Clarification Text on Use of Cookies

1. ARTICLE-INTRODUCTION

In this Clarification Text, the Data Subjects will be enlightened within the scope of the following questions regarding the personal data processing activity carried out by the Company with the cookie technology used in the Online Area:

What is the Company’s minimum identification information?

What are the types and characteristics of the cookies used in the Online Area?

For what purposes are personal data obtained through cookies processed?

To whom and for what purpose is the processed personal data transferred by the Company?

What is the method and legal reason for collecting personal data through cookies?

What are the methods for changing cookie preferences?

What are the rights of the Data Subject against the Company’s personal data processing activities?

2. ARTICLE – DEFINITIONS

What is a Cookie?

Types of Cookies Used

Session cookies: Session cookies are cookies that are saved on the device visited while visiting the Online Area and deleted from the device when the browser is closed.

Persistent cookies: Persistent cookies are cookies that are saved on the device visited when the Online Area is visited and placed on the hard disk of the device and stored on the device for the lifetime of the browser’s preferences and/or the cookie.

Third party cookies: The Company also uses third-party cookies. Third-party cookies are cookies that allow third parties’ cookies to be saved on the visited device when the Online Area is visited. Information on these cookies and changing cookie settings is provided in this Clarification Text.

Cookies Used

Execution of company / product / service commitment processes

Conducting communication activities

Execution / supervision of business activities

Receiving and evaluating suggestions for improving business processes

Carrying out activities to ensure business continuity

Execution of goods / service sales processes

Execution of customer relationship management processes

Conducting activities for customer satisfaction

Conducting marketing analysis studies

Execution of advertising / campaign / promotion processes

Carrying out strategic planning activities

Execution of marketing processes of products/services

Creation and follow-up of visitor records

With this Clarification Text, the Company enlightens the Relevant Persons regarding the processing of personal data through cookies and will use cookies by obtaining explicit consent in a way that leaves no room for doubt.

Personal data obtained through cookies may be transferred to third parties for the purposes listed in the table below, provided that the necessary measures are taken.

As a rule, data processed with cookies can be transferred domestically if the Data Subject has explicit consent.

Personal data may be transferred without the explicit consent of the Data Subject if there is a clear regulation in the legislation regarding the transfer of personal data. Personal data may be transferred without the explicit consent of the Data Subject;

If it is mandatory for the protection of the life or physical integrity of the personal data owner or someone else, and if the personal data owner is unable to disclose his consent due to actual impossibility or if his consent is not legally valid, it may be transferred to third parties.

Personal data may be transferred to third parties if it is necessary to transfer personal data belonging to the parties to the contract, provided that it is directly related to the establishment or performance of a contract.

If personal data transfer is mandatory for the Company to fulfill its legal obligation, personal data may be transferred to third parties.

If personal data has been made public by the personal data owner, it may be transferred to third parties limited to the purpose of publicization.

Personal data may be transferred to third parties if personal data transfer is mandatory for the establishment, exercise or protection of a right.

Provided that it does not harm the fundamental rights and freedoms of the Data Subject, personal data may be transferred to third parties if it is mandatory for the legitimate interests of the Company.

The Company transfers the personal data processed through cookies abroad only with the explicit consent of the Data Subject.

The Company may also transfer the personal data of the Data Subjects abroad without explicit consent. In cases where the country or countries to which the personal data will be transferred (a) is one of the countries declared by the Board to have adequate protection or (b) if it is not one of the countries declared by the Board, permission has been obtained from the Board by obtaining a written commitment from the data controllers in the relevant foreign country providing adequate protection, personal data may be transferred abroad without explicit consent if one or more of the following conditions are present.

If there is a clear regulation in the legislation regarding the transfer of personal data, it can be transferred abroad.

If it is mandatory for the protection of the life or physical integrity of the personal data owner or someone else and if the personal data owner is unable to disclose his consent due to actual impossibility or if his consent is not legally valid, it may be transferred abroad.

Personal data may be transferred abroad if it is necessary to transfer the personal data of the parties to the contract, provided that it is directly related to the establishment or performance of a contract without the explicit consent of the Data Subject.

