Uğuras Kıymetli Madenler Sanayi ve Dış Ticaret A.Ş. takes the highest possible level of security measures to ensure the collection, storage, and sharing of your personal data in accordance with the law and to protect your privacy.

Our aim is to inform you in the most transparent manner regarding the ways your personal data is collected, the purposes of processing, the persons with whom it is shared, the legal reasons, and your rights, pursuant to Article 10 of the Law on the Protection of Personal Data No. 6698 and in line with your satisfaction.

a) Data Controller In accordance with the Law on the Protection of Personal Data No. 6698 ('Law No. 6698'), your personal data will be collected and processed by Uğuras Kıymetli Madenler Sanayi ve Dış Ticaret A.Ş., as the data controller, within the scope explained below.

b) For What Purposes Personal Data Will Be Processed Personal data may be collected by the COMPANY from parties such as customers, employees, potential customers, employee candidates, business partners, and suppliers in categories such as identity information, contact information, customer information, customer transaction information, transaction security information, legal transaction and compliance information, and marketing sales information.

Your collected personal data will be processed within the scope of the personal data processing conditions and purposes specified in Articles 5 and 6 of Law No. 6698 for the following purposes: To present COMPANY products and services to you; to fulfill our obligations towards you; to arrange records and documents; to comply with information storage, reporting, informing, tax, and other obligations stipulated by local and national legal legislation; to manage infrastructure and commercial activities and to comply with internal policies and procedures, including those related to auditing, finance and accounting, billing and collections, IT systems, data and website hosting, business continuity and records, document and print management; to communicate for the purpose of transferring necessary information to you regarding IT requirements, system structure, the necessity of IT support services received, and these services and products; to receive your orders; to carry out your payment transactions; to ensure product shipment by cooperating with third parties for logistics; for customer portfolio management; for measuring and improving service quality; for communication; to comply with information storage, reporting, and informing obligations stipulated by official institutions; to fulfill the requirements of contracts and to perform the legal obligations to which the COMPANY is subject regarding the utilization of these services; to examine, evaluate, and respond to requests arising from applicable laws and regulatory obligations (including those outside our country of residence), including anti-money laundering and counter-terrorism financing laws.

c) To Whom and For What Purposes Processed Personal Data May Be Transferred Your collected personal data may be transferred, limited to the realization of the purposes specified above, to the COMPANY's business partners, suppliers, and shareholders; to persons or organizations permitted by the Tax Procedure Law, Social Security Institution legislation, Court of Accounts, Law on Prevention of Laundering Proceeds of Crime, Law on Prevention of Laundering Proceeds of Crime, Turkish Commercial Code, Code of Obligations, and other legislative provisions; to legally authorized public institutions and organizations, administrative authorities, and legal authorities within the framework of the personal data processing conditions and purposes specified in Articles 8 and 9 of Law No. 6698.

ç) Method and Legal Reason for Collecting Personal Data Your personal data is collected by the COMPANY within the framework of legal legislation for the purposes specified above and within the scope of the performance of the contract.

d) Rights of the Personal Data Owner Listed in Article 11 of Law No. 6698 As personal data owners, if you submit your requests regarding your rights through the methods stipulated below, the COMPANY will conclude the request as soon as possible and within 30 days at the latest, depending on the nature of the request. No fee will be charged for up to ten pages in the response to be given. A transaction fee of 1 Turkish Lira will be charged for each page exceeding 10 pages. If the response to the application is given in a recording medium such as a CD or flash drive, the fee that may be requested by our company will not exceed the cost of the recording medium.

In this context, personal data owners have the right to:

• Learn whether personal data is processed,

• Request information if their personal data has been processed,

• Learn the purpose of processing personal data and whether they are used in accordance with their purpose,

• Know the third parties to whom personal data is transferred domestically or abroad,

• Request correction of personal data in case of incomplete or incorrect processing and request notification of the transaction made within this scope to third parties to whom personal data has been transferred,

• Request the deletion or destruction of personal data in the event that the reasons requiring its processing disappear, despite having been processed in accordance with Law No. 6698 and other relevant law provisions, and request notification of the transaction made within this scope to third parties to whom personal data has been transferred,

• Object to the occurrence of a result against the person himself/herself by analyzing the processed data exclusively through automated systems,

• Request compensation for the damage in case of suffering damage due to the unlawful processing of personal data.

You may submit your request regarding exercising your rights mentioned above in Turkish and in writing, or by using a registered electronic mail (KEP) address, secure electronic signature, mobile signature, or the electronic mail address previously notified to the COMPANY and registered in our system, in accordance with the 1st paragraph of Article 13 of Law No. 6698 and the Communiqué on the Procedures and Principles of Application to the Data Controller numbered 30356 and dated 10.03.2018. In applications, information will only be given about the applicant, and it will not be possible to obtain information about other family members and third parties. The COMPANY reserves the right to verify your identity before responding.

In your application, it is mandatory to include:

• Your Name, Surname, and if the application is written, your signature,

• Your T.R. Identity Number for citizens of the Republic of Turkey; if you are a foreigner, your nationality, passport number, or identity number if available,

• Your settlement place or workplace address for notification,

• Your electronic mail address, telephone, and fax number for notification, if available,

• Your subject of request, and information and documents related to the subject, if any, must be attached to the application.

You can submit your written applications by attaching the necessary documents to our Company's address at Ataköy 2-5-6.Kısım Mah. Rauf Orbay Cd. Yalı Ataköy Sitesi C Blok No:4/22 Bakırköy / İstanbul as the data controller.

You can submit your applications via e-mail to the info@uguras.com.tr e-mail address.

Depending on the nature of your request, information and documents that will enable identification must be provided to us completely and accurately. In case the requested information and documents are not provided properly, disruptions may occur in the full and qualified conduct of the research to be carried out by the COMPANY regarding your request. In this case, the COMPANY declares that it reserves its legal rights. Therefore, your application must be sent completely and containing the requested information and documents depending on the nature of your request.