Information Text Regarding the Processing of Personal Data

Data Controller

Seda Nur Çelik (referred to as “www.sedanurcelik.com” or “Company”)

As Made in Celik, we have prepared this Information Text Regarding the Processing of Personal Data (“Information Text”) in order to inform the data owner persons regarding the processing, storage and transfer of your personal data within the framework of our activities arising from the legislation and legal regulations related to the Law on the Protection of Personal Data No. 6698 (“KVKK”).

In addition to these, detailed information about the cookies and SDKs used when you visit our website, mobile site and/or mobile application is included in the Cookie Policy. The personal data processed through these is explained in this Information Text.

The Information Text shall be valid as of the date it is published by www.sedanurcelik.com. www.sedanurcelik.com may make changes to the Information Text at any time if necessary. The changes to be made shall become effective immediately upon the publication of the Information Text at https://sedanurcelik.com/KVKK-aydinlatma-metni.

1- Relevant persons

1.1- Customers

DATA CATEGORIES

1.1.1- Identity Information

Personal Data Processed:

Name - Surname, Date of Birth, Gender, T.R. Identity Number

Purposes of Processing Personal Data: Carrying out finance and accounting affairs, carrying out communication activities; carrying out processes of commitment to companies/products/services; carrying out activities in accordance with legislation; following up and carrying out legal affairs; carrying out activities to ensure business continuity; carrying out and auditing business activities; carrying out sales processes of goods/services; carrying out support services after sales of goods/services; carrying out customer relationship management processes; carrying out activities aimed at customer satisfaction; carrying out advertising, campaign and promotion processes; carrying out storage and archive activities; carrying out contract and membership processes; following up on requests/complaints; planning and executing commercial and/or business strategies; carrying out the necessary studies by business units to benefit from the offered products and services and carrying out relevant business processes; Providing Information to Authorized Persons, Institutions and Organizations

Legal Reasons for Processing Personal Data

Your personal data within this scope is processed by Made in Celik based on the legal reasons specified in the relevant legislation and Article 5 of the KVKK in order to achieve the purposes listed above;

It is clearly foreseen in the laws,

It is necessary to process personal data belonging to the parties to the contract, provided that it is directly related to the establishment or execution of a contract,

It is mandatory for the data controller to fulfill its legal obligation, and

Provided that it does not harm the fundamental rights and freedoms of the relevant person, it is mandatory for the legitimate interests of the data controller. For cases not included in the scope of the above purposes, your personal data is processed based on your explicit consent, the details of which are specified in the Consent Text.

Methods of Collecting Personal Data:

The personal data specified above are collected through membership forms on our website, fields in the content of my account page that can be filled in according to your preference, your requests and applications, contracts, campaigns and third-party identity verification systems (e.g. Google Login, Facebook Login etc.).

1.1.2- Contact Information

Processed Personal Data:

E-Mail Address, Invoice & Delivery Addresses, Mobile Phone Number

Purposes of Processing Personal Data:

Conducting Finance and Accounting Affairs; Conducting Communication Activities; Conducting Business Activities; Conducting Loyalty Processes to Company / Products / Services; Following up and Conducting Legal Affairs; Conducting Goods / Services Sales Processes; Conducting Goods / Services After-Sales Support Services; Conducting Customer Relationship Management Processes; Conducting Customer Satisfaction Activities; Conducting Marketing Analysis Studies; Carrying out advertising, campaign and promotion processes; tracking requests/complaints; carrying out marketing processes of products/services; carrying out storage and archive processes; informing authorized persons, institutions and organizations.

Legal Reasons for Processing Personal Data:

It is clearly provided for in the laws, It is necessary to process personal data belonging to the parties to the contract, provided that it is directly related to the establishment or execution of a contract, It is mandatory for the data controller to fulfill its legal obligations, and It is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the relevant person. For cases not included in the scope of the above purposes, your personal data is processed based on your explicit consent, the details of which are specified in the Consent Text.

Methods of Collecting Personal Data:

The personal data specified above is collected through membership pages, contracts, my account page on our website, fields that can be filled in the content of our website and that you can fill in according to your preference, your requests and applications, contracts, campaigns and third-party identity verification systems (e.g. Google Login, Facebook Login, etc.).

1.1.3- Legal Transaction Information

Processed Personal Data:

Information in the Case File in Case of a Dispute, Warning Letters, Information in Correspondence with Judicial and Administrative Authorities

Purposes of Processing Personal Data:

Following and Executing Legal Affairs; Carrying Out and Supervising Business Activities; Providing Information to Authorized Persons, Institutions and Organizations; Carrying Out Activities in Accordance with Legislation; Carrying Out Storage and Archive Activities; Carrying Out Risk Management Processes; Carrying Out Contract Processes; Following Up Requests/Complaints; Ensuring the Security of Data Controller Operations

Legal Reasons for Processing Personal Data:

Your personal data within this scope is processed by Made in Celik for the purposes listed above, based on the legal reasons specified in the relevant legislation and Article 5 of the KVKK;

It is mandatory for the data controller to fulfill its legal obligation, Data processing is mandatory for the establishment, use or protection of a right, and Data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the relevant person.

Methods of Collection of Personal Data:

The personal data specified above are collected through official letters and other printed / electronic documents received from judicial and administrative authorities.

