KVKK Disclosure Statement

1. Data Controller and Representative

Pursuant to Personal Data Protection Law No. 6698 (the “KVKK”), AKDENİZ DEPO LOJİSTİK EKİPMANLARI HIRDAVAT SANAYİ VE TİCARET LTD. ŞTİ. (“AkdenizRack” or the “Company”) acts in the capacity of data controller.

The personal data of our customers, business partners, suppliers and visitors may be processed, recorded, stored, classified and updated for the purposes set out below, in accordance with the law and the principle of good faith. Where permitted by legislation, such data may be disclosed or transferred to third parties, limited to the purpose of processing.

2. Personal Data We Process

The following personal data may be processed by our Company:

• Identity data: First name, surname, Turkish ID number and tax identification number.
• Contact data: Address, telephone number and e-mail address.
• Financial data: Bank account numbers.
• Reference data.

3. Purposes of Processing Personal Data

Personal data obtained by the AkdenizRack Group of Companies is processed for the following purposes:

• Carrying out the transactions and activities required within the scope of commercial or contractual relationships.
• Fulfilling the financial and legal obligations arising from commercial or contractual relationships.
• Fulfilling our obligations relating to our products and services.
• Managing the procurement processes relating to orders.
• Communicating with customers, suppliers, dealers and points of sale in connection with orders.
• Fulfilling orders placed through the online store and carrying out the related services.
• Making the statutory notifications required to be submitted to authorised public institutions and organisations.
• Within the scope of marketing and promotional activities, developing products and services specifically for customers, carrying out customer satisfaction activities, sending gifts on special occasions, and providing information about products, services, trade fairs and campaigns. Commercial electronic messages may be sent for these purposes.

Detailed information about AkdenizRack’s personal data processing policy is available in the Personal Data Protection and Privacy Policy published on our website.

4. Transfer of Personal Data

Your personal data processed for the purposes set out above may be transferred in accordance with the fundamental principles laid down in the KVKK and with the personal data processing conditions and purposes specified in Articles 8 and 9 of the Law.

In this context, your personal data may be transferred to:

• Our business partners,
• Our shareholders,
• Other companies within the AkdenizRack Group of Companies,
• Authorised public institutions and organisations,
• Authorised private persons,
• Companies from which we receive services or support in order to carry out our activities,
• Independent audit firms, within the framework of legal obligations and statutory limitations.

5. Transfer of Personal Data Abroad

Your personal data may be transferred abroad in accordance with the fundamental principles set out in Article 4 of the KVKK and, where required, subject to your explicit consent.

Where the conditions specified in the Law are met, personal data may also be transferred without explicit consent. Transfers abroad may be made to persons and organisations located in countries declared by the Personal Data Protection Board to provide an adequate level of protection.

In countries where adequate protection is not available, data may be transferred provided that the data controllers in Türkiye and in the relevant foreign country undertake in writing to provide adequate protection and that the required authorisation of the Board is obtained.

6. Method of Collection and Legal Grounds for Processing

Your personal data may be processed within the scope of the commercial or contractual relationship between you and AkdenizRack, for the purposes of carrying out the Company’s activities, entering into and performing contracts, fulfilling legal obligations, and protecting the legitimate interests of our Company.

Personal data shared by you for the purposes of improving our products and services and ensuring customer and supplier satisfaction may also be processed by AkdenizRack.

When you visit our premises, your identity information may be collected and your image may be recorded by security cameras in order to ensure security. Such data is processed solely within the scope of security activities.

Your personal data is collected securely in physical or electronic environments during the establishment and continuation of the business relationship.

Your data may be processed and transferred with your explicit consent where the conditions set out in the KVKK are met, or without explicit consent in the cases permitted by the Law.

7. Your Rights Under Article 11 of the KVKK

You may submit your requests regarding your personal data by completing and signing the application form available on our website.

You may deliver your application, together with documents verifying your identity, to the relevant address of AkdenizRack in person or by registered mail with return receipt. A copy of the application bearing an electronic signature may also be sent to our Company’s e-mail address designated for personal data matters.

Applications are concluded free of charge as soon as possible and within thirty days at the latest, depending on the nature of the request. If the process requires an additional cost, the fee set out in the tariff determined by the Personal Data Protection Board may be charged.

Pursuant to Article 11 of the KVKK, you have the right to:

• Learn whether your personal data is being processed,
• Request information if your personal data has been processed,
• Learn the purpose of processing and whether the data is used in accordance with that purpose,
• Learn the third parties in Türkiye or abroad to whom your personal data has been transferred,
• Request rectification if your personal data has been processed incompletely or incorrectly,
• Request the erasure or destruction of your personal data within the conditions set out in the Law,
• Request that rectification, erasure or destruction operations be notified to the third parties to whom the data has been transferred,
• Object to an outcome to your detriment arising from the analysis of your data solely by automated systems,
• Claim compensation for damages suffered as a result of the unlawful processing of your personal data.

8. Keeping Information Up to Date

The personal data we collect must be accurate and, where necessary, kept up to date.

Should any change occur in your personal information, you may notify the relevant department of our Company of that change.

This Disclosure Statement was prepared on 07.04.2016. In the event of any amendment to the text of the statement, its effective date and content will be updated accordingly.