BEPATEKS TEKSTİL BİLİŞİM SAN. VE TİC. A.Ş.
Personal Data Protection Disclosure Statement

As BEPATEKS TEKSTİL BİLİŞİM SAN. VE TİC. A.Ş. (the “Company”), we place the utmost importance on the security of your personal data. In this context, we take all necessary measures to ensure the processing and protection of the personal data of all individuals associated with our Company in accordance with the Law on the Protection of Personal Data No. 6698 (“KVKK”) and relevant legislation. Acting with this awareness, we process your personal data within the scope and legal limits outlined below, in our capacity as the “data controller” as defined by the KVKK.

a) Data Controller and Representative
Your personal data may be processed by our Company, acting as the data controller, within the scope detailed herein and under the KVKK.

b) Purposes of Processing Personal Data, Transfer of Data and Purposes
Your personal data collected may be processed in accordance with the KVKK and relevant legislation for the following purposes: accurate planning, implementation, and management of the Company’s business partnerships, administrative and communication processes, and strategies; provision of the best possible service to individuals benefiting from our products and services; proposing recommendations suitable to your requests; ensuring high-level data security; improving services offered on our website and fixing site errors; communicating with data subjects who have submitted requests and complaints; event management; fulfilling legal obligations; creating and tracking visitor records; ensuring the legal and commercial security of our Company, group companies, and our business partners (including communication activities conducted by our Company, location security, partner/customer/supplier evaluation processes, reputation investigation processes, legal compliance, audits, financial matters, etc.); determining and implementing our Company’s commercial and business strategies; and executing human resources policies.

Your personal data may be transferred to our business partners, suppliers, group companies, Company officials, shareholders, authorized public institutions and organizations, and private individuals, within the scope of the purposes mentioned above and in accordance with Articles 8 and 9 of the KVKK. Where the processing activity does not meet any of the conditions specified by the law, your explicit consent will be requested.

c) Method and Legal Basis for Collecting Personal Data
Your personal data is collected via various tools such as our website, mobile applications, call center, and physical channels, and is processed for the purposes of delivering commercial services to you and conducting our business operations, in accordance with applicable laws, contracts, demands, commercial practices, and the principles of good faith. These data are collected to fulfill our Company’s legal obligations, fulfill the requirements of our business relationship with you, and protect mutual rights.

d) Rights of the Data Subject
As personal data subjects, if you submit your requests regarding your rights to our Company, we will finalize your request free of charge within thirty days at the latest. However, if processing your request requires an additional cost, a fee may be charged in accordance with the tariff determined by the Personal Data Protection Board. Within this scope, data subjects have the right to:

• Learn whether personal data is being processed,
• Request information if personal data has been processed,
• Learn the purpose of processing personal data and whether they are used in line with this purpose,
• Know the third parties to whom personal data is transferred domestically or abroad,
• Request correction of personal data if it is incomplete or incorrect, and request notification of such correction to third parties to whom the data has been transferred,
• Request deletion or destruction of personal data if the reasons requiring processing no longer exist, even if it has been processed in accordance with the KVKK and relevant legislation, and request that the third parties to whom the data has been transferred be informed accordingly,
• Object to the occurrence of a result against the person by analyzing the processed data exclusively through automated systems,
• Request compensation for damages in case of unlawful processing of personal data.

To exercise your rights listed above, you may submit your request to us in writing along with necessary information verifying your identity, in accordance with the Communiqué on the Principles and Procedures for the Request to Data Controller. You may submit the completed and signed application form by:

• Delivering it in person to our Company headquarters at Doğa Parkı Cad. 25C, Apt. No:5, Bahçeşehir 1. Kısım, Başakşehir / Istanbul,
• Sending it via notary to the above address,
• Signing it with a “secure electronic signature” as defined by the Electronic Signature Law No. 5070 and sending it to our registered electronic mail (KEP) address: bepatekstekstil@hs01.kep.tr.

You can access the application form on our website at: www.bepateks.com