Personal Data Protection Law Information Text

INFORMATION NOTE ON THE PROCESSING OF PERSONAL DATA

I. Data Controller and Representative:

In accordance with the Law on the Protection of Personal Data numbered 6698, your personal data will be processed by ELVAN MAGAZACILIK ANONIM SIRKETI ("Our Company") as the data controller within the scope explained below:

Processing personal data in compliance with the law and principles of honesty, Keeping personal data accurate and up to date when necessary, Processing personal data for specific, clear, and legitimate purposes, Processing personal data in a relevant, limited, and proportionate manner to the purposes for which they are processed, Storing personal data for the period prescribed by relevant legislation or as required for the purposes they were processed, Informing and enlightening data subjects, Establishing a system for data subjects to exercise their rights, Taking necessary measures for the protection of personal data, Complying with relevant legislation and the regulations of the Personal Data Protection Board regarding the transfer of personal data to third parties for the purposes of processing, Deleting and destroying personal data in accordance with the law and within the defined period.

II. Purpose of Processing Personal Data:

The collected personal data will be processed within the framework of the following purposes:

Customizing the products and services offered by our company according to your preferences, usage habits, and needs, Conducting necessary studies by the business units to benefit you from the products and services offered by our company, Ensuring the legal and commercial security of individuals in business relations with our company, Determining, defining, and implementing the commercial and business strategies of our company, Preserving the commercial reputation and trust established by our company, Carrying out commercial activities of our company.

Your personal data will be processed within the scope of the personal data processing conditions and purposes specified in Articles 5 and 6 of the Personal Data Protection Law.

III. To Whom and for What Purpose Personal Data May Be Transferred:

Your personal data may be transferred to the following parties for the purposes mentioned above:

Regulatory and supervisory authorities, relevant public institutions, professional organizations, and similar institutions; and individuals or organizations authorized by Turkish Commercial Code and other relevant legislation, limited to the purpose requested within the scope of their legal authority, Our consultants, auditors, and/or service providers, within the framework of the personal data processing conditions and purposes specified in Articles 8 and 9 of Law No. 6698.

Necessary security measures are taken when sharing your personal data with third parties.

IV. Method of Personal Data Collection and Legal Basis:

Your personal data are collected by our Company through all kinds of verbal, written, or electronic means within the scope of the purposes mentioned above; to provide and improve the products and services offered, and to carry out our commercial activities in order to fulfill our Company's contractual and legal responsibilities completely and accurately. Your data collected through various methods such as surveys, websites, employees, representatives, mobile applications, and similar channels and for various legal reasons can be processed and transferred within the scope of the conditions and purposes listed in Articles 5 and 6 of the KVKK, as stated in articles (II) and (III) of this text.

V. Rights of the Data Subject as per Article 11 of the KVKK:

Within this context, data subjects have the following rights:

To learn whether personal data is being processed, To request information if personal data has been processed, To learn the purpose of processing personal data and whether they are used in accordance with their purpose, To know the third parties to whom personal data are transferred domestically or abroad, To request correction of personal data in case of incomplete or incorrect processing, To request the deletion or destruction of personal data within the framework of the conditions stipulated in Article 7 of the Law, To request notification of the processes performed pursuant to Articles 5 and 6 to third parties to whom personal data are transferred, To object to the occurrence of a result against the person by analyzing the processed data exclusively through automated systems, In case of suffering damage due to the unlawful processing of personal data, to request the compensation of the damage.

VI. Data Security:

ELVAN GIDA SANAYI VE TICARET ANONIM SIRKETI protects your personal data in accordance with all technical and administrative security controls required by information security standards and procedures. These security measures are provided at a level appropriate to the possible risks, taking into account technological capabilities.

VII. Complaints and Communication:

Your personal data are carefully protected within the technical and administrative possibilities, and necessary security measures are provided at a level appropriate to possible risks, taking into account technological capabilities. In accordance with the first paragraph of Article 13 of the KVKK, you can submit your requests regarding the use of your rights stated above to us in writing or through other methods determined by the Board. If new application methods are determined by the Personal Data Protection Board, these methods will be announced by our Company. You can submit your requests within the scope of the Law by filling out the "Application Form for Personal Data Protection Law" at the web address https://elvan.com.tr/Bilgi_Talep_Formu.pdf and sending it to the address:

YENIBOSNA MERKEZ MAH. 29 EKIM CAD. NO: 41 IÇ KAPI NO:Z1 BAHÇELIEVLER/ ISTANBUL

with a wet-signed petition addressed to the "Human Resources" department, indicating "Information Request within the Scope of the Personal Data Protection Law" on the envelope,

Sending it through a notary public,

Sending it securely via email with electronic or mobile signature to the address elvanmagazacilik@hs01.kep.tr, or through your registered electronic mail address or electronic mail address registered in our system, and/or

Sending a file in "word or pdf." format addressed to our Institution by signing it with a secure e-signature and sending it to the email address kisiselveri@elvan.com.tr with the subject "Request for Information within the Scope of the Personal Data Protection Law."

We kindly request you to fill out the Information Request Form and send it to us using the methods specified in the form.