Customer Privacy Notice

This translation is provided for information only; the Turkish text is legally binding.

MOTTO DAN. MÜH. VE TEKN. LTD. ŞTİ.
ON THE PROTECTION OF PERSONAL DATA
CUSTOMER PRIVACY NOTICE

1. Identity of the Data Controller

As Motto Danışmanlık Mühendislik ve Teknoloji Ltd. Şti. (the “Company”), registered with the Istanbul Trade Registry Office under number 940522-0 and operating at Orhanlı mahallesi Derviş caddesi No:24 GAT Plaza K:2, Tuzla, Istanbul, acting as data controller, we set out the following within the scope of our duty to inform, so that we can act in accordance with Law No. 6698 on the Protection of Personal Data (the “Law”) with regard to the personal data we obtain from our customers.

1. Purposes for Which Personal Data Are Processed

Your personal data, consisting of your identity data, contact data, financial data, signature data, visual/audio data and vehicle data, are processed by the Company, because you are a customer of the Company and in accordance with the basic principles laid down in the Law, for the purposes of:

• carrying out the relevant financial processes, including quotations, orders and payments, and ensuring the Company’s internal controls,
• carrying out processes relating to magazines, catalogues and social media accounts in order to increase product awareness,
• carrying out the Company’s physical premises security and site safety processes within the scope of occupational health and safety,
• managing after-sales fault processes for products,
• managing the logistics processes for products,
• carrying out the assembly and post-assembly delivery operations performed at the Company, and
• carrying out project and licensing processes relating to the Company’s products and services,

within the personal data processing conditions and purposes set out in the Law and other relevant legislation.

In addition, the personal data mentioned above may be kept in both digital and physical form by being transferred to the Company’s physical archives and to IT systems, including websites, social media account providers, the ERP application, e-mail servers located in the United States of America and camera recording devices, as well as to the systems of magazine and catalogue companies.

1. To Whom and for What Purposes Processed Personal Data May Be Transferred

In order to fulfil the purposes explained in Article 2 of this Privacy Notice, your collected personal data may be transferred:

• to the ERP system service provider, since the Company uses an ERP system,
• to the occupational health and safety company we work with, to ensure site safety within the scope of occupational health and safety,
• to the e-mail account provider located in Finland, to run the e-mail system processes through your e-mail correspondence with the Company,
• to the relevant Regional Gendarmerie Command, within the scope of physical premises security,
• to the relevant social media providers (such as YouTube and LinkedIn), the relevant magazine and catalogue companies and third parties who can view the related posts, in order to increase product awareness,
• to third-party business partner companies, to manage product assembly and logistics processes,
• to the Turkish Standards Institution and TÜV Türk, to carry out licensing processes, and
• to the courier company, to create and track shipments.

1. Method and Legal Grounds of Personal Data Collection

Your personal data may be processed and transferred, by automatic or non-automatic means, by or through the Company, for the purposes stated in Articles 2 and 3 of this Privacy Notice, on the legal grounds set out in Articles 5 and 6 of the Law, namely the conclusion or performance of a contract and the legitimate interest of the data controller.

Your personal data are collected by the Company from information you provide orally, physically and in writing in electronic form, and through the applications and software used in the Company’s activities.

Rights of the Data Subject

Under Article 11 of the Law, customers whose personal data are processed may apply to the Company with requests to:

• learn whether their personal data are processed;
• request information about the processing if their personal data have been processed;
• learn the purpose of processing and whether the data are used by us in line with that purpose;
• know the third parties in Türkiye or abroad to whom their personal data are transferred;
• request the correction of their personal data if they are incomplete or inaccurate;
• request the deletion, destruction or anonymisation of their personal data if the reasons requiring processing no longer exist;
• request that such deletion or correction be notified to third parties to whom the data have been transferred;
• object to a result against them arising from the analysis of the processed data exclusively by automated systems; and
• claim compensation for damage suffered as a result of unlawful processing.

You may submit your requests regarding the rights listed above to the Company by completing the “Data Subject Application Form” available at www.motto-tr.com and using one of the following channels:

• in person at Orhanlı mahallesi Derviş caddesi No:24 GAT Plaza K:2 Tuzla Istanbul, with verification of your identity;
• to the Company’s e-mail address info@motto-tr.com, via your registered e-mail address (KEP), a secure electronic signature, a mobile signature, or an e-mail address previously notified by the data subject to the data controller and registered in the data controller’s system; or
• through software or an application developed for this purpose.

In accordance with Article 13 of the Law, your applications will be concluded free of charge as soon as possible depending on the nature of your request, and within thirty days at the latest. However, if your application is answered in writing, a processing fee of 1 Turkish lira may be charged for each page above ten pages, pursuant to Article 7 of the Communiqué on the Procedures and Principles of Application to the Data Controller.

Our forms use Cloudflare Turnstile for bot and spam protection; during verification, technical data such as your IP address and browser information is processed by Cloudflare, Inc. (privacy policy).