GDPR / KVKK

INFORMATION ON PERSONAL DATA

As Kadooğlu Petrolcülük Taş. Tic. San. İth. ve İhr. A.Ş. ("Kadoil"), one of our top priorities within the scope of our ongoing business activities is the protection of personal data. In accordance with Article 10 of the Law on the Protection of Personal Data No. 6698 published in the Official Gazette dated April 7, 2016, and numbered 29677, and the Communiqué on the Procedures and Principles to be Complied with in Fulfilling the Obligation to Inform published in the Official Gazette dated March 10, 2018, and numbered 30356, we hereby inform you about your personal data processed by our Company.

IDENTITY OF THE DATA CONTROLLER

Kadoil (under Kadooğlu Holding), operates your personal data as a data controller, and you can reach our Company via the contact information provided below.

1. YOUR PROCESSED PERSONAL DATA

The following personal data of yours is processed by our Company: a) Your Identity Information: name, surname, identity card, identity number, tax identification number, b) Your Contact Information: email, phone, mobile phone, c) Your Vehicle Information: license plate number, d) Your Audiovisual Recording Data: voice recordings.

2. PURPOSES OF PROCESSING PERSONAL DATA

The purposes of processing your personal data are given below:

3. TRANSFER AND PROTECTION OF YOUR PERSONAL DATA

Your personal data processed by our Company may be transferred to domestic official institutions and organizations, law enforcement agencies, judicial authorities, third parties affiliated with our Company, our business partners, banks, and our group companies in accordance with the processing purposes.

The protection of personal data is a matter of great importance to Kadoil. Kadoil takes necessary precautions against the risks of unauthorized access to personal data or the loss, misuse, disclosure, alteration, or destruction of this information.

Kadoil takes utmost care to keep your personal data confidential and takes all necessary technical and administrative measures to ensure confidentiality and security. Despite Kadoil taking the necessary information security measures, in the event that personal data is damaged or falls into the hands of third parties as a result of attacks on the website and the system, Kadoil will immediately notify you and the Personal Data Protection Board of this situation.

4. RETENTION PERIOD OF PERSONAL DATA

Personal data processed by Kadoil is retained for the periods stipulated in the legislation and for the period necessary for the purpose of processing the data. If a legal period is not determined for the retention of the said data, a period is determined by taking Kadoil's business processes and legal and commercial customs into consideration.

After the said period has passed, your personal data will be deleted, destroyed, or anonymized by Kadoil or upon your request.

5. KEEPING YOUR PERSONAL DATA ACCURATE AND UP-TO-DATE

The User/Users, customers, employee candidates, visitors, and business partners accept and declare that they know that the accuracy and up-to-date preservation of the information they share through the website or other means is important for them to be able to exercise their rights over their personal data within the meaning of the KVKK (Personal Data Protection Law) and in terms of other relevant legislation, and that the responsibilities arising from giving false information will belong entirely to them.

Deletion, Destruction, or Anonymization of Your Personal Data Your personal data processed for the purposes specified in this Privacy and Personal Data Protection Policy may continue to be used by being anonymized by us when the purpose requiring processing disappears according to Article 7/Paragraph 1 of the KVKK, and when the periods determined by the laws pass according to Article 138 of the Turkish Penal Code.

You always have the right to request deletion and to withdraw the consent you have given regarding the processing and use of your personal data.

6. RIGHTS OF THE DATA SUBJECT WHOSE PERSONAL DATA IS PROCESSED AND EXERCISING THESE RIGHTS

In accordance with the Personal Data Protection Law, the rights of the data subject whose data is processed are listed below:

Relevant persons will be able to submit their requests regarding their rights enumerated in this article to our Company using the methods determined by the Board. Our Company takes the necessary administrative and technical measures to conclude the applications to be made by the relevant person in accordance with the Law and secondary legislation.

Last Update: 15.05.2026