Disclosure Statement

Dear visitor; as the data controller, ERGUVAN GIDA, CAM, ELEKTRONİK, İNŞAAT, TEKSTİL, PLASTİK SANAYİ VE PAZARLAMA İTHALAT İHRACAT LTD. ŞTİ. operated by (the “Company”) https://www.erguvandekor.com Protecting the privacy of the personal data of website visitors ("Data Subjects") is among our Company's foremost principles.

1. PROCESSING OF DATA SUBJECTS' PERSONAL DATA

In full compliance with Law No. 6698 on the Protection of Personal Data ("the Law"), published in the Official Gazette No. 29677 dated 7 April 2016, your personal data, within the scope of this Website Disclosure Statement, as data controller ERGUVAN GIDA, CAM, ELEKTRONİK, İNŞAAT, TEKSTİL, PLASTİK SANAYİ VE PAZARLAMA İTHALAT İHRACAT LTD. ŞTİ. may be processed by, within the scope explained below, where necessary with your explicit consent or within the cases foreseen by law. The purpose of the Website Customer-Potential Customer Disclosure Statement is to inform you about your personal data processed by the Company in accordance with the Communiqué on the Principles and Procedures to be Followed in Fulfilling the Obligation to Inform (“Communiqué”) published in the Official Gazette dated 10 March 2018 and numbered 30356, the Law and the relevant legislation.

The purpose of this Disclosure Statement is, ERGUVAN GIDA, CAM, ELEKTRONİK, İNŞAAT, TEKSTİL, PLASTİK SANAYİ VE PAZARLAMA İTHALAT İHRACAT LTD. ŞTİ. (the “Company”) is to provide detailed information regarding the processing of personal data obtained from the members, users and/or visitors of, and customers of, the website publicly operated by the Company at the address https://www.erguvandekor.com during the operation of that website.

You can also access detailed information regarding the processing of your personal data through the ERGUVAN GIDA, CAM, ELEKTRONİK, İNŞAAT, TEKSTİL, PLASTİK SANAYİ VE PAZARLAMA İTHALAT İHRACAT LTD. ŞTİ. Personal Data Processing and Protection Policy available at https://www.erguvandekor.com.

THE PURPOSE OF PROCESSING YOUR PERSONAL DATA

The personal data obtained as a result of your visiting our website, completing the membership form and making purchases -- namely your Name and Surname, Turkish ID number, place/date of birth, phone number, address, e-mail, workplace name/address and title, bank/credit card/cheque details, visual and audio recordings, and username-password -- may be processed by the Company in accordance with Articles 5 and 6 of the Law for the purposes listed below:

1- Creation of Website Membership Registration and Creation/Update of Username

2- Carrying Out Goods/Service Sales Processes

• Providing Information and Campaign Promotion
• Order Tracking
• Shipping the Product/Products to the Customer

3- Carrying Out After-Sales Support Services for Goods/Services

• Ensuring the Delivery of the Customer's Invoice
• Providing After-Sales Support to the Customer

4- Carrying Out Customer Relationship Management Processes

• Informing customers about improved and newly developed products in order to establish and/or increase customer satisfaction
• Sending bulk electronic messages to customers
• Planning and carrying out the activities necessary for the Company to present, recommend, and promote its programmes and services to the relevant parties
• Conducting online sales or telesales, and enabling the Company to contact the Customer to provide this,
• Tracking of Requests and Complaints

5- Conducting Communication Activities

6- Carrying Out Advertising-Campaign-Promotion Processes

7- Carrying Out Marketing Analysis Activities

• Performing the basic functions necessary for the operation of the company's website,
• Analysing the company's website and thereby improving its performance,
• Enhancing the functionality of the company's website and providing ease of use,

THE PARTIES TO WHOM YOUR PERSONAL DATA IS TRANSFERRED AND THE PURPOSE OF TRANSFER

The personal data obtained through the registration you have completed on our website may be transferred to the company official/officer, our suppliers, legally authorised public institutions, natural persons and private-law legal entities, in line with the purposes of processing your personal data and within the scope of the personal data processing conditions and purposes set out in Articles 8 and 9 of the Law.

THE METHOD AND LEGAL GROUNDS FOR COLLECTING YOUR PERSONAL DATA

To contact our customers regarding the terms, current status and updates of the contracts we have concluded, to provide the necessary notifications, and to fulfil the obligations undertaken under the contracts we have concluded,

On the grounds that processing personal data of the parties to a contract is necessary, provided it is directly related to the establishment or performance of the contract with the customer, and that it is expressly stipulated in the laws;

The personal data obtained as a result of your visiting our website, completing the member registration form, browsing the site and making purchases is collected electronically -- in accordance with the data processing conditions set out in the Law, on legal grounds such as “processing being necessary for the legitimate interests of the Company in connection with the establishment and performance of a contract, provided that it does not harm the fundamental rights and freedoms of the data subject” -- based on the legal grounds in subparagraphs “c” and “f” of paragraph 2 of Article 5 of Law No. 6698 and for the purpose of fulfilling obligations within the scope of Law No. 5651.

RIGHTS OF DATA SUBJECTS

We inform you that, as a data subject, you have the following rights under Article 11 of the Law:

• To learn whether your personal data is being processed,
• To request information regarding your personal data if it has been processed,
• Learning the purpose of processing your personal data and whether it is used in accordance with that purpose,
• Knowing the third parties to whom your personal data is transferred domestically or abroad,
• To request the correction of your personal data if it has been processed incompletely or inaccurately, and to request that such correction be notified to third parties to whom your personal data has been transferred,
• The right to request the erasure or destruction of your personal data in the event that the reasons requiring its processing cease to exist, even though it has been processed in accordance with the Law and other relevant legal provisions, and to request that the third parties to whom your personal data has been transferred be notified of the action taken in this regard,
• To object to any adverse outcome resulting from the analysis of the processed data solely through automated systems,
• Requesting compensation for damages in the event that you suffer loss due to unlawful processing of your personal data.

You may submit applications regarding the rights listed above by completing the Data Subject Application Form — available from our company's IT Department or at https://www.erguvandekor.com — and delivering it to our Company's address at Yalova-Kirazlı Sanayi Gıda Toptancılar Sitesi, No:1/2 Merkez/YALOVA in person, by post or via notary, or by e-mail to [email protected]. Depending on the nature of your request, your applications will be concluded free of charge as soon as possible and within thirty days at the latest; however, should the process require an additional cost, a fee may be charged in accordance with the tariff to be determined by the Personal Data Protection Board.

MEASURES TAKEN TO ENSURE THE SECURITY OF DATA SUBJECTS' PERSONAL DATA

In line with the importance the Company places on protecting personal data and ensuring data security, and in accordance with Article 12 of the Law, in order to ensure data security our Company,

• To prevent the unlawful processing of personal data,
• To prevent unlawful access to personal data,
• To ensure the safekeeping of personal data,

takes all necessary technical and administrative measures to ensure an appropriate level of security for this purpose.