Clarification Text on the Processing of Personal Data

1. Data Controller

Pursuant to KVKK, your personal data is processed by Kontrolyum Otomasyon Sistemleri San. Tic. Ltd. Şti., acting as the data controller, within the scope explained below.

2. Purposes of Processing Personal Data

Your collected personal data is processed within the scope of the commercial relationship between you and our company for the following purposes:

• Carrying out commercial activities,
• Managing quotation, order, sales, shipment and invoicing processes,
• Managing and performing contract processes,
• Carrying out finance and accounting transactions,
• Fulfilling legal obligations,
• Providing information to authorized institutions and organizations,
• Managing communication processes with customers, suppliers and business partners.

Your personal data is processed within the scope of the data processing conditions specified in Articles 5 and 6 of KVKK.

3. Transfer of Personal Data

Your personal data may be transferred to the following persons and organizations in line with the purposes stated above:

• Authorized public institutions and organizations,
• Tax offices and relevant financial authorities,
• Banks and financial institutions,
• Independent audit firms,
• Our legal advisors,
• Logistics and service provider companies.

Personal data transfer is carried out in accordance with Articles 8 and 9 of KVKK, and the necessary technical and administrative security measures are taken during data transfer.

4. Method and Legal Basis of Personal Data Collection

Your personal data is collected verbally, in writing or electronically through our website, e-mail correspondence, contracts, order forms, quotation forms and similar channels.

Your data is processed based on the following legal grounds:

• Being directly related to the establishment or performance of a contract,
• Fulfillment of our company’s legal obligations,
• Establishment, exercise or protection of a right,
• Legitimate interests of our company.

5. Your Rights Under KVKK

Pursuant to Article 11 of KVKK, as a personal data owner, you have the following rights:

• To learn whether your personal data is being processed,
• To request information if your personal data has been processed,
• To learn the purpose of processing your personal data and whether it is used in accordance with that purpose,
• To know the third parties to whom your personal data is transferred domestically or abroad,
• To request correction of incomplete or incorrectly processed data,
• To request deletion or destruction of personal data within the framework of Article 7 of KVKK,
• To request notification of correction or deletion procedures to third parties to whom the data has been transferred,
• To object to any unfavorable result arising from analysis exclusively through automated systems,
• To request compensation for damages in case you suffer damage due to unlawful processing.

6. Application Method

You may submit your requests regarding the rights listed above to us through the following methods:

• By applying in writing to our company address,
• Through a notary public,
• Through an application form signed with a secure electronic signature,
• Through our Registered Electronic Mail (KEP) address.

Your applications will be concluded as soon as possible and within 30 days at the latest, depending on the nature of the request, pursuant to Article 13 of KVKK.