ARD GRUP HOLDING A.Ş. (“ARD GRUP”) hereby presents the following information to the attention of our customers and third parties who use our website and/or mobile applications, in order to fulfill its obligation to inform pursuant to Article 10 of the Law on the Protection of Personal Data No. 6698 (“KVKK”).

As ARD GRUP, we attach the utmost importance to the security of your personal data. We would like to emphasize that we carry out all our activities with the awareness that the protection of your personal data is a top priority in all the products and services we provide.

ARD GRUP reserves the right to update this Information Text on the Protection of Personal Data at any time within the framework of possible changes in the applicable legislation.

Pursuant to the Law on the Protection of Personal Data No. 6698, published in the Official Gazette dated 07.04.2016 and numbered 29677, any information obtained or to be obtained by our company in its capacity as data controller, or shared/to be shared by you, shall be processed by our company within the scope and in the manner set forth in the Law.
Any processing performed on your data — including obtaining, recording, storing, preserving, altering, disclosing, transferring, or making them accessible — constitutes “processing of personal data” within the meaning of the Law.

Our fundamental principle is to use your personal data only for the purposes of processing your transactions, while ensuring the confidentiality of your private life and the protection of your fundamental rights and freedoms.

Purposes and Legal Grounds for Processing Your Personal Data

Our company processes your personal data for purposes such as fulfilling its obligations (identity verification, record keeping, reporting, and notification, etc.) and commitments arising from all national/international legislation, secondary regulations issued by the relevant authorities, and contracts related to our business activities; establishing contracts for any products and services you request from our company; preparing all related records and documents (in paper or electronic form); providing the requested products and services properly and continuously.

For What Purposes Does ARD GRUP Use Your Personal Data?

ARD GRUP may, within the limits permitted by law, record, store, update, disclose, transfer, classify, and process your personal data.

Your personal data are used for the following purposes:

• To verify the identity information of customers making transactions through our website/mobile applications,

• To record addresses and other necessary contact details,

• To contact our customers regarding the terms, status, and updates of distance sales agreements and contracts concluded under the Law on the Protection of Consumers,

• To prepare all records and documents in electronic or physical form necessary for the execution of transactions,

• To fulfill our obligations arising from the aforementioned contracts and legal regulations,

• To provide information to public authorities upon request, as required by law and for public security,

• To offer a better shopping experience, provide customers with information about products they may be interested in according to their preferences, and inform them about campaigns,

• To increase customer satisfaction, recognize and analyze customers who shop via the website and/or mobile applications, and use these analyses in marketing and advertising activities, including conducting surveys online or physically through contracted business partners,

• To provide recommendations and information to customers through our business partners and solution partners,

• To evaluate customer complaints and suggestions related to our services,

• To fulfill our legal obligations and exercise our rights arising from applicable legislation.

The data provided by customers performing transactions through the website www.ardgrup.com.tr or mobile applications are processed by ARD GRUP within the framework of their consent and the provisions of applicable law.

To provide better service to visitors of www.ardgrup.com.tr, and within the scope of legal obligations, ARD GRUP may collect, process, share with third parties, and securely store your browsing information, provided that it is not used for purposes other than those stated in this Information Text.

Parties to Whom Personal Data May Be Transferred

Your personal data may be transferred, within the scope of the purposes mentioned above and where permitted by applicable national/international legislation or related contracts, to individuals or entities authorized to request and process such information (including judicial and administrative authorities and other official bodies), as well as to our domestic and international affiliates, subsidiaries, business partners, public or private institutions, and other third parties with whom we cooperate for services, consultancy, projects, or financing.

---

Method and Legal Grounds for Collecting Personal Data

The personal data you share with ARD GRUP are under our supervision and control.
As the data controller, ARD GRUP is responsible for establishing the necessary organizational structure, taking and adapting technical measures to protect the confidentiality and integrity of data in accordance with the applicable legislation.
In this regard, we regularly conduct penetration tests in compliance with national and international data security standards and continuously update our data processing policies.

Your personal data may be collected through our company’s Headquarters, Branches, Call Center, or other communication channels, verbally, in writing, or electronically, via automated or non-automated methods, for the legal reasons stated above.

---

Your Rights Under Article 11 of the Law No. 6698

By applying to ARD GRUP, you have the right to:

1. Learn whether your personal data have been processed,

2. Request information regarding the processing of your personal data,

3. Learn the purpose of processing and whether they are used in accordance with that purpose,

4. Know the third parties to whom your personal data are transferred domestically or abroad,

5. Request correction of incomplete or inaccurate data,

6. Request deletion or destruction of your data within the framework of the conditions set out in Article 7 of the Law,

7. Request notification of the operations carried out pursuant to subparagraphs (5) and (6) to third parties to whom your data have been transferred,

8. Object to the occurrence of a result against you by means of analysis solely through automated systems,

9. Request compensation for damages in case you suffer a loss due to unlawful processing of your personal data.

---

Data Controller to Whom You May Apply Under the Law

In accordance with the Law No. 6698, you may submit your requests regarding the rights stated above in writing or through other methods determined by the Personal Data Protection Authority, via the following channels. ARD GRUP reserves the right to reject applications that are not properly or formally submitted.

You can deliver your application in person or by post, together with identification documents, to:
ARD GRUP HOLDING A.Ş.
Koç Towers, Söğütözü Street, No:2, Block A, Floors: 20–21, No:60,
Çankaya / ANKARA, TURKEY

You may also call +90 312 299 25 95 (PBX) or send an email to info@ardgrup.com.tr.