HARRANES CONFIDENTIALITY AGREEMENT

1. Purpose and Scope This Confidentiality Agreement expresses Harranes' ("Company") commitment to protect the personal data of our customers ("User"). Please be assured that the confidentiality of your personal data is our top priority and any action regarding this data will be carried out in accordance with the legislation.

2. Data Collected As Harranes, we can collect the following data from you:

• Name, surname, Turkish ID number,
• Contact information (phone number, e-mail address, address),
• Payment information (credit card details, bank account details),
• Your preferences and feedback on our services,
• Cookie data obtained from the use of our website ("harranes.com").

1. 3. Method of Data Collection and Legal Basis Your personal data may be collected by the following methods:

• Registrations and transactions you make through our website or mobile applications,
• Your written and verbal conversations with customer service,
• Cookies and similar technologies. Your personal data is collected and processed within the framework of the Personal Data Protection Law No. 6698 ("KVKK") and other relevant legislation.

1. 4. Purposes of Use of Data Your personal data may be processed for the following purposes:

• Delivering and improving our services,
• Managing your orders and payments,
• Communicating special campaigns and offers,
• To fulfill our legal obligations.

1. 5. Sharing of Data Harranes may share your personal data with the following types of third parties:

• Logistics and cargo companies,
• Payment system providers,
• Legally authorized public institutions and organizations. During sharing, all technical and administrative measures are taken for the secure processing of your data.

1. 6. Data Retention Period The personal data collected are stored for the period required by the purposes for which they are processed or for the time period specified in the relevant legislation. At the end of this period, your data will be deleted, destroyed or anonymized.
2. 7. Rights of the Data Subject Pursuant to Article 11 of the LPPD, you have the following rights in relation to your personal data:

• Find out if your data is being processed,
• Request information if your data has been processed,
• Learn the purpose of data processing and whether it is used in accordance with this purpose,
• Know the third parties with whom data is shared domestically or abroad,
• Request correction of data if it is incomplete or incorrectly processed,
• Request deletion or destruction of data,
• Request third parties to be notified of the processing of your data,
• Object to a conclusion against you that results from the analysis of data through automated systems,
• To demand compensation for damages in case you suffer damage due to unlawful processing.

1. 8. Data Security As Harranes, we take all necessary administrative and technical measures regarding the confidentiality and security of your personal data. Advanced encryption and security systems are used against data breaches.
2. 9. Amendments Changes to this Confidentiality Agreement will be announced on our website and will be effective from the date of announcement.
3. 10. Communication For any questions or requests, you can contact us through the following communication channels:
4. Email: info@harranes.com Address: [Write Your Company Address Here]