KVKK Aydınlatma Metni

UÇAR OTOMOTİV TURİZM SANAYİ VE TİCARET A.Ş. CLARIFICATION TEXT ON THE PROCESSING OF PERSONAL DATA IN AND ITS AFFILIATES

Uçar Automotive Tourism Industry and Trade Inc. In order to provide you with better service, we will process your personal information in accordance with the "Personal Data Protection Law" No. 6698, as a data controller and in accordance with the following principles:

a) Complying with the law and the rules of honesty.

b) Being accurate and up to date when necessary.

c) Processing for specific, clear and legitimate purposes.

ç) Being related to the purpose for which they are processed, limited and proportionate.

d) To be kept for the period stipulated in the relevant legislation or necessary for the purpose for which they are processed.

In accordance with the obligation to inform arising from the law and in accordance with the "Communiqué on the Procedures and Principles to be Followed in Fulfilling the Obligation to Disclosure" numbered 30356;

1-Purpose of Processing Personal Data: Uçar Otomotiv Turizm Sanayi ve Ticaret A.Ş. processes your personal information openly in accordance with Articles 5 and 6 of the law, in order to ensure your legal and commercial security, to carry out human resources processes and to provide you with more effective service in all areas. It will be processed for the purposes stated below, with your consent.

1.1. Planning, execution and supervision of business activities (selling goods/services, after-sales services and information about products),

1.2. Execution of after-sales support services and management of customer relationship management processes.

1.3. Uçar Otomotiv Turizm San.ve Tic. as the data controller. Inc. Ensuring the security of operations, carrying out risk management processes, and managing business continuity activities. 1.4. Fulfilling all kinds of contractual and legal obligations, including relevant administrative and accounting obligations, and managing contractual relations.

Situations where your explicit consent is not required;

a) It is clearly prescribed by law.

b) It is necessary for the protection of the life or physical integrity of the person or someone else who is unable to express his/her consent due to actual impossibility or whose consent is not given legal validity.

c) It is necessary to process personal data of the parties to the contract, provided that it is directly related to the establishment or performance of a contract.

ç) It is mandatory for the data controller to fulfill its legal obligation. 2/3

d) It has been made public by the person concerned.

e) Data processing is mandatory for the establishment, exercise or protection of a right.

f) It is necessary to process data for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the person concerned.” In such cases, we reserve the right to process your personal information without your explicit consent.

2-Transfer of Personal Data: Uçar Otomotiv Turizm Sanayi ve Ticaret A.Ş., your personal information, in line with the realization of the purposes specified in Article 1 of this clarification text, as specified in Article 8 of Law No. 6698 and, if there is sufficient protection, in Article 9. has the right to share it with our business partners, suppliers, legally authorized institutions and private persons, Hyundai Assan, Hyundai Motor Company, insurance companies and banks with which we cooperate, and relevant third parties in cases of commercial and legal necessity, within the framework of legal rights and limitations regarding the transfer of personal data.

3-Storage Periods of Personal Data: Uçar Otomotiv Turizm Sanayi ve Ticaret A.Ş., as the data controller, preserves the personal data it processes in physical and/or electronic environments in accordance with the Law for the periods stipulated in the relevant legislation or required by the purpose of processing. Our company determines whether a period of time is stipulated in the relevant legislation for the storage of personal data. If a period is stipulated in the relevant legislation, it complies with this period; If a period is not specified, it retains personal data for the period necessary for the purpose for which they are processed. see. The periods regarding the Storage and Destruction of Personal Data are determined by Uçar Otomotiv Turizm San.ve Tic., registered as the data controller at https://verbis.kvkk.gov.tr. Inc. It can be accessed by making a background check.

4-Method and Legal Reason for Collecting Personal Data: Uçar Otomotiv Turizm San.ve Tic. as the data controller. Inc. by, your personal data, in direct proportion to the purposes specified in Article 1 of this clarification text, within the framework of the rights, purposes and limitations granted by Articles 4, 5 and 6 of the Personal Data Protection Law No. 6698; It is collected electronically, by phone, orally and in writing. These collected data are also used for the purposes specified in Article 1 of this clarification text.

