DECO POLİ CUSTOMER PERSONAL DATA PROTECTION INFORMATION TEXT

In accordance with the Law No. 6698 on the Protection of Personal Data (“Law”), your personal data may be processed by DECO POLİ as the data controller within the scope explained below.

a) Purposes for Which Personal Data Will Be Processed

Your collected personal data will be processed primarily for the following purposes: establishing and fulfilling contracts between you and our company, such as the purchase of goods or services; ensuring the fulfillment of legal obligations such as issuing invoices, filing tax returns, and providing after-sales service; improving customer satisfaction and service quality by reviewing customer requests and complaints; managing product supply processes; providing you with product recommendations based on product characteristics and geographical proximity while you browse our company’s website; and, with your consent, sending you informative announcements about our products, services, and campaigns.

» Planning and/or executing activities to ensure the legal and technical security of our company and related individuals with whom our company has a business relationship; » Planning and/or executing activities necessary to customize and recommend products and services offered by and/or on behalf of our company to relevant individuals according to their preferences, usage habits, and needs; » Conducting necessary work and managing related business processes to enable relevant individuals to benefit from the products and/or services offered by and/or on behalf of our company. “For the purposes of carrying out the necessary work by our relevant business units and executing the related business processes for the performance of the commercial and/or operational activities conducted by our company, and for the planning and/or execution of our company’s commercial and/or business strategies (“Purposes”), personal data may be processed by the Company within the scope of the personal data processing conditions specified in Articles 5 and 6 of the Law.

b) To Whom and for What Purpose the Processed Personal Data May Be Transferred

Your collected personal data may be transferred by the Company to our dealers, business partners, suppliers, legally authorized public institutions, and private individuals or organizations, as well as third parties, in line with the purposes mentioned above, within the framework of the personal data processing conditions and purposes specified in Articles 8 and 9 of the Law.

c) Method and Legal Basis of Personal Data Collection Your personal data is collected by the Company in physical form, through printed forms and official documents you have submitted to us, for the performance of the purposes mentioned above.” In the electronic environment, personal data is collected through emails, mobile phone applications, call centers, our websites and technologies such as cookies and pixels used on these sites, social media accounts, software specific to our company’s activities, online contact forms, and business partners with whom our company collaborates. Your personal data is collected based on the purposes stated in Article 5 of the Law, namely:

Vv.2.0 where data processing is necessary for the legitimate interests of the data controller and where data processing is necessary for the establishment or performance of a contract.

c) Rights of the Data Subject as Listed in Article 11 of the Law As a data subject, we inform you that you have the following rights pursuant to Article 11 of the Law:

» To learn whether your personal data is being processed,

• To request information regarding the processing of your personal data if it has been processed,

e To learn the purpose of the processing of your personal data and whether it is being used in accordance with its purpose,

e To know the third parties to whom your personal data has been transferred, domestically or abroad,

» To request the correction of your personal data if it has been processed incompletely or incorrectly, and to request that the action taken in this regard be notified to the third parties to whom your personal data has been transferred,

e To request the deletion or destruction of your personal data if the reasons requiring its processing have ceased to exist, even if it has been processed in accordance with the Law and other relevant laws, and to request that the actions taken in this regard, and in case of incomplete or incorrect processing of your personal data, be notified to the third parties to whom your personal data has been transferred,

• To object to a result that is detrimental to you arising from the analysis of the processed data exclusively through automated systems,

» Due to the unlawful processing of your personal data To claim compensation for damages incurred.

You can submit your applications regarding the rights listed above to the email address [email protected]. The nature of your request

According to the regulations, your applications will be processed free of charge as soon as possible and within a maximum of 30 (thirty) days; however, if the process requires additional costs, a fee may be charged to you according to the tariff determined by the Personal Data Protection Board.