Personal Data Protection Notice

Pursuant to the Personal Data Protection Law No. 6698 ("KVKK"), your personal data may be processed by Dinamik Panel Sandviç Panel Soğutma Sistemleri San. ve Tic. Ltd. Şti. ("Dinamik Panel" or "Company") in the scope explained below, as the data controller.

In order to carry out our activities, the following categories of your personal data are processed by our Company:

• Identity Information: Name, surname, title
• Contact Information: Phone number, email address, address details, company name
• Customer Transaction Information: Requests and complaint information, quotation content, project details
• Marketing Information: Cookie records, information obtained through campaign activities, assessments showing habits and preferences
• Transaction Security Information: IP address, website login and logout information, password and passphrase information
• Financial Information: Invoice information, tax number, trade registry information (for commercial customers only)
• Legal Process Information: Contracts, notices, litigation and enforcement files

Your personal data are processed for the following purposes within the scope of the personal data processing conditions and purposes specified in Articles 5 and 6 of the KVKK:

• Product and service sales: Providing quotations, managing contract processes, order and delivery processes
• Customer relationship management: Receiving and resolving requests and complaints, customer satisfaction activities
• Communication activities: Communication forms on the website, email and phone calls
• Legal obligations: Fulfilling obligations arising from legislation and providing information to authorized institutions and organizations
• Marketing and promotion: Marketing analysis, campaign notifications, sending commercial electronic messages (with explicit consent)
• Business process management: Execution of logistics, production planning, finance and accounting processes
• Security activities: Managing information security processes and ensuring physical security of premises
• Field services: Providing installation, commissioning, maintenance and technical support services

Your personal data are processed based on the following legal grounds specified in Article 5 of the KVKK:

• Clearly provided for by law: Situations required by legislation such as the Tax Procedure Law, Turkish Commercial Code, and Code of Obligations
• Establishment or performance of a contract: The establishment and performance of contracts concluded or to be concluded with you
• Fulfilling a legal obligation: Meeting obligations under the legislation
• Establishment, exercise or protection of a right: Protecting the Company's legal rights, debt collection
• Legitimate interest: Observing the Company's legitimate interests (in a manner that does not harm your fundamental rights and freedoms)
• Explicit consent: Your explicit consent in cases where none of the above conditions apply

Your personal data may be shared with the following parties for the purposes stated above, in accordance with the conditions set out in Articles 8 and 9 of the KVKK:

• Authorized public institutions and organizations: To public authorities authorized by law, within the scope of legal obligations
• Business partners and suppliers: Third parties necessary for the provision of production, logistics, installation, and maintenance services
• Service providers: Server and cloud services, email service providers, software infrastructure providers
• Legal advisors: Professional advisors such as lawyers and financial advisors
• Banks and financial institutions: Within the scope of payment and collection transactions
• International transfer: In the context of export and service activities for our overseas customers, only with your explicit consent or within the exceptions under Article 9 of the KVKK

In data sharing with third parties, we contractually ensure that the relevant parties take data security measures in compliance with the KVKK.

Your personal data are collected automatically or partially automatically through the following methods:

• Website forms: Information voluntarily submitted through the contact form, quotation request form, and career form
• Email correspondence: Messages sent to info@dinamikpanel.com.tr and our other corporate email addresses
• Phone calls: Calls made with our customer service and sales team
• In-person meetings: Meetings held during site visits, fairs, and events
• Contract processes: Signed contracts and their annexes
• Cookies and technical records: Technical data automatically collected during your visits to the website (See Cookie Policy)
• Social media accounts: Messages sent through our official social media channels

Your personal data are retained for the periods prescribed in the relevant legislation and for as long as required by the purposes of processing:

• Commercial relationship data: 10 years from the end of the relationship (TCC and Tax Procedure Law)
• Contract data: 10 years from the end of the contract term
• Contact form data: 2 years from the resolution of the request
• Marketing data: Until your explicit consent is withdrawn or for a maximum of 3 years
• Cookie data: The periods specified in our Cookie Policy
• Job applicant data: 1 year from the application

When the retention periods expire, your personal data are deleted, destroyed, or anonymized within the framework of our Personal Data Retention and Destruction Policy.

In accordance with Article 12 of the KVKK, our Company takes the following technical and administrative measures to ensure the security of your personal data:

• Technical measures: Firewalls, SSL/TLS encryption, strong password policies, access control, log records, regular security tests
• Administrative measures: Staff training, confidentiality agreements, authorization matrix, KVKK compliance policies
• Physical security: Server room access control, CCTV systems, visitor logs
• Data breach response plan: Notification mechanism to the Board and relevant persons within 72 hours in the event of a possible breach

Pursuant to Article 11 of the KVKK, you have the following rights regarding yourself by applying to the data controller:

To exercise the rights stated above, you may apply to our Company using one of the methods below, in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller:

• Written application: By wet-signed petition sent to our address together with documents proving your identity
• KEP (Registered Electronic Mail): By secure electronically signed message to Dinamik Panel's KEP address
• Email: From the email address you previously notified and which is registered in our system, to info@dinamikpanel.com.tr

Your application must clearly and understandably include your name, surname, signature, Turkish ID number, residential or business address for notification purposes, telephone and email information, and the subject of your request. Depending on the nature of your request, your applications will be concluded free of charge as soon as possible and no later than 30 (thirty) days. However, if the process requires an additional cost, the fees specified in the tariff determined by the Personal Data Protection Board may be requested.

If your application is rejected, if the response is found insufficient, or if your application is not answered in time, you have the right to lodge a complaint with the Personal Data Protection Board within 30 days from the date the response is served and, in any event, within 60 days from the date of application.