APPLICATION METHODS FOR DATA SUBJECT PURSUANT TO THE LAW ON THE PROTECTION OF PERSONAL DATA

The Law on the Protection of Personal Data No. 6698 (KVKK) defines data subjects whose personal data are processed for any reason as the relevant person and grants them the right to make certain requests regarding the processing of their personal data in Article 11. These rights are explained in detail in this text and in the Disclosure Text and Personal Data Protection Policy available on our website at [www.enderaluminyum.com](https://www.google.com/search?q=https://www.enderaluminyum.com).tr. Pursuant to Article 13/1 of the said Law, applications to be made to Ender Alüminyum Sanayi ve Ticaret Anonim Şirketi (Company) as the data controller must be submitted to us in writing or by other methods determined by the Personal Data Protection Board. In this framework, applications to be made to our Company in "writing" can be submitted by taking a printout of this form or by filling out its content on a computer;

By the Applicant's personal application,

• Through a notary public,
• By being signed by the Applicant with a "secure electronic signature" as defined in the Electronic Signature Law No. 5070 and sent to the Company's registered electronic mail address,

may be forwarded to us.

Below, information is provided regarding the specific written application channels for how written applications can be delivered to us.

Subject of Request

1. I would like to learn whether your Company processes personal data about me.
2. If Ender Alüminyum Sanayi ve Ticaret Anonim Şirketi processes personal data about me, I request information about these data processing activities.
3. If Ender Alüminyum Sanayi ve Ticaret Anonim Şirketi processes personal data about me, I would like to learn the purpose of their processing and whether they are used in accordance with this purpose.
4. If my personal data is transferred to third parties domestically or abroad, I would like to know these third parties.
5. I think my personal data is processed incompletely or incorrectly and I want them to be corrected.
6. Although my personal data has been processed in accordance with the provisions of the law and other relevant laws, I think that the reasons requiring their processing have disappeared and in this framework, I request the deletion or destruction of my personal data.
7. I want my personal data, which I think is processed incompletely or incorrectly, to be corrected also before the third parties to whom they are transferred.
8. Although my personal data has been processed in accordance with the provisions of the law and other relevant laws, I think that the reasons requiring their processing have disappeared and in this framework, I request that the deletion or destruction of my personal data be notified also to third parties.
9. I think that my personal data processed by Ender Alüminyum Sanayi ve Ticaret Anonim Şirketi is analyzed exclusively through automated systems and that a result has arisen against me as a result of this analysis. I object to this result.
10. I have suffered damage due to the unlawful processing of my personal data. I request compensation for this damage.

You must deliver the “Data Subject Application Form” on our website at [www.enderaluminyum.com](https://www.google.com/search?q=https://www.enderaluminyum.com).tr to Ender Alüminyum Sanayi ve Ticaret Anonim Şirketi by one of the methods specified above.

This “Data Subject Application Methods” has been regulated in order to identify your relationship with our Company and, if any, to respond to your relevant application regarding your personal data processed by our Company completely, accurately, and within the legal period. In order to eliminate the legal risks that may arise from unlawful and unfair data sharing and especially to ensure the security of your personal data, Ender Alüminyum Sanayi ve Ticaret Anonim Şirketi reserves the right to request additional documents and information (such as a copy of identity card or driver's license) for identity and authorization determination. In case the information regarding your requests submitted within the scope of the form is not accurate and up-to-date or an unauthorized application is made, our Company does not accept responsibility for requests arising from such incorrect information or unauthorized applications or for disruptions that may occur during the sending of our responses to the addresses you have specified.

In addition, after other methods to be determined by the Board are announced, how applications will be received through these methods will also be announced by our Company.

Your applications submitted to us will be responded to within thirty days from the date your request reaches us, depending on the nature of the request, pursuant to Article 13/2 of the KVKK. Our responses will be delivered to you in writing or electronically in accordance with the provisions of Article 13 of the relevant KVKK. In this regard, the response method you specified in your application form will be taken into account.