PRIVACY AND PERSONAL DATA PROTECTION POLICY

Last Updated: September 16, 2026

Movi Modular and Mobile Building Systems Ltd. (“MOVI,” “the Company,” “we,” or “our”) is committed to the privacy and security of your personal data.

This Privacy and Personal Data Protection Policy (“Policy”) has been prepared to explain the scope of personal data collected through the website and digital services operated by MOVİ, the purposes for which it is processed, with whom it may be shared, how long it is retained, and the rights of data subjects.

MOVİ aims to act in compliance with applicable legislation—primarily the Personal Data Protection Law No. 6698 (“KVKK”)—and, to the extent applicable, the European Union General Data Protection Regulation (“GDPR”) when processing personal data.

1. Data Controller

Your personal data is processed by the following entity acting as the data controller under applicable legislation:

Movi Modular and Mobile Structure Systems Ltd.

Phone: +90 850 441 17 74
WhatsApp: +90 542 245 66 84
Email: [email protected]
Address: Kaleiçi Mah. Gökceali Cad. No: 134/1, Çatalca / Istanbul

You may submit any questions, requests, or inquiries regarding your personal data to us via the contact channels listed above.

2. Personal Data Collected

MOVİ may process the following personal data to the extent necessary when you use our website and services, contact us, request information about our products or services, or establish a business relationship with us:

First and last name,
Phone number,
Email address,
Contact and correspondence information,
Information regarding communications conducted via WhatsApp,
Request and application details,
Preferences and requests regarding products and services,
IP address,
Time of access to the website and connection information,
Technical information regarding the device and browser used,
Information regarding the use of the website,
Information obtained through cookies and similar technologies,
Other information voluntarily provided by you.

Sensitive personal data is not requested or processed unless necessary. If you voluntarily provide sensitive personal data, such data will be processed only to the extent permitted by applicable laws and provided that the necessary legal conditions are met.

3. Methods of Collecting Personal Data

Your personal data is collected through:

Contact and information request forms on our website,
Email communication,
Phone calls,
WhatsApp communication,
Website usage,
Cookies and similar technologies,
Requests for products or services,
Sales and contract processes,
Applications submitted directly by you

may be collected electronically or physically through such channels.

4. Purposes of Processing Personal Data

Your collected personal data may be processed for the following purposes in accordance with applicable legislation:

To respond to requests for information about our products and services,
To handle customer requests and communication processes,
To prepare and submit offers,
To manage sales and contract processes,
To ensure the delivery of products and services,
To manage order, delivery, installation, and post-sale processes,
Manage customer relationships and support processes,
Evaluating requests, complaints, and inquiries,
Ensuring the security and proper functioning of our website,
To improve the user experience on our website,
Identify and resolve technical issues,
Preventing fraud, misuse, and security breaches,
To carry out information security processes,
To comply with legal and regulatory obligations,
To respond to requests from authorized public institutions and organizations,
To conduct and monitor legal proceedings,
To conduct our company’s legitimate business activities,
To carry out marketing and promotional activities to the extent permitted by law.

5. Legal Grounds for the Processing of Personal Data

Your personal data may be processed based on one or more of the following legal grounds, depending on the nature of the specific processing activity:

Your explicit consent,
The necessity of data processing for the conclusion or performance of a contract,
To fulfill our company’s legal obligations,
Data processing is necessary for the establishment, exercise, or defense of a legal claim,
The existence of our legitimate interests, provided that these interests do not infringe upon the fundamental rights and freedoms of the data subject,
Where expressly provided for by law,
Other legal grounds provided for in the Personal Data Protection Law (KVKK) and other applicable legislation.

In data processing activities based on explicit consent, you may withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out based on consent prior to such withdrawal.

6. Cookies and Similar Technologies

Our website may use cookies and similar technologies to ensure the proper functioning of the site, enhance security, improve the user experience, and, when necessary, analyze website usage.

Through cookies, we may collect technical usage information such as IP addresses, device information, browser information, pages visited, time of visit, and similar data.

Depending on the type of cookies used, your explicit consent may be obtained when necessary for the processing of personal data.

You can choose to accept or reject cookies through your browser settings. However, disabling certain cookies may prevent specific features of the website from functioning properly.

For more detailed information about the types of cookies used, their purposes, and retention periods, please review our Cookie Policy, which is published separately.

7. Sharing Personal Data with Third Parties

MOVİ does not sell or rent your personal data to third parties under any circumstances.

However, to the extent necessary for the provision of our services and to fulfill our legal obligations, your personal data may be shared with the following individuals and organizations:

Information technology and software service providers,
Website and server/hosting service providers,
Technical support service providers,
Shipping, logistics, delivery, and installation service providers,
Accounting and financial service providers,
Legal, tax advisory, and consulting service providers,
Authorized public institutions and organizations,
Legally authorized individuals and organizations,
Other service providers that support our company’s operations.

Your personal data is shared only to the extent necessary to fulfill the relevant service or comply with a legal obligation.

We strive to implement the necessary contractual and technical measures to ensure that third-party service providers process personal data in a manner that complies with applicable laws and is secure.

