Personal Data Protection Notice

INFORMATION ABOUT THE LAW ON THE PROTECTION OF PERSONAL DATA

Dear Customer,

As https://eximglobal.com.tr/, in our capacity as Data Controller under Law No. 6698 on the Protection of Personal Data (“KVKK”), we have prepared this “Information” text to inform you, within the framework of Article 10 titled “Obligation of the Data Controller to Inform” and Article 11 titled “Rights of the Data Subject,” about the purposes for which your personal data will be processed, to whom and for what purpose the processed personal data may be transferred, the method and legal reason for collecting your personal data, and other rights listed in Article 11 of the KVKK.

Purposes of Processing Your Personal Data Our company may collect personal data in categories such as identity information, contact information, customer information, customer transaction information, transaction security information, legal transaction and compliance information, and marketing/sales information from parties such as customers, employees, potential customers, employee candidates, business partners, website and store visitors, and suppliers.

Collected personal data, whether verbal, written, or electronic, may be processed for purposes including:

• Providing company products and services, fulfilling obligations, preparing records and documents, complying with local and international legal regulations regarding data retention, reporting, informing, taxation, and other obligations.
• Offering personalized advertisements, campaigns, advantages, and other benefits for sales and marketing activities aimed at improving service and product quality.
• Communicating necessary information regarding services and products, IT requirements, and system support.
• Conducting traffic measurement, statistical analyses, segmentation/profiling, and CRM (Customer Relationship Management) activities.
• Measuring and improving customer satisfaction, managing complaints, collecting opinions and suggestions, and providing information regarding products, services, complaints, and requests.
• Managing online sales memberships, orders, payments, logistics cooperation with third parties, recommending products/services, online behavioral advertising, portfolio management, optimization, auditing, risk management, promotions, profiling, scoring, comparative product/service offers, modeling, and product development.
• Complying with obligations imposed by official authorities, fulfilling contractual requirements, and executing legal obligations.
• Managing financial operations, communication, market research, social responsibility activities, purchasing operations, internal system/application management, and legal operations.
• Reviewing and responding to requests from official authorities or from you.

Method of Collecting Personal Data Your personal data may be collected verbally, in writing, or electronically through our company, partners, group companies, affiliates, dealers, agencies, business partners, or contracted solution partners.

Accuracy and Currency of Personal Data Those who share personal data with our company acknowledge that the accuracy and currency of this information is important both under Law No. 6698 and other relevant legislation, and accept responsibility for any consequences of providing incorrect information. Updates or changes can be reported to info@eximglobal.com.tr

Transfer of Personal Data to Third Parties Your personal data may be transferred domestically or abroad to:

• Third parties providing storage, archiving, IT support, and security services.
• Subcontractors and service providers acting on behalf of our company.
• Group companies, business partners, suppliers, financial institutions, and consultancy firms.
• Authorized institutions and organizations to fulfill legal/regulatory obligations.
• Relevant third parties in case of merger/acquisition/restructuring.
• Program partners, institutions, organizations, contracted communication providers, and cargo companies delivering online orders.

Deletion, Destruction, or Anonymization of Personal Data When the purpose of processing ceases or legal retention periods expire, your personal data will be deleted, destroyed, or anonymized.

Measures for Protection of Personal Data Our company undertakes to keep your personal data confidential, take all necessary technical and administrative measures, and notify you and the Personal Data Protection Board in case of breaches.

Rights of the Data Subject under Article 11 of KVKK As data subjects, you have the right to:

• Learn whether your personal data is processed.
• Request information if processed.
• Learn the purpose of processing and whether it is used accordingly.
• Know third parties to whom data is transferred domestically or abroad.
• Request correction of incomplete/incorrect data and notification of third parties.
• Request deletion or destruction of data when processing reasons cease, and notification of third parties.
• Object to results arising from analysis by automated systems.
• Request compensation for damages due to unlawful processing.

You may exercise these rights by contacting us via info@eximglobal.com.tr Requests through other channels will not be considered.

Applications must include:

• Name, surname, and signature (if written).
• ID number (for Turkish citizens) or nationality/passport number (for foreigners).
• Address for notification.
• Email, phone, or fax (if available).
• Subject of request and related information/documents.

Incomplete or incorrect information may hinder proper evaluation of your request.