CLARIFICATION TEXT ON THE LAW ON THE PROTECTION OF PERSONAL DATA

1. PURPOSE As 3RED, we respect the confidentiality of your personal data, attach importance to data security and this issue is among the priorities of our company. For the purpose of processing and protecting this personal data, we adopt the principles of collecting, processing and protecting the personal data of our customers, potential customers, website users, employees, employee candidates, 3RED former employees, interns, company shareholders, company officials, business partners, group company employees, visitors in accordance with the regulations stipulated in the Personal Data Protection Law No. 6698. For this reason; We recommend that you carefully read this text explaining how we process your personal data, with whom we share it and how you can exercise your rights.

All kinds of personal data belonging to all persons associated with 3RED, including those who benefit from our services, may be recorded, stored, updated for certain clear and legitimate purposes in accordance with the Law No. 6698 on the Protection of Personal Data, provided that it complies with the law and the rule of honesty, and may be processed and shared with third parties within the framework permitted by the legislation, as long as your relationship with our company continues.

As 3RED, as defined in the Law on the Protection of Personal Data, as "Data Controller", we determine the information we obtain from you within the scope of our relationship with you.

2. DEFINITIONS In this clarification text; Personal Data: Any information relating to an identified or identifiable natural person, Processing of Personal Data: All kinds of operations performed on personal data such as obtaining, recording, storing, preserving, changing, rearranging, disclosing, transferring, taking over, making available, classifying or preventing the use of personal data by fully or partially automatic or non-automatic means provided that it is part of any data recording system. Law No. 6698 on the Protection of Personal Data "KVKK": Law No. 6698 on the Protection of Personal Data, which entered into force after being published in the Official Gazette on 7 April 2016: Personal Data Protection Authority Board: Personal Data Protection Board, Data Processor: The natural or legal person who processes personal data on behalf of the data controller based on the authorisation granted by the data controller, Data Controller: The natural or legal person who determines the purposes and means of processing personal data and is responsible for the establishment and management of the data recording system. Relevant Person: The natural person whose personal data is processed, Contact Person: The person who provides liaison with the Institution and the relevant persons. The contact person is not the representative of the Data Controller. The contact person does not have the authority to act on behalf of the Data Controller and is the person to whom the requests from the Authority are notified. (It is not the evaluation authority for questions and requests from Data Subjects and is only in a liaison position).

3. DATA RESPONSIBLE Data Controller : 3RED Address : Gebizli Mah. Termesos Blv. Plaza GLK Business Centre No: 42/2/102 MURATPAŞA / ANTALYA Phone : +90 242 335 08 96 Email : red@3red.com.tr

 APPLICATION As 3RED; We care about securing, collecting, processing, transferring and destroying the personal data of our customers, potential customers, website users, employees, employee candidates, former employees of 3RED, interns, company shareholders, company officials, business partners, group company employees, visitors and third parties within the framework of the Constitution of the Republic of Turkey, international conventions to which our country is a party and relevant legislation, especially the Law No. 6698 on the Protection of Personal Data. Within this framework, we will be able to process your personal data that you share with us in accordance with 6698 KVKK, in a limited, relevant and measured manner with our activities and purposes, transfer it to domestic and foreign third parties, store it, use it for profiling and classify it.

4. Purpose of Processing Your Personal Data Pursuant to Articles 4, 5 and 6 of 6698 KVKK, your personal data; In cases expressly stipulated in the Laws, in relation to the establishment or performance of the contract, in order to fulfil our legal obligations, in order to fulfil our legal obligations, as mandatory for the establishment, use or protection of a right, for our legitimate interests or provided that it has been made public by you (the relevant persons), provided that there are no processing conditions, it can be processed with explicit consent. In addition, all your personal data processed; In accordance with the law and the rule of honesty, Accurate and up-to-date, For certain clear and legitimate purposes, In connection with the purpose for which they are processed, limited and measured, They will be kept for the period stipulated in the relevant legislation or required for the purpose for which they are processed. Your personal data may be processed by our company for the following purposes without compromising our quality; Carrying out occupational health and safety activities Planning and follow-up of works carried out with business partners, dealers or suppliers Creation and execution of customer records Conducting customer relations and follow-up of corporate management activities, Management and follow-up of customer requests and complaints, Ensuring Business Continuity, Follow-up of contract processes, Follow-up and execution of legal processes and communication processes with official institutions, Ensuring legal and commercial security Development and improvement of the services offered by our company, Determination and implementation of commercial and business strategies, Conducting market research, Planning and organising activities to ensure and/or increase loyalty to Products and Services, Maintaining business and operations, Carrying out sales and purchasing processes, Fulfilling warranty obligations, Establishing contractual processes such as sales and after-sales support with you as our customers, execution and follow-up of all necessary transactions, execution of contract processes and planning and execution of operational processes related to sales Creating and updating efficiency reports by obtaining information about customer-based developments Planning and organising activities to ensure and/or increase loyalty to Products and Services, Carrying out company activities and procedures, Carrying out finance and accounting transactions, Carrying out financial, accounting and financial transactions, including sales-related invoicing activities, carrying out risk management, Carrying out internal audit processes, Fulfilling the obligation to notify relevant/authorised public institutions, Carrying out job and internship application and evaluation processes, Creating a workplace personnel file and carrying out processes related to starting work, Carrying out Human Resources processes, Fulfilment of obligations arising from the employment contract and legislation for employees, Carrying out training activities, Carrying out physical security processes, Planning information security processes, creating and managing the infrastructure of information technologies, Risk management, For logging activities, Method of Collection of Your Personal Data and Legal Reason Your personal data may be collected verbally, in writing or electronically for the above-mentioned purpose and scope, in whole or in part by automatic means or by non-automatic means, provided that it is part of any data recording system. Within the framework of the activities of carrying out commercial processes; contact forms, fair organisations, business cards, supplier information request forms, other commercial documents, payment information and documents, negotiable documents, employee and intern candidate application forms, resumes, e-mail, website, various contracts, mobile applications, consumer complaint forms, including our customers, suppliers, other third parties, are collected verbally, in writing or electronically by various methods that can be obtained from outside our company. We process your personal data that we collect; Art. 5/2-c of KVKK - In order to establish and fulfil a contract, Art. 5/2-ç of KVKK - To fulfil our legal obligations, Art. 5/2-f of KVKK - Within the framework of the legitimate interests of our company or with your explicit consent within the scope of the above-mentioned purposes.

