Personal Data Processing E-Newsletter Subscription Disclosure Text

Dear Visitor,

Thank you for your interest.

As AYPET AYHANLAR PETROL ÜRÜNLERİ MADENCİLİK SAN.VE TİC.A.Ş. (“AYPET”), we prioritize the confidentiality and security of your personal data. In the context of the e-newsletter subscription request you have made to us, we process some of your personal data.

As the data controller, we would like to inform you about the processing of your personal data in accordance with the Law No. 6698 on the Protection of Personal Data (“Law”) and related regulations through this Personal Data Processing Disclosure Text.

AYPET processes your personal data as the "Data Controller" under the Law and other relevant regulations. As the data subject, you can contact AYPET at any time via the contact information listed below.

Address: Kirazpınar, Yeni Bağdat Cd. No:790, 41455 Gebze/Kocaeli Email: [email protected] Phone: 0 262 643 41 37

1. Who’s Personal Data is Being Processed?

The personal data shared by those visiting https://aypetayhanlar.com/ and through the “E-Newsletter” section are processed for the following people: • Potential Product or Service Buyer • Product or Service User • Business Partners • Suppliers • Job Applicants • Visitors

2. What Personal Data is Processed and What Are the Purposes of Processing?

The personal data processed by AYPET, based on the individuals or groups of individuals who shared their personal data through the “E-Newsletter” section on https://aypetayhanlar.com/ are as follows:

Identity Data: First and Last Name • Conducting Communication Activities, • Managing Goods/Service Sales Processes, • Managing Product/Service Marketing Processes, • Managing Advertising/Campaign/Promotion Processes, • Managing Customer Relations, • Managing Business Activities/Monitoring (When a newsletter subscriber gives approval for commercial electronic communications, their first and last name is recorded as a newsletter subscriber. This information can be used for campaign/promotion notifications about AYPET's products and services, for marketing activities, and for contacting subscribers regarding commercial communication and sending electronic communications.)

Contact Data: Email Address • Conducting Communication Activities, • Managing Goods/Service Sales Processes, • Managing Product/Service Marketing Processes, • Managing Advertising/Campaign/Promotion Processes, • Managing Customer Relations, • Managing Business Activities/Monitoring (When a newsletter subscriber gives approval for commercial electronic communications, their first and last name is recorded as a newsletter subscriber. This information can be used for campaign/promotion notifications about AYPET's products and services, for marketing activities, and for contacting subscribers regarding commercial communication and sending electronic communications.)

3. Who is Personal Data Shared With?

Your personal data shared with AYPET may be transferred to: • Official authorities, institutions, and organizations upon request, • The Communication Management System (“CMS”) for approval/rejection process follow-up, • Third-party companies providing SMS and email services for commercial electronic communication, • Third-party companies with which AYPET cooperates in Turkey, when necessary to fulfill the processing purposes above.

4. How is Personal Data Collected?

Your personal data is collected and processed in accordance with the Law and secondary regulations through completing and sending the “E-Newsletter” section on the website.

5. What Are the Legal Grounds for Processing Personal Data?

The personal data collected and processed by written and electronic methods are based on the legal grounds stipulated in Article 5 of the Law, which includes: • Explicit Consent (For the purpose of sending commercial electronic messages regarding advertisements, campaigns, and promotions, and transferring data to business partners or service providers. Also, the data may be transferred to domestic email, backup, and software support providers), • Processing of personal data is required by the legitimate interests of the data controller, provided it does not harm the fundamental rights and freedoms of the data subject.

6. What Are Your Rights Regarding Your Personal Data?

You can request to exercise the following rights by contacting AYPET: a) Learn whether your personal data is being processed, b) Request information about your personal data if processed, c) Learn the purpose of processing personal data and whether it is used for that purpose, ç) Learn the third parties to whom your personal data is transferred, domestically or abroad, d) Request correction of personal data if it is inaccurate or incomplete, e) Request deletion or destruction of personal data under the conditions set out in Article 7, f) Request notification of changes to third parties to whom personal data has been transferred, g) Object to the processing of data through automated systems that results in an outcome against you, ğ) Request compensation for damages caused by unlawful processing of personal data.

AYPET will respond to your requests in the shortest time and within thirty days free of charge. However, if there are additional costs for the procedure, AYPET may charge a fee according to the tariff determined by the Personal Data Protection Board. If you wish to exercise your rights under Article 11 of the Law, you can send your written application via postal mail or email to the addresses and methods provided above.