rights regarding your personal data:

• To learn whether your personal data is being processed,
• To request information if your personal data has been processed,
• To learn the purpose of processing your personal data and whether it is being used in accordance with that purpose,
• To know the third parties to whom your personal data has been transferred within Türkiye or abroad,
• To request the correction of incomplete or inaccurate personal data,
• To request the deletion or destruction of your personal data within the framework of the conditions stipulated under the KVKK and applicable legislation,
• To request that correction, deletion or destruction operations be notified to third parties to whom the personal data has been transferred,
• To object to any outcome arising against you through the exclusive analysis of processed data by automated systems,
• To request compensation for damages incurred due to the unlawful processing of your personal data.

You may exercise these rights by contacting the Data Controller via the contact e-mail address provided above. Your requests will be evaluated and concluded within the time limits prescribed by the applicable legislation.

7. Commercial Electronic Communications

Where you have provided your explicit consent, commercial electronic communications relating to campaigns, announcements, promotions, information and marketing activities may be sent to you. Refusing to provide consent for commercial electronic communications does not prevent you from submitting information requests, quotation requests or contact enquiries through the Website.

You may withdraw your consent for commercial electronic communications at any time.

8. Cookies

The Website may use strictly necessary, functional, analytical, performance, marketing and targeting cookies. Strictly necessary cookies are required to ensure the secure and proper operation of the Website. Non-essential cookies are used in accordance with user preferences and the cookie consent mechanism.

Further information regarding the use of cookies can be found in the Cookie Policy available on the Website.

```