1.1.4- Customer Transaction Information

Processed Personal Data:

Invoice Information, Request Information, Order Information, Customer Comments

Purposes of Processing Personal Data:

Conducting Supply Chain Management Processes; Conducting and Supervising Business Activities; Providing Information to Authorized Persons, Institutions and Organizations; Conducting Activities in Accordance with Legislation; Conducting Finance and Accounting Affairs; Conducting Storage and Archive Activities; Conducting Contract Processes; Conducting Goods / Services Sales Processes; Conducting Goods / Services After-Sales Support Services; Conducting Customer Relationship Management Processes; Conducting Activities for Customer Satisfaction; Conducting Marketing Analysis Studies; Conducting Advertising, Campaign and Promotion Processes; Monitoring Requests / Complaints, Conducting Marketing Processes of Products / Services

Legal Reasons for Processing Personal Data:

Your personal data within this scope, in order to achieve the purposes listed above by Made in Celik, is used for the purposes specified in the relevant legislation and Article 5 of the KVKK;

It is processed based on the legal grounds that it is clearly foreseen in the laws, that it is directly related to the establishment or execution of a contract, that the processing of personal data belonging to the parties to the contract is necessary, that it is mandatory for the data controller to fulfill its legal obligation, and that it is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the relevant person. For cases not included in the scope of the above purposes, your personal data is processed based on your explicit consent, the details of which are specified in the Consent Text.

Methods of Collection of Personal Data:

The personal data specified above are collected through printed/electronic forms, call center records, e-mails and SAP programs.

1.1.5- Transaction Security Information

Personal Data Processed:

IP Address Information, Website Login and Exit Information, Username Information, Password Information, Traffic Data (Connection Time / Duration, etc.)

Purposes of Processing Personal Data:

Conducting Information Security Processes; Conducting Audit / Ethical Activities; Conducting and Supervising Business Activities; Conducting Storage and Archive Activities; Ensuring the Security of Data Controller Operations; Providing Information to Authorized Persons, Institutions and Organizations; Conducting Activities in Accordance with Legislation; Following and Conducting Legal Affairs; Conducting Goods / Services Sales Processes; Following Requests / Complaints

Legal Reasons for Processing Personal Data:

It is clearly foreseen in the laws, It is mandatory for the Data Controller to fulfill its legal obligations and It is mandatory for the legitimate interests of the Data Controller, provided that it does not harm the fundamental rights and freedoms of the relevant person. For cases not included in the scope of the above purposes, your personal data is processed based on your explicit consent, the details of which are specified in the Consent Text.

Personal Data Collection Methods:

The personal data specified above is collected through information security systems and electronic devices.

1.1.6- Financial Information

Processed Personal Data:

Encrypted Credit Card Information, Bank Account / IBAN Number Information

Purposes of Personal Data Processing:

Conducting Activities in Accordance with Legislation; Following and Conducting Legal Affairs; Conducting Finance and Accounting Affairs; Conducting Return Processes; Conducting and Supervising Business Activities; Conducting Goods / Services Sales Processes; Conducting Storage and Archive Activities; Conducting Risk Management Processes; Conducting Contract Processes; Providing Information to Authorized Persons, Institutions and Organizations

Legal Reasons for Processing Personal Data

Your personal data within this scope, in order to achieve the purposes listed above by Made in Celik, is processed in accordance with the relevant legislation and Article 5 of the KVKK;

It is processed based on the legal reasons that, provided that it is directly related to the establishment or execution of a contract, the processing of personal data belonging to the parties to the contract is necessary and that it is mandatory for the Data Controller to fulfill its legal obligations.

Methods of Collection of Personal Data:

The personal data specified above are collected through printed and electronic forms, e-mails and requests and messages on the website.

1.1.7- Visual and Audio Recording Information

Processed Personal Data:

Call Center Voice Recordings

Purposes of Processing Personal Data:

Conducting Loyalty Processes to Company Products and Services; Conducting Customer Relationship Management Processes; Conducting Activities for Customer Satisfaction; Conducting After-Sales Support Services of Goods / Services; Conducting Storage and Archive Activities; Tracking Requests / Complaints; Conducting Marketing Processes of Products / Services; Conducting Customer Relationship Management Processes; Conducting Marketing Analysis Studies; Providing Information to Authorized Persons, Institutions and Organizations

Legal Reasons for Processing Personal Data:

Your personal data within this scope is processed by Made in Celik for the purposes listed above, based on the legal reasons specified in the relevant legislation and Article 5 of the KVKK;

It is clearly foreseen in the laws, It is mandatory for the data controller to fulfill its legal obligations, and It is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the relevant person.

Methods of Collection of Personal Data:

The personal data specified above are collected electronically during calls to our call center.

1.1.8- Location Information

Personal Data Processed:

Location Information

Purposes of Processing Personal Data:

Conducting Customer Relationship Management Processes; Conducting Marketing Analysis Studies; Conducting Advertising / Campaign / Promotion Processes; Conducting Activities for Customer Satisfaction; Conducting Marketing Processes of Products / Services; Carrying Out Goods / Services Sales Processes; Carrying Out Goods / Services Production and Operation Processes

Legal Reasons for Processing Personal Data:

Your personal data within this scope is processed by Made in Celik based on the legal reason of Explicit Consent specified in the relevant legislation and Article 5 of the KVKK, the details of which can be accessed from the Consent Text.

Methods of Collection of Personal Data:

The personal data specified above is collected according to your preference in the internet browser you use and our Company's mobile application.

TRANSFER OF PERSONAL DATA

Personal data belonging to customers are transferred only to the extent necessary for the realization of the relevant purpose by complying with the rules in Article 8 titled "Transfer of Personal Data" and/or Article 9 titled "Transfer of Personal Data Abroad" of the KVKK and by taking the necessary technical and administrative measures; To our affiliates and subsidiaries limited to the purposes listed above, Again, within the scope of the contracts between us for the purposes listed above, in accordance with the legislation (for the shipment of the product) to the seller of the purchased product, cargo companies (for the delivery of the product), banks (for the collection of payment for the product) and our business partners with whom we work in sending bulk SMS / e-mails (for providing information on delivery etc.) and (for after-sales services when necessary) to our suppliers and authorized product services, In order to fulfill our legal obligations, it can be transferred to authorized persons and official institutions in accordance with legal regulations and legislation, and it can be recorded in our programs and/or systems provided/offered to us by our infrastructure suppliers in the field of Technology.

