INFORMATION TEXT UNDER KVKK

INFORMATION TEXT ON THE PROCESSING OF PERSONAL DATA WITHIN THE SCOPE OF LAW NO. 6698 OF GRASSL & CO GMBH INTERNATIONALE SPEDITION

Disclosure Text on the Protection of Personal Data

Grassl & Co GmbH Internationale Spedition (Grassl Spedition) respects your privacy and attaches the highest importance to the protection of personal data. With this awareness, it is our priority to process and protect all personal data of all natural persons, including those who benefit from our products and services, in the best possible way and with the greatest care. In full knowledge of this responsibility, we process your personal data in our role as data controller in accordance with Law No. 6698 on the Protection of Personal Data ("Law") and relevant regulations, as explained below and within the limits prescribed by the Law.

This text has been prepared to inform you comprehensively within the framework of Law No. 6698 and other relevant regulations. The Law was enacted with the aim of protecting the fundamental rights and freedoms of individuals, especially the right to privacy.

Personal Data: Any information relating to an identified or identifiable natural person (e.g., name, address, e-mail, IP address, visual and audio recordings).

Special Categories of Personal Data: Data concerning race, ethnic origin, political opinion, religion, health, sexual life, or criminal convictions. These are processed only with explicit consent or under conditions provided by law.

Collection and Processing of Your Personal Data

The processing of your personal data varies depending on the services offered by Grassl Spedition. Grassl Spedition processes this data throughout the duration of cooperation with suppliers, the duration of services utilized by customers, and during the employment relationship of employees.

General and special categories of personal data are processed for purposes including, but not limited to:

• Identity data (name, passport number, date of birth, etc.)

• Contact data (address, phone number, email)

• Financial data (bank account, IBAN, billing information)

• Image recordings from security cameras during visits to our facilities.

• For job applications: CVs and qualification certificates for the creation of personnel files.

• Vehicle and tracking data to ensure company traceability and legal compliance.

Purposes of Processing Your Data

Your personal data is processed to:

• Provide the products and services offered by our company.

• Carry out operational activities and business strategies.

• Ensure the legal security of Grassl Spedition and the natural persons with whom we have business relations.

• Ensure communication with you and others as part of business activities.

• Comply with applicable laws (e.g., tax laws, anti-terrorism regulations) and respond to requests from public authorities.

Recipients and Purposes of Data Transfer

Collected data may be transferred to business partners, legally authorized public institutions (e.g., Customs Authorities, Judicial Authorities, Social Security Institutions), and private individuals within the framework of the conditions specified in Articles 8 and 9 of the KVKK.

Rights of the Data Subject under Article 11 of the KVKK

You have the right to:

• Learn whether your personal data is being processed.

• Request information if your data has been processed.

• Learn the purpose of the processing and whether it is used for that purpose.

• Request the correction of incomplete or incorrect data.

• Request the deletion or destruction of your data.

• Object to decisions based solely on automated processing.

• Claim compensation in case of damage due to unlawful processing.

---

Data Security

Grassl Spedition protects your personal data through technical and administrative measures:

• Administrative: Facility security, access authorizations, confidentiality agreements, risk assessments, and regular employee training.

• Technical: Firewall systems, anti-virus software, authorization matrices, encrypted backups, and SIEM solutions.

---

Data Controller Information

Data Controller: Grassl & Co GmbH Internationale Spedition

Address: Fabrikstraße 16, 73230 Kirchheim unter Teck, Germany

---

EXPLICIT CONSENT FORM FOR DATA OWNERS

I confirm that I have read this information text and give my consent in advance to the collection, recording, processing, and storage of my personal data by Grassl & Co GmbH Internationale Spedition (Grassl Spedition) within the framework of legal provisions. This includes identity data, contact data, video/audio recordings, and where applicable, health data as defined by Law No. 6698.

I AUTHORIZE / I GIVE MY CONSENT (to be written by hand):

---

FIRST NAME SURNAME: Signature:

---

COOKIE POLICY

Grassl Spedition uses cookies to facilitate the use of the website and improve our service.

• Necessary Cookies: Essential for basic website functions.

• Analytical/Performance Cookies: Help us understand how visitors interact with the site.

• Targeting/Advertising Cookies: Used to provide relevant marketing content.

You can control or delete cookies at any time via your browser settings.