P.D.P.P.

Personal Data Protection and Processing Policy

RF-Paper

About the Protection and Processing of Personal Data

General Information Text

As RF-PAPER, we are committed to ensuring the security and processing of your personal data with the utmost sensitivity. With this awareness, we attach great importance to the processing and preservation of all types of personal data belonging to individuals associated with RF-PAPER, including those who benefit from our products and services, in accordance with the Law No. 6698 on the Protection of Personal Data ("the Law"). In accordance with the provisions of Law No. 6698 on the Protection of Personal Data, we hereby inform you about the mutual rights and obligations within the scope of this policy regarding all personal data processed by RF-PAPER, including our employees, suppliers, visitors, business contacts, partners, customers, and third parties.

1. Data Controller

In accordance with the Law No. 6698 on the Protection of Personal Data ("KVKK"), your personal data may be processed by our company, RF-PAPER, located at the address "Fevzi Cakmak Mahallesi Ahmet Petekci Caddesi Kobisan Sanayi Sitesi A Blok No:17/O Karatay KONYA," within the scope described below.

2. Collection, Processing, and Purposes of Processing Personal Data

Your personal data may vary based on the services and commercial activities provided by our company. These data may be collected through automatic or non-automatic methods, including our company departments, website, social media platforms, mobile applications, and similar means, in oral, written, or electronic form. Your personal data may be processed as long as you benefit from our products and services, and they may be created and updated accordingly. Additionally, when you visit our company or our website to use our services or participate in events such as training, seminars, or conferences organized by our company, your personal data may be processed.

Collected personal data,

• Ensuring business activities and business continuity.
• Ensuring the commercial and legal security of our company and individuals in a business relationship with our company.
• Ensuring his/her own and business partners' legal and commercial security.
• Execution of information technology processes.
• Commercial procurement transactions and execution of logistic activities for the identification of needs and performance of post-sales support, carried out by our business units.
• Improving, enhancing, and diversifying our products and services.
• Informing customers with whom we have a business relationship about matters such as campaigns, benefits, conditions, and pricing.
• To provide alternatives to individuals/legal entities, to establish communication and collaboration among RF-PAPER affiliated companies, ensure coordination, conduct joint business areas, sustain advertising and marketing activities, and facilitate customer tracking.
• Creation and monitoring of visitor records.
• Your personal data may be processed for the purpose of conducting banking activities in order to ensure business security and continuity, for the maintenance of human resources policies, and to fulfill our obligations to public institutions such as the Ministry of Labor and Social Security, the Ministry of Finance, judicial authorities, the Ministry of Customs and Trade, and the Ministry of Commerce in accordance with the laws in the legislation.

Your personal data will be processed in accordance with the personal data processing conditions and purposes specified in Articles 5 and 6 of the KVKK (Personal Data Protection Law).

3. To Whom and for What Purposes the Processed Personal Data Can Be Transferred

Your collected personal data may be transferred to our business partners, suppliers, company officials, shareholders, legally authorized public institutions, and private individuals within the framework of the personal data processing conditions and purposes specified in Articles 8 and 9 of the KVKK (Personal Data Protection Law), for the necessary activities conducted by our business units to provide you with the products and services offered by our company, for the customization of the products and services provided by our company according to your preferences, usage habits, and needs, for ensuring the legal and commercial security of our company and third parties with business relationships with us (administrative operations related to communication carried out by our company, physical security and audit of company locations, assessment processes for business partners/customers/suppliers (authorized or employees), reputation research processes, legal compliance processes, audit, financial affairs, etc.), for determining and implementing our company's commercial and business strategies, and for ensuring the implementation of our company's human resources policies.

Persons necessary for the performance of the service

Your personal data may be shared with our business and solution partners, banks, and third parties who perform technical, logistical, and similar transactions on our behalf, solely to ensure the full and flawless provision of the services offered to you, and to the extent appropriate to the nature of the service. These third parties are limited to individuals who are necessary to access the relevant information for the complete and flawless provision of the respective services.

