Privacy Notice

PACKAGE TRANSPORTATION SYSTEMS CORPORATION

ON THE PROTECTION OF PERSONAL DATA

PRIVACY NOTICE

As Paket Taşımacılık Sistemleri Anonim Şirketi, we place great importance on the protection of the personal data of all individuals with whom we have a relationship. In accordance with the reference to the right to the protection of personal data in Article 20, Paragraph 3 of the Constitution, we take all necessary technical and administrative measures to protect your data and fully comply with the provisions of the Personal Data Protection Law No. 6698.

In accordance with the Personal Data Protection Law No. 6698, our company will process your personal data, as detailed below, in a manner that is appropriate and limited to the purpose for which it is processed. The personal data you provide to our company will be processed both manually and automatically, and will be securely retained by us for as long as it remains in our possession.

This privacy notice has been prepared in accordance with Article 10 of the Personal Data Protection Law No. 6698 to inform you about the purpose, scope, duration, and other matters related to the processing of your personal data that may affect data subjects.

1. Definitions

2. Identity of the Data Controller

3. What Personal Data Do We Process, and What Are Our Collection Methods?

Your personal data; the General Directorate, Regional Directorate, branches, agencies, and units affiliated with agencies; parties from whom we receive complementary services within the scope of the services we provide as PTS; contracted organizations, business partners, suppliers, or through the websites, social media accounts, mobile applications, integration systems, call centers, and the posts or systems of various natural and/or legal persons, whether public or private; Through emails you send and other similar channels, whether automatically or manually; data is collected in written, verbal, or electronic form and stored in both physical and digital environments.

Your personal data and special-category personal data—which may vary depending on the specific group of individuals we are requesting information from—include: your first name, last name, Turkish ID number, passport number, and/or temporary Turkish ID number, as well as other identifying information listed on your identification document or that could otherwise identify you; your address, phone number, email address, and other contact information; personal data obtained when you communicate with us via email, letter, and/or other means, as well as voice call recordings retained by customer service representatives in accordance with call center standards; your financial data, such as bank account number, IBAN number, credit card information, billing, and invoice details; your shipment information—such as content, dimensions, weight, and shipping fees—required to be collected in accordance with applicable laws while using the services provided by PTS; your communications, such as surveys, thank-you notes, complaint letters, and satisfaction survey results; behavioral information obtained through cookies, your online visit information, such as your IP address; other personal data; and, if you apply for a job, your resume and other personal data provided in connection with your application, as well as any personal data related to your employment contract—we process all such data with the utmost care and in accordance with the legal grounds and purposes detailed below.

4. On What Legal Basis and for What Purposes Do We Process Your Personal Data?

As PTS, your personal data will be processed in accordance with the relevant provisions of the Personal Data Protection Law (KVKK) and the principles set forth below, as well as in line with our processing purposes and legitimate interests within the scope of the services we provide as PTS, for as long as your relationship with our company continues. Additionally, there are certain data points that PTS is required to collect in accordance with specific laws and various regulatory provisions governing the service sector in which we operate. Pursuant to the relevant legal provisions, PTS may process such data without requiring your explicit consent.

At PTS, we process your personal datain accordance with the principlesset forth below;

• In accordance with the law and the principles of integrity,
• Being accurate and up-to-date when necessary,
• Processing for specific, explicit, and legitimate purposes,
• Being relevant to the purpose for which they are processed, limited, and proportionate,
• Retention for the period specified in the relevant legislation or as necessary for the purpose for which the data was processed.

At PTS, we process your personal data forthe purposeslisted below;

