CLARIFICATION TEXT FOR CUSTOMERS
Mert Kuyumculuk Industry and Trade Limited Company ("Company") attaches utmost importance to protecting the fundamental rights and freedoms of individuals, particularly the privacy of private life regulated in Article 20 of the Constitution, in the protection and processing of personal data. In this context, it takes care to protect and process personal data in accordance with the Law on the Protection of Personal Data No. 6698 ("Law" or "KVK Law") in accordance with the law and acts with this care in all its planning and activities. Our company does not only evaluate the protection and processing of personal data within the scope of compliance with the legislation, but also puts the value it gives to people on the basis of its approach. Personal datarefers to any information relating to an identified or identifiable natural person. Since the information of the legal entity does not have the quality of personal data, it is not protected under the KVKK numbered 6698. Processing of personal data; indicates all kind of activities performed on personal data such as obtaining personal data thereof in fully or partially automated ways or, provided that it is a part of a data recording system, in non-automated ways, recording, storing, keeping, changing, re-arranging, disclosing, transmitting, acquitting, making available, classifying or prevention of use. Data Controller This clarification is made by Mert Kuyumculuk Industry and Trade Limited Company as the data controller in accordance with the provisions of the KVKK numbered 6698 and the relevant legislation. Address : Molla Fenari Neighborhood Serefefendi Street No: 32/26 Fatih Istanbul Telephone: +90 212 603 03 43 - 44 E-mail : [email protected] Trade Registry No: 317981 CENTRAL REGISTRATION SYSTEM No : 0618-0036-2500-0012 PERSONAL DATA PROCESSED PROCESSING PURPOSES ID: Name, Surname, TR ID No/Tax No • Execution of Information Security Processes • Execution Activities in Compliance with Legislation • Execution Financial and Accounting Works, • Execution / Audit of Business Activities • Execution of Goods / Services Support Services after Sales • Execution of Goods / Service Sales Processes • Execution of Customer Relationship Management Processes • Execution of Storage and Archive Activities • Execution of Contract Processes • Tracking of Requests / Complaints • Providing Information to Authorized Persons, Institutions and Organizations Contact: Telephone Number, E-mail Address, Address, Corporate Contact Information • Execution of Information Security Processes • Execution Activities in Compliance with Legislation • Execution of Communication Activities • Execution / Audit of Business Activities • Execution of Business Continuity Providing Activities • Execution of Logistics Activities • Execution of Goods / Services Support Services after Sales • Execution of Goods / Service Sales Processes • Execution of Customer Relationship Management Processes • Execution of Storage and Archive Activities • Execution of Contract Processes • Tracking of Requests / Complaints • Providing Information to Authorized Persons, Institutions and Organizations Finance: Bank Account Information, Credit Card Information • Execution Activities in Compliance with Legislation • Execution Financial and Accounting Works, • Execution of Goods / Service Sales Processes • Execution of Contract Processes • Providing Information to Authorized Persons, Institutions and Organizations Customer Transaction: Customer Number, Request/Order Information, Invoice/Note/Check/Receipt Information • Execution Activities in Compliance with Legislation • Execution of Goods / Services Support Services after Sales • Execution of Goods / Service Sales Processes • Execution of Customer Relationship Management Processes • Execution of Contract Processes • Providing Information to Authorized Persons, Institutions and Organizations Marketing Information: Shopping History Information, • Execution Activities in Compliance with Legislation • Execution / Audit of Business Activities • Execution of Goods / Service Sales Processes • Execution of Marketing Analysis Activities Transferred Personal Data and Transfer Purposes The personal data stated above are transferred to authorized persons, institutions and organizations in the country, to private law real and legal persons from whom we receive services, again for the purpose of realizing the above-mentioned processing purposes and to inform the authorized persons/institutions/organizations. Personal Data Collection Method and Legal Reasons Your personal data is collected through contracts, publicized data, business cards, current account forms. The legal reason for processing of your personal data, provided that the data processing activity is expressly stipulated in the law and is directly related to the establishment or performance of the contract, the process personal data of the parties to the contract is necessary, necessary for the company to fulfill its legal obligations, and the data processing is mandatory for the legitimate interests of the company, provided that it