1. GENERAL INFORMATION

This Personal Data Protection Notice has been prepared by BİA METAL SU ARMATÜRLERİ PAZARLAMA SAN. VE TİC. LTD. ŞTİ. (the “Company”) in accordance with the Turkish Personal Data Protection Law No. 6698 (“KVKK”) to inform you about the processing of your personal data.

This notice primarily explains:

• The types of personal data collected through www.biaarmatur.com and www.biavanametal.com, how this data is used, and with whom it may be shared;

• Your rights regarding the personal data processed by our Company and how you can exercise these rights;

• How you can change your preferences, whether positive or negative, regarding receiving commercial electronic communications.

2. COLLECTION AND PROCESSING OF PERSONAL DATA

Your personal data may be processed to provide you with better service, manage and complete your order processes, communicate with you, provide information about our products and services, understand your shopping preferences, conduct statistical analyses, and ensure the security of our website.

Personal data may also be processed to fulfill our obligations arising from Law No. 5651 on the Regulation of Publications on the Internet and Combating Crimes Committed Through Such Publications, Law No. 6563 on the Regulation of Electronic Commerce, Turkish Penal Code No. 5237, Personal Data Protection Law No. 6698, and other applicable legislation.

Depending on the nature of our activities and our relationship with you, the following categories of personal data may be processed:

• Identity Information: Your first name, last name, and, where necessary, relevant identification details;

• Contact Information: Your telephone number, email address, and address details;

• Billing and Delivery Addresses;

• Order and Purchase Information;

• Tax and Invoicing Information;

• Transaction Security and Traffic Data: Information relating to your use of our website;

• Preference and Request Information;

• Social Media Information: Information you authorize us to access or share through the relevant platform when interacting with us via social media accounts.

Your personal data may be collected electronically or physically through our website, membership and order forms, communication channels, customer service, stores, and other means of communication.

3. PURPOSES AND LEGAL BASES FOR PROCESSING PERSONAL DATA

Your personal data may be processed for the following purposes, to the extent permitted by applicable legislation and on the basis of appropriate legal grounds:

• Managing order, sales, delivery, invoicing, return, and exchange processes;

• Enabling you to benefit from our products and services;

• Evaluating customer requests, complaints, and applications;

• Managing customer relationships and communication processes;

• Ensuring the security of our website and information systems;

• Fulfilling our legal obligations;

• Conducting statistical analyses and service improvement activities;

• Carrying out campaigns, promotional activities, and marketing initiatives where the applicable legal requirements are met.

Your personal data may be processed on the legal grounds specified in Articles 5 and 6 of the KVKK, depending on the specific processing activity. These legal grounds