INFORMATION (ENLIGHTENMENT) TEXT ON PROTECTION AND PROCESSING OF PERSONAL DATA

In accordance with the provisions of the Personal Data Protection Law No. 6698 ("KVKK"), all kinds of information that identifies you, including your special qualified personal data, are processed by Şanlıbayrak Çelik Kons. İnş. Tur. San. Tic. Ltd. Company ("Briefly Şanlıbayrak") as Data Controller within the scope described below.

The concept of "Processing of your Personal Data" is a legal concept, and in the Law No. 6698, this concept refers to all kinds of operations carried out on data, such as obtaining, recording, storing, preserving, altering, rearranging, disclosing, transferring, taking over, making available, classifying, or preventing the use of data.

Your personal data shared with Şanlıbayrak as the data controller may be processed in accordance with the KVKK, shared with third parties, stored, or used for our commercial transactions related commercial purposes in connection with our activities and services, and classified.

We attach the utmost importance to the security of your personal data as Şanlıbayrak, and we take the highest level of security measures possible to protect your privacy when collecting, storing, processing, and, if necessary, sharing your personal data in a lawful manner in all products and services we offer to you.

The purpose of publishing this information/enlightenment text is to inform you in the clearest way possible about how your personal data is collected, the purposes of processing, the legal reasons for processing, and your legal rights in connection with them in line with your satisfaction.

Below are important information and concepts regarding the protection and processing of personal data, and it is aimed to fully enlighten you with these concepts.

a) Who is the Data Controller?

In accordance with the Personal Data Protection Law No. 6698 ("Law No. 6698"), the data controller is Şanlıbayrak Çelik Kons. İnş. Tur. San. Tic. Ltd. Company. Your personal data will be collected and processed within the scope explained below by the data controller, Şanlıbayrak Çelik Kons. İnş. Tur. San. Tic. Ltd. Company ("Briefly Şanlıbayrak").

b) For What Purpose Your Personal Data is Processed/Will be Processed

Your personal data;

• Provision of legal, commercial, and physical security of themselves and their suppliers and customers,


• Ensuring corporate functioning, planning, and execution of management and communication activities,


• Execution of communication activities,


• Management of relationships with customers or suppliers,


• Conducting the application processes of job candidates,


• Execution/tracking of financial, accounting transactions/activities, execution, and tracking of purchasing, sales, marketing, and shipment activities/transactions,


• Execution/tracking of company legal affairs,


• Ensuring physical space security,


• Fulfillment of obligations arising from the employment contract and legislation for employees,


• Conducting processes related to benefits and rights of employees,


• Management of emergency management processes,


• Execution of occupational health and safety activities,


• Ensuring the security of movable property and resources,


• Management of performance evaluation process,


• Providing information to authorized institutions in accordance with the legislation,


• Execution of lease activities

Within the framework of the personal data processing conditions and purposes specified in Articles 5 and 6 of Law No. 6698.

c) To Whom and For What Purpose the Processed Personal Data May Be Transferred

Your personal data; within the limits of the relevant legislation, for the realization of the above-mentioned purposes and the fulfillment of the obligations imposed by the legislation, to authorized authorities such as the Republic of Turkey Ministry of Treasury and Finance, Revenue Administration, Social Security Institution, ministries, public institutions authorized by law such as judicial authorities, support service organizations, and other contracted organizations that provide services complementary or as an extension of the Companys activities, to Lawyers, in cases permitted by the legislation, to consultants and organizations collaborated with, to financial institutions, audit or independent audit companies, and banks, within the framework of Article 8 of Law No. 6698 regarding the transfer of personal data.

d) The Method and Legal Reason for Collecting Personal Data

Your personal data are collected by the relevant departments of the data controller through the methods permitted by the relevant legislation and contracts, and within the limits and boundaries allowed. The personal data collected by these methods can be processed and transferred for the purposes specified in this Information within the scope of the personal data processing conditions and purposes specified in Articles 5 and 6 of Law No. 6698.

e) Your Rights as a Data Subject According to Article 11 of Law No. 6698

• To learn whether your personal data is processed,


• If your personal data is processed, to request information regarding this,


• To learn the purpose of processing your personal data and whether they are used in accordance with their purpose,


• To know the third parties to whom your personal data are transferred, whether domestically or abroad,


• If your personal data is incomplete or incorrectly processed, to request their correction and, within this scope, to request the notification of the transaction made to your personal data to third parties to whom your personal data are transferred,


• To request the deletion or destruction of your personal data within the framework of Article 11 of Law No. 6698, and to request the notification of the transaction made to third parties to whom your personal data are transferred, in case the reasons requiring the processing of your personal data disappear, although it has been processed in accordance with the relevant laws and other legislation, in case you suffer damage due to the processing of your personal data unlawfully,


• If you believe that a result contrary to you has emerged by analyzing your processed data exclusively through automated systems, to object to this,


• If your personal data is processed unlawfully, to demand compensation for the damages you suffered according to the Law No. 6698.

If you communicate your requests regarding your rights to us by the methods specified below, our company will conclude your request, depending on its nature, as soon as possible and at the latest within thirty days, free of charge.

However, if the transaction also requires a cost, our company will charge the fee determined by the Personal Data Protection Board. In this context, you can submit your requests regarding the exercise of your rights under Law No. 6698, in writing and through other methods determined by the Personal Data Protection Board, to our company. In this context, the channels and procedures for your applications within the scope of Article 11 of Law No. 6698 are explained below. To exercise the rights mentioned above, you can fill out and sign the relevant person/data subject application/request form, the example of which is available at www.sanlibayrak.com.tr/sanlibayrak-veri-sahibi-basvuru-talep-formu.pdf,

• You can deliver it in person to the secretary office at Birlik Sanayi Sitesi 2. Cadde No:111 Beylikdüzü Istanbul address with identity documents that identify you,


• You can send it to the address Birlik Sanayi Sitesi 2. Cadde No:111 Beylikdüzü via notary public,


• You can send it to our registered e-mail address info@sanlibayrak.com.tr from your registered e-mail address.

In order for third parties to apply on behalf of personal data owners, a special power of attorney issued by the data owner for the person to apply must be available through a notary public.

Yours sincerely.