Personal Data Protection Law (KVKK) Information Text

a) Data Controller and Representative

In accordance with the Law No. 6698 on the Protection of Personal Data (“Law No. 6698”), your personal data may be processed by Bodur Industrial Cabin Systems Limited Company (“Company” or “Bodur”) as the data controller, within the scope described below.

b) The Purpose for Which Personal Data Will Be Processed

Your collected personal data will be processed within the scope of the personal data processing conditions and purposes specified in Articles 5 and 6 of Law No. 6698, for the following purposes: ensuring the legal, technical and commercial-business security of the Company and relevant individuals with whom the Company has a business relationship; planning and executing the necessary activities for customizing and recommending the products and services offered by the Company to relevant individuals according to their preferences, usage habits and needs; carrying out the necessary work by our business units and executing the relevant business processes to enable relevant individuals to benefit from the products and services offered by the Company; planning and executing the commercial and/or business strategies of the Company; carrying out the necessary work by our relevant business units and executing the related business processes for the realization of the commercial activities carried out by the Company; and planning and executing the human resources policies and processes of the Company.

c) To Whom and for What Purpose the Processed Personal Data May Be Transferred

Your collected personal data may be transferred to our business partners, suppliers, shareholders, affiliates, legally authorized public institutions and private individuals, within the scope of the purposes specified in Articles 8 and 9 of Law No. 6698, and limited to the purposes stated above, for the following purposes: planning and executing activities necessary for customizing and recommending the products and services offered by the Company to relevant individuals according to their preferences, usage habits and needs; carrying out the necessary work by our relevant business units and executing related business processes for the performance of the commercial activities carried out by the Company; carrying out the necessary work by our business units and executing related business processes to enable relevant individuals to benefit from the products and services offered by the Company; planning and executing the Company's commercial and/or business strategies; and ensuring the legal, technical and commercial-business security of the Company and relevant individuals with whom the Company has a business relationship.

c) Method and Legal Basis for Personal Data Collection

Your personal data is collected by our Company through various channels and based on different legal grounds for the purpose of improving the products and services we offer and conducting our commercial activities. During this process, your personal data is collected through information and request forms on our websites and mobile applications, or in physical form. Personal data collected on these legal grounds may also be processed and transferred for the purposes stated in clauses (b) and (c) of this Disclosure Statement, within the scope of the personal data processing conditions and purposes specified in Articles 5 and 6 of Law No. 6698.

d) Rights of the Personal Data Subject as Listed in Article 11 of Law No. 6698

As data subjects, if you submit your requests regarding your rights to the Company, Bodur will process your request as soon as possible and within thirty days at the latest, depending on the nature of the request. However, if the process requires additional costs, Bodur will charge the fee determined by the Personal Data Protection Board. In this context, data subjects have the following rights:;

• To find out whether your personal data is being processed,

• Requesting information regarding the processing of personal data, if applicable.,

• To learn the purpose for which personal data is processed and whether it is being used appropriately for that purpose,

• Knowing the third parties to whom personal data is transferred, whether domestically or internationally.,

• The right to request the correction of personal data if it has been processed incompletely or inaccurately, and to request that this correction be notified to third parties to whom the personal data has been transferred.,

• The right to request the deletion or destruction of personal data, even if processed in accordance with Law No. 6698 and other relevant laws, when the reasons requiring its processing cease to exist, and to request that this action be notified to third parties to whom the personal data has been transferred.,

• The right to object to an outcome that is detrimental to oneself, resulting from the analysis of processed data exclusively through automated systems.,

• Individuals have the right to claim compensation for damages incurred as a result of the unlawful processing of their personal data.