KVKK

INFORMATION TEXT ON THE PROCESSING OF PERSONAL DATA

1. PURPOSE OF THE PERSONAL DATA PROTECTION AND PROCESSING POLICY:

In accordance with the Law on the Protection of Personal Data No. 6698 (“KVKK”), ARKOPOL PLASTİK DIŞ TİCARET LİMİTED ŞİRKETİ (“Company”), as the “Data Controller”, hereby informs you within the framework of Article 10 titled “Obligation to Inform by the Data Controller” and Article 11 titled “Rights of the Data Subject” of the KVKK; regarding the purposes for which your personal data will be processed, to whom and for what purposes the processed personal data may be transferred, the method and legal basis of the collection of your personal data, and your other rights listed in Article 11 of the KVKK.

Our Company pays particular attention to ensuring that your personal data is processed in accordance with the KVKK:

• In compliance with the law and the principles of good faith,
• Accurately and, where necessary, kept up to date,
• For specified, explicit, and legitimate purposes,
• In a manner that is relevant, limited, and proportionate to the purposes for which they are processed,
• For the period prescribed by the relevant legislation or for the period required for the purpose for which they are processed.

The necessary audits are conducted for this purpose. Sensitivity is shown regarding the security of your personal data, and we take all necessary technical, administrative, and legal measures to protect your personal data.

2. COLLECTION, PROCESSING, AND PROCESSING PURPOSES OF PERSONAL DATA:

Your personal data is collected and processed within the framework of legal obligations arising from the Turkish Commercial Code, Tax Procedure Law, Labor Law, Social Security Institution regulations, other relevant legislation, and the contracts we have concluded, for the following purposes of

• tracking financial and/or accounting and legal affairs, processing work and residence permits for foreign personnel, managing and tracking requests/complaints, planning and executing business activities, managing relationships with business partners and/or suppliers, managing goods and services sales processes, conducting occupational health and safety services, planning and executing business activities, managing relationships with business partners and/or suppliers, planning and executing customer relationship management processes, tracking customer requests and/or complaints, providing post-sales support services, fulfilling employment contract obligations and legal obligations for employees, planning and executing audit activities, ensuring that activities are carried out in accordance with company procedures and/or relevant legislation, determining and implementing commercial and business strategies, ensuring the execution of human resources policies, providing information to authorized institutions and organizations as required by legislation, planning and executing corporate sustainability activities, conducting activities to protect the reputation of our Company, managing request and complaint processes, and because the processing of personal data is necessary for our Company to fulfill its legal obligations.
• To ensure the fulfillment of the lease agreement between the parties,
• To monitor whether the authorized persons and/or assigned employees of suppliers and subcontractors fulfill their duties and to ensure the order of the Company's activities,
• To collect personal data from job applicants for the purpose of communicating with the individual for interview purposes during the recruitment process and to determine whether the individual's qualifications and experience are suitable for the open position to be filled,
• It is collected and processed verbally, in writing, or electronically.

Your personal data will not be used for purposes other than those specified above without your explicit consent and will not be shared or transferred to third parties except for legal obligations and official institutions/organizations.

Our Company may only share your personal data with: Our subsidiaries, directly or indirectly affiliated companies, and joint ventures, both domestically and internationally, for the purpose of continuing our activities and improving sales and service quality, based on the explicit consent of our customers or other circumstances stipulated in Article 5/2 of the KVKK, public institutions or organizations authorized to request this data due to a legal obligation, institutions, suppliers, authorized dealers/distributors/business partners we have agreements with, both domestically and internationally, provided that sufficient measures are taken, as required by our activities.

3. METHOD AND LEGAL BASIS OF PERSONAL DATA COLLECTION:

Your personal data is obtained in all kinds of verbal, written, or electronic media for the purposes specified in the above articles, in order to provide our products and services within the determined legal framework as a Company and to fully and accurately fulfill our Company's contractual and legal obligations. Your personal data collected for this legal basis is processed, recorded, transferred, shared, and stored within the scope of the personal data processing conditions and purposes specified in Articles 5 and 6 of the KVK Law and for the purposes stated in Article (2) of this text.

4. PROCESSING OF SPECIAL CATEGORIES OF PERSONAL DATA:

According to the KVK Law, data related to an individual's race, ethnic origin, political opinion, philosophical belief, religion, sect, or other beliefs, appearance and dress, membership in associations, foundations, or trade unions, health, sexual life, criminal convictions, and security measures, as well as biometric and genetic data, are considered special categories of personal data. Our Company takes adequate measures, as determined by the Personal Data Protection Board, in the processing of special categories of personal data. Our Company will process individuals' special categories of personal data only by obtaining explicit consent from the relevant individual and solely for the purpose of serving the collection objective, in order to provide better service.

