Protection of Personal Data Law (KVKK) Disclosure Statement

As Eren Holding A.Ş. ("Company"), we hereby inform you about the following issues within the scope of our disclosure obligation regarding your personal data that we obtain as data controller, in accordance with Article 10 of the Personal Data Protection Law No. 6698 and the Communiqué on the Procedures and Principles to be Followed in the Fulfillment of the Disclosure Obligation ("Communiqué").

This general clarification text is intended to inform the following persons whose personal data are obtained from third parties, in addition to the information obtained during the collection of personal data from relevant persons such as Employee Candidate, Employee.

In accordance with our Company's business processes, the identity and contact data of the employees and representatives of the supplier companies with which we have a commercial business relationship as the Company; in the event of a visit to our Company, the identity, contact, vehicle license plate information, and security camera images of our visitors; the identity and contact data of the persons who contact our Company either through the website and call center or by a personal application are processed for following purposes;

• Executing agreement processes,

• Executing and auditing Business activities,

• Performing business continuity activities,

• Conducting financial and accounting works,

• Conducting audit/ethics activities,

• Executing management activities,

• Conducting emergency management processes,

• Executing data security processes,

• Informing authorized persons, organizations, and institutions,

• Assuring physical security,

• Creating and tracking visitor records,

• Following up on requests/complaints,

• Conducting activities in compliance with legislation.

The data shall be processed limited to the above-specified purposes.

Personal data described in Article 2 of this Clarification Text may be transferred to authorized public institutions and organizations, business partners whose services we use in the execution of our commercial activities, and Eren Holding Group companies for the purposes specified in the same article, depending on and limited to the reasons that require transfer under the Law and related regulations.

The personal data in question are processed automatically or non-automatically through verbal or written notifications made by you verbally or in writing, applications where the visit records of our website are kept, security camera recordings, based on the legally stipulated grounds of performance of the agreement, legal obligation of the data controller, legitimate interest of the data controller, as stated in Article 5 of the Law.

You can submit your requests within the scope of Article 11 of the Law regulating the rights of the person concerned by filling out the application form on our website erenholding.com.tr/kvkkbasvuru.pdf and submit it to our company at Atatürk Mah. Ertuğrul Gazi Sok. Metropol Istanbul Sitesi C2 Apt. No:2 A/27 Ataşehir/Istanbul in writing or from your individual KEP address to our Company's KEP address erenholding@hs03.kep.tr or the e-mail address kvkk@erenholding.com.tr by using secure electronic signature, mobile signature or the e-mail address previously notified by you and registered in our system.