does not harm your fundamental rights and freedoms. Your Rights as a Data Subject Your rights listed in Article 11 of the Law as the data subject (real person whose personal data are processed) are as follows: •To learn whether personal data has been processed or not, •To request information regarding the personal data if they are processed, •To learning the purpose of your data processing and whether this data is used for intended purposes, •To know the third parties to whom your personal data has been transferred inside or outside the country, •To request the rectification of the data in the event they are processed incompletely or inaccurately, • To request the deletion or destruction of your personal data (Article 7 of the Law within the framework of the conditions stipulated in the Article) •To request notification of your rectification, deletion and destruction requests to third parties to whom your personal data have been transferred, •To object to the processing, exclusively by automatic means, of your personal data, which leads to an unfavourable consequence for you, •To claim damages if you incur losses due to unlawful processing of your personal data. Data Security and Right to Apply Your personal data is meticulously protected within the scope of technical and administrative possibilities and necessary technical and administrative measures are taken. Your requests regarding your personal data: • You can deliver to our addess written above in person in writing, • You can send it by means of a notary public, • You can send it to [email protected] by typing "KVKK Application" in the subject section as secure electronic or mobile signed, via your registered electronic mail address or your electronic e-mail address registered in our system. If your application requires an additional cost, you may be required to pay the amount of the fee in the tariff to be determined by the Personal Data Protection Board. The requests in your application will be concluded as soon as possible according to the nature of the request and within 30 (thirty) days at the latest. Name Surname: Signature

CLARIFICATION TEXT FOR SUPPLIERS
According to Article 10 of the Personal Data Protection Law No. 6698 (hereinafter referred to as the Law); during the acquisition of personal data, the data subject (real persons whose data are processed) must be informed by the data controllers or persons authorized by them. These include: Personal data refers to any information relating to an identified or identifiable natural person. Processing of personal data; indicates all kind of activities performed on personal data such as obtaining personal data thereof in fully or partially automated ways or, provided that it is a part of a data recording system, in non-automated ways, recording, storing, keeping, changing, re-arranging, disclosing, transmitting, acquitting, making available, classifying or prevention of use. Mert Kuyumculuk Industry and Limited Company (hereinafter referred to as the company) processes your personal data in the capacity of data controller. Address : Molla Fenari Neigborhood Serefefendi Street No: 32/26 Fatih Istanbul Telephone: +90 212 603 03 43 - 44 E-mail : [email protected] Trade Registry No: 317981 CENTRAL REGISTRATION SYSTEM No : 0618-0036-2500-0012 The personal data processed consists of identity (name, surname, TR ID number, tax number), contact (address, phone number, e-mail address, corporate contact information) and financial (bank account information) information. Your personal data is processed in order to carry out goods/services purchasing processes, to carry out supply chain management processes, to carry out communication-finance and accounting works-contract processes and to carry out activities in accordance with the legislation, to inform authorized persons/institutions/organizations. Your personal data is collected through publicized information, current account forms and contracts. The legal reason for processing your data is the performance of the contract; its legal basis is the law no 6698. Your Rights as a Data Subject Your rights listed in Article 11 of the Law as the data subject (real person whose personal data are processed) are as follows: •To learn whether personal data has been processed or not, •To request information regarding the personal data if they are processed, •To learn the purpose of your data processing and whether this data is used for intended purposes, •To know the third parties to whom your personal data has been transferred inside or outside the country, • To request the rectification of the data in the event they are processed incompletely or inaccurately, • To request the deletion or destruction of your personal data (Article 7 of the Law within the framework of the conditions stipulated in the Article) , •To request notification of your rectification, deletion and destruction requests to third parties to whom your personal data have been transferred, •To object to the processing, exclusively by automatic means, of your personal data, which leads to an unfavourable consequence for you, •To claim damages