Clarification Text Regarding the Processing of Personal Data

Below, information on how your personal data is processed by Borusan Boru Sanayi ve Ticaret Anonim Şirketi (“Borusan Boru”) is presented under headings.

a) Data Controller and Representative

Pursuant to the Law No. 6698 on the Protection of Personal Data (“Law No. 6698”); Your personal data regarding the services provided through www.borusanboru.com (“website”) and the creation of membership are processed by Borusan Boru Sanayi ve Ticaret A.Ş. (“Our Company” or “Borusan Boru”) as the data controller in accordance with Law No. 6698.

b) Purposes for which Personal Data will be Processed

Your personal data collected by our company during the creation of your membership in the form of name, surname, e-mail address, telephone number and company name;

• Improvement and development of our services, content, website and customized work,
• Law No. 5651 on the Regulation of Publications on the Internet and Combating Crimes Committed through These Publications and other legislation to fulfill our legal obligations regarding the keeping of internet access records,
• Carrying out the necessary work by our relevant business units in order to carry out website-specific activities and carrying out related business processes,
• In case you give permission for commercial communication, making various announcements, advantages, campaigns, promotions, notifications to you, sending you campaigns, offers or event invitations and other marketing instruments suitable for our products/services, planning and execution of related processes,
• Execution of customer relations and follow-up of corporate governance activities, management and follow-up of customer requests and complaints,
• Improving and developing the services offered by our Company, determining and implementing commercial and business strategies,
• Ensuring the legal and commercial security of the products and services offered by our Company and the persons who have a business relationship with our Company and our Company,
• Follow-up and execution of legal processes and communication processes with official institutions,
• Planning, auditing and execution of information security processes,
• Establishment and management of information technology infrastructure,
• Planning and execution of the necessary operational activities to ensure that the Company's activities are carried out in accordance with Company procedures and/or relevant legislation,

purposes (“Purposes”) within the personal data processing conditions and purposes specified in Articles 5 and 6 of Law No. 6698. Detailed information on the processing of your personal data by our Company can be found in the Borusan Boru Sanayi ve Ticaret A.Ş. Personal Data Protection and Processing Policy, which has been shared with the public on the website www.borusanboru.com.

c) To whom and for what purpose the processed personal data can be transferred

Your collected personal data is transferred to our business partners, suppliers and other service providers, legally authorized public institutions and private persons, from whom we receive services in Turkey and abroad, within the framework of the personal data processing conditions and purposes specified in Articles 8 and 9 of Law No. 6698 in order to fulfill the above-mentioned Purposes.

ç) Kişisel Veri Toplamanın Yöntemi ve Hukuki Sebebi

Your personal data is processed by our Company based on the legal grounds that it is necessary to process your personal data within the scope of the establishment, use and protection of a right, the establishment and performance of the contract with you in order to fulfill our legal obligations, to use the website and to benefit from the services on it. In this process, your personal data is collected automatically by electronic methods through the website. If you give us permission to send commercial electronic messages, your personal data will be processed based on the legal reason of “explicit consent” within the scope of sending commercial electronic messages.

d) Rights of the Personal Data Owner Listed in Article 11 of Law No. 6698

As personal data subjects;

• Learn whether your personal data is being processed,
• Request information if your personal data has been processed,
• To learn the purpose of processing your personal data and whether they are used in accordance with their purpose,
• To know the third parties to whom your personal data is transferred domestically or abroad,
• To request correction of your personal data in case of incomplete or incorrect processing and to request notification of the transaction made within this scope to third parties to whom personal data is transferred,
• Although it has been processed in accordance with the provisions of Law No. 6698 and other relevant laws, to request the deletion or destruction of your personal data in the event that the reasons requiring its processing disappear and to request notification of the transaction made within this scope to third parties to whom your personal data has been transferred,
• To object to the emergence of a result to the detriment of the person himself/herself by analyzing your processed data exclusively through automated systems,
• In case of damage due to unlawful processing of your personal data, to demand the compensation of the damage

you have rights. If you submit your requests regarding your rights in writing or by the methods determined by the Personal Data Protection Board, your request will be finalized as soon as possible and within 30 (thirty) days at the latest, depending on the nature of the request. In case this process requires an additional cost, our Company will charge the fee in the tariff determined by the Personal Data Protection Board.

e) Contact Information

In order to exercise your rights described above, you may send the above Application Form, which includes your identity information, the right you wish to exercise and a detailed explanation of the subject of your request, to the address specified in this Application Form by registered letter with return receipt requested.