Personal Data Protection and Information Notice
With the aim of protecting individuals’ fundamental rights and freedoms, particularly the privacy of personal life, in the processing of personal data, as well as in accordance with the Law No. 6698 on the Protection of Personal Data (“KVKK”) published in the Official Gazette dated April 7, 2016, No. 29677, and the Communiqué on the Procedures and Principles to be Followed in Fulfilling the Obligation to Inform dated March 10, 2018, and published in the Official Gazette No. 30356, we intend to inform you about your personal data processed by our company, PLATO Carpet and Textile Industry Import Export Trade Ltd. Co.

1. Identity of the Data Controller

As a “Data Controller” within the scope of the KVKK and related regulations, you can reach us through the contact information provided below.

Phone: 0342 502 04 00 – 0342 225 33 66

2. Processed Personal Data

In the context of your relationship with PLATO Carpet and Textile Industry Import Export Trade Ltd. Co., the following personal data are processed:

(I) Identity Information: full name, identity card, identity number, tax identification number;

(II) Contact Information: business address, social media accounts, home address, email, phone, mobile phone, residence, address registration system records;

(III) Data Related to Education, Work, and Professional Life: work history, school graduated from, professional competencies, CV information;

(IV) Family Status Information: marital status;

(V) Payment and Financial Information: collection risk, notification of goods information,

(VI) Data Related to the Security of Our Company’s Premises: CCTV records, visitor records, entry and exit records to stations;

(VII) Vehicle Information: license plate number;

(VIII) Customer Tracking Information: customer number, customer transaction information;

(IX) Visual and Audio Recording Data: audio recordings,

(X) Special Category Data: health status.

3. Purposes of Processing Personal Data
Your personal data obtained within the scope of your relationship with PLATO Carpet and Textile Industry Import Export Trade Ltd. Co. are processed for the following purposes:

• Pursuing and executing legal affairs,

• Uploading customer information into the system for the purpose of conducting archive activities,

• Conducting financial and accounting affairs,

• Conducting advertising/campaign/promotion processes,

• Executing contract processes,

• Preparing Monthly Withholding Tax Declarations,

• Conducting the process of tracking requests and complaints,

• Preparing power of attorney on behalf of third parties (lawyers, customs consultants, company personnel, financial consultants, environmental consultants) to represent the company in various matters,

• Ensuring the security of movable assets and resources,

• Conducting activities in compliance with legislation,

• Conducting the wage policy,

• Conducting marketing processes for products/services,

• Conducting the process of purchasing goods/services,

• Conducting the process of selling goods/services,

• Conducting marketing and analysis studies,

• Providing physical space security,

• Conducting logistics activities,

• Conducting strategic planning activities,

4. Transfer of Processed Personal Data

In accordance with the provisions of the Law regarding the transfer and cross-border transfer of personal data, your personal data may be transferred to domestic official institutions and organizations, law enforcement authorities, courts and enforcement offices, related third-party individuals and legal entities, service provider companies and authorities, business partners, banks, our company’s shareholders, our group companies and subsidiaries, suppliers, and support service providers for the purposes stated in Article 3 of this Information Notice.

5. Methods of Collecting Personal Data and Legal Grounds
Your personal data within PLATO Carpet and Textile Industry Import Export Trade Ltd. Co. are collected, stored, and processed based on the legal grounds stated in Articles 5, 6, and 8 of the Law, and the purposes listed above, from you, third parties, and legal authorities, through the internet, phone, email, physical, written, verbal, and electronic media. The legal grounds for collecting, storing, and processing your personal data include:

• Obtaining explicit consent,

• Explicitly provided for in the relevant legislation applicable to our Company, including the Tax Procedure Law, the Turkish Civil Code, and the Turkish Commercial Code,

• Ensuring compliance with principles and standards regarding the recognition of customers at national and international levels, and compliance with obligations of information storage, reporting, and disclosure prescribed by legislation and official authorities,

• Necessity for the establishment, performance, or execution of a contract, provided that it is directly related to the parties of the contract,

• Obligation to fulfill a legal requirement,

• Personal data is publicly disclosed by the data subject,

• Necessity for the establishment, exercise, or protection of any right,

• Necessity for the legitimate interests pursued by the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject. Special category personal data are collected, stored, and processed based on the legal grounds mentioned below:

• Obtaining explicit consent,

• Health-related personal data, except for health data, without requiring explicit consent in cases provided by laws,

• Health-related personal data can be processed without explicit consent only by persons or authorized institutions and organizations under the obligation of confidentiality for the purpose of protecting public health, practicing preventive medicine, performing medical diagnosis, treatment, and care services, planning and managing health services and their financing.

6. Rights of the Data Subject Whose Personal Data is Processed According to Article 11 of the Law, you have the following rights regarding your personal data:

• Learn whether personal data is being processed,

• Request information about whether personal data has been processed,

• Learn the purpose of processing personal data and whether they are used for their purpose,

• Know the third parties to whom personal data are transferred, whether domestically or abroad,

• Request correction of personal data if it is incomplete or incorrectly processed,

• Request the deletion or destruction of personal data in accordance with the conditions set out in the relevant legislation,

• Request notification of the operations performed as a result of the correction, deletion, or destruction of personal data to third parties to whom personal data have been transferred,

• Object to the occurrence of a result against you by analyzing the processed data exclusively through automated systems,

• Request compensation for the damages suffered due to the illegal processing of personal data.

PLATO Carpet and Textile Industry Import Export Trade Ltd. Co I have read the Customer Personal Data Protection and Processing Information Notice and within this scope, I consent to the processing of my personal data for the purposes of creating, tracking, and/or managing membership, planning and/or executing activities for customer satisfaction and/or experience, planning and/or executing campaign and/or promotion and/or introduction processes, identifying and/or evaluating individuals for marketing purposes based on consumer behavior criteria, designing and/or executing personalized marketing (segmentation, profiling, etc.) and/or introduction activities, designing and/or executing advertising and/or introduction and/or marketing activities on digital and/or other platforms, planning and/or executing activities for customer acquisition and/or value creation on existing customers on digital and/or other platforms, planning and/or executing data analysis and/or data enrichment studies for marketing purposes, planning and/or executing cross-selling activities related to other products offered by our Company, planning and/or executing market research activities for the sale and/or marketing of products and/or services, planning and/or executing processes to create and/or increase loyalty to the products and/or services offered by our Company, planning and/or executing campaign performance measurement and reporting activities, and planning and/or executing product and/or service marketing processes, and I accept the transmission of my personal data to business partners and suppliers and the sending of all kinds of direct and indirect marketing activities such as promotion, offer, via commercial electronic messages.