8. Transfer of Data Abroad

In cases where it is necessary to transfer your personal data abroad, the conditions set forth in the Personal Data Protection Law (KVKK) and other applicable data protection legislation are adhered to.

Where the GDPR applies, appropriate security measures and transfer mechanisms provided for under the GDPR may be used for data transfers to countries outside the European Economic Area.

These may include, to the extent applicable, the Standard Contractual Clauses adopted by the European Commission or other appropriate data transfer mechanisms permitted by applicable law.

9. Security of Personal Data

MOVİ takes reasonable technical and administrative security measures to prevent the unlawful processing of personal data, as well as unauthorized access, loss, alteration, or disclosure of such data.

In this context, to the extent applicable:

Authorization and access controls,
Information security practices,
Technical security measures,
Restrictions on data access,
Staff awareness and confidentiality practices,
Backup and security processes

can be utilized.

However, it cannot be guaranteed that any data transmission over the internet or any electronic storage method is 100 percent secure.

10. Retention Period for Personal Data

Your personal data is retained for as long as necessary to fulfill the purposes of processing and in accordance with the statutory retention periods set forth in applicable legislation.

When the purpose requiring the retention of the data no longer exists or the statutory retention period expires, your personal data will be deleted, destroyed, or anonymized in accordance with the law.

When determining the retention period, relevant factors such as legal obligations, contractual relationships, potential disputes, statutes of limitations, and the purpose of data processing are taken into account.

11. Marketing and Commercial Communications

Where required by applicable law, we may obtain the necessary prior permission or explicit consent to send commercial electronic communications regarding our products and services.

Commercial electronic communications sent to you may include options to opt out of receiving such communications, as required by applicable laws.

You may withdraw your consent to receive commercial communications using the methods provided through the relevant communication channels or by contacting us.

12. Your Rights Under the KVKK

Under the KVKK, you have the following rights regarding your personal data, to the extent permitted by law:

To learn whether your personal data has been processed,
To request information regarding the processing of your personal data,
To learn the purpose of the processing of your personal data and whether it is being used in accordance with that purpose,
To know the third parties to whom your personal data has been transferred, whether within or outside the country,
To request the correction of incomplete or incorrectly processed personal data,
To request the erasure or destruction of your personal data under the conditions set forth in the KVKK,
To request that third parties to whom your personal data has been transferred be notified of any corrections, erasures, or destruction of your personal data,
To object to a decision made solely through the automated processing of your data that adversely affects you,
To request compensation for damages incurred due to unlawful data processing.

The exercise of these rights is subject to the conditions and exceptions specified in the KVKK and other relevant legislation.

13. Rights Under the GDPR

Where the GDPR applies to you, you may also have the following rights under the GDPR:

The right to access your personal data,
The right to request the rectification of inaccurate or incomplete personal data,
The right to request the erasure of your personal data under certain conditions,
The right to restrict the processing of your personal data under certain conditions,
The right to object to data processing based on legitimate interests,
The right to data portability under certain circumstances,
The right to withdraw consent in data processing activities based on explicit consent,
Rights under the GDPR regarding certain decisions based solely on automated processing.

No fee is charged for exercising your rights. However, if requests are manifestly unfounded or excessive, a reasonable fee may be charged or the request may be refused to the extent permitted by applicable law.

14. Submitting a Request to Exercise Your Rights

You may submit your requests regarding your personal data or applications to exercise your rights to us via the following contact channels:

Movi Modular and Mobile Building Systems Ltd.

Email: [email protected]
Phone: +90 850 441 17 74
WhatsApp: +90 542 245 66 84
Address: Kaleiçi Mah. Gökceali Cad. No: 134/1, Çatalca / Istanbul

Your requests must include the necessary information to verify your identity and the nature of your request.

Requests under the Personal Data Protection Law (KVKK) are evaluated in accordance with the procedures and principles set forth in the relevant legislation and are resolved within the statutory timeframes.

15. Right to File a Complaint with the Data Protection Authority

If you believe that your personal data has been processed in violation of applicable data protection laws, you may first contact us to request an investigation of the matter.

However, you retain the right to file a complaint with the competent data protection or supervisory authority under applicable law.

Where the GDPR applies, you may have the right to lodge a complaint with the competent data protection authority in the country where you reside, work, or where the alleged violation occurred.

16. Children’s Personal Data

Our services are generally intended for adult users and business customers.

MOVİ does not intentionally collect personal data from children unless necessary. If you believe that a child’s personal data has been collected inappropriately, please contact us.

17. Third-Party Websites

Our website may contain links to third-party websites, social media platforms, or other online services.

MOVİ is not responsible for the privacy practices of these third-party websites. Therefore, we recommend that you review the relevant organizations’ own privacy policies and personal data processing practices before using such websites.

18. Policy Changes

MOVİ may update this Privacy and Personal Data Protection Policy from time to time to comply with changes in our operations, the technologies we use, our personal data processing procedures, or applicable legislation.

The updated policy becomes effective as of the date it is published on our website.

You can always access the most current version of the policy on our website.

Last Updated: September 16, 2026

19. Contact

If you have any questions regarding the processing of your personal data, this Policy, or our data protection practices, you may contact us via the following channels: