POLITEM PLASTİK VE TEKSTİL PAZARLAMA SANAYİ DİŞ TİCARET ANONİM ŞİRKETİ Protection and Processing of Personal Data Clarification Text

As POLITEM PLASTİK VE TEKSTİL PAZARLAMA SANAYİ DİŞ TİCARET ANONİM ŞİRKETİ (hereinafter referred to as "POLITEM"), we place great importance on the security and privacy of your personal data, and we strive to take the highest level of security measures to process and store this data. We process your personal data within the scope of the "Law on the Protection of Personal Data" No. 6698 (hereinafter referred to as "KVKK") and relevant legal legislation, in our capacity as the "data controller," as explained below. We fulfill our responsibilities regarding the collection, purpose of use, processing, transfer, retention period, and data privacy and protection activities of personal data within the framework of KVKK and secondary legislation.

This Clarification Text ("Clarification Text") has been prepared in accordance with Article 10 of KVKK titled "Data Controller's Obligation to Inform" in order to inform you in the most transparent manner regarding the identity of the data controller, the method and legal basis of collecting your personal data, the purpose for which this data will be processed, to whom and for what purpose it can be transferred, the data processing period, and your rights enumerated under Article 11 of KVKK. The explanations provided for "Your Personal Data" in this Clarification Text also encompass your "Special Categories of Personal Data." For this purpose, we take security measures and inform you of your rights, as we attach great importance to the security of your personal data. We store all personal data shared by you with due care, taking all necessary technical and administrative measures to ensure an appropriate level of security regarding your personal data.

Through this Clarification Text on the Protection of Personal Data, we explain our personal data protection and processing policy, as well as how we collect, use, transfer, and protect your personal data during the performance of services.

Collection, Processing, and Processing Purposes of Personal Data

POLITEM processes and stores your personal data within the framework of the legal regulations specified in the Law on the Protection of Personal Data and the provisions of secondary legislation. Your personal data is collected in order to provide services within the legal framework and, in this context, to enable POLITEM to fully and properly fulfill its contractual and other legal obligations. Although personal data is shaped according to the services provided, it is collected verbally, in writing, or electronically through automated or non-automated methods, via call centers, the website, social media channels, mobile applications, online services, WhatsApp, and similar means. Your personal data may be processed by being generated and updated as long as your relationship with our company continues, and it may be kept under protection in both digital and physical environments.

Your Personal Data: Data including, but not limited to, your name, surname, Turkish ID number, passport number, or temporary Turkish ID number, place and date of birth, marital status, gender, contents of the personnel file created by our company, and other identity data that can identify you; your contact data such as your address, telephone number, email address; your financial data such as payment, credit card, bank details, and billing information; audio and/or digital information acquired by us at various times through electronic or non-electronic methods; video and/or audio camera recordings obtained and/or obtainable during your visit to our Company; your general and special categories of personal data; data regarding private health insurance and Social Security Institution data; and identity data, payment, and billing information submitted through our website will be processed by our company to the extent necessary.

Furthermore, your personal data may be processed when you use our call center or website to utilize POLITEM's online services, attend trainings, seminars, or events organized by our Company, or visit/navigate these websites.

Your personal data will be processed within the scope of the personal data processing conditions and purposes specified in Articles 5 and 6 of the KVKK Law. Your special categories of personal data and general personal data may be processed by our Company for the purposes stated below.

Persons and Organizations to Which Your Personal Data May Be Transferred

Your personal data may be transferred within the scope of the Law and related legislation, and for the purposes mentioned above, to:

• The Ministry of Labour and Social Security and its affiliated sub-units,

• The Social Security Institution,

• Private insurance companies (health, pension, life insurance, etc.),

• The General Directorate of Security and similar law enforcement agencies,

• The Directorate of Population Affairs,

• Chief Public Prosecutor's Offices, Courts, arbitrators in arbitration proceedings,

• Judicial organs and/or administrative authorities (for the fulfillment of requested information and document requests),

• Your authorized representatives,

• Third parties from whom we receive consultancy services, including lawyers, tax advisors, and auditors,

• Regulatory and supervisory authorities, official bodies,

• Authorized public institutions and organizations as well as professional organizations operating as public institutions (for conducting audit and/or regulatory tasks),

• Our suppliers, support service providers, business partners, and other third parties whose services we utilize or with whom we cooperate,

within the framework of the personal data processing conditions and purposes specified in Articles 8 and 9 of the KVKK.

