AĞIRMAN MAKİNA OTOMOTİV YAN SANAYİ VE TİCARET ANONİM ŞİRKETİ

GENERAL CLARIFICATION STATEMENT ON THE PROCESSING OF PERSONAL DATA

As AĞIRMAN MAKİNA OTOMOTİV YAN SANAYİ VE TİCARET ANONİM ŞİRKETİ (the “Company”), we would like to inform and enlighten you about our personal data processing activities in accordance with Article 10 of the Personal Data Protection Law No. 6698 (“KVKK”).

1. Data Controller and Its Representative
   In accordance with KVKK, as the data controller, we may process, record, store, classify, update, and, in cases permitted by the law and/or within the scope of the purpose for which the data is processed, disclose or transfer your personal data to third parties for the purposes described below, in a manner consistent with the principles of law and fairness.

2. Purpose of Processing Your Personal Data
   Your personal data is processed in accordance with the fundamental principles outlined in KVKK and for purposes including but not limited to conducting our operational activities, managing our business relationships, human resources processes, responding to relevant individuals' requests, continuing technical processes, ensuring the company’s commercial security, and conducting our activities. Your personal data is securely stored in physical or electronic environments for a period suitable for the processing purpose. The Company complies with the obligations prescribed in all relevant legislation, primarily KVKK.

For detailed information regarding the purposes for which your personal data is processed by our Company, you can refer to the Personal Data Protection Policy of AĞIRMAN MAKİNA OTOMOTİV YAN SANAYİ VE TİCARET ANONİM ŞİRKETİ available at www.agirmanmakina.com.tr.

3. Transfer of Your Personal Data
   Within the scope of the purposes outlined above, your personal data may be transferred by our Company, in compliance with the basic principles set out in KVKK, to business partners, shareholders, authorized public institutions and organizations, private individuals, firms from which we receive support services to conduct our activities, and independent audit firms, in accordance with legal obligations and regulatory restrictions, as described in Articles 8 and 9 of KVKK.

4. Transfer of Personal Data Abroad
   Your personal data may be transferred by our Company, in accordance with the principles outlined in Article 4(2) of KVKK, through explicit consent or without explicit consent in cases prescribed in Articles 5(2) and 6(3) of KVKK. Once the Personal Data Protection Board (“Board”) identifies countries with sufficient protection, your personal data may be transferred only to persons and organizations established in those countries. For countries where sufficient protection is not available, data may be transferred, provided that both the data controllers in Turkey and in the relevant foreign country commit to ensuring sufficient protection in writing, and the Board’s permission is obtained for the transfer.

5. Method and Legal Basis for Collecting Your Personal Data
   Your personal data is collected through various channels by our Company, based on the legal grounds mentioned above, to carry out our activities and improve the services we offer. In this regard, your personal data may be processed and transferred without explicit consent, in cases where the conditions outlined in Articles 5(2) and 6(3) of KVKK exist, or with explicit consent, in line with the principles stated in Article 4(2) of KVKK.

6. Your Rights Under Article 11 of KVKK
   As a data subject, you can send your requests regarding your rights to our address: NOSAB N116. SK. NO:2 NİLÜFER BURSA. Our Company will respond to your request free of charge within the shortest time possible and no later than thirty (30) days, depending on the nature of the request. However, if the process incurs any additional costs, a fee determined by the Board may be charged. The rights you have under Article 11 of KVKK are as follows:
   • To learn whether your personal data is processed,
   • To request information if your personal data has been processed,
   • To learn the purpose of processing your personal data and whether it is used in accordance with the purpose,
   • To know the third parties to whom your personal data has been transferred, domestically or abroad,
   • To request the correction of incomplete or incorrect personal data,
   • To request the deletion or destruction of personal data under the conditions specified in Article 7,
   • To request that the operations carried out in accordance with (d) and (e) be communicated to the third parties to whom the personal data has been transferred,
   • To object to any result that emerges against you as a result of the exclusive processing of your data through automated systems,
   • To request compensation for any damages caused by the unlawful processing of your personal data.