Protection of Personal Data

AYGAZ A.Ş.
DISCLOSURE REGARDING PROCESSING OF PERSONAL DATA

Here at Aygaz A.Ş. (“Company”), we take the utmost care when it comes to the security of your personal data. Therefore, the Company places great importance on the processing and protection of all types of personal data belonging to individuals connected with the Company, including those who take advantage of our services and products, in accordance with Protection of Personal Data Law 6698 (“PDP Law”). We process your personal data in accordance with the guidelines described below and stipulated by legislation fully aware of our responsibility as Data Controller.

1. Collecting and Processing Personal Data and Purposes of Processing Your personal data may vary depending on the service, product or business activity provided by our Company, and may be gathered verbally, in writing or electronically via automated or non-automated means through offices, branches, dealers, call centers, websites, social media channels, mobile applications and similar means. Your personal data can be processed by creation or update as long as you are taking advantage of our Company’s products and services.

Furthermore, when you use our call center or website for the purpose of using Company services, when you visit our Company or website, when you participate in training, seminars or events organized by our Company, your personal data may be processed.

Your collected personal data will be processed within the framework of the conditions and purposes for processing personal data outlined in Article 5 and Article 6 of the PPD Law so that our business departments perform the work required for you to benefit from the products and services offered by our Company, so that the products and services offered by our Company can be personalized and presented based on your likes, usage habits and needs, so that the legal and business security of our Company and individuals with a business relationship with our Company are protected (administrative operations aimed at the communications conducted by our Company, ensuring the physical security and monitoring of locations that belong to our Company, processes for assessing business partners/customers/suppliers (their officers and employees), legal compliance processes, financial matters, etc.), and to ensure the commercial and business strategies of our Company are identified and implemented and that our Company’s human resources policies are implemented.

Our Company collaborates with various business partners, including our dealers, in offering products and services. Personal data shared with our dealers by the customer is, as a rule, transferred to our Company to be stored in the relevant systems, and our Company has no access to such personal data. As the “data processor” defined in the PPD Law, our Company will only store such personal data on behalf of its dealers, and will not directly perform any operation on personal data. If express consent is obtained from our customers for transfer and use of their personal data by our Company as specified in the PPD Law, personal data shared with our dealers will be transferred to our Company for processing as stipulated under express consent.

2. To Whom and For What Purposes Processed Personal Data Can Be Transferred

Your collected personal data can be transferred to our business partners, our suppliers, our shareholders in the Koç Holding companies, legally authorized agencies and private individuals within the framework of the conditions and purposes for processing personal data outlined in Article 8 and Article 9 of the PPD Law so that our business departments perform the work required for you to benefit from the products and services offered by our Company, so that the products and services offered by our Company can be personalized and presented based on your likes, usage habits and needs, so that the legal and business security of our Company and individuals with a business relationship with our Company are protected (administrative operations aimed at the communications conducted by our Company, ensuring the physical security and monitoring of locations that belong to our Company, processes for assessing business partners/customers/suppliers (their officers and employees), legal compliance processes, financial matters, etc.), and to ensure the commercial and business strategies of our Company are identified, and implemented and that our Company’s human resources policies are implemented.

3. Method for Collecting Personal Data and Legal Basis

Your personal data will be acquired in any verbal, written or electronic format for the purpose of providing the products and services offered by our Company within the framework of the law in line with the purposes outlined above and to properly and fully meet our Company’s contractual and legal responsibilities in this regard. Your personal data collected on these legal grounds can be processed and transferred within the scope of the personal data processing conditions and purposes specified in Article 5 and Article 6 of the PPD Law and the purposes specified in paragraphs (1) and (2) of this text.

4. Personal Data Subject Rights Specified in Article 11 of the PPD Law

As personal data subjects, requests you make in connection with your rights will be finalized by our Company free of charge within 30 days depending on the nature of the request if you send your requests to our Company via the methods specified below in this Disclosure. However, if a charge is specified by the Personal Data Protection Board, the cost on the fee schedule specified shall be collected by our Company. Personal data subjects have the right to

• Find out whether or not personal data has been processed,
• Request information about the processing of personal data if it has occurred,
• Find out the purpose of processing the personal data and whether or not it was processed for this purpose,
• Know third parties to whom personal data was transferred either domestically or abroad,
• Request that personal data processed incorrectly or incompletely be corrected and request that third parties to whom the transaction in correction was made are informed,
• Request that personal data be erased or destroyed if the reasons that required processing no longer apply in spite of the fact that it was processed in accordance with the provisions of the PPD Law or other applicable legislation, and request that third parties to whom personal data was transferred as part of this process be informed,
• Object to any unfavorable consequences arising from the analysis of processed data via exclusively automatic systems,
• Request remedy of damages if they incur losses due to the unlawful processing of personal data.

In accordance with Article 13/1 of the PPD Law, you can submit your requests related to the exercise of the aforementioned rights in writing or via another method determined by the PPD Board. Since there is currently no other method determined by the PPD Board, you must submit your application in writing in accordance with the PPD Law. In this regard, the channels and procedures via which you may submit your application to our Company in writing within the scope of Article 11 of the PPD Law are given below.

To exercise the aforementioned rights, you can submit your request with an explanation about which of the rights specified in Article 11 of the PPD Law you are exercising together with the required identification by filling out the form at Application Form and deliver a signed copy of the form to “Büyükdere Caddesi, No: 145/1, Zincirlikuyu 34394 Istanbul / Turkey” in person with your identification, or you can send it via a notary public or the other methods specified in the PPD Law, or you can send said form with a secure electronic signature to aygaz@aygaz.hs02.kep.tr.

Aygaz Personal Data Protection and Processing Policy
Aygaz Website Confidentiality Policy