PRIVACY POLICY

In Accordance with the General Data Protection Regulation (GDPR) and Applicable Privacy Laws

1. Data Controller

This Privacy Policy has been prepared by BESCO OTOMOTİV SANAYİ VE TİCARET A.Ş., operating under the brand name CHEEFT (hereinafter referred to as "CHEEFT" or "the Company"), acting as the Data Controller within the meaning of the General Data Protection Regulation (EU) 2016/679 ("GDPR") and other applicable privacy legislation.

Trade Name: BESCO OTOMOTİV SANAYİ VE TİCARET A.Ş. Brand: CHEEFT Address: [Full Company Address], Konya, Türkiye E-mail: info@cheeft.com Website: www.cheeft.com

2. Personal Data We Collect

When you submit a contact form, request a commercial offer, or request a proforma invoice through our website (www.cheeft.com), we collect the following personal data:

• First name and last name
• Corporate or personal e-mail address
• Postal address
• Company / business name
• Message content (your inquiry, request, or any information you choose to provide)

In the future, if a user account / login feature is introduced, additional data such as encrypted passwords, session data, and account preferences will be processed. This Policy will be updated and you will be notified before any such feature is activated.

3. Purposes of Processing

We process your personal data for the following purposes:

• To respond to your inquiries and commercial correspondence
• To prepare and deliver proforma invoices and commercial offers for the products you request
• To manage orders, shipments, and export operations
• To provide information about our products and services
• To fulfill our legal obligations under applicable trade, tax, and customs law
• To conduct or defend legal claims if a dispute arises

4. Legal Basis for Processing

We process your personal data on the following legal grounds under Article 6 of the GDPR:

• Article 6(1)(b): Processing is necessary for the performance of a contract or to take steps at your request prior to entering into a contract
• Article 6(1)(c): Processing is necessary for compliance with a legal obligation (e.g., customs, tax, and trade regulations)
• Article 6(1)(f): Processing is necessary for the purposes of the legitimate interests pursued by the Company (e.g., business communication and relationship management), except where such interests are overridden by your fundamental rights and freedoms
• Article 6(1)(a): Your explicit consent, where required (e.g., marketing communications)

5. Sharing of Personal Data

Your personal data is shared only in the following circumstances and with the following parties:

• Competent public authorities: Customs administration, tax authorities, and relevant trade ministries, to the extent required by applicable law
• Business partners and suppliers: International logistics companies, freight forwarders, and agents involved in the processing of your order or shipment
• Technical service providers: Web hosting, e-mail, and software infrastructure providers, subject to appropriate safeguards (data processing agreements and, where applicable, Standard Contractual Clauses for international transfers)

Your personal data is never sold, rented, or commercially disclosed to third parties for purposes other than those stated above.

6. International Data Transfers

As CHEEFT is a Turkey-based exporter serving over 70 countries, your personal data may be transferred to countries outside the European Economic Area (EEA) in the course of fulfilling export and logistics operations. Such transfers are made only where an adequate level of protection is ensured through Standard Contractual Clauses, binding corporate rules, or other appropriate safeguards in accordance with Chapter V of the GDPR.

7. Retention Period

Your personal data is retained for as long as necessary to fulfill the purposes described in this Policy and to comply with applicable legal retention requirements. Commercial correspondence and proforma invoices are retained for 10 years in accordance with Turkish Commercial Law. Upon expiry of the applicable retention period, your personal data is securely deleted, destroyed, or anonymized.

8. Your Rights

Depending on your location and applicable law, you may have the following rights regarding your personal data:

• The right to access your personal data
• The right to rectification of inaccurate or incomplete data
• The right to erasure ("right to be forgotten")
• The right to restriction of processing
• The right to data portability
• The right to object to processing based on legitimate interests
• The right to withdraw consent at any time (without affecting the lawfulness of processing prior to withdrawal)
• The right to lodge a complaint with a supervisory authority

To exercise any of these rights, please contact us at info@cheeft.com or by writing to our postal address. We will respond to your request within 30 days.

9. Cookies

Our website uses technically necessary cookies to ensure its functionality. If we introduce analytical or marketing cookies, a separate Cookie Policy will be published and your explicit consent will be obtained prior to their use.

10. Changes to This Policy

This Policy may be updated from time to time to reflect changes in our practices or applicable law. The current version is always available at www.cheeft.com.

Last Updated: 01.02.2026