Data Protection Notice Under Law No. 6698 (KVKK)

In relation to Turkish Law No. 6698 on the Protection of Personal Data (hereinafter “KVKK”), published in Official Gazette No. 29677 of 7 April 2016 with the aim of protecting people's fundamental rights and freedoms — the privacy of private life in particular — in the processing of personal data, and of setting out the obligations of the natural and legal persons who process personal data, we, Vita Vegantis Gıda Sanayi ve Ticaret Limited Şirketi (hereinafter “VitaVegantis”), would like to inform you in our capacity as Data Controller, pursuant to Article 10 of the Law, headed “The Data Controller's Obligation to Inform”.

VitaVegantis shows the utmost care over the security of personal data. With that in mind, we process the personal data of data subjects as explained below and within the limits set by legislation.

About the Data Controller

Under the KVKK, VitaVegantis, in its capacity as Data Controller, may process, record, store, classify and update your personal data within the scope of the purposes explained below, in a manner compliant with the law and the rules of good faith, and may disclose or transfer it to third parties or abroad where legislation permits and/or limited to the purposes for which it was processed.

Collection and Processing of Personal Data, and Processing Purposes

Although it may vary depending on the services provided by VitaVegantis and VitaVegantis's commercial activities, your personal data may be collected verbally, in writing or electronically, by automated or non-automated means, through VitaVegantis units and departments, the website, social media channels, mobile applications and similar means.

The personal data collected may be processed by VitaVegantis for the purposes set out below, in accordance with the fundamental principles laid down by the KVKK and within the personal data processing conditions and purposes set out in Articles 5 and 6 of the KVKK:

• —Planning and carrying out VitaVegantis's human resources policies and processes,
• —Carrying out the work required by VitaVegantis business units so that data subjects can benefit from the products and services offered by VitaVegantis, and running the related business processes,
• —Planning and carrying out the activities required to tailor the products and services offered by VitaVegantis to data subjects' tastes, usage habits and needs, and to recommend and present them accordingly,
• —Carrying out the work required by the relevant VitaVegantis business units in order to perform the commercial activities conducted by VitaVegantis, and running the related business processes,
• —Planning and carrying out VitaVegantis's commercial and/or business strategies,
• —Securing the legal, technical and commercial-business safety of VitaVegantis and of the data subjects in a business relationship with VitaVegantis.

To Whom and for What Purpose Processed Personal Data May Be Transferred

Personal data collected by VitaVegantis may be transferred to third persons and institutions in accordance with Articles 8 and 9 of the KVKK, within the personal data processing conditions set out in Articles 5 and 6 of Law No. 6698 and limited to the purposes stated in this document.

Transfer of Data Abroad

In the light of the principles set out in Article 4(2) of the KVKK, VitaVegantis may transfer your personal data only to persons and organisations resident in foreign countries declared to have adequate protection, once such countries have been determined by the Personal Data Protection Board (the “Board”); and, for countries determined and declared not to have adequate protection, only in cases where the data controllers in Türkiye and in the relevant foreign country have undertaken adequate protection in writing and the Board's permission can be obtained for the transfer in question.

What Is the Method and Legal Ground for Collecting Your Personal Data?

Your personal data is obtained in any verbal, written or electronic medium, in line with the purposes set out above, so that our services can be provided and so that VitaVegantis can fulfil its contractual and statutory responsibilities fully and correctly.

Personal data collected by these methods may also be processed and transferred for the purposes stated in the relevant sections of this notice, in accordance with the fundamental principles laid down by the KVKK and within the personal data processing conditions and purposes set out in Articles 5 and 6 of the KVKK.

What Are Your Rights Under Article 11 of the KVKK as a Data Subject?

The rights of natural persons whose personal data is processed, under Article 11 of the KVKK, are as follows:

• —To learn whether personal data is being processed,
• —To request information if personal data has been processed,
• —To learn the purpose of processing personal data and whether the data is used in accordance with that purpose,
• —To know the third parties in Türkiye or abroad to whom personal data is transferred,
• —To request correction of personal data if it has been processed incompletely or inaccurately, and to request that this be notified to third parties to whom the data has been transferred,
• —To request erasure or destruction of personal data where the reasons requiring its processing have ceased to exist, even though it has been processed in accordance with the KVKK and other applicable legislation, and to request that this be notified to third parties to whom the data has been transferred,
• —To object to an outcome against the person arising from analysis of the processed data solely by automated systems,
• —To claim compensation for damage suffered as a result of unlawful processing of personal data.

You may submit applications concerning the rights listed above — together with the information needed to establish your identity and your explanation of which of the rights set out in Article 11 of the KVKK you wish to exercise — as a signed petition delivered in person, with identity documents, to “Vita Vegantis Gıda Sanayi ve Ticaret Limited Şirketi, Seyran Bağları Mahallesi Seyran Caddesi No:42/A, Çankaya / Ankara”, sent through a notary or by the other methods stated in the KVKK, or sent to the email address info@vitavegantis.com.

Depending on the nature of the request, VitaVegantis will conclude it free of charge as soon as possible and within thirty (30) days at the latest. However, where the process requires an additional cost, the fee in the tariff determined by the Personal Data Protection Board will be charged by VitaVegantis.

Applications must be made in Turkish. An application must contain the applicant's name and surname and, if submitted in writing, a signature; the Turkish Republic identity number for Turkish citizens, or nationality and passport/identity number for foreign nationals; the residential or business address for service; the email address, telephone or fax number for notification, if any; and the subject of the request.

In an application made by a data subject to exercise the rights set out above and containing explanations about the right in question, it is required that the matter requested be clear and comprehensible, that the subject of the request concern the applicant personally or, if acting on behalf of another, that the applicant be specifically authorised to do so and document that authority, that the application contain identity and address details, and that documents establishing identity be attached.

Yours sincerely,

Vita Vegantis Gıda Sanayi ve Ticaret Limited Şirketi

Seyran Bağları Mahallesi Seyran Caddesi No:42/A, Çankaya / Ankara

Telephone: 0850 307 49 90

Email: info@vitavegantis.com