KVKK Information Text

COMPANY TITLE: KARATAŞ MAKİNE İMALAT SANAYİ VE TİCARET ANONİM ŞİRKETİ

PERSONAL DATA PROCESSING INFORMATION TEXT

1. INTRODUCTION

The security and/or protection of your personal data is among our priorities as Karataş Makine İmalat Sanayi ve Ticaret Anonim Şirketi. With this awareness, as a Company, we attach great importance to the processing and preservation of all personal data belonging to all persons associated with the Company, including those who benefit from our products and services, in accordance with the Personal Data Protection Law No. 6698. Accordingly, in order to fulfill the duty of informing personal data owners during the collection of personal data, as defined in the PDP Law, as the “Data Controller” and in accordance with the Communiqué on the Procedures and Principles to be Complied with in Fulfilling the Obligation to Disclose, published in the Official Gazette No. 30356 dated 10 MARCH 2018 by the Personal Data Protection Board, as per Article 10 of the PDP Law; we present this information to personal data owners regarding the identity of our Company, the purpose for which personal data will be processed, to whom and for what purpose the processed personal data may be transferred, the method and legal reason for collecting personal data, and the rights of the personal data owner within the scope of Article 11 of the PDP Law by our Company during the collection of their personal data. Expressions such as “we” and “our” in this Disclosure Text are used to refer to Karataş Makine İmalat Sanayi ve Ticaret Anonim Şirketi, unless otherwise expressly stated. 2. PERSONAL DATA

2.1. Definition of Personal Data

According to Article 3/I(d) of the Personal Data Protection Law, “personal data” refers to any information related to an identified or identifiable natural person. In this context, personal data refers to any information related to an identified or identifiable natural person. For example; your name, surname, Turkish identity number, address, telephone number, e-mail address, date of birth, IP number you access, information regarding your transactions, etc. are your personal data. In addition, according to the Personal Data Protection Law; data related to a person’s race, ethnic origin, political opinion, philosophical belief, religion, sect or other beliefs, appearance and attire, memberships in associations, foundations, unions, etc., health, sexual life, criminal conviction and security measures, genetic data, etc. are special personal data. In this context, anonymous information, anonymized information and other data that cannot be associated with a specific person are not considered personal data in accordance with our Company’s Policy on this matter.

2.2. Concept of Processing of Personal Data

Processing of personal data within the framework of Article 3/I(e) of the Personal Data Protection Law refers to all kinds of operations performed on data such as obtaining, recording, storing, preserving, changing, reorganizing, disclosing, transferring, taking over, making available, classifying or preventing the use of personal data, either fully or partially by automatic means or, provided that it is part of any data recording system, by non-automatic means.

3. SCOPE OF INFORMATION

3.1. Identity of the Data Controller

According to the PDP Law, since the “Data Controller” refers to the natural or legal person who determines the purposes and means of processing personal data and is responsible for the establishment and management of the data recording system, the Corporate Identity Information of Karataş Makine İmalat Sanayi ve Ticaret Anonim Şirketi, which is the Addressee “Data Controller” according to the PDP Law, is as follows:

Title KARATAŞ MAKİNE İMALAT SAN.VE TİC.A.Ş.

Address Engürücuk Mahallesi 1 No. Engürücuk Sokak No:20 Gemlik / Bursa

Tax Office Gemlik

Tax Number 5221339270

Phone 0 ( 224 ) 524 72 70

Website www.karatasmakine.com.tr

Registered Electronic Mail (KEP) karatasmakineimalat@hs01.kep.tr

3.2. Collection, Processing and Purposes of Processing of Personal Data

Your Personal Data may vary depending on the service, product or commercial activity provided by our Company; it is/may be collected verbally, in writing or electronically through automatic or non-automatic methods, offices, branches, dealers, call center, website, social media channels, mobile applications and similar means.

Your collected personal data is/will be processed in accordance with the personal data processing conditions and purposes specified in Articles 5 and 6 of the Personal Data Protection Law and other applicable legal regulations for the purposes of ensuring that our business units carry out the necessary work to enable you to benefit from the products and services offered by our Company, that the products and services offered by our Company are customized and recommended to you according to your tastes, usage habits and needs, that the legal and commercial security of our Company and the persons who have a business relationship with our Company (administrative operations for communication carried out by our Company, ensuring the physical security and control of the Company’s locations, business partner/customer/supplier (authorized persons or employees) evaluation processes, legal compliance process, financial affairs, etc.), that the commercial and business strategies of our Company are determined and implemented, and that the human resources policies of our Company are implemented.

3.3. To Whom and For What Purposes Can Processed Personal Data Be Transferred Domestically and/or Abroad

Your Personal Data Collected; For the purposes of carrying out the necessary work by our business units to benefit from the products and services offered by our Company, for the products and services offered by our Company to be customized according to your tastes and needs and recommended to you, for the legal and commercial security of our Company and the people who have a business relationship with our Company (administrative operations for communication carried out by our Company, ensuring the physical security and control of the Company’s locations, business partner/customer/supplier (authorized or employees) evaluation processes, legal compliance process, financial affairs, etc.), for the determination and implementation of our Company’s commercial and business strategies and for the execution of our Company’s human resources policies,

To the administrative and official authorities to which it is legally required, to the relevant persons and institutions for the fulfilment of legal obligations and legal obligations, to independent auditing companies, tax consultants and other external professional consultants, lawyers, insurance companies, partners, domestic and foreign third parties from whom or from whom services are received, our shareholders, business partners, suppliers, legally authorized public institutions and private persons, It is/may be transferred within the framework of the personal data processing conditions and purposes specified in Articles 8 and 9 of the PDP Law and also within the scope of other legal legislation.

Your collected personal data is/may be transferred to foreign countries declared to have sufficient protection by the PDP Board or, in the absence of sufficient protection, to foreign countries where the data controllers in Turkey and the relevant foreign country have undertaken in writing to provide sufficient protection and where the PDP Board has given its permission. In this regard, our company acts/will act in accordance with the regulations stipulated in Article 9 of the PDP Law and other legal legislation.

3.4. Method and Legal Reason for Collecting Personal Data

Your personal data is obtained through our audit and consultancy services, written/digital applications made to our Company employees, our website, calls to our phone numbers, social media, SMS channels and other verbal, written or electronic media, automatic or non-automatic methods and other channels through which our Company communicates with you or may communicate with you in the future, in order to carry out our activities and to fulfill our contractual, professional and legal obligations with you, and the personal data obtained is stored for legal periods in accordance with the relevant Legislation.

3.5. Rights of Personal Data Owners Listed in Article 11 of the PDP Law

As personal data owners, if you submit your requests regarding your rights to our Company using the methods set out below in this Disclosure Text, our Company will finalize the request free of charge within thirty days at the latest, depending on the nature of your request. However, if a fee is foreseen by the Personal Data Protection Board, the fee specified in the tariff determined by our Company will be charged. In this context, personal data owners, in accordance with Article 11 of the PDP Law;

They have the right to learn whether their personal data has been processed,

If processed, to request information about it,

To learn the purpose of processing their personal data and whether it is used in accordance with its purpose,

To know the third parties to whom their personal data has been transferred domestically or abroad,

To request correction of their personal data if it has been processed incompletely or incorrectly,

To request deletion or destruction of their personal data if the reasons requiring processing of their personal data are eliminated, to be evaluated within the principles of purpose, duration and legitimacy,

To request notification of these operations to third parties to whom their personal data has been transferred in the event that their personal data has been corrected, deleted or destroyed, to object to a result that is against them if their processed personal data is analyzed exclusively through automated systems,

To request compensation for the damages if their personal data is processed illegally and they suffer damages for this reason. Pursuant to Article 13, paragraph 1 of the PDP Law, you may submit your request to our Company regarding the exercise of your rights specified above, in writing or through other methods determined by the Personal Data Protection Board. Since the Personal Data Protection Board has not determined any method at this stage, you must submit your application to our Company in writing, in accordance with the PDP Law. In this context, the channels and methods through which you will submit your written application to our Company within the scope of Article 11 of the PDP Law are explained below:

Your request, which includes the necessary information to identify you and your explanations regarding the right you request to exercise from among the rights specified in Article 11 of the PDP Law in order to exercise your rights specified above; You can send your secure e-signature to karatasmakineimalat@hs01.kep.tr e-mail address or you can apply in person or send your signed petition containing your request to our company’s head office address, Engürücuk Mah.1 No. Engürücuk Sokak No:20 Gemlik / Bursa, together with documents proving your identity, via notary. We would like to emphasize that in cases where your personal data is processed with explicit consent, if you withdraw your explicit consent, you will be removed from the membership/loyalty program for which the processing based on explicit consent is required and you will not be able to benefit from the advantages you benefited from thanks to the processing in question as of the relevant date.