1.2-Online Users

DATA CATEGORIES

1.2.1- Transaction Security Information

Personal Data Processed:

IP Address Information, Website Login and Exit Information, Password and Password Information, Computer Screen Recordings, Device IMEI Number, Device MAC Address

Purposes of Personal Data Processing:

Execution of Information Security Processes; Execution of Activities in Accordance with Legislation; Management of Customer Relationship Management Processes; Monitoring of Requests and Complaints; Providing Information to Authorized Persons, Institutions and Organizations

Legal Reasons for Processing Personal Data

Your personal data within this scope is processed by Made in Celik based on the legal reasons specified in the relevant legislation and Article 5 of the KVKK in order to realize the purposes listed above;

It is clearly foreseen in the laws, It is mandatory for the data controller to fulfill its legal obligations and It is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the relevant person.

Methods of Collecting Personal Data:

Your personal data specified above are collected through internet applications, information systems and electronic devices (telecommunication infrastructure, computers and phones, etc.) and other documents declared by you.

TRANSFER OF PERSONAL DATA

Personal data of Online Users can be transferred to authorized persons and official institutions in accordance with the rules in Article 8 titled “Transfer of Personal Data” and/or Article 9 titled “Transfer of Personal Data Abroad” of the KVKK and by taking the necessary technical and administrative measures, only to the extent necessary for the realization of the relevant purpose;

In order to fulfill our legal obligations, it can be transferred to authorized persons and official institutions in accordance with legal regulations and legislation and can be recorded in our programs and/or systems provided/offered to our use by our infrastructure suppliers in the field of Technology.

1.2.2- Employees / Interns / Shareholders

Detailed information about the personal data processed by employees, interns and shareholders within Made in Celik is published in a way that only they can access, and they have been provided with detailed information on this subject.

1.2.3- Candidate Employees

DATA CATEGORIES

1.2.3.1- Identity Information

Personal Data Processed:

Name - Surname, Marital Status, Date of Birth, Place of Birth

Purposes of Processing Personal Data:

Conducting the Selection, Placement and Application Processes of Candidate Employees; Planning Human Resources Policies and Processes; Conducting Interview Processes; Conducting Business Activities; Conducting Contract Processes; Conducting Communication Activities

Legal Reasons for Processing Personal Data

Your personal data within this scope, in order to achieve the purposes listed above by Made in Celik, is processed in accordance with the relevant legislation and Article 5 of the KVKK;

The processing of personal data belonging to the parties to the contract is necessary, provided that it is directly related to the establishment or performance of a contract, and it is based on the legal grounds that the processing of data is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the relevant person.

Methods of Collecting Personal Data:

The personal data specified above is collected through resumes sent to our Company via e-mail, Private Employment Agencies (İŞKUR, Kariyer.net etc.) and other channels (LinkedIn etc.).

1.2.3.2- Contact Information

Processed Personal Data:

E-Mail Address, Contact Address, Mobile Phone Number

Purposes of Processing Personal Data:

Conducting the Selection, Placement and Application Processes of Employee Candidates; Conducting Communication Activities; Planning Human Resources Policies and Processes; Conducting Interview Processes; Conducting Business Activities

Legal Reasons for Processing Personal Data

Your personal data within this scope, in order to achieve the purposes listed above by Made in Celik, is processed in accordance with the relevant legislation and Article 5 of the KVKK;

It is processed based on the legal grounds that, provided that it is directly related to the establishment or execution of a contract, the processing of personal data belonging to the parties to the contract is necessary and that the data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the relevant person.

Methods of Collection of Personal Data:

The personal data specified above are collected through CVs sent to our Company via e-mail, Private Employment Agencies (İŞKUR, Kariyer.net etc.) and other media (LinkedIn etc.).

1.2.3.3- Personal Information

Processed Personal Data:

Military Service Status, Reference Information, CV Information

Purposes of Processing Personal Data:

Conducting the Selection, Placement and Application Processes of Employee Candidates; Conducting Business Activities; Conducting Contract Processes; Conducting the Wage Policy; Planning Human Resources Policies and Processes

Legal Reasons for Processing Personal Data

Provided that it is directly related to the establishment or execution of a contract, the processing of personal data belonging to the parties to the contract is necessary, Provided that it does not harm the fundamental rights and freedoms of the relevant person, the processing of data is mandatory for the legitimate interests of the data controller, and Explicit Consent for the reference information in the CV.

Methods of Collection of Personal Data:

The personal data specified above are collected through CVs sent to our Company via e-mail, Private Employment Agencies (İŞKUR, Kariyer.net etc.) and other channels (LinkedIn etc.).

1.2.3.4- Professional Experience Information

Processed Personal Data:

Educational History and Details, Work History and Details, Diploma Information, Foreign Language Knowledge, Computer Usage Information, Position/Title Information

Purposes of Processing Personal Data:

Conducting the Selection, Placement and Application Processes of Employee Candidates; Planning Human Resources Policies and Processes; Conducting Business Activities; Conducting Contract Processes; Conducting the Wage Policy

Legal Reasons for Processing Personal Data

Provided that it is directly related to the establishment or execution of a contract, the processing of personal data belonging to the parties to the contract is necessary and provided that it does not harm the fundamental rights and freedoms of the relevant person, the processing of data is mandatory for the legitimate interests of the data controller.

Methods of Collecting Personal Data:

The above-mentioned personal data is collected through resumes sent to our Company via e-mail, Private Employment Agencies (İŞKUR, Kariyer.net etc.), other channels (LinkedIn etc.) and your statements.

1.2.3.5- Health Information

Processed Personal Data:

Disability Status

Purposes of Processing Personal Data:

Conducting the Selection, Placement and Application Processes of Employee Candidates; Conducting Audit and Ethics Activities; Planning Human Resources Policies and Processes; Conducting Business Activities

Legal Reasons for Processing Personal Data

Your personal data within this scope is processed by Made in Celik for the purposes listed above, based on the legal reason stated in the relevant legislation and Article 6 of the KVKK;

Personal data related to health and sexual life can only be processed by persons or authorized institutions and organizations under the obligation of confidentiality without the explicit consent of the person concerned, for the purposes of protecting public health, conducting preventive medicine, medical diagnosis, treatment and care services, planning and managing health services and their financing. The processing of these data will only be carried out based on your explicit consent, except for the limitations specified in Article 6 of the KVKK.

