LPPD Information Text

INFORMATION ABOUT THE LAW ON THE PROTECTION OF PERSONAL DATA

Kümaş Magnesite Industry Inc. takes the highest level of security measures to ensure the lawful collection, storage, and sharing of your personal data and to protect your privacy. Our goal is to inform you in the most transparent manner about the methods of obtaining, processing purposes, shared parties, legal reasons, and your rights regarding your personal data in accordance with Article 10 of the Law No. 6698 on the Protection of Personal Data.

a) Data Controller

In accordance with the Law No. 6698 on the Protection of Personal Data (“Law No. 6698”), your personal data will be collected and processed by Kümaş Magnesite Industry Inc. (“COMPANY”) as the data controller within the scope explained below.

b) Purposes of Processing Personal Data

The COMPANY may collect personal data in categories such as identity information, contact information, customer information, customer transaction information, transaction security information, legal transaction and compliance information, and marketing and sales information from its customers, employees, potential customers, employee candidates, business partners, website and store visitors, and suppliers. The collected personal data may be processed for the following purposes:

• To provide you with COMPANY products and services, fulfill our obligations towards you, arrange records and documents, comply with information retention, reporting, and informing obligations as required by local and international legal regulations, tax and other obligations,
• To present personalized advertisements, campaigns, advantages, and other benefits for sales and marketing activities to improve the quality of services and products,
• To communicate with you regarding information technology needs, system structure, the necessity of information technology support services, and to convey necessary information related to these services and products,
• To carry out traffic measurement, statistical analysis, segmentation/profiling, and CRM studies for sales and marketing activities,
• To measure and improve customer satisfaction, manage complaints, obtain your opinions and suggestions regarding new services and products, receive issue-error notifications, provide information regarding products and services, complaints, and requests,
• To manage your membership for online sales, receive your orders, process payment transactions, collaborate with third parties for logistics, recommend products and services that may interest you, conduct online behavioral advertising and marketing, customer portfolio management, measure and improve service quality, communication, optimization, auditing, risk management and control, promotion, analysis, determining interests, scoring, profiling, marketing, sales, advertising, communication,
• To use your personal data in all kinds of products and services to be provided to you within the scope of the COMPANY's articles of association, for comparative product and/or service offers, modeling, existing or new product studies and/or developments, and to use them in all kinds of products and services to be offered to you,
• To comply with information retention, reporting, informing obligations as required by official institutions, fulfill the requirements of contracts, and perform legal obligations to which the COMPANY is subject to,
• To determine and implement the COMPANY’s commercial and business strategies, manage finance operations, communication, market research, and social responsibility activities, procurement operations (demand, offer, evaluation, order, budgeting, contract), manage company internal systems and application management operations, legal operations,
• To examine, evaluate and respond to requests from official authorities or you,

The above purposes are within the personal data processing conditions and purposes specified in Articles 5 and 6 of the Law No. 6698.

c) To Whom and For What Purpose the Processed Personal Data Can Be Transferred

Your collected personal data may be transferred to:

• The COMPANY's business partners, shareholders, affiliates,
• Persons or organizations permitted by the provisions of the Turkish Commercial Code, the Turkish Code of Obligations, and other relevant legislation,
• Legally authorized public institutions and organizations, administrative authorities, and legal authorities,
• Real or legal persons with whom we have collaborated for product/service comparison, analysis, evaluation, advertisement, and for the realization of the purposes stated above, institutions and organizations we have partnered with for sending messages to our customers, cargo companies that deliver orders placed from our online store, within the personal data processing conditions and purposes specified in Articles 8 and 9 of the Law No. 6698.

d) Method and Legal Reason for Collecting Personal Data

Your personal data are collected by the COMPANY through channels such as our stores, website, mobile applications, call centers, and social media accounts, verbally, in writing, or electronically, and other channels that may be established/formed in the future; for the purposes stated above and within the legal reasons specified in the performance of the contract, being explicitly provided in the law, being publicly available, being mandatory for the establishment, use, or protection of a right, being mandatory for the COMPANY's legitimate interests and for fulfilling its legal obligation without harming your fundamental rights and freedoms.

e) Rights of the Personal Data Owner as Stated in Article 11 of Law No. 6698

As personal data owners, if you submit your requests regarding your rights to the COMPANY through the methods stated below, the COMPANY will conclude the request free of charge within thirty days at the latest, depending on the nature of the request. However, if a fee is stipulated by the Personal Data Protection Board, the fee in the tariff determined by the COMPANY will be charged. In this context, personal data owners have the right to:

• Learn whether personal data is processed,
• Request information if personal data has been processed,
• Learn the purpose of processing personal data and whether they are used in accordance with their purpose,
• Know the third parties to whom personal data is transferred at home or abroad,
• Request correction of personal data if it is incomplete or incorrectly processed and request notification of the third parties to whom personal data is transferred,
• Request deletion or destruction of personal data in the event that the reasons for processing are eliminated despite being processed in accordance with the Law No. 6698 and other relevant legal provisions, and request notification of the third parties to whom personal data is transferred,
• Object to the occurrence of a result against the person himself by analyzing the processed data exclusively through automated systems,
• Request compensation for the damage in case of loss due to the unlawful processing of personal data.

You can submit your request to use your rights stated above, in accordance with the 1st paragraph of Article 13 of the Law No. 6698 and the Communiqué on the Procedures and Principles of Application to the Data Controller No. 30356 dated 10.03.2018, in Turkish and in writing, or by using your registered electronic mail (KEP) address, secure electronic signature, mobile signature, or by using your e-mail address previously notified to the COMPANY and registered in our system.

In your application: a) Your name, surname, and if the application is in writing, your signature, b) Your Turkish Republic ID number, if you are a foreigner, your nationality, passport number, or if any, your ID number, c) Your place of residence or workplace address for notification, d) Your e-mail address, telephone, and fax number for notification if any, e) Your request subject,

must be included, and relevant information and documents related to the subject must be attached to the application.

You can send your written applications with the necessary documents to the address of Kümaş Magnesite Industry Inc., Barbaros Mah. Kardelen Sk. Palladium Tower Blok No:2 İç Kapı No :27 Ataşehir / İstanbul as the data controller. You can access the application form here.

You can send your applications by e-mail to kvkk@kumasref.com or to the Registered Electronic Mail address kumasmanyezit@hs03.kep.tr. According to the nature of your request, it is necessary for the information and documents to be fully and accurately provided to us. In cases where the required information and documents are not properly provided, there may be disruptions in the full and qualified execution of the investigations to be carried out by the COMPANY based on your request. In such cases, the COMPANY declares that it reserves its legal rights. Therefore, your application must be submitted completely and with the requested information and documents according to the nature of your request.