CUSTOMER PERSONAL DATA PROTECTION AND PROCESSING INFORMATION NOTICE

Dear Customer,

ORKA AHŞAP VE YAPI ÜRÜNLERİ SANAYİ A.Ş. (Hereinafter referred to as "Company") respects and values the privacy of personal data within the scope of the Law on Protection of Personal Data No. 6698 (Hereinafter referred to as "KVKK"). Therefore, we would like to inform you about your rights regarding the use and protection of your personal data processed by us as the data controller.

a) Data Controller

We hereby inform you that we process your personal data as a data controller within the scope of the Law on Protection of Personal Data No. 6698 and related legislation.

b) Purpose of Processing Personal Data and Legal Basis

Your collected personal data will be processed for the following purposes, within the legal grounds specified in Article 5(2) of KVKK:

Carrying out the necessary work by our business units to provide you with the offered products and services and to conduct relevant business processes;

Planning and execution of sales processes of products and services;

Planning and execution of customer relationship management processes;

Conducting studies for customer satisfaction;

Monitoring of contract processes and legal demands;

Execution of after-sales support services;

Tracking and handling of requests and complaints;

Conducting communication activities;

Conducting activities in compliance with legislation;

Execution of financial and accounting processes;

Execution of legal processes.

Your collected personal data may be processed with your explicit consent for the following purposes: planning and execution of marketing processes for products and services, profiling and analysis activities, customization of offered products and services according to your preferences, usage habits, and needs, sending commercial electronic messages such as advertisements, promotions, etc., to the contact information you have shared within the scope of your consent, and ensuring their delivery, in cooperation with third parties from whom we receive services.

c) Method of Collecting Personal Data

Your personal data will be collected by automatic or non-automatic means through oral, written, or electronic channels, directly from you, through our business partners or suppliers, based on the legal grounds set forth in Article 5(2) and Article 6 of KVKK, to fulfill the purposes specified in paragraph (b) of this text.

d) To Whom and for What Purposes Personal Data May Be Transferred

Your personal data will be transferred for the purposes listed below without requiring your explicit consent, in accordance with Article 8(2)(a) of KVKK:

To notaries, execution offices, and/or courts if necessary for the execution of financial and/or accounting transactions related to products and services,

To relevant public institutions and organizations if required by relevant legislation or upon request,

To our lawyers as required under the obligation of confidentiality for the follow-up of legal processes.

During the audit process, your relevant personal data will be shared with Audit Firms.

For the purpose of conducting the necessary work by our business units to provide you with the offered products and services and to conduct relevant business processes, your personal data may be shared with our suppliers and group companies, limited to the purpose.

With your explicit consent, your personal data may be shared with our suppliers, with whom we cooperate to offer products and services tailored to your preferences, usage habits, and needs, and to send advertisements, promotions, etc., to your contact information within the scope of your consent.

e) Your Rights under Article 11 of KVKK

As the data subject, we inform you that you have the following rights under Article 11 of the Law:

To learn whether your personal data is processed,

To request information if your personal data has been processed,

To learn the purpose of processing your personal data and whether they are used in accordance with the purpose,

To know the third parties to whom your personal data is transferred within the country or abroad,

To request correction of your personal data if it is incomplete or incorrectly processed,

To request the deletion or destruction of your personal data in accordance with the conditions stipulated in the relevant legislation,

To request notification of the transactions made within the scope of correction, deletion, or destruction of your personal data to third parties to whom your personal data has been transferred,

To object to the emergence of a result against you by analyzing your personal data exclusively through automated systems,

To request compensation for the damages in case you suffer damage due to the illegal processing of your personal data.

In addition to the rights specified in Article 11 of KVKK, if you give explicit consent for the processing of your personal data, you have the right to withdraw your consent at any time.

g) Changes and Updates

This information notice has been prepared in accordance with the Law on Protection of Personal Data No. 6698 and related legislation. Necessary changes may be made to this information notice in line with changes in the relevant legal regulations and/or the Company's personal data processing purposes and policies.

[AA1] Note: This placeholder appears to be incomplete or not properly formatted. Please provide the correct information or clarify its content.