INFORMATION NOTICE REGARDING PROCESSING OF PERSONAL DATA

CORPORATE GENERAL INFORMATION NOTICE

As Montes Foreign Trade Ltd. ("MONTES"), we have prepared this information notice to inform our Visitors, Online Visitors, Customers, Potential Customers, Supplier Employees, and Supplier Officials about the processing, storage, and transfer of your personal data within the scope of activities arising from the Personal Data Protection Law No. 6698 ("PDPL") and related legislation and legal regulations.

Categories of Processed Personal Data and Purposes of Processing:

Your personal information may be processed by Montes Foreign Trade Ltd. in accordance with the principles stated in Article 4.2 of the PDPL:

(i) Compliance with the law and honesty,

(ii) Accuracy and being up-to-date when necessary,

(iii) Processing for specified, explicit, and legitimate purposes,

(iv) Being relevant, limited, and proportionate to the purpose of processing,

(v) Being retained for the period prescribed by the relevant legislation or necessary for the purpose of processing, provided that they are processed in accordance with the above-mentioned principles, within the framework of our ongoing business relationships with our business partners (it is possible for a person to fall into more than one category), for the purposes indicated below:

Visitors:

Visitor identification information (e.g., name, surname), physical space security information (e.g., camera recordings);

Creating and tracking visitor records,

Ensuring physical space security.

Online Visitors:

Processing security information of online visitors using our website (e.g., IP address), marketing information (e.g., purchase history information, cookie records), and (if provided by you*) identity information and contact information (e.g., email address);

Conducting activities in compliance with regulations,

Executing information security processes,

Tracking requests/complaints,

Conducting communication activities,

Providing information to authorized individuals, institutions, and organizations,

Processing to enable access to our website through the internet.

Customers:

Identity information, contact information, customer transaction information (e.g., order information), physical space security information, financial information (e.g., balance sheet information), legal transaction information, marketing information;

Conducting activities in compliance with regulations,

Carrying out financial and accounting operations,

Executing business activities/audits,

Conducting logistics activities,

Carrying out post-sale support services,

Conducting sales processes of goods/services,

Carrying out marketing analysis studies,

Executing contract processes,

Providing information to authorized individuals, institutions, and organizations,

Providing physical space security,

Resolving legal disputes,

Conducting storage and archiving activities,

Executing risk management processes,

Executing loyalty processes to the company/product/services,

Conducting communication activities.

Potential Customers:

Identity information, contact information, customer transaction information, physical space security information, marketing information;

Managing sales processes of goods/services,

Executing contract processes,

Providing physical space security,

Conducting marketing analysis studies.

Supplier Employees:

Identity information, contact information, physical space security information;

Conducting communication activities,

Carrying out business activities/audits,

Providing physical space security,

Executing supply chain management processes,

Carrying out logistics activities,

Conducting activities in compliance with regulations,

Executing occupational health and safety activities.

Supplier Officials:

Identity information, contact information, physical space security information, customer transaction information, financial information, marketing information, legal transaction information;

Carrying out business activities/audits,

Conducting goods/services procurement processes,

Carrying out financial and accounting operations,

Executing contract processes,

Carrying out investment processes,

Providing physical space security,

Pursuing legal matters.

Methods of Collecting Personal Data:

The personal data listed in the categories above are collected through automatic or non-automatic methods via physical means such as order forms, contracts, visitor forms, as well as through information systems and electronic devices (e.g., telecommunications infrastructure, computers, and phones), third parties (e.g., Credit Reference Agencies and Findeks), our website, and other documents provided by relevant individuals.

Legal Basis for Collection of Personal Data:

Your personal data is processed by Montes Foreign Trade Ltd. in accordance with Article 5 of the PDPL, based on the legal grounds stipulated therein, including:

(i) Explicit provisions of the law,

(ii) Necessity of processing personal data belonging to the parties of a contract, provided that it is directly related to the conclusion or performance of the contract,

(iii) Fulfillment of legal obligations of the data controller,

(iv) Mandatory processing for the establishment, exercise, or protection of a right,

(v) Mandatory processing for the legitimate interests of the data controller, provided that the fundamental rights and freedoms of the data subject are not harmed.

Do We Transfer Your Personal Data to Third Parties?

a) Personal data of our Visitors may be shared with law enforcement agencies and judicial authorities if requested for the purpose of resolving legal disputes and in accordance with the relevant legislation.

b) Personal data of online visitors may be shared with judicial authorities and authorized public institutions and organizations if requested for the purpose of resolving legal disputes and in accordance with the relevant legislation.

c) Personal data of our Customers may be shared with authorized public institutions and organizations within the scope of legal regulations, and in order to conduct activities in compliance with the regulations, pursue legal matters, provide information to authorized individuals, institutions, and organizations, personal data may be shared with our affiliated companies, IT company, suppliers, cargo companies, insurance companies, banks, and financial advisors to the extent necessary for the proper performance of services; furthermore, this personal data may be transferred to the law firm we receive services from and judicial authorities for use as evidence in future legal disputes.

d) Personal data of Potential Customers may be transferred to the law firm we receive services from and judicial authorities for use as evidence in future legal disputes.

e) Personal data of Supplier Employees may be shared with authorized public institutions and organizations within the scope of legal regulations, and in order to conduct activities in compliance with the regulations, pursue legal matters, provide information to authorized individuals, institutions, and organizations, personal data may be shared with our affiliated companies, IT company, suppliers, cargo companies, banks, and financial advisors to the extent necessary for the proper performance of services; furthermore, this personal data may be transferred to the law firm we receive services from and judicial authorities for use as evidence in future legal disputes.

f) Personal data of Supplier Officials may be shared with authorized public institutions and organizations within the scope of legal regulations, and in order to conduct activities in compliance with the regulations, pursue legal matters, provide information to authorized individuals, institutions, and organizations, personal data may be shared with our affiliated companies, IT company, suppliers, cargo companies, banks, and financial advisors to the extent necessary for the proper performance of services; furthermore, this personal data may be transferred to the law firm we receive services from and judicial authorities for use as evidence in future legal disputes.

Do We Transfer Your Personal Data Abroad?

Montes Foreign Trade Ltd. does not transfer your personal data abroad.

How Can You Exercise Your Rights Regarding Your Personal Data?

You can send your requests within the scope of Article 11 of the PDPL, which regulates the rights of the relevant individuals, to Montes Foreign Trade Ltd. using the "Application Form to the Data Controller" prepared for your convenience in accordance with the "Communiqué on the Procedures and Principles of Application to the Data Controller" at "https://www.montestrading.com/":

Data Controller: Montes Foreign Trade Ltd.

Address: Halkalı Merkez Mah. Dereboyu Cad. No:4 Antplato Kat:20 D:157-158, 34303 Küçükçekmece/İstanbul

Email: kvkk@montestrading.com