Corporate

1. Collection, Processing, and Purposes of Personal Data

Your personal data may be collected verbally, in writing, or electronically by our Company, depending on the services provided and our commercial activities, through automatic or non-automatic methods, our Company units and offices, Group Companies, the website, social media channels, mobile applications, and similar means. As long as you benefit from the products and services offered by our Company and Group Companies, your personal data may be processed by being created and updated.

Additionally, your personal data may be processed when you use our call centers or website to access the services of the Company or Group Companies, when you visit our Company or website, or when you participate in trainings, seminars, or events organized by the Company.

Collected personal data will be processed by our Company and Group Companies for the purposes of performing necessary tasks by our business units to enable you to benefit from the products and services, customizing the offered products and services according to your preferences, usage habits, and needs, ensuring the legal and commercial security of our Company, Group Companies, and individuals in business relationships with our Company (including administrative operations related to communications conducted by the Company, ensuring physical security and supervision of Company locations, Group Company customer evaluation/complaint management processes, reputation research processes, compliance, auditing, financial operations, etc.), determining and implementing our commercial and business strategies, and carrying out our human resources policies, in accordance with the personal data processing conditions and purposes specified in Articles 5 and 6 of the Personal Data Protection Law (PDP).

2. Recipients and Purposes of Processed Personal Data

Collected personal data may be transferred to our business partners, suppliers, Group Companies, Company officials, shareholders, legally authorized public institutions, and private individuals within the framework of personal data processing conditions and purposes specified in Articles 8 and 9 of the PDP Law, for the purposes of performing necessary tasks to enable you to benefit from the products and services offered, customizing the products and services according to your preferences and needs, ensuring legal and commercial security, determining and implementing commercial and business strategies, and carrying out human resources policies.

3. Methods and Legal Basis of Personal Data Collection

Your personal data are collected in all verbal, written, or electronic forms, to ensure that the products and services we provide are offered within the legally defined framework, and to allow our Company to fulfill its contractual and legal obligations completely and accurately. Personal data collected for this legal purpose may also be processed and transferred for the purposes specified in Sections (1) and (2) of this document, in accordance with Articles 5 and 6 of the PDP Law.

4. Rights of Personal Data Owners under Article 11 of the PDP Law

As personal data owners, you may submit requests regarding your rights using the methods described in this Disclosure Statement, and our Company will conclude your request free of charge within thirty days depending on its nature. However, if a fee is determined by the Personal Data Protection Board, the fee specified by our Company will apply. In this context, personal data owners have the right to:

• Learn whether their personal data are processed,
• Request information if their personal data have been processed,
• Learn the purpose of personal data processing and whether it is used accordingly,
• Know the third parties to whom personal data are transferred domestically or abroad,
• Request the correction of incomplete or inaccurate personal data and request that the actions taken be communicated to third parties to whom the personal data were transferred,
• Request the deletion or destruction of personal data if the reasons for processing no longer exist, and request that the actions taken be communicated to third parties to whom the personal data were transferred,
• Object to the emergence of a result against the person by analyzing the processed data exclusively through automated systems,
• Request compensation for damages if harmed due to unlawful processing of personal data.

Pursuant to Article 13, paragraph 1 of the PDP Law, you may submit your request regarding the exercise of these rights in writing or by other methods determined by the Personal Data Protection Board. Since the Board has not yet defined any method, your request must currently be submitted in writing to our Company under the PDP Law.

To exercise the rights mentioned above, you may submit your request, including identification information and explanations regarding the right you wish to exercise under Article 11 of the PDP Law, by filling out the form at letrawater.com, and submitting a signed copy in person with identification documents to Address: 286/1 Street Number:1 Floor:1 Office:106, Ontan Plaza, Bayraklı/İzmir, via notary, by other methods specified in the PDP Law, or by sending the form securely with electronic signature to info@letrawater.com.