1. Data Controller

Pursuant to the Turkish Personal Data Protection Law No. 6698 (“KVKK”), your personal data may be processed by Dooras Fire Systems (“Dooras” or the “Company”), acting as the Data Controller, within the scope described below.

Dooras attaches great importance to the lawful processing, protection, and security of personal data and implements all necessary technical and organizational measures to ensure the confidentiality and security of personal data.

2. Categories of Personal Data Processed

Within the scope of the services provided, commercial activities conducted, and communication processes managed by Dooras, the following categories of personal data may be processed:

Identity Information (Name and surname)

Contact Information (Telephone number, e-mail address, and address information)

Customer Transaction Information (Quotation requests, order details, requests, and complaint records)

Financial Information (Bank account details, payment records, and reconciliation information)

Transaction Security Information (IP address, website access records, and log records)

Visual Records (Security camera recordings within the Company’s factory and premises)

Digital Usage Data (Cookie records and website usage information)

3. Purposes of Processing Personal Data

Your personal data may be processed for the following purposes:

• Providing products and services;
• Managing quotation, sales, order fulfillment, and after-sales processes;
• Managing customer relationship processes;
• Evaluating requests, inquiries, and complaints;
• Conducting finance and accounting operations;
• Maintaining commercial relationships with customers, suppliers, and business partners;
• Ensuring compliance with applicable laws and regulations;
• Ensuring physical premises security;
• Managing information security processes;
• Managing website usage and digital communication processes;
• Organizing and managing events, seminars, training programs, and corporate activities;
• Fulfilling legal and regulatory obligations;
• Conducting marketing, promotional, and customer satisfaction activities in accordance with applicable legislation.

4. Methods and Legal Grounds for Collecting Personal Data

Your personal data may be collected verbally, in writing, or electronically through automated or non-automated means via:

• Website;
• Contact forms;
• E-mail communications;
• Telephone conversations;
• Social media platforms;
• Quotation and order processes;
• Physical visits;
• Security camera systems;
• Contracts and official documentation.

Your personal data may be processed based on one or more of the legal grounds set forth under Articles 5 and 6 of the Turkish Personal Data Protection Law No. 6698 (KVKK), including:

• Explicitly provided for by law;
• Necessity for the establishment or performance of a contract;
• Fulfillment of legal obligations;
• Establishment, exercise, or protection of a legal right;
• Legitimate interests pursued by the data controller;
• Explicit consent, where required.

5. Transfer of Personal Data

Your personal data may be transferred, to the extent necessary and limited to the relevant purposes, to:

• Authorized public institutions and governmental authorities;
• Legally authorized private entities;
• Banks and financial institutions;
• Suppliers and business partners;
• Legal, financial, tax, and audit advisors;
• Information technology, software, hosting, cloud, and technical support service providers;
• Logistics, transportation, and operational service providers.

Where necessary, personal data may be processed and transferred domestically or internationally in compliance with applicable legal requirements and by implementing appropriate technical and organizational safeguards.

6. Cookies and Website Usage

Dooras may use cookies and similar technologies on its website to enhance user experience, ensure website security, and analyze website performance.

Cookies used on the website may include:

• Essential cookies;
• Performance and analytics cookies;
• Functional cookies.

For further information, please refer to our Cookie Policy.

7. Retention and Security of Personal Data

Dooras implements appropriate technical and organizational measures to protect personal data against:

• Unauthorized access;
• Data loss;
• Unlawful processing;
• Alteration;
• Accidental or unlawful disclosure.

Personal data is retained only for the period required by applicable legislation or for as long as necessary to fulfill the purposes for which it was collected. Upon expiration of the applicable retention period, personal data is securely deleted, destroyed, or anonymized in accordance with legal requirements.

8. Your Rights as a Data Subject

Under Article 11 of the Turkish Personal Data Protection Law No. 6698 (KVKK), you have the right to:

• Learn whether your personal data is being processed;
• Request information regarding the processing of your personal data;
• Learn the purpose of processing and whether your data is being used in accordance with such purpose;
• Learn the third parties to whom your personal data has been transferred;
• Request correction of incomplete or inaccurate personal data;
• Request the deletion or destruction of personal data where applicable;
• Request notification of such correction, deletion, or destruction to third parties to whom the data has been transferred;
• Object to any result arising against you through the exclusive analysis of your data by automated systems;
• Request compensation for damages incurred due to unlawful processing of personal data.

9. Contact and Application Procedure

Requests regarding your rights under the Turkish Personal Data Protection Law No. 6698 (KVKK) may be submitted to the Company through:

• Written application;
• Notary public;
• Registered Electronic Mail (KEP);
• Secure electronic signature;
• Any other method permitted by applicable legislation.

You may contact us through the following channels:

Dooras Fire Systems

E-mail: dooras@dooras.com

Website: www.dooras.com

The Company shall respond to all duly submitted requests within the periods prescribed under applicable legislation.