I. Identity of Data Controller

This Clarification Text was prepared by Yeşilyurt Demir Çelik Endüstrisi ve Liman İşletmeleri Ltd Şti (“YEŞİLYURT” or “the Company”) as the data controller, in accordance with Article 10 of the Law on the Protection of Personal Data No. 6698 (“KVK Law”) and the Communiqué on the Procedures and Princip les to be Complied with to Fulfill Clarification Obligations. Your Personal Data may be processed by YEŞİLYURT as the data controller within the scope described below.

II. Processed Data Categories and Example Data Types

III. For What Purpose Personal Data Will Be Processed

Your above-mentioned personal data may be processed as per personal data processing conditions specified in Articles 4, 5 and 6 of the Law, in direct proportion to the purposes stated below, which is the subject of your data disclosure to YEŞİLYURT:

• Conducting Communication Activities;
• Taking and Evaluating Measures to Improve Business Processes;
• Follow-up of Requests/Complaints;
• Conducting After Sales Support Services for Goods/Services;
• Conducting Marketing Processes of Products/Services;
• Performing Corporate Communication Activities;
• Execution of Information Security Processes;
• Creating and Tracking of Visitor Records

IV. To Whom And For What Purpose The Processed Personal Data May Be Transmitted

In line with and to the extent limited by the realization of above-mentioned purposes personal data collected of the website visitor may be transmitted to YEŞİLYURT Group Companies, our business/solution partners, our shareholders, our suppliers, legally authorized public/private institutions, private persons or organizations and third parties, within the limitations stipulated by the personal data processing conditions specified in Articles 8 and 9 of the Law, as well as above-mentioned purposes, and may be processed domestically and abroad.

V. Methods and Legal Reasons for Collecting Personal Data

YEŞİLYURT collects the data directly from the website visitor, through e-mail, mail, website, fax, notifications by administrative and judicial bodies, and other communication channels, in audial, electronic and written form, according to the legal reasons below stipulated under Articles 5 and 6 of the Law:

• In the event that the process by which we process your personal data is clearly stipulated by law (for example, keeping log records of express consent in case of communication via the website)
• In the event that you share your personal data by yourself (e.g., sharing your information by contacting our company)
• In the event that it is necessary to process your personal data (e.g., sharing your address with a transport company so that we can deliver the products we sold to you under contract); provided that we have a contractual relationship between us or that it is directly related to our contractual performance obligation;
• In the event where it is mandatory to fulfill our legal obligations (e.g., sharing information with authorized public institutions)
• In the event that we have to process data to grant you a right, let you use a right, and to protect such right (e.g., recording your information so that we can respond to your requests and complaints)
• In the event that it is mandatory for us to process your data, provided that it does not harm your basic rights and freedoms, (e.g., processing log records and IP addresses)

VI. Your Rights Stipulated under Article 11 of the Law as a Data Subject

In this context, personal data owners have the following rights: (i) To be informed whether the personal data is processed or not, (ii) To request information thereof if the personal data have been processed, (iii) To be informed of the purpose of personal data processing and whether they are used in accordance with such purpose, (iv) To be informed of third parties in Turkey or abroad to whom the personal data has been transferred, (v) To request corrections in case of incomplete or incorrect data processing, (vi) To request the erasure or destruction of personal data within the framework of conditions stipulated in Article 7 of the KVK Law, (vii) To request the notification of third parties to whom the personal data have been transferred about processes carried out as per subclauses (d) and (e), (viii) To object to any unfavorable results arising against the person due to processed data analysis exclusively through automated systems, (ix) To claim compensation of any damage in case such damage is suffered due to unlawful processing of personal data.

As personal data owners, with the intent to forward your claims related to your rights and to exercise your rights on your personal data, you can make necessary changes, updates and/or deletions, and forward your claims/requests by filling out the "Application Form for Data Subjects", which you can access from the YEŞİLYURT Website and submitting it via YEŞİLYURT’s official e-mail address "info@yesilyurt.com.tr"

If you submit your claims/requests to us through said methods, the Company will conclude your request free of charge as soon as possible (depending on its nature) and within thirty days at the latest. However, if the procedure entails an additional cost, the fee as stipulated under the tariff established by the Personal Data Protection Board will be charged by the Company.