PRIVACY POLICY AND GDPR INFORMATION

Information Text on the Protection of Customer, Member, and Visitor Personal Data 3 MASH TECHNOLOGY INC.

3 MASH TECHNOLOGY INC. (3 MASH) processes the personal data of individuals who use our services by becoming members of our website or placing orders without becoming members, for various purposes when necessary. These purposes are listed under the heading "Purposes of Processing Your Personal Data" below.

In this context, your personal data that may be processed includes:

• Full Name
• Date of Birth, Gender
• Address, Phone Number, Email Address
• Company Name, Tax Office, Tax Number
• Phone Number of the Person to Whom the Product Will Be Delivered
• Republic of Turkey Identification Number

1. Purposes of Processing Your Personal Data

Your personal data mentioned above may be processed by 3 MASH and its business units for the following purposes, within the scope of the conditions for processing personal data specified in Articles 5 and 6 of the Law on the Protection of Personal Data No. 6698 (GDPR). These purposes are as follows:

• Responding to any questions and complaints, informing about the services provided by us,
• Sending SMS to your phone number, sending emails to your email address, informing about our store's campaigns and participation in these campaigns through methods such as calling your phone number,
• Carrying out the shopping process, distinguishing your records from records of other customers in our systems,
• Facilitating your benefit from post-sale exchange, return, product review, and home delivery processes without presenting an invoice or receipt,
• Sending the e-invoice/e-archive invoice related to your shopping,
• Procuring and delivering products not available in our stores directly to you,
• Processing your Republic of Turkey Identification Number to prevent the same person from increasing their chances of winning unfairly in case of a draw,
• Issuing invoices,
• Carrying out shopping, order preparation, packaging, preparing shipping invoices, shipping, and delivery processes,
• Ensuring the realization of membership processes, enabling you to log in as a member, informing you about membership,
• Allowing you to benefit from 3 MASH's membership program, taking advantage of special opportunities and offers created based on your purchases from our stores and our website,
• Fulfilling our legal obligations, fulfilling our other legal obligations to authorized and competent public institutions and organizations,
• Using your information for official purposes such as court, enforcement office, arbitration board, and exercising any rights related to disputes, conducting discussions and agreement processes related to disputes, and delivering the necessary information to you upon your request, as well as internal audits, internal control, reporting, testing, development, and improvement works.

Your personal data listed above may be processed for the purposes mentioned above within the scope of the legal grounds in Articles 5/2/a-c-ç-f of the GDPR and, if any, based on your explicit consent.

2. Transfer of Your Personal Data

Your personal data may be transferred to the following places in accordance with the rules regarding the transfer of personal data specified in Articles 8 and 9 of the GDPR, within the framework of the relevant legislation, if necessary, and in order to fulfill the obligations arising from these places:

• Authorized public institutions and organizations to provide information to relevant public officials,
• Our lawyers, our business partners, and all our consultants, including third parties providing consultancy services,
• Our suppliers in Turkey,
• Our call center, marketing, database and server, monitoring of Internet site usage, email server, e-invoice and e-archive invoice, electronic communication, cargo and courier, dry cleaning, tailoring/alteration/repair, storage, banks, and electronic payment service providers with whom our company works,
• Prosecutors, courts, and all kinds of judicial authorities in accordance with the relevant legislation,
• Message Management System Inc., for recording commercial communication records within the scope of our legal obligations.

3. Methods of Collecting Personal Data and Legal Grounds

• Recording the information you share during shopping or membership processes through membership opportunities offered physically or digitally through our stores and website,
• Recording your requests and complaints that you communicate through call centers, our website, email addresses, social media, and other communication channels during mutual communication,
• Recording information and documents related to you from official institutions, organizations, and judicial and administrative authorities in physical environments, recording your mail order forms in physical environments, and automatically or non-automatically collecting your personal data through methods related to your return processes.

Your personal data listed above can be processed based on the legal grounds in Articles 5/2/a-c-ç-f of the GDPR and, if applicable, based on your explicit consent. In this context, we collect your personal data based on the legal grounds:

• Explicitly provided for by laws,
• If it is necessary for the processing of personal data belonging to the parties of a contract, directly related to the establishment or performance of a contract,
• If it is necessary for the data controller to fulfill its legal obligation,
• If it is necessary for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject,
• If you have given "explicit consent."

You can withdraw your explicit consent at any time without specifying any reasons, thereby ending the personal data processing activities based on explicit consent.

4. Commercial Electronic Message Information

Within the scope of the Law on the Regulation of Electronic Commerce No. 6563 and the GDPR, 3 MASH will process your name, surname, phone number, and email address with your permission for any kind of marketing activities, campaigns, advertisements, launches, surveys, drawings, discounts, promotions, special opportunities, promotions, introductions, invitations, events, and communication activities. In this regard, communication may be provided to you on the mentioned subjects through SMS, phone calls, and email methods. To achieve this, your personal data may be shared with companies with which we have taken necessary security measures for SMS, calling, and email transmission. You can cancel this permission by notifying 3 MASH's communication channels at any time.

5. Your Rights Regarding the Protection of Your Personal Data and Application

In accordance with Article 11 of the GDPR, you can apply to our Company to exercise your rights. These include learning whether your personal data is processed, requesting information if your personal data is processed, learning the purpose of processing your personal data and whether they are used for their intended purpose, knowing the third parties to whom your personal data is transferred domestically or abroad, requesting correction of your personal data if it is incomplete or incorrect, requesting deletion or destruction of your personal data within the framework of the conditions specified in Article 7, notifying third parties to whom your personal data is transferred in case of correction or deletion, objecting to the emergence of a result against you by analyzing your data exclusively through automated systems, and demanding compensation for damages in case of suffering damage due to the processing of your personal data unlawfully. You can submit your requests to us through the following channels:

• In person or by mail to Kızıltoprak Mah. 919 Sok. No: 19A Muratpaşa, Antalya,
• Sent by notary,
• Using your electronic mail address registered in the data controller's system to the address info@3mash.com,
• Sending securely electronically or with a mobile signature to the address info@3mash.com.

Conclusion

I declare that I have read and understood the Information Text on the Protection of Personal Data prepared by 3 MASH in the scope of the Law on the Protection of Personal Data, and I am informed about the purpose of processing my personal data mentioned in this text; the institutions, organizations, and companies to which it is transferred; methods of collection and related legal grounds; commercial electronic messages; my rights regarding the protection of personal data; and my right to apply.