As Çabasan Tekstil ve Boya A.Ş. (Çabasan Tekstil ve Boya A.Ş. or Company), within the scope of the Personal Data Protection legislation, we request your explicit consent regarding the following matters concerning the processing and/or transfer of your personal data, except in cases of exemption (for example, if it is stipulated by law or necessary for the performance of a contract):

I give my consent to the processing of my identity, contact, and digital trace data for the purposes of conducting promotional, marketing, advertisement, survey, raffle, gift delivery, contest, campaign, and communication activities; offering general and special offers to me; conducting analysis studies for the development of products and services by Çabasan Tekstil ve Boya A.Ş. and ensuring customer satisfaction; and contacting me for these purposes,

I give my consent to the transfer of my personal data to agencies, IT and technical service providers, and other business partners that your company uses within or outside the country, and to group companies of Çabasan Tekstil ve Boya A.Ş. located abroad for compliance with group company policies and procedures, as well as to maintenance, solution, and business partners,

I declare that I voluntarily and knowingly consent to the processing of my sensitive data, including health data that I may share with the Company, within the scope of evaluating my complaints, and that I have been informed through the Clarification Text.

As Çabasan Tekstil ve Boya A.Ş. ("Çabasan Tekstil ve Boya A.Ş." or "Company"), it is of great importance to us to provide our products and services in the best way possible. In this regard, we would like to inform you about the personal data we obtain as the data controller, within the scope of the Law on the Protection of Personal Data No. 6698 ("Law").

Your personal data may vary depending on the products, services, or commercial activities provided by Çabasan Tekstil ve Boya A.Ş., but are processed to ensure the best delivery of our products and services.

As Çabasan Tekstil ve Boya A.Ş., your identity and contact information, transaction security data, payment data related to your purchases, visual and audio data, and any other general or sensitive personal data you provide are processed for the following purposes:

• Provision of our products and/or services through various channels (call center, website, live chat, mobile application, etc.),
• Management of order processing, cancellations, and fulfillment operations,
• Management of requests and complaints,
• With your explicit consent and permission for commercial communication, promotion, marketing, advertisement, survey, raffle, gift delivery, contest, campaign, and communication activities through various channels (website, social media platforms, mobile app, etc.), aiming to improve our services and products and ensure customer satisfaction, provide general and special offers, and conduct analysis to anticipate potential customer demands,
• Retention of log records created in the electronic environment when visiting the website or accessing the wireless network system provided by Çabasan Tekstil ve Boya A.Ş., in compliance with Law No. 5651, for transaction security purposes,
• Management of memberships created through the website or mobile application,
• Management of our social media accounts and communication through these channels,
• Ensuring data and information security, maintaining the continuity of information systems,
• Conducting necessary activities for the improvement of our products and services, reporting, analysis, internal control, audit, investigation, and examination,
• Recording camera footage in our workplaces for security purposes,
• Measuring and evaluating the quality of phone calls made through the call center,
• Fulfilling the requests of official institutions and applying decisions sent to our company,
• Managing archiving and storage processes.

Your personal data may be processed in a limited manner for purposes related to the execution and development of our company s activities, compliance with legal regulations, and the company s procedures.

Your personal data collected for the purposes explained in Article 2 of the Clarification Text may be transferred to IT service providers, agencies, call centers, archiving companies, security companies (in case you visit our headquarters), law firms, official institutions, group companies abroad, and business partners that provide maintenance and solutions, in compliance with the Law and relevant regulations.

Your personal data may be collected through verbal or written information you provide directly, via phone, email, website, mobile application, social media platforms, call centers, agencies, our branches, official institutions (such as the Consumer Arbitration Committee), applications and software used in company activities, and camera recordings or from our business partners that provide support services. These are collected in compliance with the basic principles set out by the Law and for reasons stipulated in Article 5, paragraph 2 of the Law, including the performance of a contract, fulfillment of legal obligations, compliance with laws, and the legitimate interests of the data controller.

Under the Law, you have the right to inquire whether your personal data is processed, request information if it has been processed, learn the purpose of the processing and whether it is used in accordance with the intended purpose, learn the third parties to whom your personal data is transferred domestically or abroad, request correction if it is incomplete or incorrect, request deletion or anonymization if the reasons for processing no longer exist, request that third parties to whom the data is transferred be notified of these changes, object to the processing of your data exclusively through automated systems that may result in an unfavorable outcome for you, and request compensation if you suffer any damage due to unlawful processing of your personal data.

For any requests regarding your personal data, you can use the "Personal Data Owner Application Form" available at www.cabasan.com.tr and submit it through one of the following channels:

• By visiting Karacasu Ferhuş Mah. Yıldırım Beyazıt Cad. No:8/A Dulkadiroğlu/Kahramanmaraş/Turkey in person with identity verification, or
• By sending an email to the company’s registered electronic mail address (KEP) at cabasantekstil@hs03.kep.tr, or
• By sending an email with your secure electronic or mobile signature to the companys email address at info@cabasan.com.tr, or
• Through other methods specified in the Data Protection Law and related regulations.

The Company will conclude the requests within 30 (thirty) days, free of charge, in accordance with Article 13 of the Law, depending on the nature of the request. If the request is denied, the reasons for rejection will be explained in writing or electronically. If the process incurs any costs, the fee determined by the Data Protection Board s tariff will apply.

