KVKK Disclosure Statement

Personal Data Protection Notice

This Information and Disclosure Form has been prepared within the scope of the processing and transfer of “Personal Data” of natural persons regulated under the Personal Data Protection Law No. 6698 (“PDPL Law”). Within the scope of Law No. 6698, any current information belonging to you that you have shared with our company shall be considered as “Personal Data”.

The security of your personal data is of great importance to us, and your personal data will be stored in the most secure manner possible, in accordance with the conditions stipulated by the legislation and for the period required by legal obligations.

Data Controller and Representative

Pursuant to the Personal Data Protection Law No. 6698 (“PDPL Law”), your personal data may be processed by Mavsan Endüstri Malzemeleri Pazarlama Tic. Ltd. Şti. (“MAVSAN”) as the “Data Controller” within the scope explained below.

Purposes for Processing Your Personal Data

Your collected personal data may be processed within the scope of the personal data processing conditions and purposes specified in Articles 5 and 6 of Law No. 6698, for the purposes of fulfilling the obligations of our company and the real and legal persons having business relations with our company, providing information regarding updates, establishing and performing contracts to be made with you, reminding and fulfilling legal obligations, carrying out various advertising and marketing activities, obtaining your opinions through surveys and polls, determining suitable products, projects, and services for you, customizing and improving them specifically for you, providing effective customer service, informing you about changes in legislation and internal company policies that concern you or making other relevant notifications, celebrating birthdays, including you in draws or competitions, providing gifts and carrying out similar activities, promotions, and campaigns in your favor, informing you via e-mail, SMS, and fax, keeping you informed about campaigns, sending printed newsletters, magazines, and campaign-related materials, determining visitor profiles, evaluating requests, inquiries, and complaints, implementing our company’s human resources policies, and responding to your requests and questions.

Recipients and Purposes of the Transfer of Your Personal Data

Your collected personal data is processed in accordance with the principles of being processed in compliance with the law and rules of good faith, being accurate and, where necessary, up to date, being processed for specific, explicit, and legitimate purposes, being connected with, limited to, and proportionate to the purpose for which they are processed, and being retained for the period stipulated in the relevant legislation or necessary for the purpose for which they are processed. In addition, provided that the conditions set forth in Articles 8 and 9 of the PDPL Law are complied with and necessary security measures are taken, it may be transferred, limited to the purposes listed under the heading of paragraph (b) of this notification, to our direct/indirect domestic/international affiliates or subsidiaries, domestic/international/international public/private institutions and organizations, companies and other third parties or organizations from which our company receives services/support/consultancy or with which it cooperates or is a project/program/financing partner, our company’s affiliated companies, consultants, shareholders or solution partners, other group companies, the Central Securities Depository and other authorized institutions and organizations, suppliers or subcontractors. Mavsan may process and store your personal data on servers or other electronic environments located within or outside Türkiye, provided that necessary security measures are taken.

Method and Legal Basis for the Collection of Your Personal Data

Your personal data may be collected by our Company through different channels (Mavsan’s headquarters, branches, agencies, sales offices or other subcontractors or business partners, offices and other physical environments where you may communicate with them, call centers, websites, mobile applications and similar electronic transaction platforms, social media or other publicly available platforms, by your participation in training sessions, conferences and similar events they organize, through investigation methods, or through other group companies or other persons and organizations with whom they have agreements, in written, verbal, audio or visual recording, or other physical or electronic media, etc.).

Your personal data may be collected, processed, transferred, and stored for the purposes specified in sections (b) and (c) of this Notice within the scope of the personal data processing conditions and purposes set forth in Articles 5 and 6 of the Personal Data Protection Law No. 6698 ("PDPL"). Your personal data is stored in accordance with the applicable legislation for the period required by legal obligations or for the period permitted under the relevant legislation.

Your Rights as a Personal Data Subject

If you, as a personal data subject, submit your requests regarding your rights to our Company by the methods set out below, our Company will conclude your request free of charge as soon as possible and no later than thirty days, depending on the nature of the request. However, if a fee is stipulated by the Personal Data Protection Board, the fee determined in the tariff of our Company will be charged. Within this scope, personal data subjects;

Learn whether personal data is processed
Request information if personal data has been processed,
Learn the purpose of the processing of personal data and whether it is used in accordance with that purpose,
Know the third parties to whom personal data has been transferred within Türkiye or abroad,
Request the correction of personal data if it has been processed incompletely or inaccurately, and request that the correction made in this context be notified to the third parties to whom the personal data has been transferred,

Request the deletion or destruction of personal data if the reasons requiring its processing no longer exist, although it has been processed in accordance with the Personal Data Protection Law No. 6698 ("PDPL") and other relevant legal provisions, request that the action taken in this context be notified to the third parties to whom the personal data has been transferred, and object to the emergence of a result against the person by means of the analysis of the processed data exclusively through automated systems,

Request compensation for damages in the event of suffering damage due to the unlawful processing of personal data.

Pursuant to Article 13, paragraph 1 of the Personal Data Protection Law No. 6698 ("PDPL"), you may submit your request regarding the exercise of your rights specified above to our Company in writing. You may submit your request, including your explanations regarding the right you wish to exercise under Article 11 of the PDPL, by completing the contact form at www.mavsan.com/contact and sending it to the Customer Relations Department, or by delivering it in person together with documents identifying your identity to "Seyitnizam Mah., Demirciler Sitesi 4. Cd. No:42, Zeytinburnu/ISTANBUL", or by sending it through a notary public.

Our Company reserves the right to amend this Disclosure Notice due to any amendments to the Personal Data Protection Law No. 6698 ("PDPL") or the procedures and principles to be determined by the Personal Data Protection Board.