Personal Data Protection Law

Your personal data is processed by the following data controller:

• Company Name: Pi Makina Otomotiv Construction Machinery Marketing Import Export Industry and Trade Ltd. Co • Address: G.O.P. neighbourhood 79/1 Street No:6, Gölbaşı, Ankara, Türkiye • Phone: 0312 484 08 00 • E-mail: kvkk@pimakina.com.tr • MERSI No: 0123456789012345

Within the scope of our business activities, Pi Makina may process the following categories of personal data:

Identity Information Name, Surname, Turkish ID number, Date of birth, Signature.

Contact Information: Address, E-mail address, Telephone number, Fax number.

Professional Experience Information: Curriculum vitae (CV), • Diploma information, Certificates, Employment history (for job applicants)

Customer Transaction Information: Order details, Quotation requests, Invoice information, Delivery addresses.

Physical Premises Security Information: CCTV recordings at our factory and headquarters, Visitor entry and exit records.

Information Security Data: IP address, Log records, Cookie data.

Financial Information: Bank account details, IBAN information, Invoice details (for suppliers and business partners)

Your personal data may be processed for the following purposes:

• Managing product and service sales processes • Preparing quotations and managing order tracking processes • Maintaining customer relations and communication activities • Managing production and quality control processes • Managing supply chain and logistics operations • Planning and managing human resources processes • Evaluating job applications • Fulfilling legal obligations • Conducting corporate communication activities • Ensuring physical premises security • Managing information technology infrastructure • Conducting finance and accounting operations • Monitoring and managing legal affairs

Your personal data is processed based on the legal grounds set forth in Articles 5 and 6 of the KVKK, including:

• Explicitly provided for by law • Being directly related to the establishment or performance of a contract • Necessity for the Company to fulfill its legal obligations • Data made public by the data subject • Necessity for the establishment, exercise, or protection of a legal right • Necessity for the legitimate interests of the Company, provided that such processing does not violate the fundamental rights and freedoms of the data subject • Your explicit consent

Your personal data may be transferred, in accordance with Articles 8 and 9 of the KVKK and for the purposes stated above, to:

• Business partners and suppliers (within the scope of production and delivery processes) • Authorized public institutions and governmental authorities (where required by law) • Independent audit firms • Legal advisors and certified public accountants • Banks and financial institutions (for payment processes) • Information technology service providers

Your personal data may also be transferred abroad, provided that adequate safeguards are implemented and the requirements of Article 9 of the KVKK are fulfilled.

Your personal data is retained for the period required by the purposes of processing and, in any event, for the retention periods prescribed by applicable laws.

Commercial relationship data 10 years following the termination of the business relationship Job application data: 2 years from the date of application CCTV recordings: 30 days from the recording date Visitor records: 2 years from the date of visit Website cookie data: For the periods specified in the Cookie Policy

Upon expiry of the applicable retention period, personal data will be deleted, destroyed, or anonymized in accordance with the Company's Personal Data Retention and Destruction Policy.

Pursuant to Article 11 of the KVKK, you have the right to:

• Learn whether your personal data is being processed • Request information regarding the processing of your personal data • Learn the purpose of processing and whether your data is used in accordance with such purpose • Learn the third parties to whom your personal data is transferred domestically or abroad • Request correction of incomplete or inaccurate personal data • Request deletion or destruction of personal data under the conditions stipulated in Article 7 of the KVKK • Request notification of correction, deletion, or destruction to third parties to whom the data has been transferred • Object to a result against you arising from the exclusive analysis of processed data through automated systems • Request compensation for damages arising from the unlawful processing of your personal data

To exercise your rights described above, you may contact our Company through the following methods:

Written Application: You may submit your request in person or via registered mail together with documents verifying your identity to: G.O.P. neighbourhood 79/1 Street No:6, Gölbaşı, Ankara, Türkiye E-mail Application: You may send your request to kvkk@pimakina.com.tr via your registered electronic mail (KEP) address or by using a secure electronic signature.

Your requests will be evaluated and concluded free of charge as soon as possible and no later than thirty (30) days, depending on the nature of the request. If the process requires additional costs, the fee determined by the Personal Data Protection Board may be charged.