This Disclosure Text has been prepared by us as the data controller in accordance with the Law No. 6698 on the Protection of Personal Data ("KVKK") and relevant legislation. Security measures for the protection of your personal data are implemented at an appropriate level, considering the latest technological possibilities and potential risks.

As the data controller under KVKK and relevant legislation, the following personal data you share with us through digital platforms (website, mobile applications, etc.), social media channels (Facebook, Instagram, LinkedIn, etc.), and online communication channels (contact forms, support centers, live chat, video calls, etc.) are processed:

• Identity Data: Name, surname, Turkish ID number (if required).
• Contact Data: Phone number, email address, address details.
• Customer Transaction and Marketing Data: Product/service preferences, purchase history, campaign participation, survey responses.
• Transaction Security Data: IP address, device information, cookies.

Purposes of Processing Your Personal Data

Your personal data listed above are processed for the following limited purposes:

• Responding to your requests and suggestions, offering tailored solutions.
• Providing information about our products, services, and projects, and communicating with you.
• Conducting pre-sales, sales, and post-sales/support processes.
• Managing production and operational processes (demand management, surveys, etc.).
• Executing marketing activities (personalized offers, campaigns, and commercial electronic communications).
• Fulfilling legal obligations arising from legislation.

Transfer of Your Personal Data

Your personal data may be shared with our business partners, suppliers (agencies, technology infrastructure providers, live support platforms, digital platforms, etc.), and affiliated group companies, in line with the purposes stated above and under the conditions stipulated by KVKK. Your data may be processed and stored on servers or other electronic media located domestically or abroad, provided that necessary security measures are taken.

Legal Grounds for Personal Data Processing

Your personal data are collected and processed based on the legal grounds specified in Article 5(2) of KVKK:

• Performance of a Contract: Directly related to the establishment or performance of a contract (e.g., quotations, contract processes).
• Legitimate Interest: The data controller’s legitimate interest (e.g., business operations, operational efficiency).
• Explicit Consent: Your explicit consent for specific processes (e.g., marketing activities).

Your personal data will be retained for the duration required by the relevant legal ground, statutory retention periods, or the validity of your explicit consent.

Your Rights as a Data Subject

Pursuant to Article 11 of KVKK, you may submit your requests regarding your rights to us in writing or via other methods specified in KVKK, in accordance with the "Communiqué on the Procedures and Principles of Application to the Data Controller." Your request will be concluded as soon as possible and within thirty (30) days at the latest.

Your rights include:

• Learning whether your personal data are processed.
• Requesting information if your data have been processed.
• Learning the purpose of processing and whether data are used accordingly.
• Knowing the third parties to whom your data are transferred domestically or abroad.
• Requesting rectification if data are incomplete or inaccurate.
• Requesting deletion or destruction of data under Article 7 of KVKK.
• Requesting notification of third parties about rectification or deletion.
• Objecting to automated decision-making that may adversely affect you.
• Claiming compensation for damages due to unlawful processing.

Mersin Steel
Address: Siteler Mahallesi Sanayi Sitesi A1 Blok No : 1 Akdeniz/MERSİN
Phone: +90 (532) 309 9 790
Mail: info@mersinsteel.com
Website: https://mersinsteel.com