Clarification Text on the Personal Data Protection Law - MAKİNE ve KİMYA ENDÜSTRİSİ A.Ş

MAKİNE VE KİMYA ENDÜSTRİSİ ANONİM ŞİRKETİ

CLARIFICATION TEXT ON THE PERSONAL DATA PROTECTION LAW

Makine ve Kimya Endüstrisi Anonim Şirketi ("MKE A.Ş.") attaches utmost importance to the secure preservation and lawful processing of the personal data of its visitors, employees, and other relevant persons within the framework of the Personal Data Protection Law No. 6698 ("Law No. 6698") and relevant legislation. Apart from this "Clarification Text," the "MKE A.Ş. Personal Data Processing and Protection Instruction" and the "MKE A.Ş. Personal Data Storage and Disposal Instruction" are shared with you transparently below, allowing you to access detailed information regarding MKE A.Ş.'s policies on processing, storage, protection, and disposal of your personal data. The "MKE A.Ş. Standard File Plan," prepared in accordance with the Regulation on State Archive Services published in the Official Gazette dated 18.10.2019 and numbered 30922, which our Company is subject to, is also presented for the information of our esteemed visitors. Finally, with the "Data Subject Application Form" provided below, you can access comprehensive information regarding the methods and manners you can utilize when making applications to MKE A.Ş. in exercising your rights arising from Law No. 6698, as well as the application addresses of our Company.

Data Controller

The Clarification Text you are reading has been prepared to inform you about the methods of collection, processing, use, transfer, and disposal of your personal data within the scope of Articles 10 and 11 of Law No. 6698. Your personal data may be processed by MKE A.Ş., as the data controller, within the scope described below.

Purposes of Processing Your Personal Data

Your personal data is processed within the personal data processing conditions specified in Articles 5 and 6 of Law No. 6698 and for the purposes listed below, in accordance with the MKE A.Ş. Personal Data Processing and Instruction:

Execution of Emergency Management Processes
Execution of Information Security Processes
Execution of Employee Candidate / Intern / Student Selection and Placement Processes
Execution of Employee Candidate Application Processes
Execution of Employee Satisfaction and Loyalty Processes
Fulfillment of Obligations Arising from Employment Contracts and Legislation for Employees
Execution of Side Rights and Benefits Processes for Employees
Execution of Audit / Ethical Activities
Execution of Training Activities
Execution of Access Authorizations
Execution of Activities in Compliance with Legislation
Execution of Finance and Accounting Affairs
Ensuring Physical Security
Execution of Assignment Processes
Follow-up and Execution of Legal Affairs
Execution of Internal Audit / Investigation / Intelligence Activities
Execution of Communication Activities
Planning of Human Resources Processes
Execution / Supervision of Business Activities
Execution of Occupational Health / Safety Activities
Receiving and Evaluating Suggestions for the Improvement of Business Processes
Execution of Business Continuity Activities

Execution of Logistics Activities
Execution of Goods / Service Procurement Processes
Execution of Goods / Service Sales Processes
Execution of Goods / Service Production and Operation Processes
Execution of Customer Relationship Management Processes
Execution of Customer Satisfaction Activities
Organization and Event Management
Execution of Marketing Analysis Studies
Execution of Performance Evaluation Processes
Execution of Risk Management Processes
Execution of Storage and Archiving Activities
Ensuring the Security of Movable Property and Resources
Execution of Contract Processes
Follow-up of Requests / Complaints
Ensuring the Safety and Security of Movable Goods and Resources
Execution of Supply Chain Management Processes
Execution of Wage Policy
Ensuring the Security of Data Controller Operations
Execution of Talent / Career Development Activities
Informing Authorized Persons, Institutions, and Organizations
Execution of Management Activities
Creation and Follow-up of Visitor Records

Personal Data Transfer

Your personal data may be transferred, processed domestically and internationally, to our business partners, suppliers (including our affiliates and subsidiaries), real persons or private law legal entities with whom our Company has a business relationship, and authorized public institutions or third parties. This transfer is limited to the fulfillment of the above-mentioned purposes and is carried out in accordance with Articles 8 and 9 of Law No. 6698, and MKE A.Ş. Personal Data Processing and Protection Instruction.

