Privacy Policy

ARDICTECH (ARDIC Teknoloji A.Ş.) is committed to protecting your personal data and respecting your privacy. This Privacy Policy explains how we collect, use, store, and protect the personal information you provide to us when you visit our website, use our services, or interact with us.

This Policy complies with the Turkish Personal Data Protection Law (KVKK — Law No. 6698) and the European Union General Data Protection Regulation (GDPR) where applicable.

The data controller responsible for your personal data is:

ARDICTECH (ARDIC Teknoloji A.Ş.) Address: Istanbul, Turkey Email: privacy@ardictech.com.tr

As the data controller, we determine the purposes and means of processing your personal data and are responsible for its lawful and secure handling.

We may collect the following categories of personal data:

• Identity Data: Name, surname, job title, company name. • Contact Data: Email address, phone number, postal address. • Technical Data: IP address, browser type, operating system, pages visited, session duration. • Usage Data: Information about how you use our website and services. • Communication Data: Messages, inquiries, and correspondence you send us via contact forms or email. • Cookie Data: Preferences and analytics data collected through cookies and similar technologies.

We do not intentionally collect sensitive personal data (special category data) through our website.

We collect personal data through the following channels:

• Directly from you: When you fill out contact forms, subscribe to our newsletter, request a demo, or communicate with us. • Automatically: Through cookies, analytics tools, and server logs when you visit our website. • From third parties: Business partners, referrals, or publicly available professional information (e.g., LinkedIn) where relevant and permitted.

We process your personal data on the following legal grounds under KVKK and GDPR:

• Consent: When you have given explicit consent, such as subscribing to our newsletter or accepting non-essential cookies. • Contract Performance: Processing necessary to fulfill a contract with you or to take pre-contractual steps at your request. • Legitimate Interests: Processing for our legitimate business interests, such as improving our services and website, provided these do not override your rights. • Legal Obligation: Processing required to comply with applicable laws and regulations.

We use your personal data for the following purposes:

• To respond to your inquiries and provide requested information. • To deliver our services and manage our business relationship with you. • To send marketing and informational communications (where you have opted in). • To improve and personalize your experience on our website. • To analyze website usage and performance through anonymized analytics. • To comply with legal obligations and protect our legal rights. • To detect, prevent, and address security incidents and fraud.

We do not sell your personal data to third parties. We may share your data with:

• Service Providers: Third-party companies that assist us in operating our website and services (e.g., cloud hosting, email marketing, analytics platforms). These companies process data on our behalf and are bound by data processing agreements. • Legal Authorities: When required by law, regulation, or court order, or to protect the rights and safety of ARDICTECH and others. • Business Partners: With your consent, we may share relevant information with trusted business partners.

All third-party service providers are required to implement appropriate safeguards for your personal data.

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including for legal, accounting, or reporting requirements.

• Contact form and inquiry data: Retained for 2 years from the date of last interaction. • Newsletter subscription data: Retained until you unsubscribe. • Analytics data: Retained in anonymized form for up to 26 months. • Cookie data: Retained according to our Cookie Policy.

After the applicable retention period, your data will be securely deleted or anonymized.

Under KVKK and GDPR, you have the following rights regarding your personal data:

• Right to be Informed: To know what personal data we process and why. • Right of Access: To request a copy of the personal data we hold about you. • Right to Rectification: To request correction of inaccurate or incomplete data. • Right to Erasure: To request deletion of your data where there is no compelling reason for its continued processing. • Right to Restrict Processing: To request restriction of how we use your data. • Right to Data Portability: To receive your personal data in a machine-readable format. • Right to Object: To object to processing based on legitimate interests or for direct marketing. • Right to Withdraw Consent: To withdraw consent at any time where processing is based on consent.

To exercise any of these rights, contact us at: privacy@ardictech.com.tr. We will respond within 30 days.

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, destruction, or alteration. These measures include encrypted data transmission (HTTPS/TLS), access controls, regular security assessments, and staff data protection training.

While we strive to protect your personal data, no method of internet transmission or electronic storage is 100% secure. We encourage you to use strong passwords and protect your account credentials.

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we update this policy, we will revise the 'Last updated' date at the top of this page.

For significant changes, we will notify you via email or a prominent notice on our website. We encourage you to review this Privacy Policy periodically.

For any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact our Data Protection team:

ARDICTECH (ARDIC Teknoloji A.Ş.) Email: privacy@ardictech.com.tr Address: Istanbul, Turkey

You also have the right to lodge a complaint with the Turkish Personal Data Protection Authority (KVKK) or your local data protection supervisory authority.