KVKK Clarification Notice (Corporate)

DEMİRKANLI MAKİNA İNŞAAT SAN. VE TİC A.Ş., which operates in the fields of personnel attendance control systems development, cloud-based software services and other technology solutions in this scope, maintains the same sensitivity it shows in the sector regarding the security of personal data.

With this awareness, we take the necessary administrative and technical measures to ensure that all personal data processed by our Company is processed, stored and, when necessary, deleted/anonymized in accordance with the relevant secondary legislation, Personal Data Protection Board decisions and good practice principles, primarily the Law No. 6698 on the Protection of Personal Data ("KVKK" or "Law").

This Disclosure Text has been prepared by our Company acting as "Data Controller" within the scope of KVKK to explain the general framework regarding the processing of personal data of customer and supplier officials, potential customers, visitors and other relevant persons who use our website, mobile applications, products and services.

1. INFORMATION ABOUT THE DATA CONTROLLER

According to KVKK, the data controller;

DEMİRKANLI MAKİNA İNŞAAT SANAYİ VE TİCARET ANONİM ŞİRKETİ
Address: Küçükbakkalköy Mah. Selvili Sok. No:4/20 Ataşehir / İstanbul
Tax Office / No: Göztepe – 2760626073
Trade Registry No: 454803
is registered as.

2. PROCESSED PERSONAL DATA CATEGORIES

Depending on the nature of our activities, the following personal data categories may be processed:

Identity Information: Name, Surname

Contact Information: Address, email address, phone number, business contact information, etc.

Transaction Security Information: Username, password (passwords are stored in a way that cannot be technically recovered), session information

Request / Complaint Management Information: Support records, call center records, email correspondence, etc.

Processed data categories may vary depending on the type of relationship with the person (customer, supplier, visitor, etc.).

3. PURPOSES OF PROCESSING PERSONAL DATA

Your personal data is processed by our Company for the following purposes, provided that it is related, limited and measured:

• Providing, developing and improving our products and services
• Establishing, maintaining and terminating customer and supplier relationships
• Establishing, performing and monitoring contract processes and/or legal relationships
• Conducting invoicing, collection, payment and finance-accounting processes
• Receiving, evaluating and concluding requests and complaints
• Providing information about our products and services, managing maintenance and support processes
• Conducting information security processes, ensuring system and application security
• Detection and prevention of unauthorized use and abuse
• Planning and conducting business continuity and operational processes
• Fulfilling our obligations arising from relevant legislation (tax, commercial law, labor law, etc.)
• Meeting information requests from authorized institutions and organizations
• Using as evidence in possible disputes and establishing, using or protecting our rights

In addition, limited marketing activities such as campaign and event notifications, satisfaction surveys, commercial electronic message sending can also be carried out in cases where the relevant person has explicit consent.

4. TRANSFER OF PERSONAL DATA

Your personal data; within the scope of the purposes stated above and in accordance with Articles 8 and 9 of KVKK, by taking necessary security measures:

• Our business/solution partners (infrastructure, hosting, maintenance, support, consulting services, etc.)
• Authorized public institutions and organizations and judicial authorities within the framework of legal obligations

may be shared with.

When data transfer abroad is in question, this transfer is carried out in accordance with Article 9 of KVKK; to countries where adequate protection is declared by the Board, or in cases where adequate protection is not available, provided that data controllers in Turkey and the relevant foreign country commit to adequate protection in writing and the Board's permission is obtained.

5. METHODS OF COLLECTING PERSONAL DATA AND LEGAL REASONS

Your personal data; by our Company and authorized representatives;

• Physical forms, contracts and application documents
• Phone, email, call center, support request systems
• Our website, mobile applications, cookies and similar online technologies
• Business cards, fair and event participations
• Invoice, delivery note, collection records and accounting documents
• Documents and correspondence related to legal processes

is obtained through automatic and non-automatic methods, verbally, in writing or in electronic environment.

Your personal data collected within this scope; as stated in Article 5 of KVKK:

• Being explicitly foreseen in laws (Art. 5/2-a)
• Being directly related to the establishment or performance of a contract (Art. 5/2-c)
• Being necessary for the data controller to fulfill its legal obligation (Art. 5/2-ç)
• Data processing being necessary for the establishment, exercise or protection of a right (Art. 5/2-e)
• Data processing being necessary for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the relevant person (Art. 5/2-f)

is processed based on legal reasons.

In cases where these legal reasons are not sufficient, your personal data is processed by obtaining your explicit consent.

6. RIGHTS OF RELEVANT PERSONS WITHIN THE SCOPE OF KVKK

In accordance with Article 11 of KVKK, as a personal data owner, by applying to our Company:

• Learning whether your personal data is processed
• Requesting information if your personal data has been processed
• Learning the purpose of processing your personal data and whether they are used in accordance with their purpose
• Knowing the third parties to whom your personal data is transferred at home or abroad
• Requesting correction if your personal data is processed incompletely or incorrectly
• Requesting deletion or destruction of your personal data within the framework of the conditions foreseen in Article 7 of KVKK
• Requesting notification of the transactions within the scope of (5) and (6) to third parties to whom your personal data is transferred
• Objecting to a result that emerges against you as a result of analyzing your processed data exclusively through automated systems
• Requesting compensation for damage in case you suffer damage due to unlawful processing of your personal data

you have rights.

7. APPLICATION METHODS AND PRICING

In accordance with Article 13 of KVKK and the "Regulation on the Procedures and Principles of Application to the Data Controller", you can send your requests regarding your rights to our Company in Turkish, in writing or by registered electronic mail.

Your applications;

You can send a wet-signed application form (or your petition) together with documents proving your identity by hand or through a notary to the address below:

DEMİRKANLI MAKİNA İNŞAAT SANAYİ TİCARET ANONİM ŞİRKETİ
Küçükbakkalköy Mah. Selvili Sok. No:4/20 Ataşehir / İstanbul
0216 414 08 90

You can make it through any of the above channels.

Your applications will be concluded as soon as possible and within 30 (thirty) days at the latest, depending on the nature of the request.

If the procedures related to your application require an additional cost, the fees in the tariff determined by the Personal Data Protection Board will be taken as basis. In case of a written response, no fee will be charged for the first 10 (ten) pages, and a processing fee may be requested for each page exceeding 10 pages according to the tariff determined by the Board. If the response is given on a medium such as CD or flash drive, the cost of the recording medium in question may also be requested.

8. CHANGES THAT CAN BE MADE TO THE DISCLOSURE TEXT

Our Company reserves the right to make changes to this Disclosure Text at any time in parallel with the Law, secondary legislation, Board decisions and changes that may occur in our business processes.

The current text enters into force when it is presented to relevant persons through our website and/or mobile applications or other methods we deem appropriate.

DEMİRKANLI MAKİNA İNŞAAT SANAYİ VE TİC A.Ş.