1. Data Controller and Representative

In accordance with the Personal Data Protection Law No. 6698 (“Law No. 6698”), your personal data may be processed by ARIKAN KRİKO VE MAK. SAN. TİC. A.Ş. (“ARIKAN”) in the capacity of data controller within the scope explained below. On behalf of our Company, we would like to inform you regarding the "Personal Data Protection Law No. 6698" regulated in relation to personal data, with the aim of protecting fundamental rights and freedoms, especially the privacy of private life, by considering the security of your data. Our goal is to inform you in the most transparent manner regarding the methods of obtaining your personal data, the purposes of processing, legal reasons, and your rights.

2. Purposes for Which Personal Data Will Be Processed

Your personal data collected in the categories of identity and contact information (name, surname, phone, e-mail address, IP address) will be processed within the personal data processing conditions and purposes specified in Articles 5 and 6 of Law No. 6698 for the purposes of: providing and maintaining our products and services uninterruptedly; recording identity, address, and other necessary information for the identification of the transaction owner; conducting the operation, accounting, finance, and risk management processes of the transaction owner; organizing all records and documents that will be the basis for processing in electronic or paper environment; complying with information storage, reporting, and information obligations envisaged by local and international legislation and all authorities; conveying important information that we need to share with you via your contact information; corporate sustainability, corporate governance, strategic planning, and information security processes; and providing information to authorized organizations resulting from the legislation. Detailed information regarding the processing of your personal data by our Company can be accessed from the ARIKAN KRİKO VE MAK. SAN. TİC. A.Ş. Personal Data Protection and Processing Policy, which has been shared with the public on the website http://www.arikanautomotive.com/tr/.

3. To Whom and For What Purpose Processed Personal Data May Be Transferred

Your personal data may be shared within the framework of our relations with you, limited to the purposes stated above, with persons, institutions, and organizations permitted by the provisions of the Law and legislation, as well as consultants and organizations from which we receive services, work together, and cooperate to carry out all our activities, within the framework of the personal data processing conditions and purposes specified in Articles 8 and 9 of Law No. 6698 and as explained in the ARIKAN KRİKO VE MAK. SAN. TİC. A.Ş. Personal Data Protection and Processing Policy shared with the public at the internet address http://www.arikanautomotive.com/tr/. Necessary technical and legal measures are taken to prevent rights violations during data sharing with third parties. Additionally, your data may be processed on the domestic and international servers of companies from which we receive cloud services to carry out our operational activities.

4. Method and Legal Reason for Personal Data Collection

Your personal data is processed for various legal reasons aimed at maintaining our business relationship and continuing our commercial activities within the framework of our relations with you, and is collected verbally and/or in writing in physical environments, and from sources such as e-mail/website in electronic environments, and can be processed and transferred for the same legal reasons.

5. What Are Your Rights Arising from the Personal Data Protection Law?

Provided that the situations envisaged in Article 28 of the KVKK titled "Exceptions" are reserved, you have the right to apply to our company within the framework of Article 11 of the Law regarding your personal data to: :

• Learn whether it is processed or not, the purpose of processing, and whether it is used in accordance with its purpose, and to request information if it has been processed,
• Learn the third parties to whom your information is shared domestically and abroad in accordance with the Law,
• Request correction if you think your information has been processed incompletely or incorrectly,
• Request the deletion or destruction of personal data in the event that the reasons requiring the processing of personal data disappear or the Companies do not have a legal basis or legitimate interest to process the said data,
• Request that your requests specified in subparagraphs (c) and (d) be notified to the third parties to whom your information has been transferred and that they perform the same operations,
• Object to the emergence of a result against you due to the analysis of your information by automated systems, or request compensation for the damage if you think it has been recorded or used illegally and you have suffered damage for this reason,

We present these rights to your information.

It is possible to exercise your rights as of 07.10.2016, which is the effective date of the regulation, and we reserve the right to request from you the costs to be incurred by our company for the fulfillment of your requests, according to the tariff specified in Article 13 of the KVKK titled "Application to the data controller".

6. Do You Have Questions and Requests Regarding Your Personal Data?

Relevant persons who own personal data may submit their requests regarding their rights specified in the law to our Company in writing (by verifying identity for documents received by hand or through a notary public) using the KVK application form on the website, or by using the Registered Electronic Mail (KEP) address, Secure Electronic Signature, Mobile Signature, or the electronic mail address previously notified to the data controller by the relevant person and registered in the data controller's system.

Title: ARIKAN KRİKO VE MAK. SAN. TİC. A.Ş.

Mersis No: 0-780-0207-0200017

E-mail address: kvkk@arikanautomotive.com

KEP address: arikankrikoas@hs01.kep.tr

Physical Mail address: Organize Sanayi Bölgesi, Teknoloji Bulvarı, No: 13 Eskişehir/Turkey

Data Controller: ARIKAN KRİKO VE MAK. SAN. TİC. A.Ş.