Clarification Text

EVYAP COMPANIES

WEBSITE DISCLOSURE TEXT WITHIN THE SCOPE OF THE LAW NO. 6698 ON THE PROTECTION OF PERSONAL DATA


Revision Date: March 2026


Purpose


As Evyap Holding Inc., Evyap Soap Oil Glycerin Industry and Trade Inc., Evyap International Foreign Trade Inc., Evyap Hygienic Products Industry and Trade Inc., and Evpaş Evyap Marketing and Trade Inc. (“Evyap” or the “Company”), the confidentiality and security of your personal data are among our top priorities. Your personal data is processed by Evyap in accordance with the Law No. 6698 on the Protection of Personal Data (“KVKK”) and other applicable legislation.


“Personal Data” is defined under KVKK as any information relating to an identified or identifiable natural person; within this Disclosure Text, it refers to Personal Data processed by Evyap in its capacity as the “Data Controller.”


This Disclosure Text has been prepared to fulfill our obligation to inform under Article 10 of KVKK and aims to provide detailed explanations regarding the processing of your personal data obtained through the contact form on the website https://www.evyap.com.tr/

. Your personal data obtained in this way is processed within Evyap in compliance with KVKK and all relevant regulations, without prejudice to your fundamental rights and freedoms.


In matters where Evyap processes Personal Data as a data controller under KVKK and related legislation, the information provided in this Disclosure Text shall apply.


Identity of the Data Controller


The data controller is EVYAP SOAP OIL GLYCERIN INDUSTRY AND TRADE INC., registered with the Istanbul Trade Registry Directorate under number 166189-0, with its registered office at İstanbul Deri Organized Industrial Zone, Güderi Street No:1 X-1 Private Parcel, Tuzla/Istanbul.


Collection of Your Personal Data and Method


Our Company processes your Personal Data for the purposes stated in this Disclosure Text.


Identity Data


Name and surname


Contact Data


Email address, phone number


Transaction Security Data


IP address and visit information collected during your website visit

Purposes and Legal Grounds for Processing Your Personal Data


Your Personal Data is processed in accordance with applicable legislation and KVKK, through automated or non-automated means, for the following purposes and in line with Article 5 of KVKK:


Receiving, evaluating, and concluding requests submitted via the website contact form; contacting the relevant person, managing communication processes, and recording them

Improving service quality and ensuring user satisfaction

Protecting the Company’s legitimate interests

Resolving current or potential legal disputes

Fulfilling legal obligations as required by regulatory and supervisory authorities


In accordance with Article 5/2 (c) and (f) of KVKK, data processing is necessary for the establishment or performance of a contract and for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject.


Contact Data


Used for receiving, evaluating, and concluding requests submitted via the website contact form and managing communication processes


Transaction Security Data


Processed to ensure website security, measure performance, improve user experience, analyze visitor traffic, create usage statistics, and evaluate user behavior


Your Personal Data will be retained for the period specified in relevant legislation or until the purpose of processing ceases, and in any case for statutory limitation periods.


Transfer of Your Personal Data to Third Parties


The procedures and principles regarding data transfers are regulated under Articles 8 and 9 of KVKK. Your Personal Data may be shared with the following recipient groups, where necessary for the normal course of business and with appropriate security measures:


Recipient Groups to Which Your Personal Data is Transferred


Your Identity, Contact, and Transaction Security Data may be shared with:


Affiliates, subsidiaries, and group companies

Third-party service providers acting on behalf of the Company

Infrastructure and IT service providers

Legally authorized public institutions and organizations upon request


For purposes such as:


Contacting you via the website, responding to your inquiries, and fulfilling services provided through the contact form

Conducting analysis, reporting, customer relationship management, and other operational processes

Protecting the Company’s legitimate interests

Resolving legal disputes

Fulfilling legal obligations


In accordance with Article 8/2 (a) and Article 5/2 (ç), (e), and (f) of KVKK.


Your Rights


Pursuant to Article 11 of KVKK, you may apply to our Company regarding your Personal Data and request:


To learn whether your personal data is processed

To request information if your personal data has been processed

To learn the purpose of processing and whether it is used in accordance with that purpose

To know the third parties to whom your personal data is transferred domestically or abroad

To request correction of incomplete or inaccurate data and notification of such correction to third parties

To request deletion, destruction, or anonymization of data when the reasons for processing cease, and notification of such actions to third parties

To object to a result against you arising from automated processing

To request compensation if you suffer damage due to unlawful processing

Application Procedure


As a data subject, you may submit your requests by filling out the Data Subject Application Form available at https://www.evyap.com.tr/

and sending it in accordance with the procedures specified in the relevant regulation.


Evyap will finalize your request as soon as possible and within a maximum of thirty days. If the process requires additional cost, a reasonable fee may be charged.


If your request is rejected, the reason will be communicated to you in writing or electronically.


This Disclosure Text may be revised by Evyap when deemed necessary.