5. Transfer of Your Personal Data Your personal data; data protection, prevention of unauthorised access and prevention of unlawful processing, such as data protection, prevention of unauthorised access and prevention of unlawful processing, taking data security measures, within the above-mentioned purposes, in accordance with the KVKK and the legislation in force, with 3RED being jointly responsible; Authorised public institutions and organisations in accordance with the obligations and needs arising from legal legislation, intermediary financial institutions in order to evaluate financial risks, independent audit firms in order to carry out audit processes, institutions providing intermediary/agency services in business travels and organisation, fair processes, our business partners, suppliers, shareholders and local/international organisations that we receive support in our business processes, subsidiaries and/or direct/indirect domestic/international domestic/international organisations in cooperation with which we receive services within the scope of relevant contracts to carry out activities as 3RED and other third parties. persons.

6. Storage and Deletion of Data In accordance with the legislation, the relevant personal data must be stored for certain periods of time. Therefore, it is the responsibility of our company to store personal data in accordance with the legislation and for the required period. These retention periods are defined in detail on a data basis in the personal data inventory prepared. Personal data are kept for the period stipulated in the legislation or required by its purpose. Data are stored physically or electronically. Necessary security measures have been taken for the storage and preservation of data and a secure environment has been provided by our company. Personal data whose retention period has expired are destroyed in 6-month periods. (deletion/destruction/anonymisation) Your Rights as a Data Subject Within the framework of Article 11 of 6698 KVKK To learn whether your personal data are processed or not, To request information if your personal data have been processed, To learn the purpose of processing personal data and whether they are used in accordance with their purpose, To know the third parties to whom your personal data are transferred domestically or abroad, To request correction of your personal data in case of incomplete or incorrect processing, To request the deletion or destruction of your personal data within the framework of the conditions stipulated in the KVKK legislation, When you request the correction of incomplete or incorrect data and the deletion or destruction of your personal data, you have the right to request that this situation be notified to third parties to whom your personal data has been transferred, to object to the occurrence of a result against you by analysing the processed data exclusively through automated systems, to request the compensation of this damage in case you suffer damage due to unlawful processing of personal data. By filling out the petition containing your request to exercise these rights or the Information Request Form at www.mascam.com; It will include the identity and address information of the applicant, (Documents proving your identity must be attached.), If you are acting on behalf of someone else, you must be specially authorised in this matter and your authorisation must be documented, the matter you request will be clear and understandable; our company " Gebizli Mah. Termesos Blv. Plaza GLK Business Centre No: 42/2/102 MURATPAŞA / ANTALYA / ANTALYA , Turkey in writing or you can send an e-mail from your e-mail address defined in our system. Depending on the nature of your request within the scope of the above article, the request will be finalised as soon as possible (within 30 days at the latest) free of charge or according to the conditions in the fee schedule to be determined by the KVK Board. As the relevant person, in accordance with Article 14 of the Law on the Protection of Personal Data 6698, in cases where the application is rejected, the answer given is insufficient or the application is not answered in due time; You can complain to the Board within thirty days from the date you learn the answer or in any case within sixty days from the date of application with the approval of the person. Pursuant to Article 28/2 of KVKK 6698; In the following cases, personal data owners cannot assert their other rights mentioned above, except for the right to demand compensation for the damage: Processing of personal data is necessary for the prevention of crime or criminal investigation. Processing of personal data made public by the personal data owner himself/herself. Processing of personal data is necessary for the execution of supervisory or regulatory duties or for disciplinary investigation or prosecution by public institutions and organisations and professional organisations in the nature of public institutions, which are authorised by law. Personal data processing is necessary for the protection of the economic and financial interests of the State in relation to budget, tax and financial matters

7. OTHER MATTERS In the processes within the scope of this Clarification Text on the Protection and Processing of Personal Data, the relevant legal regulations in force regarding the processing and protection of personal data shall be applied primarily. The Clarification Text is published on the website "www.pigocar.com" and made accessible to the relevant persons. In order to adapt to the changing conditions and legislation, changes and updates may be made in the Clarification Text and may be made available to the relevant persons through the above-mentioned website.