RGPD

YEŞİLEKO RAW MATERIAL PLASTIC AND INDUSTRY TRADE LTD. CO.

TEXT OF CLARIFICATION REGARDING THE PROTECTION OF PERSONAL DATA

As Yeşileko Raw Material Plastic and Industry Trade Ltd. Co. ("Yeşileko" or "Company"), the confidentiality and security of your personal data are among our most important priorities. In this context, we would like to inform you about your personal data as part of our obligation to inform under Article 10 of the Law on the Protection of Personal Data No. 6698 ("KVKK"). Personal data means any information that identifies or can identify you. Below are the personal data processed by Yeşileko, the purposes for processing them, the groups of recipients to whom they may be transferred, the methods of collection, the legal basis, and your rights related to these personal data. You can access Yeşileko Raw Material Plastic and Industry Trade Ltd. Co.'s "Personal Data Protection and Processing Policy" from https://www.yesileko.com and obtain detailed information.

Which personal data are processed by Yeşileko?

• Identity Information: Your first name, last name, and gender

• Contact Information: Your mobile phone number, address, and email address

• Customer Transaction Information: Your order and invoice details, delivery transaction information, transaction history related to your purchases

• Transaction Security Information: Your IP address, password information, cookie information

What are the purposes and methods of collecting your personal data?

Your identity, contact, and customer transaction information are collected and processed automatically in electronic form either directly from you or through our mobile application or website for the following purposes:

• Execution of processes related to the establishment and performance of the contract,

• Execution and auditing of financial and accounting processes,

• Execution and auditing of the Company’s business activities,

• Execution of billing processes,

• Monitoring logistics and delivery processes,

• Conducting transactions via the website/mobile applications and confirming the identity of the person making the transaction,

• With your explicit consent, conducting marketing and advertising activities, providing you with products tailored to your preferences, and improving your shopping experience and satisfaction,

• Increasing customer satisfaction, understanding our customers, and conducting customer environment analysis to improve and develop the products and services provided by the company,

• Conducting strategic analysis activities,

• Executing communication activities,

• Offering products that may interest you based on your interests,

• Contacting you about the status, conditions, and updates of contracts made through the application under the Distance Sales Contract and the relevant articles of the Consumer Protection Law,

• With your explicit consent, informing you about developments, opportunities, and innovations at Yeşileko,

• Conducting customer environment analysis and performing surveys via electronic and/or physical environments through affiliated organizations,

• Evaluating requests, complaints, and suggestions related to our products and services,

• Providing you with information about products,

• Managing information security processes,

• Ensuring that activities comply with the regulations,

• Monitoring and conducting legal affairs,

• Providing information to authorized persons, public institutions, and organizations.

Your transaction security information is collected and processed automatically in electronic form for the following purposes:

• Execution of processes related to the establishment and performance of the contract,

• Execution and auditing of the Company’s business activities,

• Conducting transactions via the website/mobile applications and verifying the identity of the person making the transaction,

• With your explicit consent, conducting marketing and advertising activities, providing you with products tailored to your preferences, and improving your shopping experience and satisfaction,

• Increasing customer satisfaction, understanding customers using the platform, and conducting customer environment analysis to improve and develop the products and services provided by the company,

• Managing information security processes,

• Ensuring that activities comply with the regulations.

What is the legal basis for processing your personal data?

The personal data mentioned under the section "Which personal data are processed by Yeşileko?" are processed in accordance with the purposes mentioned above, based on the legal grounds specified in Articles 5, 8, and 9 of the KVKK as well as the following:

• Compliance with obligations specified in laws, such as the Law No. 6563 on Regulating Electronic Commerce, Turkish Commercial Code No. 6102, Turkish Penal Code No. 5237, and Consumer Protection Law No. 6502, and activities related to ensuring the security of operations on the company’s platform, managing information security processes, ensuring that activities comply with the regulations,

• The necessity of processing personal data directly related to the establishment or performance of a contract, such as conducting contracts under the Distance Sales Contract and Consumer Protection Law, completing purchases, managing the delivery processes, managing financial and accounting processes, executing communication activities,

• The necessity of processing personal data to fulfill the company's legal obligations, such as ensuring compliance with the Distance Contracts Regulation and the Electronic Commerce Service Providers and Intermediary Service Providers Regulation, providing information to authorized institutions, ensuring that activities comply with the regulations, managing legal affairs, financial and accounting operations,

• The necessity of processing personal data for the establishment, exercise, or protection of a right in legal or litigation matters,

• The necessity of processing personal data for legitimate interests of the company, provided that it does not harm fundamental rights and freedoms, such as improving and developing products and services,

• Explicit consent for the transfer of personal data abroad.

To whom and for what purposes does Yeşileko transfer your personal data?

Our company processes your personal data in accordance with the principles of "need to know" and "need to use," ensuring data minimization and taking necessary technical and administrative security measures. As business operations require continuous data flow with different stakeholders, we transfer your personal data to third parties as necessary for the purposes mentioned in this clarification text, such as conducting market operations, managing order delivery processes, managing support requests, improving customer experience, developing the company's products and services, ensuring business continuity, securing information, fulfilling legal obligations, and other specified purposes.

Definition of Personal Data and Basic Principles in Data Processing

Personal data, as defined in Article 3/I(d) of the KVK Law, refers to any information related to an identified or identifiable natural person. Examples include: your name, surname, ID number, address, phone number, email, date of birth, IP address, transaction information, etc. Special categories of personal data include race, ethnic origin, political opinion, philosophical belief, religion, sexual life, biometric data, etc.

This section explains the fundamental principles for processing personal data, such as ensuring legality, accuracy, relevance, and proportionality with respect to the intended purposes of data use.