ARGETO Vegetable Seeds COMPANY
INFORMATION NOTICE ON THE PROCESSING OF PERSONAL DATA

This Information Notice has been prepared by ARGETO Vegetable Seeds Company (the "Company") to inform the Company's customers about the processing of their personal data by the Company within the scope of the Personal Data Protection Law No. 6698 (the "Law").

For detailed information on the processing of your personal data within the scope of this Information Notice, you can access the ARGETO Vegetable Seeds Company Personal Data Protection and Processing Policy at [www.argeto.com.tr].

1. a) Methods of Obtaining Personal Data and Legal Grounds

Your personal data is collected in electronic or physical form. The personal data collected for the legal reasons specified in this Information Notice may be processed and shared within the scope of the personal data processing conditions specified in Articles 5 and 6 of the Law.

1. b) Purposes of Processing Personal Data

Your personal data is processed within the scope of the personal data processing conditions specified in Articles 5 and 6 of the Law for the purposes of planning and executing the necessary activities for the customization, recommendation, and promotion of the products and services offered by the Company according to the preferences, usage habits, and needs of the relevant persons; carrying out the necessary work by business units to enable relevant persons to benefit from the products and services offered by the Company and executing the related business processes; conducting the necessary work by business units to carry out the commercial activities of the Company and executing the related business processes; planning and executing the Company's commercial and/or business strategies; and ensuring the legal, technical, and commercial-business security of the Company and the relevant persons who have a business relationship with the Company.

1. c) Parties to Whom Personal Data May Be Shared and Purposes of Sharing

Your personal data may be shared within the scope of the personal data processing conditions and purposes specified in Articles 8 and 9 of the Law with the Company's business partners and suppliers, legally authorized institutions and organizations, and legally authorized private legal entities for the purposes of planning and executing the necessary activities for the customization, recommendation, and promotion of the products and services offered by the Company according to the preferences, usage habits, and needs of the relevant persons; carrying out the necessary work by business units to enable relevant persons to benefit from the products and services offered by the Company and executing the related business processes; conducting the necessary work by business units to carry out the commercial activities of the Company and executing the related business processes; planning and executing the Company's commercial and/or business strategies; and ensuring the legal, technical, and commercial-business security of the Company and the relevant persons who have a business relationship with the Company.

1. d) Rights of Data Subjects and Exercise of These Rights

If data subjects submit their requests regarding their rights as listed below to the Company using the methods specified under the title "Exercise of Rights by Data Subjects," such requests will be evaluated and concluded by our Company as soon as possible and in any case within 30 (thirty) days.

Pursuant to Article 11 of the Law, as a personal data subject, you have the following rights:

• To learn whether your personal data is processed,
• If your personal data has been processed, to request information regarding this,
• To learn the purpose of processing your personal data and whether they are used in accordance with their purpose,
• To know the third parties to whom your personal data has been transferred domestically or abroad,
• If your personal data is processed incompletely or incorrectly, to request their correction and to request that the process carried out in this context be notified to third parties to whom your personal data has been transferred,
• Despite being processed in accordance with the Law and other relevant legal provisions, if the reasons requiring processing are no longer valid, to request the deletion or destruction of your personal data and to request that the process carried out in this context be notified to third parties to whom your personal data has been transferred,
• To object to the occurrence of a result against you by analyzing your processed data exclusively through automated systems,
• If you suffer damage due to the unlawful processing of your personal data, to demand the compensation of the damage.

Exercise of Rights by Data Subjects

• Data subjects may use the "Application Form for Personal Data Owners to Apply to the Data Controller" available at [www.argeto.com.tr] to exercise their rights mentioned above.
• Applications shall be made together with documents verifying the identity of the relevant data subject via one of the following methods:
• By delivering a wet-signed copy of the completed form by hand, via notary, or via registered mail to the address [Boztepe Mahallesi Atatürk Caddesi No:200 Aksu / ANTALYA],
• By signing the form with a secure electronic signature under the Electronic Signature Law No. 5070 and sending it to [..........................@hs02].kep.tr via registered electronic mail,
• By following a method stipulated by the Personal Data Protection Board.

The Company, within the limits prescribed by the Law, responds to data subjects who wish to exercise these rights within a maximum of thirty (30) days, as stipulated by the Law. To allow third parties to apply on behalf of data subjects, a notarized special power of attorney issued by the data subject must be presented.

Applications by data subjects are processed free of charge as a rule; however, a fee may be charged based on the fee schedule determined by the Personal Data Protection Board.[1]

The Company may request information from the relevant person to determine whether the applicant is the personal data owner and may ask the personal data owner questions to clarify issues stated in the application.

[1] Pursuant to the "Communiqué on the Procedures and Principles of Application to the Data Controller" published in the Official Gazette dated 10.03.2018 and numbered 30356, if the response to the application is provided in writing, no fee is charged for up to ten pages. A processing fee of 1 Turkish Lira may be charged for each page exceeding ten pages. If the response to the application is provided in a recording medium such as a CD or flash memory, the fee that may be charged cannot exceed the cost of the recording medium.