• To fulfill our legal obligations set forth in the relevant legislation;
• Identity verification and authentication,
• The provision of our services related to the activities set forth in the Articles of Association, as well as the planning and management of their financing,
• In providing our services, planning and managing the internal operations and daily activities at the PTS Headquarters and/or Branches,
• Upon your request, to keep you informed about your shipments, provide you with information, and/or send you reminders,
• The implementation of risk management and quality improvement activities,
• Compliance with legal and regulatory requirements,
• Sharing information obtained from various ministries and other public institutions and/or organizations, and responding to inquiries, in accordance with the relevant legislation,
• Issuing invoices for the services we provide,
• Ensuring that all necessary technical and administrative measures are taken regarding data security for the systems and applications located at PTS Headquarters and/or Branches,
• To analyze your use of our services and store your data for the purpose of developing and improving the services we offer to you, and to respond to your questions or complaints regarding our services,
• Providing the necessary information in accordance with the requests and audits of regulatory and supervisory agencies and official authorities,
• Retaining information regarding your data that must be retained in accordance with applicable laws,
• Compliance with internal policies and principles,
• Measuring customer satisfaction following the provision of services and enhancing customer satisfaction,
• To conduct promotional and informational activities tailored specifically for you and ensure you benefit from them; to contact you for the purpose of providing information regarding our services; and, without limitation, to plan and manage the operations and financing of our postal services, express shipping, and all other services, as well as for customer acquisition, market research, and related purposes.

In accordance with Article 5 of the Personal Data Protection Law (KVKK), we may process your personal data as PTSwithout your explicit consentin the following cases:

• In cases expressly provided for by law,
• Where, due to practical impossibility, you are unable to express your consent as the data subject, or in cases where your consent is not legally valid, the processing of your personal data is necessary to protect your own life or physical integrity or that of another person,
• Provided that it is directly related to the conclusion or performance of a contract, and the processing of your personal data is necessary for the parties to the contract,
• For a legal obligation to be fulfilled, it must be mandatory,
• The fact that you have made your personal data public,
• Where data processing is necessary for the establishment, exercise, or protection of a right,
• Provided that it does not infringe upon your fundamental rights and freedoms, the processing of data is necessary for the legitimate interests of PTS.

5. To Whom and for What Purposes May We Transfer Your Personal Data?

We process your personal data—provided that such processing is limited to the scope of the services we provide—in accordance with Articles 8 and 9 of the Personal Data Protection Law No. 6698; both within Turkey and abroad; for the purposes of service provision, marketing, identifying potential customers, and fulfilling mutual obligations arising from contracts within the scope of PTS’s operations; with PTS’s relevant departments, legally authorized public institutions, and private individuals; and with natural and legal persons with whom contracts have been entered into for the conduct of specific activities.

Data transfers abroad are made directly if the authority specified under Article 9 of the Personal Data Protection Law (KVKK) has issued a decision on adequacy; in cases where no such decision on adequacy exists, data is transferred abroad via a standard contract, in accordance with the Board’s approval and subject to the provisions set forth in the standard contract.

6. How Long Can We Process Your Personal Data?

The personal data processed by PTS is processed in a manner that does not exceed the maximum periods prescribed by applicable laws and regulations. Upon the expiration of the periods specified in the relevant legislation, or even if such periods have not yet expired, as a result of a request made by the data subject regarding the processing of their data—as detailed below—the relevant personal data will be deleted, destroyed, or anonymized in accordance with Article 7 of the Personal Data Protection Law (KVKK).

7. What Are Your Rights as a Data Subject, and How Can You File a Request?

To the extent that your personal data is processed by PTS in its capacity as the Data Controller, pursuant to Article 11 of the KVKK, please complete the “Personal Data Information Request Form” provided below and submitting it in person to the PTS address where you received the service, sending it via a notary public, sending an email signed with your secure electronic signature, or sending a “Word or PDF” file signed with your secure electronic signature tokvkk@pts.netvia email;

• To find out whether any of your personal data is being processed,
• To request information regarding the processing of your personal data,
• To learn about the purposes for which your personal data is processed,
• If your personal data has been transferred to third parties, institutions, and/or organizations within or outside the country, you have the right to find out who these third parties, institutions, and/or organizations are,
• If your personal data has been processed incompletely or incorrectly, you have the right to request that it be corrected or updated,
• The right to request the erasure or destruction of your personal data if the grounds for processing your personal data no longer exist or if PTS lacks a legal basis or legitimate interest to process such data,
• To object to any adverse consequences that may arise from the processing of your personal data by automated systems, and,
• If you suffer harm as a result of the unlawful processing of your personal data, you have the right to seek compensation for that harm.

PTS will process the request as soon as possible and no later than thirty days, free of charge or for a fee in accordance with the schedule set by the Personal Data Protection Board, depending on the nature of the request. In such cases, if the request arises from an error on the part of PTS, the fee collected will be refunded.