PERSONAL DATA PROTECTION AND PRIVACY POLICY

This Personal Data Protection and Privacy Policy (the “Policy”) has been prepared to explain the principles regarding the processing of personal data belonging to users, customers, and potential customers who visit the website www.nile.com.tr, operated by NILE TRADE BRIDGE LTD. ŞTİ. (the “Company”), in accordance with the Turkish Personal Data Protection Law No. 6698 (“KVKK”) and relevant legislation.

1. Data Controller

Pursuant to KVKK, your personal data may be processed by NILE TRADE BRIDGE LTD. ŞTİ., acting as the data controller, within the scope described below.

Trade Name: NILE TRADE BRIDGE LTD. ŞTİ.

Website: www.nile.com.tr

2. Processed Personal Data

During your visit to our website and your use of our services, the following personal data may be processed:

• Identity information (name, surname – via contact forms, mails)
• Contact information (e-mail address, phone number)
• Transaction security information (IP address, log records)
• Usage and traffic data (via cookies)
• Requests, complaints, and message contents

3. Purposes of Processing Personal Data

Your collected personal data are processed for the following purposes:

• Conducting website activities
• Responding to communication requests
• Providing information about products and services
• Managing customer relationship processes
• Fulfilling legal obligations
• Ensuring information security processes
• Analyzing website performance and user experience

4. Legal Grounds for Processing Personal Data

Your personal data are processed based on the following legal grounds:

• Explicitly stipulated in laws pursuant to Article 5/2 of KVKK,
• Being directly related to the establishment or performance of a contract,
• Fulfilling the legal obligations of the data controller,
• Legitimate interests of the data controller, provided that fundamental rights and freedoms are not harmed

5. Transfer of Personal Data

Your personal data may be transferred, in compliance with KVKK and relevant legislation, to:

• Authorized public institutions and organizations,
• Business partners from whom legal or technical services are obtained,
• Information technology infrastructure service providers

6. Cookies and Google Analytics

Cookies are used on our website to improve user experience and analyze website performance.

In this context, Google Analytics (GA4 – Measurement ID: 366615004) is used. Google Analytics collects anonymous data regarding how users use the website. IP addresses are processed using masking methods, and no direct personal identification is performed.

The collected data are stored for 14 months and used solely for analytical purposes.

Users may refuse or delete cookies through their browser settings.

7. Retention Period of Personal Data

Your personal data are retained for the period required by the purpose of processing and in accordance with the retention periods stipulated in relevant legislation. Upon expiration of these periods, personal data are deleted, destroyed, or anonymized.

8. Your Rights Under KVKK

Pursuant to Article 11 of KVKK, as a data subject, you have the right to:

• Learn whether your personal data are processed,
• Request information if your personal data have been processed,
• Learn the purpose of processing and whether they are used in accordance with this purpose,
• Know the third parties to whom personal data are transferred domestically or abroad,
• Request correction of incomplete or inaccurate personal data,
• Request deletion or destruction of personal data in accordance with KVKK,
• Request notification of such actions to third parties to whom personal data have been transferred,
• Object to the occurrence of a result against you through analysis exclusively by automated systems,
• Request compensation for damages in case of unlawful processing of personal data

9. Applications and Contact

You may submit your requests within the scope of KVKK to our Company in writing or via registered electronic mail (KEP), e-mail, or through the communication channels available on our website.

Applications will be concluded within a maximum of 30 days in accordance with KVKK.

10. Policy Updates

This Policy may be updated depending on changes in legislation and Company practices. The current version is published on www.nile.com.tr.

Effective Date: 15.12.2025