BAQA TEKSTİL SAN VE TİC. A.Ş. takes the highest possible level of security measures in order to ensure that your personal data is collected, stored, and shared in compliance with the law, and to protect your privacy.

In accordance with Article 10 of the Personal Data Protection Law No. 6698 and in line with your satisfaction, our aim is to inform you in the most transparent manner regarding the ways your personal data is collected, the purposes for which it is processed, the parties with whom it is shared, the legal grounds, and your rights.

Pursuant to the Personal Data Protection Law No. 6698 ("Law No. 6698"), your personal data is collected and processed by BAQA TEKSTİL SAN VE TİC. A.Ş. (the "COMPANY") as the data controller, within the scope explained below.

By the COMPANY, from its customers, employees, potential customers, job candidates, official institution representatives and employees, business partners, and suppliers;

personal data and special categories of personal data (together referred to as "Personal Data") are collected in the categories of identity information, contact information, customer information, customer transaction information, health information, performance information, transaction security information, legal proceedings and compliance information, and marketing and sales information.

Your collected personal data is processed for the following purposes:

• To enable the COMPANY's products and services to be offered to you, to fulfill our obligations toward you, to prepare records and documents, and to comply with the information retention, reporting, notification, tax, and other obligations required by local and international legislation,
• For sales and marketing activities aimed at improving the quality of services and products, and to offer you personalized advertisements, campaigns, advantages, and benefits within the scope of "BAQA Club" membership,
• To establish communication for the purpose of information technology requirements, systemic structure, the necessity of information technology support services received, and the transfer of necessary information to you regarding these services and products,
• To carry out traffic measurement, statistical analyses, segmentation/profiling, and CRM activities to be conducted via the website, social media accounts, and mobile application for sales and marketing activities,
• To measure and increase customer satisfaction, manage complaints, receive your opinions and suggestions regarding new services and products, receive your problem-error reports, and provide you with information regarding products and services and your complaints and requests,
• To contact you, receive your orders, carry out your payment transactions, provide logistics cooperation with third parties to ensure product delivery, identify products and services that may interest you and make recommendations to you accordingly, send promotions and gifts, show you personalized advertisements by analyzing your online behavior, measure and improve the quality of the service we provide to you, and manage our customer portfolio through profiling and scoring according to segments determined by us,
• To be used in comparative product and/or service offerings, modeling, existing or new product studies and/or developments, and in all kinds of products and services to be offered to you within the scope of the laws and relevant legislation governing the business activities set out in the COMPANY's articles of association that are the subject of your disclosure of personal data to the COMPANY,
• To comply with the information retention, reporting, and notification obligations stipulated by official institutions, to fulfill the requirements of contracts, and to perform the legal obligations to which the COMPANY is subject in relation to benefiting from these services,
• For the purpose of determining and implementing the COMPANY's commercial and business strategies; to manage the finance operations, communication, market research and social responsibility activities, procurement operations (request, quotation, evaluation, order, budgeting, contract), internal system and application management operations, and legal operations carried out by the COMPANY,
• To review, evaluate, and respond to requests from official authorities or from you.

Your collected personal data, limited to and valid for the realization of the processing purposes specified in section b) above, is transferred to:

• The COMPANY's business partners, shareholders, and affiliates,
• Persons or organizations permitted by the provisions of the Tax Procedure Law, Social Security Institution legislation, the Court of Accounts, the Law on the Prevention of Laundering Proceeds of Crime, the Law on the Prevention of Money Laundering, the Turkish Commercial Code, the Code of Obligations, the Law on the Regulation of Electronic Commerce, and other legislation,
• Legally authorized public institutions and organizations, administrative authorities, and legal authorities,
• Overseas companies and affiliates,
• Real or legal persons from whom we receive services or with whom we cooperate in product/service comparison, analysis, evaluation, advertising, and the realization of the purposes specified above; program partner institutions and organizations; institutions with which we have agreements for sending the messages we send to our customers; and cargo companies that deliver the orders placed to you.

Your Personal Data is collected through both wholly or partially automated means and non-automated methods that are part of a data recording system;

directly by you or by persons authorized to act on your behalf; through applications made via affiliated websites, store and COMPANY head office personnel, institutions to/from which we provide/receive support services, real and/or legal persons with whom transactions are carried out within the scope of any legislation or contract, and directly through automated systems (our website and mobile application, our call centers, our social media accounts), in verbal, written, or electronic environments;

based on the legal grounds set out in Articles 5 and 6 of the Law, namely:

• Being explicitly stipulated by law,
• Being mandatory for our Company to fulfill its legal obligation,
• Being directly related to the establishment or performance of a contract and processing being necessary,
• Processing being mandatory for the legitimate interest of our Company, provided that it does not harm your fundamental rights and freedoms,
• Having been made public by you,
• Processing being mandatory for the establishment, exercise, or protection of a right,
• The existence of your explicit consent.

As personal data subjects, if you submit your requests regarding your rights through the methods set out below, the COMPANY will conclude the request as soon as possible and within thirty days at the latest, depending on the nature of the request. In this context, personal data subjects have the right to request their rights listed in Article 11 of the PDPL from the COMPANY as the data controller. Pursuant to Article 13, paragraph 1 of Law No. 6698 and the Communiqué on the Procedures and Principles of Application to the Data Controller dated 10.03.2018 and numbered 30356, you may submit your request regarding the exercise of your rights specified in Article 11 in Turkish and in writing, or by using a registered electronic mail (KEP) address, secure electronic signature, mobile signature, or the electronic mail address that you have previously notified to the COMPANY and that is registered in our system. In applications, information will be provided only about the applicant, and it will not be possible to obtain information about other family members and third parties. The COMPANY reserves the right to verify your identity before responding.

Your application must contain:

• Your name, surname, and, if the application is in writing, your signature,
• For citizens of the Republic of Türkiye, your T.R. identity number; if you are a foreigner, your nationality, passport number, or identity number, if any,
• Your residential or workplace address for the basis of notification,
• Your electronic mail address, telephone, and fax number for the basis of notification, if any,
• The subject of your request,

and, if any, information and documents relating to the subject must also be attached to the application.

You may submit your written applications, along with the necessary documents, to our Company as the data controller at the address 19 Mayıs Mah. Dr. Hüsnü İsmet Öztürk Sokak Şişli Plaza E Blok Daire 9 Şişli / İstanbul.

You may submit your applications by e-mail to sales@baqaofficial.com, or by reaching our call center at 08503602882. You may submit your applications via KEP to our KEP address baqatekstilsan@hs01.kep.tr.

Depending on the nature of your request, information and documents that will enable identity verification must be provided to us completely and accurately. In the event that the requested information and documents are not properly provided, disruptions may occur in conducting the investigations to be carried out by the COMPANY in response to your request in a complete and qualified manner. In this case, the COMPANY declares that it reserves its legal rights. For this reason, your application must be sent completely and in a manner that includes the requested information and documents, depending on the nature of your request.