Methods and Legal Basis of Personal Data Collection

Your personal data is collected and stored by MKE A.Ş. through all kinds of auditory, written, visual, and electronic means, and processed within the framework of the purposes specified in this Clarification Text. As MKE A.Ş., we process your personal data based on the following conditions to ensure that the services we provide are offered in compliance with laws and relevant legislation:

Explicit consent
Explicitly provided for by the laws (such as Law No. 5201, Law No. 5202, their secondary regulations, and the Regulation on State Archive Services published in the Official Gazette dated 18.10.2019 and numbered 30922, among others)
The necessity for the protection of the life or physical integrity of the person himself/herself or of any other person, who is unable to explain his/her consent due to the physical disability or whose consent is not deemed legally valid
The necessity of processing personal data belonging to the parties of a contract, provided that it is directly related to the establishment or performance of the contract
The necessity for MKE A.Ş. to comply with a legal obligation to which it is subject
The data being made public by the data subject
The necessity of data processing for the establishment, exercise, or protection of a right
The necessity of data processing for the legitimate interests pursued by MKE A.Ş., provided that this processing shall not violate the fundamental rights and freedoms of the data subject

Storage and Disposal of Your Personal Data

Personal data that you have shared with MKE A.Ş. through the channels mentioned in this Clarification Text will be stored in accordance with the stipulated periods, if a period is foreseen in Law No. 6698 and related legislation. Your personal data is stored and disposed upon the expiration of the specified period if one is foreseen in the law and related legislation, or if no such period is foreseen, as per the MKE A.Ş. Personal Data Storage and Disposal Instruction.

Rights of the Data Subject Enumerated in Article 11 of Law No. 6698

As personal data owners, everyone can apply to MKE A.Ş. within the scope of Law No. 6698 and exercise the following rights:

To learn whether their personal data is processed or not,
To demand for information as to if his/her personal data have been processed,
To learn the purpose of the processing of his/her personal data and whether these personal data are used in compliance with the purpose,
To know the third parties to whom their personal data is transferred in country or abroad.
To request the rectification of their personal data if it is incomplete or incorrectly processed.
To request the erasure or disposal of his/her personal data in the event that the reasons requiring its processing have ceased to exist, despite being processed in accordance with Law No. 6698 and other relevant legal provisions, and to request that the transaction carried out within this scope be reported to third parties to whom the personal data has been transferred.
To object to the occurrence of a result against the person himself/herself by analyzing the data processed solely through automated systems.
To claim compensation for the damage arising from the unlawful processing of his/her data.

You can submit your requests regarding these rights to MKE A.Ş. by filling out the Data Subject Application Form below and in accordance with the methods envisaged in the MKE A.Ş. Personal Data Processing and Protection Instruction, along with the necessary information that will make your identity clear and understandable. When applying to our Company, you must use the following communication channels.

	METHOD/PROCEDURE	ADDRESS	DESCRIPTION
Written Application	Can be made in person with a wet signature or through a Notary Public.	Emniyet Mahallesi Dögol Cad. No: 2 Anadolu Meydanı 06560 Yenimahalle-ANKARA/TÜRKİYE	The necessary action will be taken by specifying the relevant information and documents in this form, and “Personal Data Protection Law Data Subject Application” will be written on the application form envelope/notification.
Application via Registered Electronic Mail (KEP)	Can be made with a Registered Electronic Mail (KEP) address.	mkeas@hs01.kep.tr	The necessary action will be taken by specifying the relevant information and documents in this form within the KEP message content, and “Personal Data Protection Law Data Subject Application” will be written in the subject line.
Application via Electronic Mail (e-mail)	Can be made with an e-mail containing a mobile signature/e-signature.	kisiselveri@mke.gov.tr	The necessary action will be taken by specifying the relevant information and documents in this form within the e-mail content, and “Personal Data Protection Law Data Subject Application” will be written in the subject line.

MKE A.Ş. will finalize the request free of charge as soon as possible and within thirty days at the latest, depending on the nature of the request submitted through the communication channels above. However, if an additional cost is required to fulfil your request, MKE A.Ş. may charge a fee from you within the scope of the relevant tariff determined by the Personal Data Protection Board.

In case of a discrepancy between Turkish and English version of this Clarification Text, the Turkish version shall prevail which is available on MKE A.Ş.’s official website

You can examine the following documents for detailed information about the Protection of Your Personal Data: