PERSONAL DATA PROTECTION (KVKK) CLARIFICATION

At HDM Foreign Trade, we are fully committed to protecting your personal data.

In accordance with the Law No. 6698 on the Protection of Personal Data (“KVKK”) and related legislation, your personal data are processed as outlined below.

1. Data Controller

Your personal data are processed by HDM Foreign Trade as the data controller under KVKK and applicable legal regulations.

2. Purposes of Processing Personal Data

Collected personal data may be processed for the following purposes:

• Conducting business activities,

• Providing sales, marketing, and after-sales services,

• Managing supplier and business partner relations,

• Managing contract processes,

• Executing financial and accounting transactions,

• Performing logistics and field operations,

• Fulfilling legal obligations,

• Managing human resources processes,

• Conducting corporate communication activities.

3. Methods of Collecting Personal Data

Your personal data may be collected via:

• Verbal, written, or electronic communications,

• Website, email, telephone, fax, or similar communication channels,

• Contracts, offer forms, contact forms, and job applications.

4. Transfer of Personal Data

Your personal data may be transferred, in compliance with Articles 8 and 9 of the KVKK, to:

• Our business partners and suppliers,

• Authorized public institutions and organizations,

• Domestic and, where necessary, international partners,

provided that legal requirements are fulfilled.

5. Retention Period of Personal Data

Personal data will be retained for the duration required by processing purposes and applicable legal retention periods.

After the expiration of these periods, data will be deleted, destroyed, or anonymized in accordance with KVKK regulations.

6. Your Rights under KVKK

Under Article 11 of the KVKK, you have the right to:

• Learn whether your personal data are processed,

• Request information regarding the processing,

• Learn the purpose of processing and whether data are used accordingly,

• Learn the third parties to whom data are transferred domestically or abroad,

• Request correction of incomplete or inaccurate data,

• Request the deletion or destruction of your data,

• Request notification of correction or deletion to third parties to whom data have been transferred,

• Object to the occurrence of any negative result through automated analysis,

• Request compensation if you suffer damage due to unlawful processing.

You may send your requests related to these rights to us through our [email/physical address/application form].