Methods of Collection of Personal Data:

The personal data specified above is collected through CVs sent to our Company via e-mail, Private Employment Agencies (İŞKUR, Kariyer.net etc.), other channels (LinkedIn etc.) and your statements.

TRANSFER OF PERSONAL DATA

Identity, contact, personal and professional experience information of job candidates may be transferred to affiliates and subsidiaries only to the extent necessary for the realization of the relevant purpose, subject to the permission to be given by job candidates, in accordance with the rules in Article 8 titled “Transfer of Personal Data” or Article 9 titled “Transfer of Personal Data Abroad” of the KVKK and by taking the necessary technical and administrative measures; and may be recorded in our programs and/or systems provided/offered to our use by our infrastructure suppliers in the field of Technology.

1.2.4-Business Partner Authorities and Employees

DATA CATEGORIES

1.2.4.1- Identity Information

Processed Personal Data:

Name - Surname, T.C. Identity Number, Copy of Identity

Purposes of Processing Personal Data:

Conducting Communication Activities; Conducting and Supervising Business Activities; Planning and Execution of Commercial and/or Business Strategies; Tracking of Requests / Complaints; Providing Information to Authorized Persons, Institutions and Organizations; Carrying Out Activities in Accordance with Legislation; Carrying Out Contract Processes

Legal Reasons for Processing Personal Data

It is clearly foreseen in the laws, It is necessary to process personal data belonging to the parties to the contract, provided that it is directly related to the establishment or execution of a contract,

It is mandatory for the data controller to fulfill its legal obligation, and It is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the relevant person.

Methods of Collection of Personal Data:

The personal data specified above are collected through business cards, contracts, face-to-face interviews, electronic forms and calls to our call center.

1.2.4.2- Contact Information

Processed Personal Data:

E-Mail Address, Mobile Phone Number, Address

Purposes of Processing Personal Data:

Conducting Communication Activities; Conducting and Supervising Business Activities; Planning and Execution of Commercial and/or Business Strategies; Following Up Requests/Complaints; Providing Information to Authorized Persons, Institutions and Organizations; Conducting Activities in Accordance with Legislation, Conducting Contract Processes

Legal Reasons for Processing Personal Data:

Your personal data within this scope will be processed by Made in Celik for the purposes listed above, as specified in the relevant legislation and Article 5 of the KVKK;

It is processed based on the legal grounds that it is clearly foreseen in the laws, that it is directly related to the establishment or execution of a contract, that the processing of personal data belonging to the parties to the contract is necessary, that it is mandatory for the data controller to fulfill its legal obligations, and that it is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the relevant person.

Methods of Collection of Personal Data:

The personal data specified above are collected through business cards, contracts and face-to-face meetings.

1.2.4.4- Financial Information

Processed Personal Data:

Bank Account / IBAN Number Information, Invoice Information, Request Information

Purposes of Personal Data Processing:

Conducting Finance and Accounting Affairs; Conducting and Supervising Business Activities; Conducting Activities in Accordance with the Legislation; Providing Information to Authorized Persons, Institutions and Organizations

Legal Reasons for Processing Personal Data

It is clearly foreseen in the laws, It is directly related to the establishment or execution of a contract, the processing of personal data belonging to the parties to the contract is necessary and It is mandatory for the Data Controller to fulfill its legal obligation.

Methods of Collection of Personal Data:

The personal data specified above is collected through electronic and printed forms.

1.2.4.5- Legal Transaction Information

Processed Personal Data:

Information in the Case File, Warning Letters, Information in Correspondence with Judicial and Administrative Authorities in Case of Dispute

Purposes of Processing Personal Data:

Following and Conducting Legal Affairs; Conducting and Supervising Business Activities; Providing Information to Authorized Persons, Institutions and Organizations; Conducting Activities in Accordance with Legislation; Conducting Storage and Archive Activities; Conducting Risk Management Processes; Conducting Contract Processes; Following Up Requests / Complaints

Legal Reasons for Processing Personal Data:

It is clearly foreseen in the laws, It is mandatory for the data controller to fulfill its legal obligation and Data processing is mandatory for the establishment, use or protection of a right.

Methods of Collecting Personal Data:

The personal data specified above are collected through official letters and other printed / electronic documents received from judicial and administrative authorities.

1.2.4.6- Risk Management Information

Processed Personal Data:

Information Processed for the Management of Commercial Risks

Purposes of Processing Personal Data:

Conducting and Supervising Business Activities; Conducting Storage and Archive Activities; Conducting Risk Management Processes; Conducting Contract Processes; Monitoring Requests / Complaints; Conducting Internal Audit Activities; Conducting Intelligence Activities

Legal Reasons for Processing Personal Data

Your personal data within this scope, in order to achieve the purposes listed above by Made in Celik, is used in accordance with the relevant legislation and Article 5 of the KVKK;

Methods of Collecting Personal Data:

The personal data specified above is collected during participation in a meeting or event, during the sales process, through contracts and documents declared by the relevant person.

1.2.4.7- Visual and Audio Recording Information

Processed Personal Data:

Call Center Voice Recordings

Purposes of Processing Personal Data:

Execution of Information Security Processes; Provision of Information to Authorized Persons, Institutions and Organizations; Execution of Activities in Accordance with Legislation; Execution of Audit / Ethics Activities; Execution of Goods / Services Sales Processes; Execution of Advertisement / Campaign / Promotion Processes; Execution of Storage and Archive Activities; Tracking of Requests / Complaints; Execution of Marketing Processes of Products / Services

Legal Reasons for Processing Personal Data

Your personal data within this scope, in order to achieve the purposes listed above by Made in Celik, is used in accordance with the relevant legislation and Article 5 of the KVKK;

It is processed based on the legal grounds that it is clearly foreseen in the laws, It is mandatory for the data controller to fulfill its legal obligation, Data processing is mandatory for the establishment, exercise or protection of a right, It is necessary to process personal data belonging to the parties to the contract, provided that it is directly related to the establishment or execution of a contract, and Data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the relevant person.

