Privacy Policy

This Privacy Policy applies solely to the Mopaş investor relations website. Third-party links featured on our website (such as the Public Disclosure Platform, Borsa İstanbul, the Capital Markets Board, the Central Securities Depository and Mopaş Online) are subject to their own privacy practices; our Company is not responsible for the content or the data processing activities of those websites.

Our website does not require visitors to register or create an account. Personal data is processed only where you provide it to us or where technical data arises from your use of the website:

• Contact data: the name and surname, e-mail address, telephone number and message content you provide when contacting our investor relations department by e-mail or telephone.
• Investor request data: the information and documents you share in applications concerning the exercise of shareholder rights.
• Transaction security data: IP address, browser and device type, operating system, date and duration of your visit, the pages viewed and the referring link.

Your personal data is processed for the following purposes, relying on the legal grounds set out in Article 5 of the KVKK:

• Responding to the requests of investors, shareholders and analysts, and answering information requests.
• Fulfilling public disclosure and shareholder-related obligations arising from capital markets legislation and the Turkish Commercial Code (legal obligation).
• Ensuring the security, continuity and performance of the website and preventing misuse (legitimate interest).
• Statistical analyses aimed at improving the website content and the user experience (explicit consent or legitimate interest).

Cookies are small text files stored on your device by the websites you visit. The cookies used on our website are as follows:

• Strictly necessary cookies: required for the website to function, for your language preference to be remembered and for basic security; they cannot be disabled.
• Performance and analytics cookies: help us improve our content by measuring, in aggregate and anonymous form, which pages are viewed and how often.
• Preference cookies: ensure that choices such as display settings are remembered on your subsequent visits.

No cookies are used on our website for advertising or profiling purposes. Through your browser settings you may delete or block cookies, or request to be notified when a cookie is placed. If strictly necessary cookies are blocked, certain sections of the website may not function as expected.

Your personal data is not sold or rented to third parties for marketing purposes. Your data may be shared, to a limited extent and under an obligation of confidentiality, only with the Capital Markets Board, Borsa İstanbul, the Central Securities Depository, the Public Disclosure Platform and authorised public institutions within the scope of obligations arising from legislation, and with the independent audit, legal, information technology and hosting service providers we engage in order to carry out our activities.

Your personal data is retained for the period necessary for the purpose for which it is processed and for the statutory limitation periods set out in the relevant legislation; once those periods expire it is deleted, destroyed or anonymised. Our Company implements appropriate technical and administrative measures to prevent the unlawful processing of, and unauthorised access to, personal data.

Pursuant to Article 11 of the KVKK, you have the following rights as a data subject:

• To learn whether your personal data is being processed and, if so, to request information in this regard.
• To learn the purpose of processing and whether the data is used in accordance with that purpose.
• To know the third parties in Türkiye or abroad to whom the data is transferred.
• To request the rectification of incomplete or inaccurately processed data.
• To request the erasure or destruction of the data under the conditions set out in the legislation.
• To request that rectification, erasure and destruction operations be notified to the third parties to whom the data has been transferred.
• To object to an outcome that is to your detriment arising from the analysis of the data exclusively by automated systems.
• To claim compensation for damages incurred as a result of the unlawful processing of the data.

You may submit your requests to our Company, together with information verifying your identity, through the contact channels set out below. Your applications are concluded free of charge within thirty days at the latest.

Mopaş reserves the right to amend this Privacy Policy in line with changes in legislation or updates to its business processes. The current text is always published on this page and takes effect on the date of its publication.