EKİNATA TRANSPORTATION CONSTRUCTION CONTRACTING TOURISM PETROLEUM PRODUCTS MARKETING INDUSTRY AND TRADE INC. WEBSITE CLARIFICATION TEXT FOR PROTECTION AND PROCESSING OF PERSONAL DATA

As Ekinata Transportation Construction Contracting Tourism Petroleum Products Marketing Industry and Trade Inc., we show the utmost sensitivity to the security of personal data. In this context, we would like to present the following explanations to our customers and third parties who use our website and/or mobile applications, including those who benefit from our products and services, to fulfill our disclosure obligation arising from Article 10 of the Personal Data Protection Law No. 6698 (“KVKK”).

a) Data Controller and Representative

As a Data Controller, your personal information will be recorded, stored, updated, disclosed/transferred to third parties where permitted by legislation, classified, and processed as specified in KVKK within the framework explained below.

b) Collection and Processing of Personal Data

Your personal data may be collected by our Company through automatic or non-automatic methods, from our Company units and offices, group companies, branches, social media platforms, mobile applications, and similar means, either verbally, in writing, or electronically, depending on the services and commercial activities provided by our Company. As long as you benefit from the products and services offered by our Company, your personal data will be created and updated. Additionally, your personal data may be processed when you use our call centers or our website to use our services or when you participate in our Company’s organizations.

Your collected personal data may be processed by the Company and by individuals with whom the Company has business relations to ensure the legal and commercial security of the Company and related parties; to ensure the execution of the Company’s human resources policies, and to determine and implement commercial and business strategies, within the personal data processing conditions and purposes specified in Articles 5 and 6 of KVKK.

Additionally, your personal data will be processed, collected, used, stored, disclosed, transferred, and kept secure in compliance with KVKK and other relevant legislation for purposes of informing you about sales, discounts, campaigns, promotions, and marketing activities of the Company.

c) To Whom and For What Purpose Personal Data Can Be Transferred

Your collected personal data may be transferred to our business partners, suppliers, shareholders, legally authorized public institutions, and private persons for the purposes of ensuring the legal and commercial security of the Company and related parties; ensuring the execution of the Company’s human resources policies, determining and implementing commercial and business strategies, within the personal data processing conditions and purposes specified in Articles 8 and 9 of KVKK.

d) Method and Legal Reason for Collecting Personal Data

Your personal data are collected by the Company through various channels and based on different legal reasons; in line with our activities or for the purpose of conducting them, within the legal framework defined by the Company’s contractual and legal responsibilities. Your personal data collected for these legal reasons can be processed and transferred within the scope of the purposes stated in articles (b) and (c) of this Clarification Text in accordance with the personal data processing conditions and purposes specified in Articles 5 and 6 of KVKK.

e) Rights of Personal Data Owners as Specified in Article 11 of KVKK

As personal data owners, if you submit your requests regarding your rights to the Company through the methods set out below in this Clarification Text, the Company will conclude the request as soon as possible and within thirty days at the latest, depending on the nature of the request. If a cost arises from fulfilling your requests, the Company will charge you the fee specified in the tariff determined by the Personal Data Protection Board. In this context, personal data owners have the right to:

• Learn whether personal data is processed,
• Request information if personal data is processed,
• Learn the purpose of processing personal data and whether they are used in accordance with their purpose,
• Know the third parties to whom personal data is transferred domestically or abroad,
• Request correction of personal data if it is incomplete or incorrectly processed and request notification of the transactions made within this scope to third parties to whom personal data has been transferred,
• Request deletion or destruction of personal data within the framework of the conditions set forth in KVKK and request notification of the transactions made within this scope to third parties to whom personal data has been transferred,
• Object to the occurrence of a result against the person himself/herself by analyzing the processed data exclusively through automated systems,
• Request compensation for the damage in case of damage due to unlawful processing of personal data.

Pursuant to Article 13 of KVKK, you need to submit your request to exercise your above-mentioned rights to the Company in writing or by other methods determined by the Personal Data Protection Board. Since the Personal Data Protection Board has not determined any method at this stage, you need to submit your application to the Company in writing pursuant to the mandatory provision of KVKK. Within this framework, the channels and procedures for submitting your written application to the Company within the scope of Article 11 of KVKK are explained below.

To use your rights mentioned above, you can send your request along with necessary identifying information and your explanations regarding the right you want to use, indicating which right you want to use under Article 11 of KVKK, to the address “: İnönü Caddesi Mercan Sokak STFA B- 8 blok Kat:1 D:5 Kozyatağı İstanbul, Turkey” by registered mail.