Methods of Collection of Personal Data:

The personal data specified above are collected electronically during calls to our call center.

TRANSFER OF PERSONAL DATA

Personal data belonging to business partner officials and employees are transferred only to the extent necessary for the realization of the relevant purpose, by complying with the rules in Article 8 titled “Transfer of Personal Data” or Article 9 titled “Transfer of Personal Data Abroad” of the KVKK and by taking the necessary technical and administrative measures; In order to fulfill our legal obligations, it can be transferred to authorized persons and official institutions as required by legal regulations and legislation and can be recorded in our programs and/or systems provided/offered to our use by our infrastructure suppliers in the field of Technology.

1.2.5- Supplier Employees

DATA CATEGORIES

1.2.5.1- Identity Information

Personal Data Processed:

Name - Surname, TR Identity Number, Signature, Photocopy of ID, Photograph, SGK Registry Number, Marital Status, Date and Place of Birth, Names and Surnames of Family Members, TR Identity Number of Family Members. Identity Numbers, Number of Children, Name of Mother/Father, Serial Number of Identity Card, Volume Number of Identity Card, Family Sequence Number of Identity Card, Place of Issuance of Identity Card, Reason for Issuance of Identity Card, Date of Issuance of Identity Card, Nationality, Foreign Identity Number, Copy of Marriage Certificate, Gender

Purposes of Processing Personal Data:

Execution of Information Security Processes; Fulfillment of Obligations Arising from Employment Contracts and Legislation; Execution of Audit/Ethics Activities; Execution of Activities in Accordance with Legislation; Execution of Finance and Accounting Affairs; Ensuring Security of Physical Space; Monitoring and Execution of Legal Affairs; Execution of Communication Activities; Planning of Human Resources Policies and Processes; Execution/Inspection of Business Activities; Execution of Occupational Health/Safety Activities; Execution of Goods/Services Procurement Processes; Execution of Storage and Archive Activities; Ensuring the Security of Movable Goods and Resources; Carrying Out Contract Processes; Providing Information to Authorized Persons, Institutions and Organizations

Legal Reasons for Processing Personal Data

It is clearly foreseen in the laws,

It is necessary to process personal data belonging to the parties to the contract, provided that it is directly related to the establishment or execution of a contract,

It is mandatory for the data controller to fulfill its legal obligation, and

Provided that it does not harm the fundamental rights and freedoms of the relevant person, it is mandatory for the legitimate interests of the data controller.

Methods of Collection of Personal Data:

The personal data specified above are collected through printed / electronic forms, contracts, commitments, e-mails, SAP programs, face-to-face meetings and submissions made by suppliers.

1.2.5.2- Contact Information

Personal Data Processed:

E-Mail Address, Contact Address, Mobile Phone Number, Home Phone Number, Contact Information of Family Members, Residence Document

Legal Reasons for Processing Personal Data

Provided that it is directly related to the establishment or execution of a contract, the processing of personal data belonging to the parties to the contract is necessary, It is mandatory for the data controller to fulfill its legal obligations, and Provided that it does not harm the fundamental rights and freedoms of the relevant person, the processing of data is mandatory for the legitimate interests of the data controller.

Methods of Collection of Personal Data:

The personal data specified above are collected through printed / electronic forms, contracts, commitments, e-mails, SAP programs, submissions made by suppliers and your declarations.

1.2.5.3- Risk Management Information

Processed Personal Data:

Information Processed for the Management of Commercial Risks

Purposes of Processing Personal Data:

Conduct and Audit of Business Activities; Carrying out storage and archive activities; Carrying out risk management processes; Carrying out contract processes; Monitoring requests/complaints; Carrying out internal audit activities; Carrying out intelligence activities

Legal reasons for processing personal data

Methods of Collection of Personal Data:

The personal data specified above are collected during participation in a meeting or event, during the sales process, through contracts and through documents declared by the relevant person.

1.2.5.4- Personal Information

Processed Personal Data:

SGK Job Entry - Termination Declarations, Leave Forms, Payroll Information, CV Information, Title Information, Reference Information, Side Benefits Information, BES Information, Information Within the Scope of AGİ, Timesheet Information, Shift Records, Attendance Schedules, Diploma Photocopy, Disciplinary Investigation, Defense Letters, Official Correspondence, Embezzlement Forms, Military Status Documents, Education Status of Family Members

Purposes of Processing Personal Data:

Fulfillment of Obligations Arising from Employment Contracts and Legislation; Conducting Activities in Accordance with Legislation; Conducting Finance and Accounting Affairs; Conducting Assignment Processes; Monitoring and Conducting Legal Affairs; Planning Human Resources Processes; Conducting and Supervising Business Activities; Conducting Contract Processes; Providing Information to Authorized Persons, Institutions and Organizations; Carrying out Storage and Archive Activities, Carrying out the Remuneration Policy, Carrying out Side Rights and Benefits Processes, Carrying out Management Activities

Legal Reasons for Processing Personal Data

It is clearly foreseen in the laws, It is mandatory for the data controller to fulfill his/her legal obligation, It is necessary to process the personal data of the parties to the contract, provided that it is directly related to the establishment or execution of a contract, and Explicit Consent for References.

Methods of Collection of Personal Data:

The personal data specified above is collected through printed / electronic forms, contracts, commitments, e-mails, SAP programs, submissions made by suppliers and your declarations.

