GDPR / KVKK Notice

Data Controller: ARAT Corporation
Address: Saray Mah. 133. Sokak No: 1/K, Kahramankazan / Ankara, Turkey
Contact: [email protected] — +90 (545) 290 27 28

This notice has been prepared by ARAT Corporation as the data controller, in accordance with Turkey's Personal Data Protection Law No. 6698 ("KVKK") and aligned with the principles of the EU GDPR.

1. Purposes of Processing

Personal data we process is used for the following purposes:

• Conducting commercial and legal relationships.
• Managing quote, order and after-sales support processes.
• Fulfilling legal obligations to authorised public institutions.
• Maintaining communication activities.
• Planning and supervising internal company processes.

2. Transfer of Personal Data

Your personal data may be transferred to our business partners, the suppliers from whom we receive services and the authorised public institutions, within the framework of the conditions and purposes of personal data processing set out in Articles 8 and 9 of the KVKK. No data is transferred abroad without your explicit consent.

3. Method and Legal Basis of Collection

Your personal data is collected via our website, e-mail, telephone calls, physical documents and contracts. Collection is based on the legal grounds listed in Articles 5 and 6 of the KVKK (formation/performance of contract, legal obligation, legitimate interest and explicit consent).

4. Your Rights Under KVKK Art. 11 / GDPR

You may submit the following requests regarding your personal data:

• Find out whether your personal data is being processed.
• Request information if it has been processed.
• Learn the purpose of processing and whether it is used in line with that purpose.
• Learn the third parties (in Turkey or abroad) to whom data has been transferred.
• Request the correction of incomplete or inaccurate data.
• Request the deletion or destruction of your data.
• Request that correction/deletion/destruction operations be reported to third parties to whom data was transferred.
• Object to outcomes produced solely through automated systems that adversely affect you.
• Claim compensation for damages caused by unlawful processing.

5. How to Apply

To exercise the rights above, please send a written request to [email protected]. Your request will be answered within 30 days at the latest.

This notice has been prepared to fulfil the duty to inform under Article 10 of the KVKK and the transparency obligations of the GDPR.