Persons for whom sharing is legally mandatory

In cases where it is necessary for RF-PAPER to fulfill its legal obligations, expressly provided for by laws, or in the presence of a lawful and valid judicial/administrative order, your personal data may be -limited only to the relevant individual or institution- transferred.

Consultants and auxiliary service providers

Your personal data may be transferred to third parties, such as IT support providers, security services, as necessary to protect the rights of RF-PAPER and/or to fulfill legal obligations, and only in cases where data transfer is obligatory for the execution of these purposes. It may also be transferred to cooperating and/or service-providing business partners, banks, financial institutions, law firms providing support in legal, tax, and similar fields, consultancy firms, and other relevant parties where deemed necessary for the designated purposes, as well as authorized institutions and organizations.

Agencies and advertisers

Some portion of personal data, solely in a bulk anonymized form along with aggregated information from other users, may be shared with advertisers to enable the customization of advertisements for the target audience. Anonymized data cannot be linked back to you as our visitors/customers, and it does not contain any identifying information or make your identity ascertainable. Your privacy is safeguarded within anonymized data.

4.Sharing of Your Personal Data with Third Parties, Both Domestic and Abroad

Your personal data may be shared with third parties such as companies where RF-PAPER provides services, human resources consultancy firms, information technology companies, professional consultants, lawyers, accountants, occupational health and safety institutions, and entities with whom the Company has commercial, administrative, or contractual relationships. Your personal data may be transferred domestically and internationally to the Company's subsidiaries.

5.Method and Legal Basis of Personal Data Collection

Your personal data is collected by our companies through various channels or, as per relevant regulations, from public databases, based on different legal grounds, for the purpose of providing, improving, and conducting our commercial activities related to the products and services we offer. The personal data collected in this process is gathered through our employees and representatives, based on the legal basis of conducting our commercial activities. Furthermore, your personal data is collected for the purpose of ensuring complete security in our company's workplaces/working areas. Personal data collected based on these legal grounds may also be processed and transferred within the scope of the personal data processing conditions and purposes specified in Articles 5 and 6 of Law No. 6698, as stated in clauses (b) and (c) of this Information Text.

6.The Rights of the Data Subject Listed in Article 11 of Law No. 6698:

As personal data owners, if you send your requests regarding your rights to the address RF-PAPER, Fevzi Çakmak Mahallesi Ahmet Petekçi Caddesi Kobisan Sanayi Sitesi A Blok No:17/O Karatay KONYA, by registered letter or signed with a secure electronic signature and sent to the email address info@rfpaper.com, our company will conclude your request free of charge as soon as possible, and at the latest within thirty (30) days, depending on the nature of the request. However, if the transaction also requires a cost, our company will charge the fee specified in the tariff determined by the Personal Data Protection Board. In this context, personal data subjects have the following rights:

• To learn whether their personal data has been processed or not,
• To request information if their personal data has been processed,
• To learn the purpose of processing personal data and whether they are used in line with this purpose,
• To know the third parties to whom personal data is transferred domestically or abroad,
• To request the correction of personal data if it is incomplete or inaccurate and to request notification of this correction to third parties to whom the personal data has been transferred,
• To request the deletion or destruction of personal data within the scope of the conditions set forth in Law No. 6698 and other relevant laws, despite being processed in compliance with the law, and to request notification of this action to third parties to whom the personal data has been transferred,
• To object to a result against them arising from the analysis of personal data exclusively through automated systems,
• To request compensation in case of suffering damage due to the unlawful processing of personal data, in accordance with the relevant provisions of Law No. 6698.

7. Contact Information

To exercise the rights mentioned, you can send your written request, which includes your necessary identification information, the right you want to exercise, and a detailed explanation of the subject of your request, to the email address info@rfpaper.com or by postal mail to the address Fevzi Çakmak Mahallesi Ahmet Petekçi Caddesi Kobisan Sanayi Sitesi No:17/O Karatay KONYA.