if you incur losses due to unlawful processing of your personal data. Data Security and Right to Apply Your personal data is meticulously protected within the scope of technical and administrative possibilities and necessary technical and administrative measures are taken. Your requests regarding your personal data: • You can deliver to our address written above in prson in writing, • You can send it by means of a notary public, • You can send it to [email protected] by typing "KVKK Application" in the subject section as secure electronic or mobile signed, via your registered electronic mail address or your electronic e-mail address registered in our system. If your application requires an additional cost, you may be required to pay the amount of the fee in the tariff to be determined by the Personal Data Protection Board. The requests in your application will be concluded as soon as possible according to the nature of the request and within 30 (thirty) days at the latest. Name, Surname: Signature:

DATA CONTROLLER
This clarification is made by Mert Kuyumculuk Industry and Trade Limited Company as the data controller in accordance with the provisions of the KVKK numbered 6698 and the relevant legislation. Address : Molla Fenari Neighborhood Serefefendi Street No: 32/26 Fatih Istanbul Telephone: +90 212 603 03 43 - 44 E mail : [email protected] Trade Registry No: 317981 CENTRAL REGISTRATION SYSTEM No : 0618-0036-2500-0012 PERSONAL DATA PROCESSED PROCESSING PURPOSES ID: Name & Surname • Execution of Information Security Processes • Execution of Communication Activities • Execution / Audit of Business Activities • Execution of Service Sales Processes • Execution of Contract Processes • Tracking of Requests / Complaints Contact: Phone Number/Email address • Execution of Communication Activities • Execution / Audit of Business Activities • Execution of Service Sales Processes • Execution of Contract Processes • Tracking of Requests / Complaints PERSONAL DATA TRANSFERRED AND PURPOSES OF TRANSFER The personal data mentioned above are transferred to authorized persons, institutions and organizations in the country and to private law real and legal persons we receive services for the purpose of realizing the purposes of processing mentioned above and for the purpose of informing authorized persons/institutions/organizations. Since the data centers of the service providers and Whatsapp application that we receive e-mail service from are abroad, your personal data is transferred abroad with your explicit consent if these channels are contacted. PERSONAL DATA COLLECTION METHOD AND LEGAL REASONS Your personal data is collected by filling in the contact form at www.bmarings.com by you. The legal reason for our processing of your personal data is that it is necessary to process the personal data of the parties to the contract, provided that it is directly related to the establishment or performance of the contract, and that it is mandatory to process data for our legitimate interests, provided that it does not harm your fundamental rights and freedoms. Your Rights as a Data Subject Your rights listed in Article 11 of the Law as the data subject (real person whose personal data are processed) are as follows: •To learn whether personal data has been processed or not, •To request information regarding the personal data if they are processed, •To learning the purpose of your data processing and whether this data is used for intended purposes, •To know the third parties to whom your personal data has been transferred inside or outside the country, •To request the rectification of the data in the event they are processed incompletely or inaccurately, •To request the deletion or destruction of your personal data (Article 7 of the Law within the framework of the conditions stipulated in the Article) , •To request notification of your rectification, deletion and destruction requests to third parties to whom your personal data have been transferred, •To object to the processing, exclusively by automatic systems, of your personal data, which leads to an unfavourable consequence for you, •To claim damages if you incur losses due to unlawful processing of your personal data. Data Security and Right to Apply Your personal data is meticulously protected within the scope of technical and administrative possibilities and necessary technical and administrative measures are taken. Your requests regarding your personal data: • You can deliver to our address written above in person in writing, • You can send it by means of a notary public, • You can send it to [email protected] by typing "KVKK Application" in the subject section as secure electronic or mobile signed, via your registered electronic mail address or your electronic e-mail address registered in our system. If your application requires an additional cost, you may be required to pay the amount of the fee in the tariff to be determined by the Personal Data Protection Board. The requests in your application will be concluded as soon as possible according to the nature of the request and within 30 (thirty) days at the latest.