Personal Data Protection Notice (KVKK)

CLAYTON YAPI MALZEMELERİ ANONİM ŞİRKETİ

PERSONAL DATA PROTECTION AND PROCESSING DISCLOSURE NOTICE

1. Identity of the Data Controller This Disclosure Notice has been prepared by Clayton (hereinafter referred to as the "Company"), which provides surface coating solutions made from natural minerals, in order to inform data subjects within the framework of Article 10 of the Turkish Personal Data Protection Law No. 6698 (the "Law").

2. Purposes of Processing Personal Data Personal data collected by our Company is processed — in light of the legality principles accepted in legal doctrine and the general principles set out in Article 4 of the Law — limited to the following purposes:

Carrying out the sales and after-sales support operations of the natural mineral-based products subject to our production processes,

Establishing customer relationship management (CRM) processes and planning corporate sustainability activities,

Fulfilling the legal obligations arising under the relevant legislation and providing information to authorized public institutions,

Following up on contractual processes and managing financial risks.

3. Transfer of Processed Personal Data In line with the realization of the purposes mentioned above, the collected data may be transferred to our business partners, our suppliers (logistics, IT infrastructure, etc.), legally authorized public institutions and private-law legal entities, within the framework of the transfer conditions specified in Articles 8 and 9 of the Law.

4. Method and Legal Basis of Personal Data Collection Within the scope of the commercial relationship established with our Company, your personal data is collected via website contact forms, e-mail, physical documents and cookies, based on the legal grounds set out in subparagraphs 5/2-c (establishment and performance of a contract), 5/2-ç (legal obligation of the data controller) and 5/2-f (legitimate interest) of the Law.

5. Rights of the Data Subject Pursuant to Article 11 of the Law, data subjects have the right to learn whether their data is being processed, to verify whether it is processed in accordance with its purpose, to request the correction of incompletely or incorrectly processed data, and to request the deletion of their data. You can submit your requests via [e-mail address to be added] or in writing to [Çiğiltepe Mahallesi, Bostancık Caddesi No:15 Mamak/ANKARA].