Privacy and Data Security Policy

Last updated: July 2025

Privacy and Data Security Policy

Last updated: July 2025

Privacy and Data Security Policy

Last updated: July 2025

Durak Fındık Sanayi ve Ticaret A.Ş. (hereinafter referred to as the “Company”) considers ensuring the privacy and security of the personal data of users (“Visitors”) who visit the www.durakfindik.com.tr website to be one of its top priorities.

This Privacy Policy has been prepared in compliance with the Turkish Personal Data Protection Law No. 6698 (“KVKK”), the European Union General Data Protection Regulation (“GDPR”), and other applicable legislation in order to transparently explain the purposes for which your personal data is collected, how it is processed, with whom it may be shared, and your rights.

  1. PERSONAL DATA WE COLLECT

Our Company may collect the following categories of personal data during your use of our website:

• Contact Information: E-mail address, telephone number and physical address.
• Transaction Security Information: IP address, port information, website login and logout records, password and credential information.
• Marketing Information: Cookie records and campaign usage data.
• Request and Complaint Management Information: Messages and requests submitted through our website.

  1. PURPOSES OF PROCESSING PERSONAL DATA

Your collected personal data may be processed for the following purposes:

• Fulfilling obligations arising from applicable legislation, such as retaining log records pursuant to Law No. 5651.
• Conducting activities aimed at ensuring customer satisfaction.
• Tracking and responding to requests and complaints.
• Providing information to authorized persons, institutions and organizations.
• Conducting information security processes.

  1. TRANSFER OF PERSONAL DATA

Your personal data may be transferred to authorized public institutions and organizations, such as courts and the Information and Communication Technologies Authority (ICTA/BTK), in order to fulfil legal obligations.

Your personal data may also be transferred to our business partners, such as cargo companies and payment infrastructure providers, where necessary for the execution of our commercial activities and in accordance with the conditions specified in Articles 8 and 9 of the KVKK.

  1. RIGHTS OF THE DATA SUBJECT UNDER ARTICLE 11 OF THE KVKK

Within the scope of the KVKK, you have the following rights as a data subject:

• To learn whether your personal data is being processed.
• To request information if your personal data has been processed.
• To learn the purpose for which your personal data is processed and whether it is used in accordance with that purpose.
• To know the third parties to whom your personal data has been transferred domestically or abroad.
• To request the rectification of your personal data if it has been processed incompletely or inaccurately.
• To request the erasure or destruction of your personal data within the framework of the conditions stipulated in Article 7 of the KVKK.
• To object to a result arising against you as a consequence of the analysis of your processed personal data exclusively through automated systems.
• To claim compensation if you suffer damage due to the unlawful processing of your personal data.

  1. DATA SECURITY MEASURES

Our Company takes the necessary technical and administrative measures to ensure the security of your personal data.

Our website is protected with an SSL (Secure Socket Layer) certificate, and your data is stored in encrypted form to protect it against unauthorized access.

  1. USE OF COOKIES

Cookies are used on our website to improve the user experience and analyze website traffic. You can manage or block cookies at any time through your browser settings.

  1. EFFECTIVE DATE

This Privacy Policy entered into force on 24 July 2026.

Visitors and users are advised to review the current version of this Policy periodically to remain informed about any amendments.

  1. CONTACT AND APPLICATION

To exercise your rights stated above or submit an inquiry regarding our Privacy Policy, you may contact us through the following channels:

Company Name: Durak Fındık Sanayi ve Ticaret A.Ş.

Address: Levent Caddesi, Krizantem Sokak, No: 96, 34330 Levent/İstanbul, Türkiye

Telephone: +90 264 654 51 00

E-mail: durak@durakfindik.com.tr

Authorized Person: Mustafa Temel