BENPETTO INDUSTRY AND TRADE LTD. CO. INFORMATION TEXT REGARDING THE PROTECTION OF PERSONAL DATA

We, BENPETTO INDUSTRY AND TRADE LTD. CO. ("BENPETTO"), as the data controller of the application and website located at Apple Store and Google Play, have prepared this Information Text to explain to you for what purposes we will process your personal data in accordance with Article 10 of the Personal Data Protection Law No. 6698, during our electronic commerce activities carried out through our mobile application and website, and within the scope of other services provided through our website.

Your personal data is also processed through website cookies.

You can access detailed information about this in our Cookie Policy and Cookie Information Text.

The personal data that we process during the online sale of goods and services within the scope of electronic commerce activities and the execution of related transactions, and within the scope of other services provided through the mobile application and website, which you share with us or if necessary, are as follows:

When you fill out the necessary forms to make purchases of products and goods through our mobile application and website, and to carry out related order, payment, delivery, cancellation, return, and other transactions, we request and process your personal data including your name, surname, Turkish ID number/Tax ID number, interview/voice recording, and other information to be able to process on your behalf, provide you with service upon your request, carry out delivery and other necessary transactions related to your order, contact you if you fill out the contact form, and establish a relationship with you.

We request and process your contact data including phone number, e-mail address, and address information to communicate with you, create and fulfill your requests regarding delivery, payment, and other matters as quickly as possible, and with your consent, to conduct service, campaign, promotion, communication, and notification/information activities about all kinds of products, services, and works of our Company through communication channels, to provide you with information about products, services, and works, and to enable you to benefit from the services offered through our mobile application and website.

We request and process your username and password data for the membership account you can create while browsing the products and services offered on our mobile application and website and making purchase transactions related to them.

We process and record your customer/consumer transaction data including price, order date, delivery date and method, payment date and method (including your bank account and card information), cancellation and return dates and reasons, and other related data when you shop online through our mobile application and website. Additionally, we process and record your data such as technical data in customer satisfaction surveys, surveys and forms filled out during return processes, complaint and request information, and information obtained through campaign and marketing activities, as long as necessary.

We store your personal data including the IP number of the computer you use to access our mobile application and website, your browsing and clicking information (log records) on the application, and your location information when you open the application, as we are obligated under Law No. 5651 on Regulation of Publications on the Internet and Suppression of Crimes Committed by Means of Such Publications and related legislation.

We process your personal data, wholly or partially by automatic and/or non-automatic means, through the relevant form and box fields on our mobile application and website via the browser, and through invoices, contract documents, dispatch notes, and other physically kept records related to post-sale payment, delivery, and other transactions, based on the legal grounds of "being made public by the data subject", "being explicitly provided for by law", "being directly related to the conclusion or performance of a contract", "being necessary for the data controller to be able to perform its legal obligation", "being necessary for the establishment, exercise or protection of a right", and "being necessary for the legitimate interests pursued by the data controller, provided that this processing shall not violate the fundamental rights and freedoms of the data subject".

• To enable you to benefit from the products and services we offer as BENPETTO through our mobile application and website,
• To create an opportunity for online shopping for our products displayed on our mobile application and website,
• To establish a contractual relationship based on your purchase transactions and to determine the terms of our commercial relations,
• To record our customers' orders for the products we offer and to carry out the necessary transactions related to them,
• To deliver the ordered products and, upon request, other sample products to the specified addresses,
• To ensure the necessary payments are made and controlled for the purchased products, to manage invoicing, accounting, and financial transactions,
• To carry out the cancellation of the purchase transaction, the exercise of the right of withdrawal, and product return processes upon your request,
• To conduct customer satisfaction surveys after purchase and to carry out all kinds of business development and improvement studies requested regarding our products and services, thereby increasing service quality,
• To evaluate requests and complaints from our customers and offer them the best solution suggestions within their needs,
• To ensure the fastest and most effective resolution and remediation of disputes arising from our contractual relationships,
• To conduct commercial relationships with our business partners, suppliers, dealers, and other third parties during the supply of products and services,
• To inform our customers about our new products, campaigns, and BENPETTO advertisements upon their request and to provide information about promotions and discounts at regular intervals,
• To carry out all kinds of sales and marketing activities inside and outside the company,
• To provide after-sales support services to our customers,
• To ensure that the necessary work is carried out by our business units to enable you to benefit from the products and services offered by BENPETTO,
• To establish the planning and execution of necessary activities to be able to offer suggestions and promotions to you by customizing the products and services offered by our company according to your likes, usage habits, and needs,
• To ensure the use of records such as the creation, interpretation, commitment, and declaration of the contractual relationship between the parties for evidential purposes in case of any dispute,
• To carry out communication, logistics, and occupational health and safety processes,
• To determine our company's commercial and business strategies and implement them appropriately,
• To ensure the complete fulfillment of the obligations we are obliged to fulfill under the legal legislation, primarily the Law on the Regulation of Electronic Commerce No. 6563, the Personal Data Protection Law No. 6698, and the Law on Regulation of Publications on the Internet and Suppression of Crimes Committed by Means of Such Publications No. 5156,
• To make necessary notifications to relevant persons, primarily public authorities, in case of request, audit, or need, and to process your personal data to the extent necessary for other related purposes