1.2.5.5- Legal Transaction Information

Processed Personal Data:

Information in Correspondence with Judicial Authorities, Information in Correspondence with Administrative Authorities, Information in the Case File in Case of Dispute, Warning Letters, Notices

Purposes of Processing Personal Data:

Following and Conducting Legal Affairs; Conducting Internal Audit Activities; Conducting Activities in Accordance with Legislation; Conducting Risk Management Processes; Conducting Storage and Archive Activities; Ensuring the Security of Data Controller Operations; Providing Information to Authorized Persons, Institutions and Organizations

Legal Reasons for Processing Personal Data

Your personal data within this scope is processed by Made in Celik based on the legal reasons specified in the relevant legislation and Article 5 of the KVKK;

It is mandatory for the data controller to fulfill its legal obligation and Data processing is mandatory for the establishment, use or protection of a right.

Methods of Collecting Personal Data:

The personal data specified above are collected through official letters from judicial and administrative authorities and other printed / electronic documents.

1.2.5.5- Physical Space Security Information

Personal Data Processed:

Entry - Exit Record Information, Camera Records

Purposes of Processing Personal Data:

Execution of Emergency Management Processes; Execution of Audit Activities; Ensuring Physical Space Security; Execution of Occupational Health / Safety Activities; Execution of Risk Management Processes; Monitoring of Requests / Complaints; Ensuring the Security of Movable Goods and Resources; Ensuring the Security of Data Controller Operations; Providing Information to Authorized Persons, Institutions and Organizations

Legal Reasons for Processing Personal Data

Your personal data within this scope, in order to achieve the purposes listed above by Made in Celik, is used in accordance with the relevant legislation and Article 5 of the KVKK;

It is processed based on the legal reasons that it is clearly foreseen in the laws, it is mandatory for the data controller to fulfill its legal obligations and it is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the relevant person.

Methods of Collection of Personal Data:

The personal data specified above is processed through CCTV cameras.

1.2.5.6- Process Security Information

Personal Data Processed:

IP Address Information, Username and Password Information, Website Login - Exit Information, E-Mail Traffic Logs, Corporate E-Mail Account Archives, Password and Password Information

Purposes of Processing Personal Data:

Execution of Information Security Processes; Execution of Audit / Ethical Activities; Execution of Access Authorizations; Monitoring and Execution of Legal Affairs; Audit of Business Activities; Execution of Risk Management Processes; Execution of Storage and Archive Activities; Ensuring the Security of Data Controller Operations

Legal Reasons for Processing Personal Data

Your personal data within this scope is processed by Made in Celik for the purposes listed above, based on the legal reasons specified in the relevant legislation and Article 5 of the KVKK;

Methods of Collection of Personal Data

The personal data specified above is collected through information security systems and electronic devices.

1.2.5.7- Financial Information

Processed Personal Data:

Wage, Bank Account Information, Information Within the Scope of Tax Exemption, Advance / Debt / Balance Information

Purposes of Processing Personal Data:

Fulfillment of Obligations Arising from Employment Contracts and Legislation; Conduct of Audit / Ethical Activities; Conduct of Activities in Accordance with Legislation; Carrying out finance and accounting affairs; following up and carrying out legal affairs; carrying out risk management processes; carrying out storage and archive activities; providing information to authorized persons, institutions and organizations

Legal Reasons for Processing Personal Data

It is clearly foreseen in the laws, It is directly related to the establishment or execution of a contract, the processing of personal data belonging to the parties to the contract is necessary and it is mandatory for the Data Controller to fulfill its legal obligations.

Methods of Collection of Personal Data:

The personal data specified above is collected through printed / electronic forms, contracts, commitments, e-mails, SAP programs, submissions made by suppliers and your declarations.

1.2.5.8- Professional Experience Information

Processed Personal Data:

Educational Information, Work Experience, Foreign Language Information, Course Information Attended, In-Service Training Information, Certificates

Purposes of Processing Personal Data:

Conducting Training Activities; Conducting Assignment Processes; Planning Human Resources Processes; Conducting / Supervising Business Activities; Conducting Occupational Health / Safety Activities; Conducting Contract Processes; Conducting Wage Policy; Conducting Talent / Career Development Activities

Legal Reasons for Processing Personal Data

Your personal data within this scope, in order to achieve the purposes listed above by Made in Celik, is processed in accordance with the relevant legislation and Article 5 of the KVKK;

It is processed based on the legal grounds that the processing of personal data belonging to the parties to the contract is necessary, provided that it is directly related to the establishment or execution of a contract, that it is mandatory for the Data Controller to fulfill its legal obligations, and that the processing of data is mandatory for the legitimate interests of the Data Controller, provided that it does not harm the fundamental rights and freedoms of the relevant person.

Methods of Collection of Personal Data:

The personal data specified above is collected through CVs, certificates and diplomas.

1.2.5.9- Visual and Audio Recording Information

Processed Personal Data:

Call Center Voice Recordings

Purposes of Personal Data Processing:

Execution of Information Security Processes; Execution of Audit / Ethics Activities; Execution of Internal Audit Activities; Execution of After-Sales Support Services for Goods / Services; Execution of Customer Relationship Management Processes; Execution of Storage and Archive Activities; Execution of Request / Complaint Follow-up Management Activities

Legal Reasons for Processing Personal Data

It is mandatory for the data controller to fulfill its legal obligation and, provided that it does not harm the fundamental rights and freedoms of the relevant person, that data processing is mandatory for the legitimate interests of the data controller.

Methods of Collecting Personal Data:

The above-mentioned personal data regarding supplier employees working in our call center are collected electronically during calls made to our call center.

1.2.5.10- Health Information

Processed Personal Data:

Disability Status, Health Reports, Blood Group Information, Health Information About Family Members

Purposes of Processing Personal Data:

Execution of Emergency Management Processes; Execution of Internal Audit Activities; Execution of Occupational Health / Safety Activities; Fulfillment of Obligations Arising from Employment Contracts and Legislation; Execution of Activities in Accordance with Legislation; Execution of Risk Management Processes

Legal Reasons for Processing Personal Data

Your personal data within this scope, in order to achieve the purposes listed above by Made in Celik, is processed in accordance with the relevant legislation and Article 6 of the KVKK;

Personal data related to health and sexual life can only be processed by persons or authorized institutions and organizations under a confidentiality obligation without the explicit consent of the person concerned, for the purposes of protecting public health, preventive medicine, medical diagnosis, treatment and care services, planning and management of health services and their financing.

