Information Text Regarding the Processing of Personal Data

Doğuş Otomotiv Servis ve Ticaret A.Ş. (“Doğuş Otomotiv” or “the Company”), as data controllers (“Data Controllers”), attaches utmost importance to the fundamental rights and freedoms of individuals and shows the highest sensitivity to the processing, confidentiality and security of all personal data relating to natural persons associated with the Data Controllers, including those who benefit from our products and services, in compliance with the Law No. 6698 on the Protection of Personal Data (“KVKK”), which was published in the Official Gazette on April 7, 2016 and entered into force.

Under what data processing conditions and how do we collect your personal data? For what purposes do we use it?

Your personal data may be collected through (i) face-to-face meetings and printed forms at Doğuş Otomotiv branches, Authorized Dealers and service centers (“Physical Channels”), (ii) call centers, e-mail, SMS and digital platforms (“Call Channels”), (iii) our websites, mobile applications and the contact, reservation and other request forms located thereon (“Digital Channels”) and (iv) our social media accounts (“Social Media Channels”).

• Establishment and fulfillment of a contract (KVKK Article 5/2/c): In order to provide the services we have committed to offer our valued customers, we are obliged to process certain personal data. This includes obtaining necessary information for the sales transaction (such as identity information, contact information, and boat registration information) and for our after-sales services (boat information, boat chassis information, engine label, and usage details) directly through printed forms, photocopies, or directly from the boat itself.
• To comply with our legal obligations (KVKK Article 5/2/c): While carrying out our services, we are obliged to fulfill our obligations arising from many different regulations. In particular, your boat, identity, and contact information may be used for purposes such as establishing and maintaining a contract, providing information about sales and service, offering after-sales support services, providing assistance services when necessary, opening records regarding product safety and service status, and making announcements and providing information, all stemming from consumer legislation; your identity, contact, and financial information may be used primarily for the creation and maintenance of invoices, within the scope of our obligations arising from financial legislation; and information that must be kept and shared may be used. In addition, receiving and managing complaints from you through physical, call, digital, and social media channels also falls within the scope of fulfilling our legal obligations.
• In accordance with the legitimate interests of Data Controllers (KVKK Article 5/2/f): We process your personal data within the framework of our legitimate interests, in a balanced and proportionate manner, in order to increase our efficiency, better understand our customers, and continuously improve our services. In particular, we conduct measurement and evaluation studies to continuously achieve better quality standards for the services we provide, and in this context, we create general reports and measurements using information from areas such as customer relations, complaint management, and service provision. We customize, renew, and redesign our products and services in the most suitable way for our customers in light of your preferences, habits, and feedback (we do not create products specifically for you or conduct promotions targeting you without your explicit consent). Similarly, we use your personal data to manage your requests from digital and social media channels; however, this information is not used for marketing or sending communications without your explicit consent.

With whom and for what purposes may we share your personal data?

• In some cases, we may need to share your personal data with third parties. In this context, (i) with relevant public institutions and our financial advisors for financial processes in order to fulfill our legal obligations, and with service providers from whom we receive technical support due to obligations arising from consumer legislation; (ii) with other relevant authorized dealers and authorized service centers of Doğuş Otomotiv (you can access Doğuş Otomotiv's current authorized dealer and service information at www.dogusotomotiv.com.tr) and Doğuş Bilgi İşlem ve Teknoloji Hizmetleri A.Ş, Doğuş Holding A.Ş, Doğuş Holding A.Ş subsidiaries and affiliates and third-party service providers providing technical support for the same purposes; with insurance companies and agencies if you request it specifically in the contract, and with banks and other financial institutions if necessary at your request; (iii) with consultants and other technical service providers from whom we procure services within the scope of our legitimate interests, with Doğuş Bilgi İşlem ve Teknoloji Hizmetleri A.Ş, Doğuş Holding A.Ş, Doğuş Holding A.Ş subsidiaries and affiliates, and with third-party service providers providing technical support; (iv) with your explicit consent.Your personal data may be shared with third parties in Turkey and/or abroad with whom the Data Controllers we work with have a contractual relationship, Doğuş Otomotiv's subsidiaries and affiliates, shareholders, manufacturers of vehicles imported by Doğuş Otomotiv, subsidiaries of these manufacturers and/or third parties determined by these companies, other authorized dealers and authorized service centers of Doğuş Otomotiv, and research, promotion and consultancy firms that process data on behalf of Doğuş Otomotiv and its authorized dealers/authorized service centers, primarily for the purpose of planning, monitoring and improving the processes of providing, selling, and providing after-sales support services for goods and services offered by the Data Controllers, marketing, campaign, event and personalized advertising activities, and carrying out communication and promotional activities with your explicit consent.

What are your rights regarding your personal data?

• In accordance with Article 11 of the KVKK (Law on Protection of Personal Data), you have the following rights: (i) to learn whether your personal data is being processed, (ii) to request information regarding the processing of your personal data if it has been processed, (iii) to learn the purpose of the processing of your personal data and whether it is being used in accordance with its purpose, (iv) to know the third parties to whom your personal data has been transferred, domestically or abroad, (v) to request the correction of your personal data if it is incomplete or inaccurate, and to request that the correction be notified to the third parties to whom your personal data has been transferred, (vi) to request the deletion or destruction of your personal data if the reasons requiring its processing have ceased to exist, even if it has been processed in accordance with the KVKK and other relevant laws, and to request that the third parties to whom your personal data has been transferred be notified of this action, (vii) to object to a result that is detrimental to you arising from the analysis of your processed data exclusively through automated systems, (viii) to demand compensation for damages if you have suffered harm due to the unlawful processing of your personal data.

To withdraw your explicit consent regarding the processing of your personal data, you can send an email to KisiselVerilerim@dogusotomotiv.com.tr at any time regarding your requests to Doğuş Otomotiv. Detailed information about your rights under Article 11 of the Personal Data Protection Law and how to exercise these rights can be found in the Disclosure Statement at www.dogusotomotiv.com.tr.