Your personal data that you share with us during the online product purchase process through our mobile application and website and within the scope of other services provided through our mobile application and website may be transferred to our relevant business partners, suppliers, dealers, other group companies within the group of companies that Benpetto is a part of, our independent but service-providing consultants, lawyers and other solution partners, and also to relevant third parties and public institutions and organizations and judicial authorities when necessary, for the purposes of enabling our business units to carry out the necessary work to benefit you from the products and services offered by our company; customizing and offering you the products and services offered by our company according to your likes, usage habits and needs; ensuring the delivery of purchased products to the addresses you specified and collecting the necessary payments for the product price; conducting the promotion and marketing of our products and services; carrying out re-marketing activities for advertisement displays; ensuring the legal, commercial and technical security of persons in business relationship with Benpetto; determining and implementing our commercial and business strategies as Benpetto; identifying and analyzing our commercial risks and needs and their provision; evaluating requests and complaints from our customers and offering them the best solution suggestions within their needs; resolving potential legal disputes and using our right of defense, primarily to our service providers in the fields of production, logistics, online payment services, SMS and e-mail services, call center, occupational health and safety, and information processing.

In accordance with Article 11 of the KVKK, you can, by proving your identity in person, regarding your personal data;

• Learn whether we process personal data about you, and if we do or have processed, request information about it.
• Learn the purpose of processing your personal data and whether they are used in accordance with their purpose.
• Learn whether your personal data is transferred domestically or abroad and to whom it is transferred.
• Request correction of your incorrect and incomplete personal data and request that the recipients to whom this data has been or may have been transferred be informed.
• Request the deletion, destruction, or anonymization of your personal data within the framework of the conditions stipulated in Article 7 of the KVKK. However, we will evaluate your deletion request and determine which method is appropriate according to the circumstances of the concrete case. In this context, you can always request information from us about why we chose the deletion method we selected.
• Request that third parties to whom your personal data has been or may be transferred be informed about your deletion request.
• Object to the results of an analysis of your personal data created exclusively through an automated system if these results are contrary to your interests.
• Request compensation for damages if you suffer damage due to unlawful processing of your personal data.

Your requests in your application will be concluded free of charge within 30 (thirty days) at the latest, depending on the nature of the request. However, if the transaction requires an additional cost for BENPETTO, a fee may be charged according to the tariff determined in the Communiqué on Application Procedures and Principles to the Data Controller by the Personal Data Protection Board.

You can make your application regarding the processing of your personal data by filling out the application form found on the Company's mobile application and website address or in the following ways, provided that you comply with the conditions in Article 5 of the Communiqué on Application Procedures and Principles to the Data Controller:

• In writing and signed to our physical address
• By e-mail you will send from your registered electronic mail (KEP) address
• You can deliver it to our Company's e-mail address below using the e-mail address you have previously notified us and is in our records.

Depending on the nature of your request and your application method, we may request additional verifications (such as sending a message to your registered phone, calling you) to determine whether the application belongs to you and thus to protect your rights. For example, if you apply through the e-mail address registered with the Company, we may contact you using another communication method registered with the Company and ask for confirmation that the application belongs to you.