It is processed based on the legal reason. The processing of these data will only be carried out based on your explicit consent, except for the limitations specified in Article 6 of the KVKK.

Methods of Collection of Personal Data:

The personal data specified above are collected through health / disability reports.

TRANSFER OF PERSONAL DATA

Personal data belonging to supplier employees are transferred only to the extent necessary for the realization of the relevant purpose, by complying with the rules in Article 8 titled “Transfer of Personal Data” or Article 9 titled “Transfer of Personal Data Abroad” of the KVKK and by taking the necessary technical and administrative measures;

Limited to the purposes listed above, to affiliates and subsidiaries and to our business partners in accordance with the legislation within the scope of the contracts between us, to authorized persons and official institutions in order to fulfill our legal obligations and to be recorded in our programs and/or systems provided/offered to our use by our infrastructure suppliers in the field of Technology.

1.2.6- Supplier Authorities

DATA CATEGORIES

1.2.6.1- Identity Information

Personal Data Processed:

Name - Surname, TR Identity Number, Signature Circular, Signature, Identity Photocopy

Purposes of Processing Personal Data:

Conducting Activities in Accordance with Legislation; Conducting Finance and Accounting Affairs; Monitoring and Conducting Legal Affairs; Conducting Internal Audit Activities; Conducting Communication Activities; Conducting Goods/Services Procurement Processes; Conducting Risk Management Processes; Conducting Contract Processes; Monitoring Requests/Complaints; Providing Information to Authorized Persons, Institutions and Organizations

Legal Reasons for Processing Personal Data:

Provided that it is directly related to the establishment or execution of a contract, the processing of personal data belonging to the parties to the contract is necessary, It is mandatory for the data controller to fulfill its legal obligations and Provided that it does not harm the fundamental rights and freedoms of the relevant person, the processing of data is mandatory for the legitimate interests of the data controller.

Personal Data Collection Methods:

The personal data specified above is collected through business cards, printed / electronic forms, call center records, contracts, commitments, e-mails, reports, SAP programs and face-to-face interviews.

1.2.6.2- Contact Information

Processed Personal Data:

E-Mail Address, Contact Address, Mobile Phone Number

Purposes of Personal Data Processing:

Conducting Finance and Accounting Affairs; Conducting Communication Activities; Conducting Goods / Services Purchase Processes; Conducting Contract Processes; Monitoring Requests / Complaints; Conducting Management Activities

Legal Reasons for Processing Personal Data:

Your personal data within this scope is used by Made in Celik in order to achieve the purposes listed above, in accordance with the relevant legislation and Article 5 of the KVKK;

It is processed based on the legal grounds that the processing of personal data belonging to the parties to the contract is necessary, provided that it is directly related to the establishment or execution of a contract, that it is mandatory for the data controller to fulfill its legal obligation, and that the data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the relevant person.

Methods of Collection of Personal Data:

The personal data specified above are collected through business cards, printed / electronic forms, call center records, contracts, commitments, e-mails, reports, SAP programs and face-to-face interviews.

1.2.6.3- Legal Transaction Information

Personal Data Processed:

Information in Correspondence with Judicial Authorities, Information in Correspondence with Administrative Authorities, Information in the Case File in Case of Dispute, Warning Letters

Purposes of Processing Personal Data:

Following and Conducting Legal Affairs; Conducting Internal Audit Activities; Conducting Risk Management Processes; Ensuring the Security of Data Controller Operations; Providing Information to Authorized Persons, Institutions and Organizations

Legal Reasons for Processing Personal Data

It is mandatory for the data controller to fulfill its legal obligation and Data processing is mandatory for the establishment, use or protection of a right.

Methods of Collecting Personal Data:

The personal data specified above are collected through official letters and other printed / electronic documents received from judicial and administrative authorities.

1.2.6.4- Transaction Information

Processed Personal Data:

Request Information, Order Information

Purposes of Processing Personal Data:

Following and Conducting Legal Affairs; Conducting Internal Audit Activities; Conducting Communication Activities; Conducting Business Activities; Conducting Goods / Services Purchasing Processes; Conducting Customer Relationship Management Processes; Conducting Risk Management Processes; Monitoring Requests / Complaints

Legal Reasons for Processing Personal Data

Your personal data within this scope, in order to achieve the purposes listed above by Made in Celik, is used in accordance with the relevant legislation and Article 5 of the KVKK;

It is processed based on the legal grounds that the processing of personal data belonging to the parties to the contract is necessary, provided that it is directly related to the establishment or execution of a contract, that it is mandatory for the data controller to fulfill its legal obligations, and that the data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the relevant person.

Methods of Collection of Personal Data:

The personal data specified above are collected through printed / electronic forms, call center records, e-mails, SAP programs and face-to-face interviews.

1.2.6.5- Transaction Security Information

Processed Personal Data:

IP Address Information, Device MAC Address, Username, Password and Passcode Information

Purposes of Processing Personal Data:

Execution of Information Security Processes; Execution of Audit / Ethical Activities; Prevention of Frauds; Audit of Business Activities; Execution of Risk Management Processes; Execution of Storage and Archive Activities; Ensuring the Security of Data Controller Operations

Legal Reasons for Processing Personal Data

It is clearly foreseen in the laws and it is mandatory for the Data Controller to fulfill its legal obligations.

Methods of Collection of Personal Data:

The personal data specified above is collected through information security systems and electronic devices.

