PRIVACY POLICY

KORTEKS MENSUCAT SANAYİ VE TİCARET ANONİM ŞİRKETİ

PROTECTION AND PROCESSING OF PERSONAL DATA REQUEST/COMPLAINT OWNER

CLARIFICATION TEXT

Data Controller and Representative

In accordance with the Law No. 6698 on the Protection of Personal Data (“Law”); your personal data may be processed by Korteks Mensucat Sanayi ve Ticaret Anonim Şirketi (“Company”) as the data controller within the scope described below.

You can find detailed information about the purposes of the processing of your personal data by our Company through Korteks Mensucat Sanayi ve Ticaret Anonim Şirketi Personal Data Protection and Processing Policy, which has been shared with the public via the web address PERSONAL DATA PROTECTION AND PROCESSING POLICY.

Purpose and Legal Reason for Processing Personal Data

Your personal data is processed in accordance with the purposes specified in the table below, pursuant to the legal reasons specified in Article 5 of the Law.

PERSONAL DATA	PURPOSE	LEGAL REASON
• Identity Information (name, surname information, TRIN (Turkish Republic ID Number) Information, Tax Identity Number) • Contact Information (e-mail, phone number, address information) • Financial Information (credit card or bank card information, payment information) • Customer Transaction Information (information of the purchased product, order completion information, return/change information, previous order information, invoice and payment information, installation information) • Legal Transaction Information (information regarding transactions subject to legal processes) • Transaction Security Information (IP address information, Website log-in and log-out information, password information)	• Establishment and follow-up of the sales processes of the products and services offered by our company, • Planning or execution of the activities related to the delivery of the purchased products, • Carrying out the payment/collection transactions related to the products or services • Carrying out the invoice issuance, verification or cancellation processes • Carrying out the activities related to the return or renewal of the products • Execution of collateral transactions.	Your personal data is processed within the scope of the legal requirement of fulfilling the necessary obligations (product delivery, installation, etc.) pursuant to the sales contract within the scope of the purchase you have carried out regarding the products or services of our Company.
	• Receiving and fulfilling the requests or complaints of our customers and customer relations management, • Improving the business processes by performing internal reporting of customer requests and complaints, • Carrying out internal control, audit and internal/external reporting activities.	In accordance with Article 5 of the Law, personal data may be processed in the presence of legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the relevant persons. Accordingly, the processing of personal data within the scope of our Company's commercial activities is considered within the relevant scope.
	• Fulfilling our obligations arising from the legislation. • Providing information to official institutions or organizations, submitting the requested information and documents • Execution of accounting and finance processes • Execution of information security processes • Carrying out sales verification processes	It is considered within the scope of ; • the requirement to be clearly stipulated in the law (eg. what data should be included in the invoice is determined in accordance with the Tax Procedural Law) , • legal obligation (eg., data controllers are obliged to ensure data security according to the law) the fact that data processing is obligatory for the establishment, • exercising or protection of a right (e.g. in case of possessing the quality of an evidence in case of being subject to any legal dispute); as specified in Article 5 of the Law.

To Whom and For What Purpose the Processed Personal Data May be Transferred

Your personal data may be transferred to the following persons for the specified purposes, in accordance with the conditions specified in the article of the Law regarding the transfer of personal data.

• Our suppliers from which services are procured in software, maintenance, security and personal data hosting within the scope of information technologies,

• Our business partners from which we receive legal support when necessary,

• Business partner consultancy companies from which service is procured for business development and project execution purposes,

• Authorized institutions and organizations within the scope of our legal obligations.

Method of Collecting Personal Data

When you make contact with our Company, your personal data is collected in physical or electronic environment through e-mail, telephone/contact center, website, cargo/mail and fax channels based on the legal reasons specified above.

Rights of Personal Data Owner Listed in Article 11 of the Law

According to Article 11 of the Law, you have the following rights with respect to your Personal Data:

• To learn whether your personal data has been processed,

• If your personal data has been processed, to request information about this,

• To learn the purpose of processing your personal data and whether it is used in accordance with the purpose,

• To know the third parties in country or abroad, to whom your personal data is transferred,

• In the event that your personal data has been processed incompletely or incorrectly, to request it to be corrected and to request that the transaction made within this scope is notified to third parties to whom your personal data has been transferred,

• In the event that the reasons requiring processing disappear although it has been processed in accordance with the law and other relevant law provisions; to request the personal data to be deleted or destroyed and the transaction made within this scope to be notified to third parties to whom the personal data has been transferred,

• To object the occurrence of a consequence against the person himself by analyzing the processed data exclusively by means of automated systems,

• In case of suffering a damage due to the processing of the personal data in violation of the law, to request the damage to be indemnified.

In accordance with your rights listed in Article 11 of the Law, you can communicate your requests to our Company using the DATA OWNER APPLICATION FORM. Depending on the nature of your request, your applications will be concluded at the soonest possible date, free of charge and within thirty days at the latest; but if the transaction requires an additional cost, you may be charged a fee according to the tariff to be determined by the Personal Data Protection Board.

Amendments in the Text

It may amend the provisions included in this Text at any time by publishing them. When it makes an amendment, the provisions take effect on the date of publishing.

PERSONAL DATA PROTECTION AND PROCESSING POLICY

DATA OWNER APPLICATION FORM