1. Data Controller and Representative

Biscuit Pro Makine A.Ş. and/or group companies and other companies owned by shareholders ("Companies") are highly committed to the security of your personal data. With this awareness, we attach great importance to the processing and preservation of all kinds of personal data belonging to individuals associated with the Companies, including those benefiting from our products and services, in accordance with the Law on the Protection of Personal Data No. 6698 ("KVKK"). As the "Data Controller" in the full consciousness of this responsibility and as defined in the KVKK, we process your personal data in the manner explained below and within the limits prescribed by legislation.

2. Collection, Processing, and Purposes of Personal Data

Your personal data may vary depending on the services provided by Biscuit Pro Makine A.Ş. and/or group companies and other companies owned by shareholders ("Companies") and their commercial activities. These data may be collected automatically or non-automatically through our company units, sales offices, website, satisfaction surveys, site management, other group companies, subcontractors, and other business partners, as well as verbal, written, or electronic means such as second-hand sales or leasing agencies engaged to provide services for company operations, social media platforms, mobile applications, and similar tools. Your personal data will be processed and, if necessary, updated as long as you benefit from our products and services.

In addition, when you use our call centers or website to access our services, visit our sales offices, participate in trainings, seminars or events organized by our companies, or attend job interviews and meetings, your personal data may be processed.

The collected personal data will be processed within the scope of the personal data processing conditions and purposes specified in Articles 5 and 6 of the KVKK, including the necessary work carried out by our relevant departments to benefit you from the products and services offered by our Companies, customization of the products and services offered by our Companies according to your preferences, usage habits, and needs, ensuring the legal and commercial security of our Companies and individuals in a business relationship with our Companies (such as sales carried out by our Company, ensuring the physical security and control of Company locations, customer evaluation/complaint management processes, reputation research processes, event management, legal compliance processes, auditing, financial affairs, etc.), determining and implementing the commercial and business strategies of our Companies, and ensuring the execution of our company's human resources policies.

3. Parties to Whom and for What Purposes Personal Data Can Be Transferred

Your personal data may be transferred within the scope of the personal data processing conditions and purposes specified in Articles 8 and 9 of the KVKK to our business partners, suppliers, company officials, shareholders, legally authorized public institutions and private persons, within the framework of the necessary work carried out by our departments to benefit you from the products and services offered by our Companies, customization of the products and services offered by our Companies according to your preferences, usage habits, and needs, ensuring the legal and commercial security of our Companies and individuals in a business relationship with our Companies (such as sales carried out by our Companies, ensuring the physical security and control of Company locations, customer evaluation/complaint management processes, reputation research processes, event management, second-hand sales and leasing, legal compliance processes, auditing, financial affairs, etc.), and determining and implementing the commercial and business strategies of our Companies, as well as ensuring the execution of our company's human resources policies. Additionally, it is possible to transfer personal data records to data processors for the purpose of keeping personal data records, as stated in the specified purposes.

4. Method and Legal Basis of Personal Data Collection

Your personal data is collected by the Companies in any verbal, written, or electronic form for the purpose of providing the products and services we offer within the legal framework and fulfilling the contractual and legal obligations of our Companies completely and accurately. Within the scope of this legal basis, your personal data collected may be processed and transferred for the purposes stated in clauses (1), (2), and (3) of this document, in accordance with the personal data processing conditions and purposes specified in Articles 5 and 6 of the Law on the Protection of Personal Data (KVKK).

5. Rights of the Data Subject Listed in Article 11 of the KVKK Law

As data subjects, if you submit your requests regarding your rights to our Companies through the methods specified in this Information and Disclosure Text, our Companies will respond to your request within a maximum of thirty days free of charge, depending on the nature of the request. However, if the Personal Data Protection Board has set a fee, the fee specified by our Companies will be charged. In this context, data subjects have the following rights;

• To learn whether personal data is being processed,
• To request information if personal data has been processed,
• To learn the purpose of processing personal data and whether they are used in accordance with their purpose,
• To know the third parties to whom personal data is transferred, domestically or abroad,
• To request the correction of personal data if it is incomplete or inaccurate and to request that the third parties to whom the personal data has been transferred are notified of the transaction carried out within this scope,
• To request the deletion or destruction of personal data within the framework of the conditions stipulated in the KVKK and other relevant laws, despite being processed in accordance with the law, and to request that the third parties to whom the personal data has been transferred are notified of the transaction carried out within this scope,
• To object to the occurrence of a result against the individual by analyzing the processed data exclusively through automated systems,
• To demand compensation for damages in case of suffering damage due to the unlawful processing of personal data.

You can submit your requests to our Companies. Since the Personal Data Protection Board has not yet determined a specific method, you are required to submit your application to our Companies in writing, in accordance with the KVKK. In this regard, the channels and methods for submitting your application in accordance with Article 11 of the KVKK are explained below.

You can personally deliver your written request, including your explanations regarding the right you wish to exercise, along with the necessary information to identify your identity, to the Company's address, or you can send it through a notary or other methods specified in the KVKK, with identification documents determining your identity.