PRIVACY NOTICE PURSUANT TO THE LAW NO. 6698 ON THE PROTECTION OF PERSONAL DATA (KVKK)

1. Data Controller

In accordance with the Law No. 6698 on the Protection of Personal Data (the “Law”), your personal data may be processed by Ploutos A.Ş., acting in the capacity of data controller, within the scope explained below.

2. Purpose of Processing Personal Data

Your identity, contact, financial, and professional experience data provided to us are processed for the following purposes:

• Executing international trade, brokerage, and supply chain operations,
  
  
• Operational tracking of real estate consultancy, valuation, and sales transactions,
  
  
• Conducting pre-contract feasibility studies, proposal, and approval processes for interior design and turnkey construction/contracting projects,
  
  
• Fulfilling legal obligations arising from local and international legislation (such as customs, tax, and commercial law) to which our company is subject,
  
  
• Performing contracts and substantiating business relationships.
  
  

3. To Whom and For What Purpose the Processed Personal Data May Be Transferred

Your collected personal data may be transferred, in order to achieve the aforementioned purposes and within the conditions set forth in Articles 8 and 9 of the Law, to:

• Our domestic and international business partners, suppliers, and customs/logistics companies, to the extent required by commercial activities and brokerage services,
  
  
• Legally authorized public institutions and organizations, judicial authorities, notaries, and independent auditing firms,
  
  
• Our company lawyers for the purpose of following up on legal processes.
  
  

4. Method and Legal Basis for Collecting Personal Data

Your personal data is collected through communication forms on our website, e-mail correspondence, and physical meetings. This data is processed based on the legal grounds stipulated in Article 5/2 of the Law, namely: “It is necessary to process the personal data of parties of a contract, provided that the processing is directly related to the execution or performance of the contract,” “It is mandatory for the data controller to fulfill its legal obligation,” and “Data processing is mandatory for the legitimate interests of the data controller, provided that this processing shall not violate the fundamental rights and freedoms of the data subject.”

5. Rights of the Data Subject

Pursuant to Article 11 of the Law, data subjects have the right to: learn whether their personal data is being processed, know whether it is being used in accordance with its purpose, know the third parties to whom it is transferred domestically or abroad, and request the correction of incomplete or inaccurately processed data as well as its deletion. You may submit your requests in writing to info@ploutos.com.tr.