Clarification Text on Protection of Personal Data

DEVPA TEXTILE ACCESSORIES CONSTRUCTION INDUSTRY AND TRADE LIMITED COMPANY we take the highest possible security measures to ensure that your personal data is collected, stored and shared in accordance with the law and to protect your privacy.

Our aim is to inform you in the most transparent way about the ways your personal data are collected, the purposes of processing, the persons shared, the legal reasons and your rights in accordance with Article 10 of the Personal Data Protection Law No. 6698 and in line with your satisfaction.

a) Data Controller

Pursuant to Law No. 6698 on the Protection of Personal Data ("Law No. 6698"), your personal data; as the data controllerDEVPA TEXTILE ACCESSORIES CONSTRUCTION INDUSTRY AND TRADE LIMITED COMPANY("COMPANY") will be collected and processed within the scope described below.

b) Purpose for which Personal Data will be Processed

The COMPANY may collect personal data from parties such as its customers, employees, potential customers, employee candidates, business partners and suppliers in categories such as identity information, contact information, customer information, customer transaction information, transaction security information, legal transaction and compliance information and marketing sales information.

Your personal data collected;

- To be able to offer the products and services of the COMPANY to you, to fulfill our obligations to you, to organize records and documents, to comply with the information retention, reporting, information, tax and other obligations stipulated by local and international legal legislation,

- To offer you customized advertisements, campaigns, advantages and other benefits for sales and marketing activities to be carried out to increase the quality of services and products,

- Manage infrastructure and business operations and comply with internal policies and procedures, including those related to auditing, finance and accounting, billing and collections, IT systems, data and website hosting, business continuity and records, document and print management,

- To communicate with you in order to provide you with the necessary information about IT requirements, system structure, the necessity of IT support services received, and the necessary information regarding these services and products,

- Conducting traffic measurement, statistical analysis, segmentation/profiling and CRM studies for sales and marketing activities,

- Measuring and increasing customer satisfaction, complaint management, receiving your opinions and suggestions regarding new services and products, receiving your problem-error notifications, informing you about products and services, complaints and requests,

- Receiving your orders, performing your payment transactions, providing logistics cooperation with third parties and shipping products, recommending products and services that may be of interest to you, online behavioral advertising and marketing, customer portfolio management, measurement and improvement of service quality, communication, optimization, audit, risk management and control, promotion, analysis, interest identification, scoring, profiling, marketing, sales, advertising, communication

- To be used in all kinds of products and services to be offered to you within the scope of the law and relevant legislation regulating the works written in the articles of association of the COMPANY subject to your disclosure of your personal data to the COMPANY, such as comparative product and/or service offers, modeling, existing or new product studies and/or developments,

- To comply with the information retention, reporting and information obligations stipulated by official institutions, to fulfill the requirements of the contracts and to fulfill the legal obligations to which the COMPANY is subject regarding the utilization of these services,

- In line with the purpose of determining and implementing the commercial and business strategies of the COMPANY; managing the financial operations, communication, market research and social responsibility activities, purchasing operations (demand, proposal, evaluation, order, budgeting, contract), internal system and application management operations, legal operations carried out by the COMPANY

- To comply with applicable laws and regulatory obligations (including those outside your country of residence), including anti-money laundering and anti-terrorism laws, to comply with due process of law, and to review, evaluate and respond to requests from public authorities and state authorities (including those outside your country of residence), personal data will be processed within the terms and purposes of personal data processing specified in Articles 5 and 6 of Law No. 6698.

c) To whom and for what purpose the processed personal data can be transferred

Your personal data collected; limited to the realization of the above-mentioned purposes;

- The COMPANY's business partners, suppliers, shareholders, Yıldız Holding and its subsidiaries,

- Persons or organizations permitted by the Tax Procedure Law, Social Security Institution legislation, Court of Accounts, Law on Prevention of Laundering Proceeds of Crime, Law on Prevention of Money Laundering, Turkish Commercial Code, Code of Obligations and other legislation provisions,

- Legally authorized public institutions and organizations, administrative authorities and legal authorities,

- Foreign companies and subsidiaries,

- Product / service comparison, analysis, evaluation, advertising and real or legal persons from whom we receive services in the realization of the above-mentioned purposes, program partner institutions and organizations, institutions that we have contracted to send the messages we send to our customers, cargo companies that deliver the orders to you within the framework of the personal data processing conditions and purposes specified in Articles 8 and 9 of Law No. 6698.

ç) Method and Legal Grounds for Collecting Personal Data

Your personal data may be obtained from the COMPANY Head Office, applications made through contracted websites, other institutions that we provide / receive support services, real and / or legal persons with whom transactions are made within the scope of any legislation or contract, our website and mobile application, our call centers, our social media accounts, in verbal, written or electronic media or other channels that will / may be established in the future;

It is collected by the COMPANY for the purposes stated above within the framework of the legal legislation and within the performance of the contract.

d) Rights of the Personal Data Owner listed in Article 11 of Law No. 6698

As personal data owners, if you submit your requests regarding your rights by the methods set out below, the COMPANY will finalize the request as soon as possible and within thirty days at the latest, depending on the nature of the request. No fee will be charged for up to ten pages in the response. A transaction fee of 1 Turkish Lira will be charged for each page over ten pages. If the response to the application is given in a recording medium such as CD, flash memory, the fee that may be requested by our company will not exceed the cost of the recording medium.

In this context, personal data owners;

• • Learn whether personal data is being processed,
  • Request information if their personal data has been processed,
  • To learn the purpose of processing personal data and whether they are used for their intended purpose,
  • To know the third parties to whom personal data are transferred domestically or abroad,
  • To request correction of personal data in case of incomplete or incorrect processing and to request notification of the transaction made within this scope to third parties to whom personal data is transferred,
  • Although it has been processed in accordance with the provisions of Law No. 6698 and other relevant laws, to request the deletion or destruction of personal data in the event that the reasons requiring its processing disappear and to request notification of the transaction made within this scope to third parties to whom personal data is transferred,
  • To object to the emergence of a result to the detriment of the person himself/herself by analyzing the processed data exclusively through automated systems,
  • In case of damage due to unlawful processing of personal data, it has the right to demand compensation for the damage.

You may submit your request to exercise your above-mentioned rights in accordance with paragraph 1 of Article 13 of Law No. 6698 and Law No. 30356 and 10.03.2018 in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller, you can send it in Turkish and in writing or by using the registered electronic mail (KEP) address, secure electronic signature, mobile signature or the e-mail address previously notified to the COMPANY and registered in our system. In the applications, only information about the applicant will be provided and it will not be possible to obtain information about other family members and third parties. The COMPANY reserves the right to verify your identity before responding.