CUSTOMER PERSONAL DATA PROCESSING CLARIFICATION NOTICE

Dear Customers, As Kar Kimya San. Ve Tic. Ltd. Şti. (“Kar Kimya” or the “Company”), we would like to inform you about our practices and your rights within the scope of the Turkish Personal Data Protection Law No. 6698 (“KVKK”). Pursuant to Article 10 of the KVKK titled “Obligation of the Data Controller to Inform” and Article 11 titled “Rights of the Data Subject”, this Privacy Notice is presented to inform you regarding the purposes for which your personal data will be processed, to whom and for what purposes your processed personal data may be transferred, the method, manner and legal basis of collecting your personal data, and your other rights listed under Article 11 of the KVKK.The confidential and secure protection of your personal data provided to us is an important matter for Kar Kimya. Accordingly, we take all necessary technical and administrative security measures within the framework of information security standards and procedures in order to protect your personal data against unauthorized access or against risks such as loss, misuse, disclosure, alteration or destruction of such information. These measures are maintained at an appropriate level considering potential risks. Notwithstanding Kar Kimya’s implementation of the necessary information security measures, in the event that personal data is damaged or obtained by third parties as a result of attacks on the website or systems, Kar Kimya shall immediately notify you and the Personal Data Protection Board without the need for any further notice.

1) Data Controller

The Data Controller is Kar Kimya San. Ve Tic. Ltd. Şti., registered with the Istanbul Trade Registry under registration number 266725, with its registered office located at Cevizli Mah. Gönül Sok. No:20A Maltepe 34846 Istanbul, Türkiye

2) Purposes of Processing Personal Data

Your personal data is processed in accordance with the personal data processing conditions specified in Article 5 of the KVKK and/or based on your explicit consent, in compliance with the principles set forth in Article 4 of the KVKK and the obligations required under applicable legislation.Your personal data may be processed for the following purposes:

• Carrying out the necessary activities by our departments and/or business partners in order for our customers to benefit more effectively from the products and services offered by our Company,
• Creating and managing customer records,
• Conducting evaluation, analysis and risk management activities within legal limits regarding customers,
• Recommending products and services offered by our Company by customizing them according to customers’ preferences, usage habits and needs,
• Informing customers about possible changes in our service terms and electronic services,
• Ensuring the legal and commercial security of persons with whom our Company has business relations,
• Planning activities carried out with our business partners, authorized dealers, authorized service providers and suppliers,
• Determining and implementing the commercial and business strategies of our Company,
• Conducting customer satisfaction surveys, market research and analysis,
• Resolving customer complaints and processing data access or correction requests,
• Ensuring participation in contests, prize draws, similar promotions and loyalty programs and managing such activities,
• Monitoring customer-related developments and preparing operational efficiency reports,
• Facilitating social media sharing functions,
• Planning and carrying out customer-specific sales and marketing activities,
• Following up and executing legal processes and communication processes with official institutions,
• Planning information security processes and establishing and managing information technologies infrastructure,
• Conducting risk management, ensuring business continuity, and following contractual processes or legal claims,
• Maintaining business and operations and conducting Company activities and procedures,
• Managing customer relations and following corporate governance activities,
• Fulfilling warranty obligations,
• Carrying out financial, accounting and fiscal transactions,
• Contacting potential customers during lead generation events organized to increase brand awareness, and planning visits and event activities,
• Obtaining necessary information and approvals from competent authorities in line with requests and audits of regulatory and supervisory authorities and official bodies,
• Determining and defending legal rights; protecting the activities of our Company or our business partners, our rights, privacy, security or property, and/or those of you or others, and implementing available remedies or limiting our damages.

Your personal data may be processed within the personal data processing conditions and purposes specified in Articles 5 and 6 of the KVKK.

3) To Whom and For What Purposes Your Personal Data May Be Transferred

Your personal data may be shared, for the purposes stated above, in accordance with the confidentiality and security principles stipulated by law and provided that effective and adequate measures are taken, with Kar Kimya and its direct and indirect affiliates, domestic and foreign business partners, suppliers, shareholders, insurance companies, third-party service providers from whom services such as storage, archiving, information technology support, security, call center, sales and marketing are obtained domestically and abroad, legally authorized public institutions and private persons and organizations, logistics companies, event companies, digital agencies, call center service providers, audit firms, banks, financial institutions, insurance companies, legal departments, tax consultants and similar consultancy firms, within the scope of the personal data processing conditions and purposes specified in Articles 8 and 9 of the KVKK.

4) Method of Collection of Personal Data and Legal Basis

Your personal data may be collected by Kar Kimya through All information and documents provided directly by you, Telephone or e-mail correspondence, your visits to our workplace, promotional and sponsorship events, institutions and organizations cooperating with Kar Kimya or contracted dealers, official institutions such as the General Directorate of Security (EGM), risk center and similar bodies, third parties, provided that it is lawful, company headquarters, authorized dealers, authorized service providers, call center, Kar Kimya and/or contracted institutions’ websites, your visit to our website, mobile applications, other similar channels, through automatic or non-automatic means, in written, verbal or electronic environments, via cookies and similar technologies. Such personal data is processed in line with the personal data processing conditions and purposes specified in Articles 5 and 6 of the KVKK, for the purposes stated in this Privacy Notice and in order to fulfill our legal obligations and sustain Kar Kimya’s operations.

5) Your Rights Under the KVKK

You have the right to Learn whether your personal data is being processed, Request information if your personal data has been processed, Learn the purpose of processing and whether it is used in accordance with such purpose, Learn the third parties to whom personal data is transferred domestically or abroad, Request correction of incomplete or inaccurate personal data and request notification of such correction to third parties to whom the data has been transferred, Request deletion or destruction of personal data where the reasons requiring processing no longer exist, even if processed lawfully, and request notification of such action to third parties to whom the data has been transferred, Object to any adverse consequence arising exclusively from analysis of processed data through automated systems, Request compensation for damages in case personal data is processed unlawfully.You may submit your requests regarding these rights by sending an e-mail signed with a mobile signature or secure electronic signature to info@karkimya.com.tr, or by sending your request to our Company address together with proof of identity.Kar Kimya shall finalize your requests free of charge within thirty (30) days at the latest. However, if an additional cost arises for processing the request, the fees determined by the Personal Data Protection Board may be charged. Where your personal data is processed based on explicit consent, if you withdraw your consent and/or opt out, you may be removed from campaigns and programs requiring such processing, and you may no longer benefit from advantages provided through such processing as of the relevant date.You may always follow changes regarding personal data legislation and our practices from the relevant page on our website. Users acknowledge and declare that keeping the information shared on the website accurate and up to date is important for exercising their rights under the Law No. 6698 on the Protection of Personal Data and other applicable legislation, and that all responsibility arising from providing inaccurate information belongs entirely to them. Your personal data processed for the purposes stated in this Privacy Notice shall continue to be used in anonymized form when the purpose requiring processing ceases to exist in accordance with the relevant provisions of the KVKK and once the retention periods prescribed by laws under Article 138 of the Turkish Penal Code have expired.Kar Kimya may amend this Privacy Notice at any time without prior notice. Any amendments shall become effective immediately upon publication of the revised Privacy Notice at https://www.karkimya.com.trYou may submit all requests regarding KVKK to info@karkimya.com.tr via e-mail.