Personal Data Protection Notice (KVKK)

1. Data Controller

As ZAK INVESTMENTS GIDA A.Ş. ("Company"), we act as the data controller in the processing of your personal data.

2. Purposes of Personal Data Processing

Our company processes personal data obtained during customer satisfaction and product/service delivery processes for the following purposes:

• •Receiving, preparing, and delivering orders
• •Responding to customer requests and complaints regarding our products and services
• •Making campaign, promotion, and discount announcements
• •Conducting statistical analysis and reporting activities
• •Fulfilling legal obligations

3. Transfer of Personal Data

As ZAK INVESTMENTS GIDA A.Ş., we do not transfer your personal data to third parties except as required by law. When necessary, sharing may only be done to the extent permitted by law and with data security ensured.

4. Method and Legal Basis for Data Collection

Your personal data is collected by our Company directly from you or automatically through our website and digital channels within the scope of our activities.

The legal basis for processing your personal data includes:

• •Your explicit consent
• •Establishment or performance of a contract
• •Fulfillment of legal obligations
• •Protection of our legitimate interests
• •Public interest or existence of a third party's legitimate interest

5. Protection of Personal Data

Our Company takes all necessary technical and administrative measures for the security of your personal data. Strong data protection procedures are implemented to prevent data loss, misuse, unauthorized access, or disclosure. Data is only processed in situations permitted under KVKK.

6. Rights of Data Subjects

As data subjects under KVKK, you have the following rights:

• •To learn whether your personal data is being processed
• •To learn the purposes of processing and whether it is used appropriately
• •To know the third parties to whom your data is transferred domestically or abroad
• •To request correction of incomplete or inaccurate data
• •To request deletion or destruction of data when processing reasons cease to exist
• •To request notification of correction, deletion, or destruction to third parties
• •To object to results against you due to automated processing
• •To request compensation for damages due to unlawful processing

7. Application Methods and Exercise of Rights

You can submit your requests regarding the processing of your personal data to our Company through the following methods:

Your requests will be evaluated within 30 days in accordance with Article 13 of KVKK, and you will receive a written or electronic response.

8. Changes

ZAK INVESTMENTS GIDA A.Ş. reserves the right to change this notice within the framework of KVKK and relevant legislation. The updated text will be published at www.zakgida.com.