Clarification Text on Personal Data of Customers and Suppliers

ERSEL LOGISTICS A.Ş.

* Your Identity Information: Your name, surname, parents’ name, date of birth, place of birth, gender, nationality, Turkish identity number, identity information, blood group and religion information obtained by copying your identity card, if any, information about whether you are a signatory or not, your photo. *Your Contact Information: Your address, telephone number, e-mail address, KEP address if any. *Customer Information: Your customer transaction information, your signature, your company information, tax information, information about your bank account, professional experience information, profession, duty and title information, vehicle information, information obtained within the scope of legal transactions, your tax number, instruction, request and information regarding your complaints, your preferences and habits regarding our products and services. *Your Transaction Security Information: Your MAC address, log records. *Your Visual and Audio Information: Your photos and camera recordings.

For this reason, we would like to enlighten you as a Data Controller within the scope of the Personal Data Protection Law (Law) No. 6698. 1. Personal Data Collection Method and Legal Reason Your personal data; means “all kinds of information relating to an identified or identifiable natural person” collected in physical and electronic media for the purpose and scope specified in this clarification text. Your personal data is “explicitly stipulated in the law” specified in Article 5 of the Law, “provided that it is directly related to the establishment or performance of a contract, it is necessary to process the personal data of the parties to the contract”, “personal data processing is mandatory for the data controller to fulfill its legal obligation”. It is processed on the basis of legal reasons such as “data processing is mandatory for the establishment, exercise or protection of a right” and “data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject”. In the absence of at least one of the legal reasons stated, your explicit consent will be asked for personal data processing. Cases where your explicit consent is asked

You can find it in the “Open Consent Form”.

2. Purposes of Processing Personal Data Your collected personal data; Execution of emergency management processes, Execution of information security processes, Execution of audit/ethical activities, Execution of access authorizations, Execution of activities in accordance with the legislation, Execution of finance and accounting affairs, Execution of company/product/services loyalty processes, Ensuring physical space security, Execution of assignment processes, Follow-up and execution of legal affairs, Execution of internal audit/investigation/intelligence activities, Execution of communication activities, Execution/supervision of business activities, Execution of occupational health/safety activities, Receiving and evaluation of suggestions for the improvement of business processes, Execution of business continuity activities, Execution of logistics activities , Execution of goods / services purchasing processes, Execution of goods / services after-sales support services, Execution of goods / services sales processes, Execution of goods / services production and operation processes,

Execution of customer relationship management processes, Execution of activities for customer satisfaction, Organization and event management, Execution of advertisement/campaign/promotion processes, Execution of risk management processes, Execution of storage and archive activities, Execution of social responsibility and non-governmental activities, Execution of contract processes, Strategic planning activities, Follow-up of requests/complaints, Ensuring the security of movable goods and resources, Execution of marketing processes of products/services, Ensuring the security of data controller operations, Execution of investment processes, Informing authorized persons, institutions and organizations, Execution of management activities, Creation and follow-up of visitor records purposes will be processed. However, if you give us your consent for the processing of your personal data, your personal data in question, the customization of our products and services in line with your needs and wishes, about the products and services.

It will also be processed for the purposes of measuring your satisfaction, developing and diversifying our products and services in line with your wishes and needs, promoting and providing information about the activities of the company and its subsidiaries and affiliates, conducting marketing analysis studies, and realizing personalized campaigns, advertisements and promotions.

3. Transfer of Personal Data: Your personal data collected pursuant to the Law and the above articles; In accordance with the basic principles stipulated by the Law and within the personal data processing conditions and purposes specified in Articles 8 and 9 of the Law, and for the above-mentioned purposes, to our business partners and suppliers with whom we have a service relationship, Data Controller business partners are transferred to legally authorized public institutions, organizations and individuals.

4. Your Rights as Personal Data Owner: As a data owner, you can submit your requests within the scope of Article 11 of the Law, which regulates the rights of the data subject, to the above-mentioned data controller address, in writing and with wet signature, in accordance with the “Communiqué on the Procedures and Principles of Application to the Data Controller”. signed to ersellojistik@hs03.kep.tr, if any, to the Data Controller Contact Person or Data Controller via info@ersel.com.tr using your e-mail address with which you have contacted us before, or any other notification in the Communiqué on Application Procedures and Principles. You can send it to our Company via methods. The Data Controller will finalize your request as soon as possible depending on the nature of your request and within 30 (thirty) days at the latest from the date of notification. If you want to get detailed information about the processing of your personal data, you can take a look at the “Personal Data Protection and Processing Policy” available at www.ersel.com.tr.