Pursuant to Article 10 of the Turkish Personal Data Protection Law No. 6698 (“PDPL”), Oltan Köleoğlu Energy (“the Company”), acting as data controller, hereby informs you about the processing of your personal data. 1. Data controller Oltan Köleoğlu Energy Address: Levazım Mah. Koru Sok. No:2, Zorlu Center Offices Lobby D: 561-562-563, Beşiktaş / Istanbul, Türkiye Email: [email protected] Phone: +90 850 244 34 61 Website: https://oltankoleogluenerji.com 2. Personal data processed Through our website and communication channels we may process identity data (name, surname), contact data (email, phone), request/message content, career application and CV data, transaction security data (IP address, browser information, cookie records) and other data required to fulfil legal obligations. 3. Purposes of processing Your data is processed to respond to enquiries, conduct corporate and investor communications, assess career applications, ensure website security, fulfil legal duties, protect our rights in potential disputes and, where you give consent, for analytics/measurement (e.g. Google Analytics). 4. Legal bases Processing is based on PDPL Art. 5: explicit consent, establishment or performance of a contract, compliance with a legal obligation, establishment, exercise or protection of a right, and legitimate interest. 5. Transfer Data may be transferred to competent public authorities where legally required, to IT/hosting, email and analytics providers, and to business partners, in accordance with the PDPL. International transfers are made only where the safeguards required by the PDPL are in place. 6. Collection method Data is collected via website forms, email, phone, cookies and similar automated means, and from information you provide directly. 7. Your rights (PDPL Art. 11) You may request to learn whether your data is processed, to obtain information, to learn whether it is used in line with its purpose, to know third parties to whom it is transferred, to request correction, erasure or destruction, to request notification of such operations to recipients, to object to analysis by automated systems, and to claim compensation for damage. Please send requests to [email protected] or to the postal address above. Requests will be concluded within the periods set out in the applicable legislation. Last updated: 14 August 2026