ÇABASAN TEKSTİL VE BOYA A.Ş.

Cookie Usage Disclosure Policy in accordance with the Personal Data Protection Law

1. What are Cookies

Cookies are small data units temporarily stored on your computer and mobile devices by your browser. Cookies do not contain personal information about you and are not used to identify individual users. They typically have a unique identifier, which is an anonymous number stored on your device. Some cookies expire when your web session ends, while others remain on your computer for an extended period.

2. Purpose of Cookie Usage

We use cookies to enhance your user experience during your visit to our website www.cabasan.com.tr, to create a user-friendly website, to track our performance, to ensure your safety and privacy during your visit, and to store your username and password information in the membership/participant section.

3. Types of Cookies

Cookies are divided into two types: "persistent cookies" and "temporary cookies."

i. Persistent cookies are created when you first visit the website; they remain on your device until their “lifespan” or validity period expires or until you delete them. They become active each time you visit the website through your device.
ii. Temporary cookies, also known as “session cookies,” are valid during the “browser session.” The browser session begins when you open your internet browser window and ends when you close it. All temporary cookies are deleted when you close your browser.

Cookies can also be “first-party cookies” or “third-party cookies.”

First-party cookies are designed and used directly by our company.

Third-party cookies are owned by third parties, such as our business partners and service providers, and are managed by them.

Cookies are generally categorized into four main groups based on their functions: “strictly necessary cookies,” “performance cookies,” “functionality cookies,” and “advertising/targeting cookies.”

Strictly necessary cookies are essential for identification and security purposes and are required for the membership/participant section. These cookies do not collect information for marketing activities or tracking your whereabouts on the internet.

Performance cookies collect anonymous data for statistical purposes to determine how users interact with the website. They are used to improve your user experience during your visit, but they do not contain personal data. Without these cookies, we cannot learn how our website performs or make necessary corrections to provide you with a better user experience.

Functionality cookies allow the website to be tailored to your needs and preferences and help remember your choices. They are used to provide personal services, such as language and location preferences. Without these cookies, the website cannot remember your previous preferences and cannot provide you with a personalized experience.

Advertising/targeting cookies collect information about your browsing habits, remember that you visited a website, and share this information with other organizations. Thus, they help ensure that you see advertisements relevant to your interests. Although these cookies can track your visits to other websites, they generally cannot identify who you are because the data collected is not linked to your profile. Without these cookies, you will encounter less content that matches your interests. Our company does not use advertising and targeting cookies on its website.

4. Managing and Disabling Cookies

Internet browsers are typically set to automatically allow cookie usage. You can restrict, block, delete cookies, or set your browser to alert you when cookies are sent to your device through your browser settings. Different methods may be required for different internet browsers, and you can find detailed information in the “Help” section of your internet browser.

If you access our company’s website from different devices, you need to ensure that the “cookie settings” of your internet browser are configured according to your preferences for each device. If you block one or more cookie categories, we may continue to collect information using existing cookies, but the use of blocked cookies will cease immediately.

In any case, if you wish to remove cookies stored on your computer in the future, you can use the tools provided by your web browser for this purpose.

In this context, you can find additional information through the links below:

Chrome: https://support.google.com/chrome/?hl=en#topic=3227046
Firefox: https://support.mozilla.org/en-US/
Internet Explorer: https://support.microsoft.com/en-us/product/internet-explorer
Safari: https://support.apple.com/en-us/HT201265

Controlling Cookie Usage

You have the opportunity to personalize your preferences regarding cookies by changing your browser settings.

Changing cookie settings does not prevent the use of our website, except for the “membership/participant” section, and does not restrict your access to content.

Your Rights as a Data Subject

According to Article 11 of the Personal Data Protection Law, data subjects have the following rights:

a) To learn whether personal data is being processed,
b) To request information regarding processed personal data,

c) To learn the purpose of personal data processing and whether it is used appropriately,
ç) To know third parties to whom personal data is transferred, whether in the country or abroad,
d) To request the correction of personal data in case of incomplete or incorrect processing,
e) To request the deletion or destruction of personal data as stipulated in Article 7 of the Personal Data Protection Law,
f) To request that the transactions performed pursuant to paragraphs (d) and (e) be notified to third parties to whom personal data has been transferred,
g) To object to the emergence of a result against the person by solely analyzing processed data through automated systems,
ğ) To request compensation for damages incurred due to unlawful processing of personal data.

If you would like to receive more information about your personal data, you can apply to us by securely signing your request via email at info@cabasan.com.tr or by applying via notary to our address: Karacasu Ferhuş Mah. Yıldırım Beyazıt Cad. No:8/A Dulkadiroğlu/Kahramanmaraş/Turkey.

As a company, we will respond to your request as soon as possible and within a maximum of 30 (thirty) days free of charge, depending on the nature of the request. However, if the process incurs an additional cost, the fee determined by the Personal Data Protection Authority may be charged to you.

We can accept your request as the Data Controller or reject it by providing a justification and communicate our response to you in writing or electronically. If your request is accepted, we will fulfill it accordingly.

If your application has resulted from a mistake on the part of our company as the Data Controller, any fee charged for your request will be refunded to you.