KVKK Information Notice (Website Visitors and Contact Form)

1. Data Controller

 In accordance with the Personal Data Protection Law No. 6698 (“KVKK”), your personal data may be processed by Kıraç Metal as the data controller within the scope described below.

Data Controller Information:

• Title: Kıraç Metal

• MERSIS/Tax ID:

• Address: Organized Industrial Zone No:21, Odunpazarı, Eskişehir

• Email: halil.tekin@truaxisenergy.com

• Phone: 0530 693 91 56

2. Categories of personal data processed

 When you visit our website and/or contact us via the contact form, the following personal data may be processed:

1) Contact Form Data

• First name and last name

• Email address

• Phone number

• Message content

• Company/organization information

2) Website Usage / Cookie Data

• Cookie records, cookie preferences

• IP address (in some log/analytics scenarios)

• Pages visited, session information, device/browser information (via analytics tools such as Google Analytics)

3. Purposes for processing personal data

 Your personal data may be processed for the following purposes:

• Receiving, evaluating, and responding to requests and messages sent via the contact form

• To fulfill requests for information about our products/services and to carry out offer/business development processes

• Executing information security processes, log records, and detection of unauthorized access

• Analyzing website performance and user experience (analytics/statistics)

• Fulfilling legal obligations and establishing/exercising/protecting rights in the event of a dispute

4. Method and legal basis for collecting personal data

 Your personal data is collected:

• Directly by you via the contact form,

• Automatically through cookies and similar technologies during your visit to the Site,

• Through log records within the scope of information systems.

Legal grounds: Based on appropriate legal grounds, primarily the following, within the scope of KVKK Article 5 and (if necessary) Article 6:

• Directly related to the establishment or performance of a contract (in the context of responding to your communication request)

• To enable the data controller to fulfill its legal obligations

• The establishment, exercise, or defense of a legal claim

• The legitimate interests of the data controller (information security, site performance, and basic analytics)

• Explicit consent (only when necessary; particularly when specific types of cookies and/or an international transfer mechanism are required)

5. Transfer of personal data

 Your personal data may be transferred to the following recipient groups, limited to the purposes:

• Hosting and infrastructure service providers (e.g., GoDaddy)

• Website maintenance/development service providers (WordPress development, technical support)

• Cookie consent management and similar technology providers (e.g., Mobildev)

• Analytics service providers (e.g., Google Analytics)

• Authorized public institutions and organizations (within the scope of legal obligations)

• Legal advisors/auditors (in dispute and compliance processes)

6. Transfer of personal data abroad

 Within the scope of the website infrastructure and certain services used, data may be transferred to servers located abroad. According to the client’s statement, the data center for the hosting service is specified as “Europe”; furthermore, the use of Google Analytics may lead to data flows related to foreign countries due to the service provider’s infrastructure.

In this context, if data is transferred abroad, the conditions stipulated in Article 9 of the KVKK (adequacy decision or appropriate safeguards/standard contract, etc., and explicit consent where necessary) will be followed. Depending on the technical architecture and modules used, the legal basis and method of transfer abroad will also be documented.

7. Your rights under Article 11 of the KVKK

 Under Article 11 of the KVKK, you have the right to learn whether your personal data has been processed, request information about it if it has been processed, learn the purpose of the processing and whether it has been used in accordance with that purpose, know the third parties to whom it has been transferred within or outside the country, request its correction if it has been processed incompletely or incorrectly, request the deletion/destruction of your personal data within the framework of the conditions stipulated in the KVKK, request that the third parties to whom your personal data has been transferred be notified of the actions taken, object to the emergence of a result against you through analysis exclusively by automated systems, and request compensation for any damage you may have suffered due to unlawful processing.

8. How to submit your request

 In accordance with Article 13 of the KVKK, you may submit your requests:

•  by email to the email address or

• via KEP, or

• In writing to 75. Yıl OSB mahallesi, 2001 caddesi No:34 Odunpazarı Eskişehir.

Your application will be processed within 30 days at the latest. For details, please review the “KVKK Application Form”.