This English version is provided for information only. In case of any discrepancy, the Turkish version prevails.

Privacy Notice for Applicants and Website Visitors

Last updated: November 2026

1. 1.Identity of the Data Controller

   As Mizanplus Gıda Ticaret Anonim Şirketi (“Mizanplus” or the “Company”), in our capacity as data controller, we inform persons who apply for a franchise or partnership, fill in the contact form or visit our website at mizanpluskitchens.com under Law No. 6698 on the Protection of Personal Data (the “Law”). A separate privacy notice applies to customers of our branches and orders.

   Company details: MERSİS No: 0622222611900001 · Avcılar Tax Office, Tax ID 6222226119 · Address: Üniversite Mah. Sarıgül Sk. İstanbul Teknokent No: 37/1 İç Kapı No: 43 Avcılar/İstanbul · E-mail: info@mizanpluskitchens.com

2. 2.Personal Data We Process, Purposes and Legal Grounds

   We process your personal data only for the following purposes and on the legal grounds set out in Article 5 of the Law:

   • Franchise application: Your name, surname, phone number, e-mail address, preferred franchise model, province/district, business name, field of activity, courier status and notes, together with the investment budget range, intended start date and sector experience you choose to share, are processed to receive and assess your application, detect duplicate applications and contact you, on the grounds that the processing is directly related to the conclusion of a contract (Art. 5/2-c) and our legitimate interest (Art. 5/2-f).
   • Phone verification: We send a one-time code to your phone by SMS and record the result of the verification, in order to confirm that the number belongs to you and to prevent fake applications (Art. 5/2-c and Art. 5/2-f). The code is not used to obtain any permission or consent.
   • Preliminary assessment of applications: Your application is automatically pre-assessed by an artificial intelligence model to help our sales team prioritise applications and to filter out spam (your phone number is not sent to the model). This assessment does not by itself produce any decision about you; applications are reviewed by our team (Art. 5/2-f).
   • Partnership applications and contact form: Company name, the contact person's name and surname, e-mail address, phone number, field of activity, products or services offered, subject and your message are processed to assess and respond to your request, on the grounds in Art. 5/2-c and Art. 5/2-f.
   • Source of the application: The campaign or link through which you reached our website (UTM parameters, advertising click identifiers, landing page, referring site, the application button you clicked, device type) is processed on the basis of our legitimate interest (Art. 5/2-f), to measure which promotional channel brings applications.
   • Transaction security: IP address, browser information and form submission time are processed to prevent misuse and bot applications, ensure information security and protect our rights in possible disputes, on the grounds in Art. 5/2-e and Art. 5/2-f.
   • Cookies and advertising measurement: Our website uses cookies and advertising tags from Google, Meta and OpenAI to measure how the site is used and to assess the effectiveness of our ads. When your application is completed, an irreversibly encrypted (hashed) form of your e-mail address and phone number may be shared with these platforms to measure the effectiveness of our ads. This processing relies on our legitimate interest (Art. 5/2-f). You can delete or block cookies in your browser settings; details are in the Cookie Policy.
   • Marketing communications: If you also give permission in the application form, your contact details are processed to send you e-mails and text messages about franchise opportunities, campaigns and announcements, on the basis of your explicit consent (Art. 5/1) and your approval under Law No. 6563. You can withdraw your permission at any time, free of charge, via the opt-out link in our messages or by writing to us.

3. 3.Transfer of Personal Data

   We transfer your personal data to the following groups of recipients only to the extent necessary for the purposes above:

   • Our service providers: Amazon Web Services, where the website is hosted, e-mails are sent and the preliminary assessment of applications is carried out (servers in Frankfurt, Germany); Google (Google Workspace), where application records are kept; and our SMS provider in Türkiye, which provides the phone verification service.
   • Advertising and measurement partners: Google (Analytics and Ads), Meta (Facebook/Instagram) and OpenAI (ChatGPT ads).
   • Authorised public authorities and our legal advisers: For compliance with our legal obligations and in legal disputes (Art. 5/2-ç and Art. 5/2-e).

   Transfer abroad: As the servers of our service providers and partners are located outside Türkiye (Germany, other EU countries and the USA), these transfers constitute transfers abroad. Transfers to our service providers rely on standard contracts, one of the appropriate safeguards listed in Article 9 of the Law. The countries where our advertising and measurement partners are located may not offer the same level of protection as Türkiye.

4. 4.Method of Collecting Personal Data

   We collect your personal data directly from you through the forms on our website, and automatically by electronic means through cookies and similar technologies. Information you send us by e-mail or phone is processed for the same purposes.

5. 5.Retention Period

   We keep franchise and partnership applications for 2 years from the last contact if no contract is concluded, and contact form messages for 1 year. Records of marketing permissions are kept, after the permission ends, for the period required by the legislation on commercial electronic messages. When the period expires, your data is deleted, destroyed or anonymised.

6. 6.Your Rights Regarding Your Personal Data

   Under the Law, you have the right to: learn whether your personal data is processed and, if so, request information about it; learn the purpose of the processing and whether the data is used in line with that purpose; know the third parties, within Türkiye or abroad, to whom the data is transferred; request its rectification if it is incomplete or inaccurate; request its erasure, destruction or anonymisation if the reasons requiring its processing cease to exist; request that the third parties to whom the data has been transferred be notified of these actions or of the rectification; object to a result to your detriment arising from the analysis of the data exclusively through automated systems; and request compensation for any damage you suffer as a result of unlawful processing.

   You may submit your applications regarding your personal data: in person, with your identity verified, at Üniversite Mah. Sarıgül Sk. İstanbul Teknokent No: 37/1 İç Kapı No: 43 Avcılar/İstanbul; with your secure electronic or mobile signature, to our Company's address info@mizanpluskitchens.com; from the e-mail address you gave in the form and that is registered in our system, to the same address; or, with your identity verified, by the other methods set out in the Law and the related legislation. In accordance with Article 13 of the Law, the Company will conclude applications free of charge, depending on the nature of the request and within 30 (thirty) days at the latest. If a request is rejected, the reason(s) will be explained in writing or electronically. If the process requires a cost, the fee schedule set by the Personal Data Protection Board will apply.