1.2.6.6- Financial Information

Processed Personal Data:

Invoice Information, Bank Account Information, Current Account Information

Purposes of Processing Personal Data:

Conducting Audit / Ethics Activities; Conducting Activities in Accordance with the Legislation; Conducting Finance and Accounting Affairs; Conducting / Auditing Business Activities; Conducting Goods / Services Procurement Processes; Conducting Contract Processes; Carrying out supply chain management processes; Carrying out management activities

Legal Reasons for Processing Personal Data

Your personal data within this scope is processed by Made in Celik for the purposes listed above, based on the legal reasons specified in the relevant legislation and Article 5 of the KVKK;

Provided that it is clearly stipulated in the laws, it is directly related to the establishment or execution of a contract, the processing of personal data belonging to the parties to the contract is necessary and it is mandatory for the Data Controller to fulfill its legal obligations.

Methods of Collection of Personal Data:

The personal data specified above are collected through printed / electronic forms, contracts, commitments and SAP programs.

1.2.6.7- Risk Management Information

Processed Personal Data:

Information Processed for the Management of Commercial / Technical / Administrative Risks

Purposes of Processing Personal Data:

Conducting Audit / Ethics Activities; Following up and Carrying Out Legal Affairs; Execution and Control of Business Activities; Execution of Occupational Health and Safety Activities; Execution of Risk Management Processes; Execution of Storage and Archive Activities; Ensuring the Security of Data Controller Operations; Execution of Management Activities

Legal Reasons for Processing Personal Data

Your personal data within this scope is processed by Made in Celik for the purposes listed above, based on the legal reasons specified in the relevant legislation and Article 5 of the KVKK;

It is mandatory for the data controller to fulfill its legal obligations and, provided that it does not harm the fundamental rights and freedoms of the relevant person, that data processing is mandatory for the legitimate interests of the data controller.

Methods of Collection of Personal Data:

The personal data specified above are collected during participation in an event or training, through the information declared by the relevant person and through official and commercial correspondence.

TRANSFER OF PERSONAL DATA

Personal data belonging to supplier officials are transferred only to the extent necessary for the realization of the relevant purpose, by complying with the rules in Article 8 titled “Transfer of Personal Data” or Article 9 titled “Transfer of Personal Data Abroad” of the KVKK and by taking the necessary technical and administrative measures;

It can be transferred to affiliates and subsidiaries limited to the purposes listed above and to our business partners in accordance with the legislation within the scope of the contracts between us, to authorized persons and official institutions in order to fulfill our legal obligations and to be recorded in our programs and/or systems provided/offered to our use by our infrastructure suppliers in the field of Technology.

2- Storage of Personal Data, Your Rights and Application

2.1- Storage and Destruction

Our company has created a Storage and Destruction Policy for the storage and deletion of personal data. Storage and destruction processes related to your personal data are carried out within the scope of this policy. Accordingly, if a period is determined for the storage of data in the KVKK or relevant laws and other relevant legislation, the data in question must be stored for at least this period.

Considering the possibilities such as a possible court request or a request from an administrative authority authorized by law regarding the relevant data reaching us late or a dispute that we may be a party to, a period of 6 months to 1 year is added to the periods stipulated in the legislation for the storage of your data and the data in question is deleted, destroyed or anonymized at the end of the specified period.

If no period is stipulated in the legislation for the storage of the data we process, your data will be deleted, destroyed or anonymized without any request from you upon the expiration of the 10-year statute of limitations period from the end of our legal relationship, taking into account possible disputes as a requirement of the relationship between us.

If all the conditions for processing personal data have disappeared or the storage period declared by us or determined within the scope of the legislation has expired, your data will be deleted, destroyed or anonymized ex officio on the first periodic destruction date or within 6 months at the latest. If you request the deletion of your data for a valid reason, your data will be deleted within 30 days at the latest, to the extent legally possible. If you request that your data, whose storage period is determined by the legislation, be deleted or destroyed before the stipulated periods, your request will not be fulfilled.

2.2- Your Rights

Within the scope of KVKK and relevant legislation, regarding your personal data;

- You have the right to learn whether your personal data has been processed,

- If your personal data has been processed, to request information about it,

- To learn the purpose of processing personal data and whether it is used in accordance with its purpose,

- To know the third parties to whom your personal data has been transferred,

- To request correction of your personal data if it is processed incompletely or incorrectly,

- To request the deletion or destruction of your personal data within the framework of the conditions stipulated in the KVKK legislation,

- To request that the third parties to whom we transfer your personal data be notified when you request the correction of incomplete or incorrect data and the deletion or destruction of your personal data,

- To object to the emergence of a result against the person by analyzing the processed data exclusively through automated systems, and

- To request compensation for the damages you suffer due to the unlawful processing of personal data.

2.3- Application

You can submit your applications and requests regarding your personal data to Made in Celik by using the Related Person Application Form;

- Sending them with a wet signature and a photocopy of your ID to Camiatik, Asmalı Çınar Sk. No:6, 35430 Urla/İzmir,

- Applying to our Company in person with a valid ID document,

- Sending them to our registered e-mail address using your registered e-mail address (KEP) and secure electronic signature or mobile signature, or sending them to our e-mail address from your e-mail address previously notified to our Company and registered in our system.

According to the Communiqué on the Procedures and Principles of Application to the Data Controller, the relevant persons must include their name and surname, signature if the application is in writing, T.R. identity number (passport number if the applicant is a foreigner), place of residence or workplace address for notification, e-mail address for notification, telephone number and fax number, and information about the subject of the request.

The data owner must state the requested issue clearly and understandably in the application that includes the explanations regarding the right he/she requests to exercise and the rights he/she will make to exercise the above-mentioned rights. Information and documents regarding the application must be attached to the application.

Although the subject of the request must be related to the applicant personally, if acting on behalf of someone else, the applicant must be specifically authorized in this matter and this authority must be documented (special power of attorney). In addition, the application must include identity and address information and documents confirming the identity must be attached to the application.

Requests made by unauthorized third parties on behalf of someone else will not be evaluated.

Your claims regarding your personal data will be evaluated and answered within 30 days at the latest from the date they reach our Company. If your application is evaluated negatively, the justified reasons for rejection will be sent to you via e-mail or post to the address you specified in the application, and if possible, via the method through which the request was made.