Privacy

PRIVACY NOTICE ON PROCESSING OF PERSONAL DATA

“Cat Rentals Website”

1. Data Controller

As Borusan İş Makinaları Kiralama Sanayi ve Ticaret A.Ş. (“BİMK” or “Şirket”) we attach great importance to the protection of personal data and to processing personal data in a transparent and lawful manner. In accordance with the Law on the Protection of Personal Data No. 6698 (“Law”) we act as the data controller when processing your personal data. With this Privacy Notice, we aim to inform you about the personal data processed in the context of using the "rent.cat.com/tr" website (“Website”).

2. Your Processed Personal Data, Purposes and Legal Bases for Processing

Law on the Protection of Personal Data No. 6698 (“Law”) Article 5 regulates the legal bases for processing personal data. The table below sets out which of your personal data is processed, for what purposes, and on the basis of which legal grounds:

For What Purposes Is Your Data Processed?	What Legal Bases Are Relied Upon When Processing Your Data?	Personal Data Processed
- Enabling your access to the Website, - Enabling you to benefit from the products and services on the Website, - Receiving, evaluating and finalizing requests/offers regarding our products and services, - Receiving and resolving your suggestions and complaints, - Conducting communication activities within the scope of operations, - Monitoring and managing processes aimed at customer satisfaction, - Reporting, auditing and reviewing our business processes, and ensuring our compliance with the policies, practices and rules of our group companies and manufacturer standards.	Law Art. 5/2 (f) Processing of data being mandatory for the legitimate interests of the data controller, provided that such processing does not harm the fundamental rights and freedoms of the data subject.	- Identity (first name, last name) - Contact (e-mail, phone number and address) - Customer Transaction Information (Company information, information regarding the rental request [rental period, request date, product information], request/complaint information, descriptions entered in the request, information about transactions carried out, marketing consent information) - Transaction Security Information (device information, IP address, user activity logs)
- Fulfilling our legal obligations in cases where authorized institutions or organizations request information from our Company or where we are required to notify such institutions (for example, sharing your information when a public authority requests information regarding a transaction suspected of being unlawful).	Law Art. 5/2 (c) Processing of data being mandatory for the data controller to fulfil its legal obligation.	- Identity (first name, last name) - Contact (e-mail, phone number and address) - Customer Transaction Information (Company information, information regarding the rental request [rental period, request date, product information], request/complaint information, descriptions entered in the request, information about transactions carried out, marketing consent information) - Transaction Security Information (device information, IP address, user activity logs) - Legal Transaction Information (correspondence with judicial authorities, information regarding litigation/enforcement files in the event of a dispute)
- Protection and exercise of our rights in the event of a possible dispute, and conduct of legal proceedings.	Law Art. 5/2 (e) Processing of data being mandatory for the establishment, exercise or protection of a right.

3. Third Parties With Whom Your Personal Data Is Shared and Purposes of Sharing

Your personal data is shared with third parties in compliance with the rules on the transfer of personal data set forth in the Law and relevant legislation. The parties with whom we share your data and the purposes of such sharing are as follows:

- Suppliers and Business Partners: Your data is transferred for the purpose of obtaining support from third parties in the scope of service procurement. (For example, provision of IT infrastructure services, use of the system infrastructure of the principal company for which distributorship is conducted)

- Authorized Institutions and Organizations: Your data is shared with authorized institutions and organizations for the purpose of fulfilling our legal obligations in cases where such institutions request information from our Company or where we are required to notify them

- Our Group Companies: Your data is transferred for the purpose of ensuring compliance with Group Companies’ policies and rules, and for the conduct of audit and reporting processes.

Your personal data is transferred abroad by BİMK, limited to the purposes and parties specified above, in accordance with the rules set forth in Article 9 of the Law. When transferring your personal data abroad, BİMK acts in compliance with the rules set forth in Article 9 of the Law and takes all necessary administrative and technical measures to ensure that your personal data is processed securely by third parties and in accordance with this Notice.

4. Methods of Collecting Your Personal Data

Your personal data is collected through automatic and partially automatic means via the provision of information/documents in electronic form, e-mail correspondence, internal company systems and the website.

5. Rights of the Data Subject

As data subjects, in order to exercise your rights under Article 11 of the Law, which “regulates the rights of the data subject”,

- By post, you may send a written application to our Company’s registered business address at Cevizli Mah. Cevizli D-100 Güney Yanyol Cad. Kuriş Kule Apt. No: 2 / 104 Merkez/ KARTAL / İSTANBUL TÜRKİYE

- Using your e-mail address registered in our systems, you may send an e-mail containing your requests to catcompliance@borusan.com.

You may also submit your requests to us by using the other methods specified in the Communiqué on the Procedures and Principles for Application to the Data Controller’.

6. Questions About the Privacy Notice and Contact Point

If you would like to obtain further information within the scope of this Privacy Notice, please contact us at the address below:

__________Ali Yavuzyigitoglu ayavuzyigitoglu@borusan.com___

7. Changes to the Privacy Notice

BİMK may amend this Privacy Notice when necessary. All updates to the Notice shall enter into force on the date they are presented by any means and shall be effective from the moment of publication.