Method and Legal Reason for Collecting Personal Data

Your personal data is collected through all kinds of verbal, written, or electronic channels within the framework of the principles set forth in the KVKK, for the purpose of providing the services defined within the above-mentioned scope under a legal framework, and enabling POLITEM to fully and properly fulfill its contractual and statutory obligations.

Data Processing Period

Your personal data will be processed limited to the purposes specified in this Clarification Text, complying with the data processing and statutory limitation periods stipulated in the legislation to which POLITEM is subject, as well as all relevant laws and other legal regulations. In the event of amendments to the data processing periods in laws, the newly determined periods will be taken as the basis.

Your Rights Regarding the Protection of Personal Data

In relation to your processed personal data, in accordance with the legislation, you have the right to:

• Learn whether your personal data is being processed, and request information if it has been processed,

• Access and request your personal data, learn the purpose of processing personal data, and whether it is used in accordance with its purpose,

• Know the third parties to whom personal data is transferred domestically or abroad,

• Request the correction of personal data if it is incomplete or incorrectly processed, and request the deletion or destruction of personal data,

• Request notification of transactions regarding the correction and/or deletion/destruction of personal data to third parties to whom personal data has been transferred,

• Object to the occurrence of a result against yourself by analyzing the processed data exclusively through automated systems,

• Request compensation for damages in the event of suffering damage due to unlawful processing of personal data.

POLITEM protects your personal data in accordance with the legal regulations mandated by law. Administrative and technical security measures have been taken by our Company to protect your personal data and will continue to be taken going forward.

You may deliver your requests within the scope of the Law by filling out the Data Subject Application Form available at https://www.politem.com/iletisim.html by hand or via notary public to the address KEMANKEŞ KARAMUSTAFAPAŞA MAHALLESİ NECATİBEY CAD. NO: 74/6 BEYOĞLU/İSTANBUL or to the factory address Veliköy O.S.B., Sanayi Bulvarı No:37/1 Veliköy/Çerkezköy/TEKİRDAĞ; or you may transmit it with an electronic signature to info@politem.com by signing the Data Subject Application Form with a "secure electronic signature" certificate as defined in the Electronic Signature Law No. 5070 or via mobile signature. Your requests submitted to our Company will be answered in writing or electronically as quickly as possible and within thirty days at the latest, depending on the nature of your request, in return for the processing fee specified in Article 7 of the Communiqué on the Procedures and Principles of Application to the Data Controller.

EXPLICIT CONSENT TEXT

I have read and understood the entire clarification text regarding the Law on the Protection of Personal Data No. 6698 disclosed by Politem Plastik Ve Tekstil Pazarlama Sanayi Dış Ticaret Anonim Şirketi (hereinafter referred to as "POLITEM"), and I have been informed about the processing of my Personal Data by POLITEM within the scope of the purposes specified below.

In this context, I hereby give my explicit consent, being informed without leaving room for any doubt, that my Personal Data may be processed through all channels in light of the information contained in the Clarification Text for purposes such as retention of necessary information pursuant to laws, procurement of products and/or services from suppliers or manufacturers, establishment and execution of contracted or non-contracted commercial relationships in this regard, identification and verification of the parties signing relevant documents, recording identity, address, tax number, and other information to determine the owner and addressee of any application, transaction, and operation to be carried out within this scope, and issuing information and documents to serve as the basis for transactions to be conducted on paper or in an electronic environment; and that it may be shared with the persons specified in the Clarification Text in case of statutory requirements or actual requirements arising from services and/or business relationships.