KVKK Privacy Notice

Personal Data Processing Information Notice

This Information Notice has been prepared by Mettanex (hereinafter referred to as "site") as the data controller in accordance with the Personal Data Protection Law No. 6698 ("KVKK") regarding the use of personal data obtained from Personal Data Subjects and/or third parties in relation to the website and services, in order to inform and enlighten you transparently about the ways in which your personal data is collected, the purposes and legal reasons for personal data processing activities, the principles regarding the transfer of personal data if any, and your rights as a data subject.

In accordance with KVKK, your Personal Data that you share as a personal data subject will be collected and processed by the Company designated as the Data Controller within the scope specified below.

1. DEFINITIONS AND ABBREVIATIONS

In this Information Notice;

• Company: METTANEX YAZILIM DANIŞMANLIK ARAŞTIRMA GELİŞTİRME SANAYİ VE TİCARET LİMİTED ŞİRKETİ
• Personal Data: Any information relating to an identified or identifiable natural person,
• Processing of Personal Data: Any operation performed on data — such as obtaining, recording, storing, preserving, altering, reorganizing, disclosing, transferring, taking over, making available, classifying, or preventing the use of personal data — by fully or partially automated means, or by non-automated means provided they are part of a data recording system,
• Personal Data Subject: The natural person whose personal data is processed,
• KVKK: The Personal Data Protection Law No. 6698, published in the Official Gazette and entered into force on 7 April 2016,
• Data Processor: The natural or legal person who processes personal data on behalf of the data controller, based on the authority granted by the controller,
• Data Controller: The natural or legal person who determines the purposes and means of processing personal data and is responsible for establishing and managing the data recording system
• Website/Site: Refers to www.mettanex.com and its related services.

2. PERSONAL DATA PROCESSED

Although the types and quantities of your personal data processed vary depending on the reason for processing and your relationship with the Company, the Personal Data you share with the Company, or that is obtained by the Company from third parties, consists of the following.

Your personal data is processed in accordance with the general principles set out in Article 4 of the KVKK: lawfully and fairly; accurately and, where necessary, kept up to date; for specific, explicit, and legitimate purposes; in a manner relevant, limited, and proportionate to the purposes for which it is processed; and retained for the period stipulated in the relevant legislation or required for the purpose of processing.

3. GENERAL PRINCIPLES, CONDITIONS, AND PURPOSES OF PROCESSING PERSONAL DATA

Your personal data is processed in accordance with the general principles set out in Article 4 of the KVKK: lawfully and fairly; accurately and, where necessary, kept up to date; for specific, explicit, and legitimate purposes; in a manner relevant, limited, and proportionate to the purposes for which it is processed; and retained for the period stipulated in the relevant legislation or required for the purpose of processing.

The Company processes your personal data subject to this Information Notice for the following purposes: fulfilling obligations arising from legislation; carrying out the work needed by business units to enable relevant persons to benefit from the products and services offered by our website, and executing the related business processes; performing the service activities carried out by our website; planning and executing commercial and/or business strategies; ensuring the legal, technical, and commercial-business security of the relevant persons in a business relationship with us; and customizing and recommending the products and services we offer according to the preferences, usage habits, and needs of the relevant persons.

4. METHODS AND LEGAL GROUNDS OF COLLECTING PERSONAL DATA

Your Personal Data may be collected, processed, and transferred by the Company through channels such as www.mettanex.com, email, the call center, camera recording, and voice recording — in line with the fundamental principles stipulated by the KVKK, within the scope of the personal data processing conditions specified in Articles 5 and 6 of the KVKK, and for the purposes stated in this Information Notice.

5. TRANSFER OF PERSONAL DATA, TRANSFER PURPOSES, AND PERIODS

Identity Data

Institutions to Which Data Is Transferred: Company stakeholders, company officials, affiliates and subsidiaries, official institutions and organizations, internal departments, suppliers, and contracted institutions

Transfer Purposes: Transferred for the purposes of providing the service, delivering the service to you properly, maintaining customer management data, enabling service-related transactions, informing about campaigns, resolving any disputes that may arise, and carrying out internal operations.

Retention Period: 10 years from the end of the contractual relationship

6. SECURITY OF YOUR PERSONAL DATA

To protect your personal data, the Company takes appropriate measures consistent with the relevant privacy and data-security laws and regulations and — depending on the state of technology, the cost of implementation, and the content of the data to be protected — implements technical and organizational measures to prevent risks such as destruction, loss, alteration, unauthorized disclosure, or unauthorized access to your data.

7. RIGHTS AND OBLIGATIONS OF THE PERSONAL DATA SUBJECT

Personal data subjects are responsible for ensuring that the personal data they share with the Company is accurate, complete, and up to date, and — if personal data belonging to others is shared — for ensuring that such data has been collected validly and in accordance with legislation.

Within the scope of the KVKK and relevant legislation, Personal Data Subjects have the right to:

• Learn whether their personal data is being processed,
• Request information if their personal data has been processed,
• Learn the purpose of processing and whether the data is used in accordance with that purpose,
• Know the third parties to whom personal data is transferred, domestically or abroad,
• Request correction of personal data if it has been processed incompletely or inaccurately,
• Request the deletion or destruction of personal data,
• Object to a result against them arising from the analysis of processed data exclusively through automated systems,
• Request compensation if they suffer damage due to the unlawful processing of personal data.

As a Personal Data Subject, you may submit your application containing your requests regarding your rights — clearly and comprehensibly, attaching documents that establish your identity and address — in writing with a wet signature, in person, by post, or through a notary, to the Data Controller Company.

COMPANY CONTACT INFORMATION: