Privacy Policy Statement

Privacy Policy

This Privacy Policy last updated on 1^st October 2025.

 METINVEST HOLDING, LLC, incorporated under the laws of Ukraine (hereafter referred to as “Company”, “we”, “us” and “our”), complies with all relevant data protection laws and strives to maintain robust data protection for users of our website https://metinvestholding.com/ua (from now on referred to as “Website”).

This document presents the Company’s Privacy Policy (from now on referred to as the “Policy”) regarding the nature, purpose, processing methods (collection, use, storage, distribution, deletion, etc.) and features of protecting the Personal Data collected by us (from now on referred to as “Personal Data” or “Data”). In addition, in this document, you can find information about your rights and how to contact us if you have any questions about processing information about you.

Please read this Policy carefully. If any term in this Policy is unacceptable to you, please do not use the Website or provide any personal data.

This Policy includes the following sections:

1. Identity and contact details of the Data Controller
2. Categories of Personal Data, Purposes and Legal Basis of the processing
3. Data recipients
4. Personal data transfer
5. Exchange/disclosure of data and links of third parties
6. Data retention periods
7. Data protection methods
8. Your rights
9. Contact details of the Data Protection Officer

This Policy applies to those individuals whose Personal Data is processed or may be processed by us in the future as a data controller, including, but not limited to, if such persons use our Website; contact us with inquiries; follow a hyperlink (link) to this Policy; attend our events, accompanied by the collection of Personal Data.

We care about the privacy of the Website visitors and we will process your personal data in accordance with the Law of Ukraine “On Personal Data Protection” and the European General Data Protection Regulation (Regulation (UE) 2016/679 or the “GDPR”). We inform you that the Company is a Data Controller for the purposes of the GDPR and any other applicable data protection law when we control Data collection methods and determine the purposes for which such Data will be used.

We do our best to protect all Personal Data received from our customers and Websites users and comply with all local data protection laws to the extent they apply to us.

We will never sell your Data to third parties.

Your Data will not be used for automated decision-making, including profiling.

As a rule, we do not collect Personal Data when you visit our Website, except for the lawful operation of cookies and similar technologies or when you provide us consent to process Data in some instances. You can change your settings for cookies, by visiting the preference option in the cookie banner of the website you are viewing. The provision of Data through the Website is voluntary. We do not require you to register or provide Data to browse the Website. However, failure to provide specific Data may lead to the fact that the Company cannot provide you with the desired service you want to order through the Website.

This Policy does not apply when the Company acts as a Data Processor or in any other similar role when acting on behalf of a third party. In this case, we process the Personal Data on the instructions and behalf of a third party. Accordingly, a third party’s privacy policy/statement shall apply.

We will process your Data only if at least one of the following legal grounds for such processing exists, including:

• processing is necessary for the conclusion and/or the performance of a contract with you (including any offer and acceptance thereof), including when you are interested in our services, goods/products;
• such processing is required by the laws of the countries in which we provide our services or make them available;
• there is a significant public interest based on current legislation (for example, to prevent and detect illegal activities);
• you gave your consent to Data processing;
• the processing is necessary for the purposes of any legitimate interests of the Company, as the controller, or a third party (except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data).

You can always delete or change your Data and exercise your other rights under applicable law and this Policy.

This Policy may be updated from time to time, including as required by applicable law. We suggest you review this Policy for any changes from time to time.

This Policy describes the types of information we collect through the Website, for which purposes we process such information, to whom we may communicate the Personal Data, and your rights in relation to the Personal Data collected.

The Policy is provided only for the Website and not for other websites possibly visited by the visitors through links. The Data Controller (as defined below) shall not be deemed liable for the personal information provided by the visitors to external parties or to any website connected to the Website. The Company encourages you to read the privacy policy/statements and terms and conditions of linked or referenced websites you enter. These third-party websites will send their own cookies and other tracking devices to you. The Company does not control and is not responsible for what third parties do in connection with their websites, or how they handle your Personal Data. Please exercise caution and consult the data protection policies posted on each third-party website for further information.

We will process the Personal Data for the purposes of:

• maintaining and upgrading of the Website;
• providing information about the Company's activities;
• keeping the data on the Website users’ personal preferences and settings;
• improving the products and (or) services and developing the new ones;
• collecting statistics about users; and
• monitoring the status of the user's session (access).

1. Identity and contact details of the Data Controller

In relation to the Personal Data, the company METINVEST HOLDING, LLC acts as the data controller, according to Article 4(7) of the GDPR.

Details of the Company:

METINVEST HOLDING, LLC

Company number: 34093721

Address: Ukraine, 69008, Zaporizhzhia, 80 Pivdenne Shose str., office 1

Telephone number: +380 44 251 83 05, ext. 1610

 

2.  Categories of Personal Data, Purposes and Legal Basis of the processing

 a) Personal Data collected through the contact forms on the Website

By filling in the contact forms, you can provide us certain personal and contact details (i.e., name, e-mail address and phone number).

Such Personal Data are processed in order to provide you with the information requested (e.g., news, announcements, etc.) and to communicate with you.

The above-mentioned Personal Data will be stored for 36 months. At the end of this period, such Personal Data will be deleted or anonymised.

The legal basis for the processing is your consent, according to Article 6 (1) (a) of the GDPR. We inform you that your consent can be freely withdraw at any time by sending an e-mail to: DPO@metinvestholding.com and your Personal Data will be immediately deleted or anonymized.

b) Automatically collected data

Whenever the visitor accesses the Website, certain information about his/her device are automatically collected. In particular:

• the type and version of the browser
• the operating system
• the IP address

The processing of such information is necessary in order to allow the view of the Website contents. Such information will be deleted once the purposes for which they were collected have been pursued and, in any case, at the end of the session (when the user leaves the Website).

The information automatically collected by the Website is not matched with other information about the Website visitors.

The legal basis for such processing is the Data Controller’s legitimate interest in ensuring the proper technical working of the Website.

c) Cookies and similar technologies

A cookie is a small text file that is sent to the visitor’s terminal equipment (i.e., visitor´s browser) by the Website; the cookie is stored in the visitor’s terminal equipment to be then re-transmitted to the Website on the user’s subsequent visits to the Website.

We inform you that the cookies placed by the Website (the “Cookies”) may be “session cookies” (i.e., cookies that expire at the end of a browser session) or “permanent cookies” (i.e., cookies stored also after the end of the visitor’s browser session). Further, Cookies may be set directly by the Website (so-called “first party cookies”) or by other website (so-called “third party cookies”).

Cookies used by the Website:

Browsing or session technical Cookies

The Website places browsing or session technical Cookies in order to allow a normal and efficient browsing and use of the Website. Such Cookies do not require your prior and express consent. You may disable these Cookies by changing your browser settings (as specified below), but this may affect how the Website works.

Functional technical Cookies

The Website uses functional technical cookies which allow to remember your preferences (i.e. the language selected) in order to improve the services provided by the Website. Functional cookies improve browsing quality and experience. Please note that your consent is not required in order to set the functional technical Cookies.

Analytical Cookies

These third party Cookies are used to collect information about how visitors use the Website (e.g., number of visitors, visited pages, permanence on the Website, etc.), in order to carry out statistical analysis and improve our Website. The Cookies collect information in a way that does not directly identify anyone.

By providing your authorisation through the banner which displays accessing the Website, you consent to the use of analytics Cookies. We inform you that your consent will be required only upon your first access to the Website and we use of a technical Cookie in order to track the consent obtained. As specified below, you may withdraw your consent at any time.

We use the following categories of Cookies:

 

Name of the cookie	Description	Storage
ARRAffinity	Used to distribute traffic to the website on several servers in order to optimise response times	Session
ARRAffinitySameSite	This cookie is set by websites run on the Azure cloud platform. It is used for load balancing to make sure the visitor page requests are routed to the same server in any browsing session.	Session
CLID	Identifies the first-time Microsoft Clarity saw this user on any site using Clarity	1 year
CookieConsentAccepted	The file to identify the user who gave consent to the personal data collection.	400 days
MUID	Identifies unique web browsers visiting Microsoft sites. These cookies are used for advertising, site analytics, and other operational purposes.	384-390 days
_clck	Persists the Microsoft Clarity User ID and preferences, unique to that site is attributed to the same user ID	1 year
_clsk	Connects multiple page views by a user into a single Microsoft Clarity session recording	24 hours
_ga	Creates a unique identifier in the Google Analytics system that is randomly generated and used to gather statistics about how a visitor uses the Website. Read Google overview on privacy and data protection	397-400 days
_gat_UA-*	Used by Google Analytics for statistics for storing and counting page views.	1 minute
_ga_*	Used by Google Analytics to collect data on the number of times a user has visited the website as well as dates for the first and most recent visit	263-400 days
_gid	A file to identify a user of the Website in the Google Analytics system. Read Google overview on privacy and data protection	24 hours
_rl	Saves language preferences	352-365 days

You can change your Cookies preferences at any time by clicking on and opt out of being tracked by Google Analytics across all websites, visiting http://tools.google.com/dlpage/gaoptout.

Please note that most web browsers allow some control of most cookies through the browser settings. Find out how to manage cookies on popular browsers:

Edge    |  Safari    |   Chrome    |    Firefox   |  Opera

Some Personal Data may be obtained by the Company from publicly available sources, for example, when such information is (a) available to the public and usually posted on the Internet; (b) lawfully made available to the general public, such as social media, etc.

In addition, we may process other Data if you voluntarily provide it to the Company; for example, when you send us a request.

Please note that our Website and services do not address anyone under the age of 14. We consider a user/customer as a child if they are under 14 unless their country has a different age limit (in some countries, it is under 16). Accordingly, we do not knowingly collect or process information about children. If you become aware of cases of use of the Website by children or that we receive Data from children, please inform us immediately. If we become aware that Company has collected Personal Data from anyone under 14 without verification of parental consent, we take steps to remove that information.

When the Company receives any Personal Data from third parties (not from data subjects directly), such third parties are responsible for their compliance with the relevant data protection laws.

3. Data recipients

The Personal Data will not be disseminated and may be accessible (limited, and some content may not display incorrectly to the respective field of competence) to the employees and/or collaborators of the Data Controller authorized to process them.

The Personal Data recipients will act as autonomous data controllers, according to Article 4(7) of the GDPR or as data processors appointed by the Data Controller, according to Article 28 of the GDPR.  

The Personal Data may be communicated to companies, which provides certain services to the Data Controller and to the other companies of the Metinvest Group, including the company METINVEST DIGITAL LLC.

“Metinvest Group” means Metinvest B.V. and companies in which Metinvest B.V. directly or indirectly owns 50% or more of shares

Metinvest Digital LLC provides certain services related to the management and the technical maintenance of the Website and processes the Personal Data only on documented instructions from the Data Controller, ensuring the adoption of all the necessary measures in order to comply with the applicable data protection law and protect the visitors’ rights.

Further to that, we provide you with the following information:

a)   Google Analytics

Google Analytics (i.e., the company Google LLC (“Google”), 1600 Amphitheater Parkway, Mountain View, CA 94043, USA) sets certain Cookies, which collect information about how you visit the Website.

Google can distinguish the individual visitors; limit the frequency of demands; remember the number and time of your previous visits; record the traffic source; determine the beginning and end of the session; remember the values of the visitor level user-declared variables. Information about your device (i.e., about your browser and your operating system) may be accessible for Google.

Please note that we use a mechanism that automatically masks your IP address and the information processed by Google will not be combined with other Google data.

Google will use the received information for statistical analysis and reporting, which will help to optimize the Website making it more comfortable for the visitors. Your Personal data will be stored for 36 months.

b)  Google Maps

This Webite uses Google Maps, a service of maps fruition provided by Google. Google may receive your IP address and know the Website page you are visiting.

If you are logged in to your Google Account, Google may combine the information collected through the Website with your Google profile information.

As specified above, the Policy is provided only for the Website and the Data Controller shall not be deemed liable for the personal information provided by the visitors to external parties. For further information, we invite you to read the Google overview on privacy and data protection.

d) Vimeo

We use Vimeo video player (service provided by the company Vimeo, Inc. 555 West 18th Street, New York, New York 10011). Vimeo sets Cookies which are necessary in order to enable certain features and remember your preferences (i.e., , language or volume settings). For further information, please read the Vimeo cookies policy.

e) Microsoft Clarity

We use Microsoft Clarity (provided by the Microsoft Corporation. Contact Information: Microsoft Way, Redmond, WA 98052-6399, USA) to analyze user behavior on our website.

This tool helps us understand how visitors interact with our site, enabling us to improve its functionality and user experience.

Microsoft Clarity collects information about user interactions with our website, including:

• Data on clicks, scrolling, and other on-page actions.
• Information about the user’s device and browser.
• Session data, such as visit duration and pages viewed.

Clarity automatically masks sensitive information, such as entered passwords or payment data, ensuring the privacy of users.

The collected data is used to analyze user behavior on our website to optimize and enhance the user experience. The legal basis for processing this data is our legitimate interest in improving our online services.

Microsoft Clarity processes data according to the Microsoft Privacy Statement. Data may be transferred and stored on servers outside the European Union. Microsoft provides an adequate level of data protection, adhering to standard contractual clauses and other GDPR-compliant mechanisms.
Data collected through Microsoft Clarity is retained for the period necessary to fulfill the stated processing purposes or as required by applicable law.

Microsoft implements appropriate technical and organizational measures to protect personal data from unauthorized access, use, or disclosure. For more information on security measures, please refer to the Microsoft Privacy Statement.

f) Tally

We use the Tally service (Tally BV, with registered office at August Van Lokerenstraat 71, 9050 Ghent, Belgium and registered with the Crossroads Bank for Enterprises under enterprise number 0776.979.007) to collect information through feedback forms on the website.

Tally collects various types of personal data, including: name, email, as well as optional information you provide when filling out feedback forms or surveys.

Such data is submitted solely at your initiative − by sending a completed form and is automatically deleted within the specified timeframes.

Tally processes Personal Data in accordance with the legislation in force, and, in particular, Regulation 2016/679 of 27 April 2016 on the protection of individuals with regard to the processing of Personal Data and the free movement of such data, applicable from 25 May 2018 (hereinafter the "GDPR").

All Tally form data is encrypted both in transit and at rest, and stored in Europe.

For more information, please visit Tally’s  privacy notice.

g) Meta (Facebook ) Pixel

On our websites we can use Meta Pixel (powered by Meta Platforms, Inc. , 1601 Willow Road, Menlo Park, CA 94025)  to measure the effectiveness of our advertising by understanding the actions people take on your website.

We use the Meta Pixel pixel to present Facebook ads placed by us only to those Meta Products users who have already shown an interest in our websites or to whom certain "characteristics" are assigned (e.g. interest in topics or offers determined on the basis of visited websites).

The Meta pixel is also used to statistically analyze how effective our Facebook advertising is, as it allows us to see whether or how often users clicked on our advertising and were redirected to our website.

You can opt-out of the Pixel's collection and use of your data to display Facebook ads. On this page you will find information on the settings of usage-based advertising within Facebook. The settings are platform-independent, i.e. they are then applied on all devices, such as desktop computers or mobile devices.

Please review Meta's Privacy Policy to learn more.

h) Http Headers

Anything present in HTTP headers. HTTP Headers are a standard web protocol sent between any browser request and any server on the internet. HTTP Headers include IP addresses, information about the web browser, page location, document, referrer and person using the website.

i) Pixel-specific Data

Includes Pixel ID and the Facebook Cookie.

j) Button Click Data

Includes any buttons clicked by Website visitors, the labels of those buttons and any pages visited as a result of the button clicks.

k) Optional Values

Developers and marketers can optionally choose to send additional information about the visit through conversion tracking. Example custom data events are conversion value, page type, and more.

l) Form Field Names

Includes website field names like ‘email’, ‘address’, ‘quantity’ for when you purchase a product or service. We don't capture field values unless you include them as part of Advanced Matching, or conversion tracking.

 

4.  Personal Data transfers

The Company is an international company that collaborates with various companies worldwide to promote and/or provide users access to the Website and our services. Accordingly, your Data can be processed outside your country of residence, including countries that may not provide the same level of protection of your Data as your country.

The recipients identified in Section 3 above may be located in and outside of the EU and European Economic Area (EEA). When we transmit Personal Data to recipients in other countries outside the EEA, we take measures to comply with the relevant legal and technological requirements, as described in this Policy and under the applicable legislation on data protection, including by the provisions of Articles 44-50 of GDPR.

When transferring your Data to third countries that do not apply to the “adequacy decision” of the European Commission, the Company uses Standard Contractual Clauses, mandatory corporate rules, and special agreements on data transfer and processing. In addition, we will require all data recipients to ensure the proper level of protection and security of your Data that is required by the applicable data protection legislation.

In some cases, Company may need your explicit consent to the International Data Transfer.

Personal Data collected by the Cookies may be transfer to Google. Google complies with the EU-US Data Privacy Framework as designed by the US Department of Commerce and the European Commission and Swiss Administration, providing an adequate level of protection, according to the GDPR and the applicable data protection law the Privacy Framework is available at the link: Data Privacy Framework.

 

 5.  Exchange/disclosure of data and links of third parties

Following the standard practice that complies with the requirements of applicable data protection laws, your Data may be transferred to third parties outside the Company in such cases:

• when we have your consent or at your request;
• state, federal, and other regulatory, administrative, or law enforcement authorities/agencies as a part of an official process (upon request);
• in response to a judgment or other decision of the court as a part of an official process;
• to establish or exercise the right of the Company or an affiliate of the Company to defend against your claims;
• to investigate and/or prevent fraud by users/customers;
• if it is necessary and/or in the interests of the Company to protect or exercise its rights or the legal rights of other persons.

Sometimes, we may need to transfer your Data to third parties. In particular, we may share your Data, including but not limited to the contact and technical data, with third parties, such as service providers who perform various functions necessary for the operation of our Website.

Depending on services provided for the processing of Data necessary for our operation, based on our instructions, under this Policy and data protection laws, we may transfer information to the following third parties:

• to our partners who provide Website technologies and other functions;
• to our partners providing customer support services (processing customer requests through various communication channels), email services, cloud services, and research services;
• to our partners providing services to detect and prevent fraud, as well as legal and financial (accounting) services;
• to third parties to which we are obliged to disclose your Data under the law (for example, state institutions, law enforcement agencies, and courts).

Our partners (suppliers of various services) are prohibited from processing Personal Data that we transfer for them for a specific purpose, for any purposes other than those specified by us as Data Controller. Also, we conclude contracts with such partners, demanding that they provide the same level of protection and security of your Data that is required of us per the applicable law. We limit the use of your Data following any consent provided by you (if consent is the basis for Data processing).

In the event of a merger, reorganisation or a similar corporate event or the sale of the Company or part of the Company’s assets, the information collected by us, including Personal Data, can be transferred to another company/organisation (subject to merge or acquisition). Undoubtedly, all such Data transfers will be carried out under the applicable data protection legislation and our confidentiality obligations, as specified in this Policy.

 

6. Data retention periods

We save your Data during the time necessary to achieve the goals for which we have collected it, in particular, to satisfy any legal requirements, accounting or reporting, and to ensure the performance of contracts. As a rule, we keep your personal data for 3 years. However, in some cases, we must store your data as long as applicable law requires.

To determine the corresponding retention period for Personal Data, in addition to processing objectives, we also consider the scope, nature, and category of Data, as the potential risk of harm from unauthorised use or disclosure of Data, as well as the relevant requirements of the applicable legislation.

As a rule, we keep basic information about Website users for thirty (30) days.

Please note that the regulations of some countries may impose additional requirements, so the Data retention period may vary. In particular, if the legislation of a country where a user of our Website contains limitation period provisions that determine the period during which you can file a claim against us, we need the appropriate evidence of legal relations with you. So, we can process your Data during this period.

We also need to consider the periods for which we may need to keep your Data to comply with our legal obligations to you or regulatory authorities.

Eventually, we can minimise the Data that we process or make it anonymous (for research or statistical purposes) so that they are no longer connected with you. If the Data was anonymised, we could use this information indefinitely since it no longer contains Personal data.

 

7. Data protection methods

The Company is very serious about the security of Personal data. To ensure the secure storage of your Data, we implemented many technical and administrative tools that protect Data from any unauthorisedor illegal processing, as well as any losses, destruction, or damage. We regularly test our security measures to ensure they remain efficient and effective.

We use the wide range of modern specialized software and hardware tools from leading vendors as well as organizational methods to protect your Data against cyber-attacks and prevent possible data breaches.

When transferring Personal Data outside the Company, we use encryption. We usually use different technical measures for information protection that we collect on the Internet or transmit to third parties, including encryption, firewalls, and password protection.

The Data you provided will be safely stored on our servers, inaccessible to the public.

The Company adheres to the principle of minimising data. We process information related to our users/customers that we very need to perform certain functions and for the specific goals defined in this Policy. Your Data is available only for a limited number of employees who need access to corresponding data to fulfil their functional duties. We constantly train the employees on our Policies, regulating data privacy and security issues.

We do our best to protect the Data, but you need to know that no method of data transmission via the Internet or electronic storage is 100% secure. Therefore, we cannot guarantee its absolute security. If the Company learns about the violation of the security system, we will inform you if we shall do this under the applicable legislation so that you can take appropriate security measures.

 

8. Your rights

According to the GDPR, the Data Controller ensure the exercise of the following rights:

a) Your right to access your personal data (Article 15 of the GDPR).

You have the right to obtain from the Data Controller confirmation as to whether or not personal data concerning you are being processed and, where that is the case, access to such Personal Data and the information referred to in Article 15 of the GDPR (e.g. the purposes of the processing; the categories of Personal Data concerned; the recipients to whom the Personal Data have been or will be disclosed, etc.).  

b)  Your right to rectification (Article 16 of the GDPR):

You have the right to obtain from the Data Controller the rectification of inaccurate Personal Data concerning you. Taking into account the purposes of the processing, you have also the right to have incomplete Personal Data completed.

In order to exercise the right referred to in Article 16, your request should include a clear indication of the inaccurate and/or incomplete Personal Data.

c)  Your right to erasure or "the right to be forgotten" (Article 17 of the GDPR)

You have the right to obtain from the Data Controller the erasure of your Personal Data in accordance with Article 17 of the GDPR (e.g., when the Personal Data are no longer necessary in relation to the purposes for which they were collected or otherwise processed; when withdraw your consent or object to the processing and there are no overriding legitimate grounds for the processing, etc.).

d)  Your right to restriction of processing (Article 18 of the GDPR):

You have the right to obtain from us restriction of processing where one of the grounds referred to in Article 18 of the GDPR applies (e.g., you contest the accuracy of the Personal data, for a period enabling the Data Controller to verify the accuracy of the Personal Data; the processing is unlawful and you oppose the erasure of the Personal Data and requests the restriction of their use instead; we no longer need the Personal Data for the purposes of the processing, but they are required by you for the establishment, exercise or defence of legal claims, etc.).

e) Your right to data portability (Article 20 of the GDPR):

According to Article 20 of the GDPR, you have the right to receive certain Personal Data in a structured, commonly used and machine-readable format and to transmit those Personal Data to another data controller, without hindrance from us, where: (i) the Personal Data processing is based on your consent; and (ii) it is carried out by automated means.

f) Your right to object to the processing (Article 21 of the GDPR):

You have the right to object, on grounds relating to your particular situation, at any time, to your Personal Data processing that is based on our legitimate interests, according to Article 6(1), lett. f) of the GDPR. We will no longer process the Personal Data concerned unless we demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or for the establishment, exercise or defence of legal claims. You have the right to object, at any time, to the processing of your Personal Data for direct marketing purposes.

g)  The right to withdraw your consent (Art. 7(3) of the GDPR):

By contacting us at the address below (Section 6), you may, at any time, withdraw your consent. The withdrawal of your consent will not affect the lawfulness of the processing carried out before such withdrawal.

h) Right to lodge a complaint with the competent supervisory authority:

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the country where you live, work or place of the alleged infringement, if you consider that the processing of your Personal Data infringes the applicable data protection law.

If you are in one of the Member States of the EU, you can lodge a complaint with one of the European supervisory authorities. You can find the current list of European supervisory authorities here: Members of the EDPB

If you are in Ukraine, you can lodge a complaint with the Human Rights Commissioner of the Verkhovna Rada.

Please note that we will provide information on action taken on a request under Articles from 15 to 21 of the GDPR as quickly as possible and, in any case, within one month of receipt your request. Where strictly necessary, that period may be extended by two further months. The exercise of your rights is free of charge unless your request is manifestly unfounded or excessive.

Do Not Track (DNT) request is a setting any user can trigger from their device. The purpose is to allow consumers to limit or prevent the collection of their personal data.

There is no law requiring websites to respect a DNT setting.

Because we do not track our Website users over time and across third-party websites, we do not respond to browser do-not-track signals.

At the same time, even if we follow the DNT, we cannot control the DNT handling of third parties interacting with the Website, such as Google Analytics, AdWords, and others.

 

9.  Contact details of the Data Protection Officer

If you have any question on this Policy or if you wish to exercise your rights listed in Section 5 above, you may contact the data protection officer appointed by the Data Controller according to Article 37 of the GDPR at the following e-mail address: DPO@metinvestholding.com