5-Data Categories: Uçar Otomotiv Turizm San.ve Tic. A.Ş. collects the personal information of your company's contact persons, representatives (managers, officers and employees) and/or shareholders as stated below.

a) Identity Information: Identity card information, driver's license information and passport information.

b) Contact Information: Address, e-mail, telephone, mobile phone, 3/3

c) Financial Information: Bank account information, debt balance, IBAN number, payment information

d) Customer/Supplier/Business Partner Information: Customer number, commercial relationship start-end date and reason, requests, service satisfaction information, product-related complaint and request information,

e) Personal and Professional Information: Workplace position/duty, educational background, sector information, employment certificate,

f)Legal Transaction Information: Signature circular, activity certificate and power of attorney.

g) Commercial Information: Field of activity.

h) Other: Vehicle model and license plate information, transportation and accommodation information.

6-Ensuring the Security and Confidentiality of Personal Data: In accordance with Article 12 of the KVK Law, our Company carries out all necessary technical and administrative measures to ensure the appropriate level of security to prevent unlawful processing and access of the personal data it processes and to ensure the preservation of personal data. takes precautions.

6.1.Technical Measures Taken to Ensure Lawful Processing of Personal Data and Prevent Unlawful Access - Taking technical measures to the extent technology allows, - Keeping information systems regarding data security up to date, - Employing experts in technical matters - Supervision for the implementation of measures taken at regular intervals - Creating the necessary software and infrastructure to ensure security - Limiting access to data being processed within the company - Using a backup program in accordance with the law to ensure the safe storage of personal data - Using software containing virus protection systems Uçar Otomotiv Turizm San.ve Tic. A.Ş. has taken all kinds of technical and technological security measures to protect your personal data and has protected your personal data against possible risks.

6.2. Administrative Measures Taken to Ensure Lawful Processing of Personal Data and Prevent Unlawful Access - Training and raising awareness of company employees regarding the KVK Law, - In cases of personal data transfer, the data security of the party to whom personal data is transferred is ensured by the agreements concluded with the persons to whom personal data is transferred. - Ensuring that a record is added stating that it will fulfill the obligations, - Preparing internal policies for the determination of what needs to be fulfilled in order to comply with the KVK Law and their implementation, 4/3

7- Measures to be Taken in Case of Illegal Disclosure of Personal Data If the processed personal data is obtained by others through illegal means despite the necessary security measures taken, our Company will notify the relevant data owner and the KVK Board as soon as possible.

8- Rights of the Data Owner: By applying to Uçar Otomotiv Turizm Sanayi ve Ticaret A.Ş. in accordance with the legal rights granted to the data owner by Article 11 of Law No. 6698,

a) Learning whether your personal data is being processed or not,

b) Requesting information if your personal data has been processed,

c) Learning the purpose of processing your personal data and whether they are used for their intended purpose,

d) Knowing the third parties to whom your personal data is transferred at home or abroad,

e) Request correction of your personal data if it is incomplete or incorrectly processed,

f) Requesting the deletion or destruction of your personal data within the framework of the conditions stipulated in Article 7 of Law No. 6698,

g) To request that the transactions carried out in accordance with paragraphs (e) and (f) be notified to third parties to whom your personal data has been transferred,

h) Object to the emergence of a result unfavorable to you by analyzing your processed data exclusively through automatic systems,

ı) If you suffer damage due to unlawful processing of your personal data, you have the right to request compensation for your damage.

You can submit your requests regarding the implementation of this law to us in writing or by other methods determined by the Personal Data Protection Board. As the data controller, we finalize the requests in your application free of charge as soon as possible and within thirty days at the latest, depending on the nature of the request. However, if the transaction requires an additional cost, you may be charged the fee at the tariff determined by the board. We may accept your request or reject it by explaining the reason and notify you of the response in writing or electronically. If the request in the application is accepted, we will fulfill it accordingly. If the application is due to our error, the fee collected will be refunded to you.

Uçar Automotive Tourism Industry and Trade Inc.

Company Address: Burhaniye Mahallesi, Kısıklı Cad. No:73 Altunizade – Üsküdar / Istanbul

Mersis Number: 0884011613300016 Trade Registry Number (Istanbul): 393870

www.ucarotomotivgrup.com.tr [email protected]

Tel: 0 216 422 30 40

Fax: 0 216 422 30 37