INFORMATION NOTICE ON THE PROTECTION OF PERSONAL DATA BY MINT

This Information and Disclosure Form has been prepared in the scope of processing and transferring the "Personal Data" of individuals regulated by the Law No. 6698 on Protection of Personal Data ("PD Law"). Within the scope of Law No. 6698, any current information that you have shared with our company will be considered as "Personal Data".

The security of your personal data is of great importance to us, and your personal data will be stored in compliance with the legislation, in the most secure manner possible and for the period required by legal obligations, under conditions that comply with the legislation.

a) Data Controller and Representative
Your personal data, within the scope described below, may be processed by Hun Retail Energy and Construction Inc. (shortly MINT) as the "Data Controller" in accordance with the Personal Data Protection Law No. 6698 ( "PDPL Law").

b) Purposes for which Your Personal Data may be Processed
Your personal data collected may be processed within the scope of our company's obligations and the obligations of real and legal persons who are in business relationship with our company, to provide information regarding updates, to establish and perform contracts with you, to remind and fulfill legal obligations, to carry out various advertising and marketing activities, to manage and follow up finance, accounting and legal affairs, to track your requests and complaints, to track contract processes and/or legal demands, to plan and execute customer satisfaction activities, to obtain your opinions through surveys and polls, to identify suitable products, projects and services for you, to personalize and develop them for you, to provide effective customer service, to notify you of changes in laws and company policies that concern you or to make other relevant notifications, to include you in birthday celebrations, raffles or competitions, to give gifts and conduct similar other events, promotions and campaigns in your favor, to inform you via electronic mail, SMS and fax about campaigns, to send printed bulletins, magazines, and articles about campaigns, to determine visitor profiles, to evaluate requests, demands and complaints, to execute our company's human resources policies, and to process requests and answer questions from you, within the personal data processing conditions and purposes specified in Articles 5 and 6 of the Law No. 6698.

c) Who Personal Data Can be Transferred to and for What Purpose It Can be Transferred
Your personal data collected is processed in accordance with the principles of legality and honesty, accuracy and updating when necessary, specific, clear and legitimate purposes, relevance to the purposes for which they are processed, limited and proportionate, and in compliance with the principles of retention for the period prescribed in the relevant legislation or as long as necessary for the purpose for which they were processed. In addition, subject to compliance with the conditions stipulated in Articles 8 and 9 of the Law on the Protection of Personal Data (KVKK) and taking necessary security measures, your personal data may be shared with our indirect/direct domestic/foreign subsidiaries or affiliates, domestic/foreign/international public/private institutions and organizations, companies and other third parties or institutions or organizations, who are the service/support/consultancy recipients, partners or project/program/financing partners of our company, our affiliated companies, consultants, shareholders or solution partners, other group companies, the Central Registration Institution, and other authorized institutions and organizations, suppliers or subcontractors, within the framework of personal data processing conditions and purposes specified in Articles 8 and 9 of the Law No. 6698, limited to the purposes listed under section (b) of this notification. MINT may process and store your personal data within Turkey or in the foreign country where sufficient protection of personal data is ensured, provided that necessary security measures are taken. If sufficient protection does not exist in the relevant foreign country, MINT and the data controllers in the relevant foreign country may process and store personal data in servers located abroad or other electronic environments, provided that they undertake sufficient protection in writing and with the permission of the Board.

ç) Method and Legal Basis for Collection of Your Personal Data
Your personal data may be obtained by our Company through various channels (MINT's headquarters, branches, agents, sales offices or other subcontractors or business partners that you can contact through physical environments such as offices, call centers, electronic transaction platforms such as websites, mobile applications, social media or other public media, or by participating in training, conference and similar environments organized by us, by investigation method, or through other group companies or individuals and organizations they have contracted with, in written, verbal, audio or video recording or other physical or electronic media, etc.). Your personal data may be collected, processed, transferred and stored for the purposes specified in paragraphs (b) and (c) of this text, within the scope of the personal data processing conditions and purposes specified in Articles 5 and 6 of the Personal Data Protection Law. Your personal data will be stored in compliance with legal obligations or for the period allowed by relevant legislation.

d) Your Rights as a Personal Data Owner
If you, as the data subject, submit requests regarding your rights to our Company through the methods regulated below, our Company will conclude your request free of charge as soon as possible and no later than thirty days, depending on the nature of your request. However, if a fee is determined by the Personal Data Protection Board, the fee specified by our Company will be charged. In this regard, data subjects are;

• To learn whether personal data is being processed,
• To request information if personal data has been processed,
• To learn the purpose of processing personal data and whether they are being used in accordance with that purpose,
• To know the third parties to whom personal data is transferred, whether domestically or internationally,
• To request correction of personal data if they are incomplete or inaccurate and to request that the correction be notified to third parties to whom personal data have been transferred,
• To request the deletion or destruction of personal data in case the reasons requiring the processing of personal data cease to exist, even if they have been processed in accordance with KVK Law and other relevant legislation, and to request that such request be notified to third parties to whom personal data have been transferred,
• To object to the occurrence of a result against the person as a result of the exclusive analysis of processed data through automated systems,
• To request compensation for damages in case of unlawful processing of personal data.

In accordance with Article 13/1 of the KVK Law, you can send your request related to the exercise of the rights listed above to our Company in writing. You can fill out the form at www.mint.ist to request explanations regarding the right you want to exercise as specified in Article 11 of the KVK Law, and personally submit the wet-signed copy of the form to the MINT Customer Relations Department at the address "Harman Sokak, Harmancı Giz Plaza, No.5 Kat. 4 Levent-Şişli/İSTANBUL" with identity documents, or send it via notary. Our Company reserves the right to make changes to this information notice due to possible changes in the KVK Law and the methods determined by the Personal Data Protection Board.