KVKK

GDPR POLICY

DATA CONTROLLER: Merkont Logistics Inc. / Çankaya Mah, Kayahan Business Center No: 22 33070 MERSIN / TURKEY

As Merkont Logistics Inc. (Data Controller), your following personal data is being processed, stored, and protected:

Identity Information: Your name, surname, mother-father name, date of birth, place of birth, gender, nationality, Turkish Identification Number, identity information, blood type and religion information obtained through your ID photocopy, whether you are an authorized signatory, your photo. Contact Information: Your address, phone number, email address, if any, your registered electronic mail (KEP) address. Customer Information: Your customer transaction information, your signature, information about the company you work for, tax information, information about your bank account, professional experience information, profession, duty and title information, your vehicle information, information obtained within the scope of legal proceedings, your tax number, information about your instructions, requests, and complaints, your preferences and habits regarding our products and services. Transaction Security Information: Your MAC address, your log records. Visual and Auditory Information: Your photos and camera recordings.
Therefore, we would like to enlighten you as the Data Controller within the scope of the Personal Data Protection Law No. 6698 (Law).

1. Personal Data Collection Method and Legal Basis

Your personal data; represents "any kind of information about the identified or identifiable real person" collected in physical and electronic environments within the scope of the purposes and extent specified in this enlightenment text.

Your personal data is processed based on the legal reasons specified in Article 5 of the Law: "being expressly stipulated in the laws", "if it is directly related to the establishment or performance of a contract, provided that it is necessary to process the personal data of the parties to the contract", "fulfilling the legal obligation of the data controller", "it is necessary to process personal data in order to establish, exercise or protect a right", and "it is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject".

2. Purposes of Processing Personal Data

The collected personal data will be processed for the following purposes:

• Execution of emergency management processes,
• Execution of information security processes,
• Execution of audit/ethical activities,
• Execution of access authorizations,
• Conducting activities in compliance with legislation,
• Execution of financial and accounting affairs,
• Execution of loyalty processes dependent on company/product/services,
• Ensuring physical space security,
• Execution of assignment processes,
• Pursuit and execution of legal affairs,
• Execution of internal audit/investigation/intelligence activities,
• Execution of communication activities,
• Planning of human resources processes,
• Execution/control of business activities,
• Execution of occupational health/safety activities,
• Receipt and evaluation of proposals for improving business processes,
• Execution of business continuity activities,
• Execution of logistic activities,
• Execution of purchasing processes of goods/services,
• Execution of post-sales support services of goods/services,
• Execution of sales processes of goods/services,
• Execution of production and operation processes of goods/services,
• Execution of customer relationship management processes,
• Execution of activities for customer satisfaction,
• Organization and event management,
• Execution of advertising/campaign/promotion processes,
• Execution of risk management processes,
• Execution of storage and archive activities,
• Execution of social responsibility and civil society activities,
• Execution of contract processes,
• Execution of strategic planning activities,
• Tracking of requests/complaints,
• Ensuring the security of movable goods and resources,
• Execution of marketing processes of products/services,
• Ensuring the security of data controller operations,
• Execution of investment processes,
• Providing information to authorized individuals, institutions, and organizations,
• Execution of management activities,
• Creation and tracking of visitor records.

Additionally, if you give your consent to the processing of your personal data, your personal data will also be processed for the purposes of customizing our products and services according to your needs and requests, measuring your satisfaction about the products and services, developing and diversifying our products and services in line with your requests and needs, informing about the activities of the company and its affiliates, conducting marketing analysis studies, performing personalized campaigns, advertisements, promotional activities, and for similar purposes.

**3. Transfer of Personal Data:**

Your personal data collected in accordance with the law and the articles mentioned above is transferred to domestic and foreign entities within the scope of the basic principles envisaged by the law and within the personal data processing conditions and purposes specified in Articles 8 and 9 of the Law, and for the purposes specified above, to our business partners and suppliers with whom we have a service relationship, to the Data Controller's business partners, to legally authorized public institutions, organizations, and persons.

**4. Your Rights as a Data Subject**

You can submit your requests within the scope of Article 11 of the Law, which regulates the rights of the data subject, to the data controller address mentioned above, with a written and wet-signed petition, to kvkk@merkont.com.tr with an electronically signed e-mail, or through info@merkont.com.tr using the e-mail address you have previously contacted us with, according to the "Regulation on the Procedures and Principles of Application to the Data Controller". The Data Subject or other methods specified in the Regulation on the Procedures and Principles of Application to the Data Controller can be forwarded to our Company.

The Data Controller will conclude your request within the shortest time possible depending on the nature of your request and within a maximum of 30 (thirty) days from the date of notification.