5. TO WHOM AND FOR WHAT PURPOSES THE PROCESSED PERSONAL DATA MAY BE TRANSFERRED:

Your collected personal data may be transferred to ARKOPOL PLASTİK DIŞ TİC. LTD. ŞTİ., as well as to our shareholders, business partners, suppliers, legally authorized public institutions, and private individuals, within the framework of the personal data processing conditions and purposes specified in Articles 8 and 9 of the KVK Law, in order to serve the purposes stated in Article (2).

6. TRANSFER OF PERSONAL DATA ABROAD:

Our Company is authorized to transfer personal data abroad in accordance with the conditions determined by the Personal Data Protection Board under the KVK Law and other conditions stipulated in the law, provided that the explicit consent of the individual is obtained for this purpose.

7. RIGHTS OF THE DATA SUBJECT AS LISTED IN ARTICLE 11 OF THE KVK LAW:

In accordance with Article 12 of the KVK Law, our Company takes all necessary technical and administrative measures to prevent the unlawful processing of personal data, to block unlawful access to such data, and to ensure the preservation of personal data, and it prevents the unlawful processing of personal data by third parties. If you communicate your request to our Company, our Company will conclude the request free of charge within thirty days at the latest, depending on the nature of the request.

Within this scope, personal data subjects have the following rights:

• To learn whether their personal data is being processed,
• To request information if their personal data has been processed,
• To learn the purpose of processing their personal data and whether it is used in accordance with its purpose,
• To know the third parties to whom their personal data is transferred, domestically or abroad,
• To request the correction of their personal data if it is incomplete or inaccurately processed, and to request that the action taken in this context be communicated to third parties to whom their personal data has been transferred,
• To request the deletion, destruction, or anonymization of their personal data within the framework of the conditions stipulated in Article 7 of the KVK Law, and to request that the action taken in this context be communicated to third parties to whom their personal data has been transferred,
• To object to the emergence of a result against themselves by analyzing the processed data exclusively through automated systems,
• To request compensation for damages if they suffer harm due to the unlawful processing of their personal data.

8. DURATION OF PROCESSING YOUR PERSONAL DATA:

In accordance with the KVK Law, your personal data processed for the purposes specified in this "Information Text on the Processing of Personal Data" will be deleted, destroyed, or anonymized by us when the purpose requiring processing under Article 7/f.1 of the KVK Law ceases to exist and/or when the statutory limitation periods requiring us to process your data under the legislation expire.

9. CASES WHERE OUR COMPANY MAY PROCESS YOUR PERSONAL DATA WITHOUT YOUR EXPLICIT CONSENT IN ACCORDANCE WITH THE LAW:

In accordance with Article 5 of the KVKK, our Company may process your personal data, which it has obtained in a lawful manner as specified above, without seeking your explicit consent in the following cases:

• Where it is explicitly provided for by law, where it is necessary to process your personal data to protect your life or physical integrity, or that of another person, in cases where you are unable to express your consent as the data subject due to actual impossibility or where your consent is not legally valid,
• Where the processing of personal data of the parties to a contract is necessary, provided that it is directly related to the establishment or performance of a contract you have concluded with our Company and its affiliated companies/organizations or other real and/or legal persons,
• Where it is necessary for our Company to fulfill a legal obligation,
• Where your personal data has been made public by you,
• Where data processing is necessary for the establishment, exercise, or protection of a right,
• Where data processing is necessary for the legitimate interests of our Company, provided that it does not harm your fundamental rights and freedoms.

10. TO MAKE A REQUEST IN ACCORDANCE WITH THE LAW ON THE PROTECTION OF PERSONAL DATA:

You can always contact us to exercise your rights under Article 11 of Law No. 6698. Your request regarding your personal data will be concluded as soon as possible and within thirty days at the latest, depending on the nature of the request. However, if the process incurs additional costs, our Company will charge the fee determined by the Personal Data Protection Board. In this context, personal data subjects may submit their applications by:

• Submitting a petition in person or via a notary to the address Başakşehir Mah. Prof.Dr. Necmettin Erbakan Cad. Ebik İş Merkezi No:9 İçkapı No:19 Başakşehir İstanbul,
• Sending a petition signed with a mobile signature to info@arkopol.com.tr,
• Sending an email to info@arkopol.com.tr using a mobile signature or the email address previously notified to the data controller and registered in the data controller's system.

For third parties to make an application request on behalf of personal data subjects, a special power of attorney issued through a notary on behalf of the applicant must be provided by the data subject.

Requests and notifications received through channels other than these addresses will not be evaluated.

Rights related to personal data can only be exercised by individuals regarding their own data. Petitions that do not include official documents verifying your identity will not be considered. We would like to inform you that even if data deletion requests are fulfilled, we are obligated to share the data with official authorities if requested by them.

Our Company reserves the right to update this "Information Text on the Protection of Personal Data" at any time in line with changes that may be made to the applicable official legislation.