General Data Protection Regulation

DISCLOSURE TEXT ON PROTECTION OF PERSONAL DATA AND PRIVACY POLICY

With this Disclosure Text on Protection of Personal Data and Privacy Policy; it is aimed to
inform our users in accordance with the Law on Protection of Personal Data No. 6698
(“Law”) and other relevant legislation in force, regarding the obtaining of your Personal Data
associated with your use of the “ www.ardlift.com” Internet Site (“Website”) of Ard
Mühendislik Asansör Sanayi ve Ticaret Limited Şirketi (“Company), which is registered at
Istanbul Registry of Commerce with registry number 641266 with its registered address at
İstanbul Tuzla Organize Sanayi Bölgesi (İTOSB), 2 Cd. No:3 Tepeören, Tuzla, İstanbul and your
commercial relationship between you and the company of which you are the representative/
authorized person of and the Company, processing of Data provided by you to the Company,
to ensure the privacy, type of use, the degree of use and the purpose of use.

We take the protection and confidentiality of your Personal Data and confidential information
seriously. Pursuant to the provisions of the Law and the relevant legislation, we take
necessary technical and administrative measures to ensure data protection, attention to the
privacy of data, and use of the data for the purposes that we provide only when we fulfill our
duties and obligations arising from the commercial and/or contractual relationship between
you and our Company. Our company gives great importance to obtain your Personal Data in
accordance with the law and in accordance with the principle of honesty.

In order to ensure that the commercial relationship between you and the company of which
you are the representative/ authorized person of and the Company are carried out, to
receive your order and inquiry forms, and to subscribe you to our e-bulletin in order to notify
you with any news about our Company after your approval and request; we need you to
provide us the Personal Data requested from you to process by our Company and which are
only limited with the purposes of processing.

Your Personal Data automatically obtained by the Company in whole or in part during your
visit to the Website for the commercial and/or contractual relationship between you and the
Company and your use of the services we provide through the Website, are limited to the
purposes set forth in Article 4 of the Law and in accordance with the general principles
mentioned in the Communique on Procedures and Principles for Carrying Out the Disclosure
Obligation (“Communique”), within the scope of terms to process Personal Data as stated in
Articles 5 and 6 of the Law.

In accordance with paragraph 1 of article 5 of the Communique and paragraph 2 of article 5
of the Law; the Personal Data provided by you with your legal consent to our Company for the
establishment of commercial and/or contractual relation between you and the company of
which you are the representative/ authorized person of and our Company and to maintain
such relation, to provide e-bulletin subscription for you and the necessity of processing your
Personal Data for this purpose, to fulfill the contractual rights between you and the Company
as a result of commercial relation can be processed by our Company within the scope of
terms and purposes of processing Personal Data stated in articles 5 and 6 of the Law and
within the purposes stated in this text.

The data you provide to us may be processed by our affiliates, subsidiaries, shareholders,
business partners, successors, domestic and international partners, law and tax advisors,
banks, independent auditors and other service providers we cooperate with in order to carry
out our business activities, in accordance with the personal data processing requirements
and purposes specified in Articles 8 and 9 of the Law, and may be processed by these
persons with the duration and time required for the purpose of the Personal Data processing
mentioned above.

Your data is stored in the company’s database for the fulfillment of the liabilities mentioned in
this Disclosure Text on Protection of Personal Data and Privacy Policy of the Company and in
the legislation and for the time required in order to fulfill the purposes stated.

If required by the applicable legislation, including the Law, your additional authorization may be
required for certain applications and procedures. In such cases, you will be contacted and
your express consent will be requested in accordance with the legislation. In addition to this
data, the Personal Data you have provided to us may be forwarded to the relevant authorities
and courts if requested and as required by the legislation.

Please note that minors should not provide Personal Data without the consent of their parent
or guardian.

If the Web Site contains links to other websites based on the particular case, we do not make
any commitments to ensure that the websites of these sites comply with the data protection
provisions. The Company is not liable for the contents of the websites it provides links of.

Any information you share with the Company will not be used directly or indirectly for the
benefit of a third party for any reason whatsoever, and it will not be shared with any third
party, company or institution except for the purposes specified in this text without your
express written consent, and will not be copied or published in full or in part.

In accordance with Article 11 of the Law, we hereby notify you that you have the right to; (i)
learn whether your personal data has been processed or not, (ii) request information if your
personal data has been processed, (iii) learn the purpose of processing your personal data
and whether this information is used in accordance with the intended purposes or not, (iv)
know third parties to whom your personal data is transferred; (v) request correction of
personal data if it is incomplete or incorrectly processed; (vi) request the deletion or
destruction of your personal data if the reasons for processing the personal data are no
longer present; (vii) request that, in accordance with Article 7 of the Law, the above-mentioned
correction, deletion or destruction should be communicated to third parties to
whom the personal data is transferred; (viii) object to the occurrence of a result against the
analysis of processed data solely by automated systems; and (ix) claim any loss that incur due
to the unlawful processing of personal data.

In accordance with paragraph 1 of Article 13 of the Law and the Communique on the Principles
and Procedures of Application to the Data Officer (“Communique on Application to the Data
Officer”), in writing or registered electronic mail (PEP) address, secure electronic signature
or by using the mobile signature or the e-mail address of that you have reported to the
Company and registered in the Company’s system (in this context, please contact the
Company via our e-mail address info@ardlift.com) or an In the event that you communicate to
the Company through software or application, the Company will conclude your requests as
soon as possible and free of charge within 30 (thirty) days at the latest. However, if the
transaction requires an additional cost, the Company will be able to charge the fee specified in
the Communique on Application to the Data Officer.

The Company will accept or reject your request on your application and will notify you in
writing or electronically. In case the request in your application is accepted, it will be fulfilled by
the Company. If the application is caused by the Company’s fault and you have been charged
any fees, the fee will be refunded.

Cookies

On our website; Cookies are available to help us in order to automatically obtain certain data,
such as the IP address, the browser in use, the operating system on your computer, your
Internet connection, and information about site users. These cookies are small text files that
are transmitted to your hard drive by a web page server, and cookies on our site are not used
to send harmful software to your computer.

Cookies are usually stored on your computer by recording the transactions you have made
on our website and your clicks on the website during your navigation in order to assist us to
obtain statistical information about how many people have used the website, how many times
a person visited the website, how much time the person has spent on the website and to
generate advertisements and content dynamically from the pages of users. Your use of our
website means that you approve the cookies used. The Company may process your data
through such cookies and transfer it to third parties in Turkey and abroad for the purpose of
analyzing the information obtained.

If you wish to view our website without your data collected by cookies, you can always change
your preference from your device and/or browser settings. Please note that when you stop
using cookies, you may not be able to perform some actions on our website and that certain
features of our website may not function in full.