Personal Data Protection Law (KVKK) Policy

1. Data Controller

ENKA Motor Vehicles Inc. ("ENKA") acts as the data controller within the scope of the Personal Data Protection Law No. 6698 ("KVKK").

2. Purposes of Processing Personal Data

Your personal data is processed for the following purposes:

• Performing membership procedures for our auction systems
• Managing customer relations
• Fulfilling legal obligations
• Improving service quality
• Conducting communication activities

3. Transfer of Personal Data

Your personal data may be transferred to our business partners, suppliers, and legal authorities in accordance with the conditions specified in Articles 8 and 9 of the KVKK.

4. Method and Legal Basis for Collecting Personal Data

Your personal data is collected through our website, mobile applications, call center, and physical application forms, based on the legal grounds specified in Article 5 of the KVKK.

5. Rights of the Data Subject

Pursuant to Article 11 of the KVKK, you have the following rights:

• To learn whether your personal data is being processed
• To request information if it has been processed
• To learn the purpose of processing and whether it is being used appropriately
• To know the third parties to whom your data has been transferred domestically or abroad
• To request correction if processed incompletely or incorrectly
• To request deletion or destruction within the framework of conditions stipulated in Article 7 of the KVKK

6. Contact

You can use the following contact information for your requests within the scope of KVKK:

ENKA Motor Vehicles Inc.
Address: Ahi Evran Cad. Polaris Plaza Floor:16 Maslak/Sariyer/Istanbul
Email: kvkk@en-ka.com.tr
Phone: +90 (212) 335 6335

Marketing Source Tracking and Digital Advertising Signals

Data category collected: Marketing source data (UTM parameters, click-ids — gclid, fbclid, msclkid, ttclid — referrer URL, search engine keyword, LLM source).

Retention period: Source tracking data collected upon form submission is retained indefinitely for the purposes of customer relationship management and direct marketing.

Third-party transfer: Upon form submission, a conversion signal is forwarded to Google Analytics 4 (Measurement Protocol) and Google Ads; if Meta Pixel is installed, the Lead event is triggered.

Legal basis: Explicit consent (KVKK Art. 5/1) — collected via the KVKK consent checkbox in the form.