If personal data transfer is mandatory for the Company to fulfill its legal obligation, personal data may be transferred abroad.

If personal data is publicized by the owner, it may be transferred abroad limited to the purpose of publicization.

Personal data may be transferred abroad if personal data transfer is mandatory for the establishment, exercise or protection of a right.

Personal data may be transferred to third parties without the explicit consent of the Data Subject, provided that it does not harm the fundamental rights and freedoms of the Data Subject, if personal data transfer is mandatory for the legitimate interests of the Company.

Sensitive Personal Data; The Company may transfer the Personal Data abroad by taking the Explicit Consent of the Data Subject by applying administrative and technical measures and by complying with the special measures taken by the Board. In order for the Company to transfer Special Categories of Personal Data abroad even without obtaining the Explicit Consent of the Data Subject, the country or countries to which the personal data will be transferred (a) must be one of the countries declared by the Board to have adequate protection or (b) if it is not one of the countries declared by the Board, permission must be obtained from the Board by obtaining a written commitment from the data controllers in the relevant foreign country providing adequate protection, and (c) one or more of the following conditions must be present.

Sensitive Personal Data other than health and sexual life: The Company will be able to process Sensitive Personal Data other than health and sexual life without obtaining the explicit consent of the data subject if explicitly stipulated in the legislation.

Sensitive Personal Data relating to health and sexual life: For the purposes of protection of public health, preventive medicine, medical diagnosis, treatment and care services, planning and management of health services and financing, persons under the obligation of confidentiality or authorized institutions and organizations can be processed without seeking explicit consent.

7. Method and Legal Grounds for Collecting Personal Data

During the use of cookies, the Company acts in accordance with the basic principles and the Law, as in its approach to personal data processing in general. The method and purposes of data collection with cookie technology are detailed in the light of the above articles.

Personal data collected for these purposes and legal reasons may also be processed and transferred for the purposes specified in Articles 3.5, 4 and 6 of the Clarification Text within the scope of the personal data processing conditions and purposes specified in Articles 5 and 6 of the Law.

8. Rights of the Data Subject and Application to the Company

Rights of the Relevant Person

The Data Subject has the right to apply to the Company regarding his/her personal data in the following matters;

Learn whether personal data is being processed,

Request information if their personal data has been processed,

To learn the purpose of processing personal data and whether they are used for their intended purpose,

To know the third parties to whom personal data are transferred domestically or abroad,

To request correction of personal data in case of incomplete or incorrect processing,

Request deletion or destruction of personal data,

In the event that personal data is incomplete or incorrectly processed, to request that third parties to whom personal data is transferred be notified of the transactions regarding the correction and/or deletion or destruction of personal data,

To object to the emergence of a result to the detriment of the person himself/herself by analyzing the processed data exclusively through automated systems,

In case of damage due to unlawful processing of personal data, to demand compensation for the damage.

Application to the Company

The Company has prepared a Procedure in order to protect the rights of the Data Subject regulated in the Law and this Clarification Text and to fulfill its own obligations in this regard. In accordance with this Procedure, the Company makes maximum effort to provide the information requested by the Data Subject by applying to the Company regarding the personal data of the Data Subject free of charge as soon as possible, within thirty days at the latest. If the transaction requires an additional cost, the fee in the tariff determined by the Board may be charged to the Data Subject. As a result of the examination of the request, the Company accepts the request or rejects it by explaining its reasoning and notifies its response to the Relevant Person in writing or electronically. If the request in the application is accepted, the Company shall fulfill the requirements of the request. In case the application is caused by the Company’s error, the fee received shall be returned to the Relevant Person.

Relevant Persons may exercise their rights specified in Article 8.1. by filling in the attached application form at the address https://kailogistics.com and sending it with wet signature to info@kailogistics.com via notary public, KEP or electronic mail or delivering it to the same address in person or by proxy or sending it to info@kailogistics.com electronic mail address.

Documents proving his/her identity, documents supporting the request, if any, and if the Relevant Person wishes to exercise this right through his/her proxy, a copy of the power of attorney containing the special authorization in this regard must be attached to the form.