GENERAL

In compliance with the Personal Data Protection Law No. 6698 (“KVKK”) published in the Official Gazette dated 07.04.2016 and numbered 29677, your personal data may be processed by NET KİMYA SAN. TİC. LTD. ŞTİ. (“Net Kimya”) as the data controller within the scope of this Disclosure Text, in necessary cases with your explicit consent or within the scope of the cases stipulated in the law. The purpose of the Information Text is to inform you about the purposes of processing your personal data, to whom and for what purpose it can be transferred, the collection methods and reasons, your rights regarding the processing of your personal data and the application procedures and principles, which are the methods of exercising these rights, in accordance with the “Communiqué on the Procedures and Principles to be Followed in Fulfilling the Information Obligation” published in the Official Gazette dated March 10, 2018 and numbered 30356, the Law and the relevant legislation, with the title of “Data Controller” and the awareness of this responsibility.

1. PURPOSE OF PROCESSING PERSONAL DATA

Your personal data may vary depending on the services and commercial activities provided by Net Kimya in accordance with the Law; and may be collected verbally, in writing or electronically through automatic or non-automatic means, through Net Kimya units and offices, website, social media channels and similar means. When you reach our company by phone or e-mail, visit our website or social media channels, your personal data can be created and updated and processed.

Personal data is processed by Net Kimya in accordance with the conditions specified in Articles 5 and 6 of the Law and all relevant legislation;

To ensure that our legal obligations are fulfilled as required or made mandatory by legal regulations,

To provide software services and other outsourcing services for the fulfillment of operational activities,

To carry out the necessary studies by the relevant units in order to ensure that the commercial activities specified in Net Kimya's articles of association are carried out in accordance with the legislation and relevant company policies and to carry out the activities accordingly,

To determine, plan and implement Net Kimya's short, medium and long-term commercial policies,

To provide effective customer service,

To provide services and offers,

To carry out all kinds of marketing and advertising activities,

To determine visitor profiles,

To ensure the commercial reliability of the company,

To ensure that requests, demands and complaints are answered and resolved,

To provide support services to customers and visitors within the scope of the contract and service standards,

To conduct market research and statistical studies,

To establish contact with people who have a business relationship with Net Kimya,

Marketing, compliance management, vendor/supplier management,

To plan and audit information security processes and its execution,

Creating and managing the information technology infrastructure,

Planning and executing the employees' access rights to Data Owner information,

Following up financial and/or accounting transactions, including invoicing,

Following up legal affairs,

Planning and executing corporate communication activities,

Ensuring that data is accurate and up-to-date, and for similar purposes, including but not limited to these.

2. TO WHOM AND FOR WHAT PURPOSES PERSONAL DATA CAN BE TRANSFERRED

Your personal data; In accordance with the basic principles stipulated by the law and in accordance with the personal data processing conditions and purposes specified in Articles 8 and 9 of the KVKK, in line with Net Kimya's legitimate and lawful personal data processing purposes, Net Kimya may transfer your personal data to Net Kimya officials, our business partners, suppliers, shareholders, company lawyers, legally authorized institutions and organizations for the following purposes; Determining, planning and implementing short, medium and long-term commercial and business strategies, ensuring the legal and commercial security of persons in business relations, administrative operations for communication carried out by Net Kimya, ensuring the physical security and control of Net Kimya's locations, business partner/customer/supplier/subcontractor (authorized persons or employees) evaluation processes, reputation research processes, legal compliance process, audit, financial affairs etc., execution of human resources policies, execution of legal processes. Processed data is never transferred to unrelated third parties or abroad.

3. METHOD OF COLLECTION OF PERSONAL DATA AND LEGAL REASON

Your personal data is stored in accordance with the legislation for the period required by legal obligations or for the period permitted by the relevant legislation. Your personal data may be collected, processed, transferred and stored within the scope of the personal data processing conditions and purposes specified in Articles 5 and 6 of the Law, and for the purposes specified in Articles 1 and 2 of this text.

Your personal data may be obtained by Net Kimya through different means (Net Kimya corporate headquarters, branches, agencies, sales offices or other subcontractors or business partners through offices and other physical environments where you can contact, call centers, websites, mobile applications and similar electronic transaction platforms, social media or other public media, through your participation in training, seminars and similar environments they will organize, through investigation methods or through other group companies or other persons and organizations with whom they have agreements, verbally, in writing, through audio or video recordings or other physical or electronic environments, etc.).

In order to ensure that the activities of companies within Net Kimya are carried out in accordance with Net Kimya's principles, goals and strategies, and to protect the rights, interests and reputation of Net Kimya, personal data collected and processed by one of the companies within Net Kimya may be transferred to other companies within Net Kimya and processed by these companies.

The legal reasons for the collection and processing of personal data are as follows:

a) Your explicit consent is present

b) It is clearly foreseen in the laws,

c) It is made public by the data owner,

d) It is mandatory for the data controller to fulfill its legal obligation,

e) Data processing is mandatory for the establishment, exercise or protection of a right,

f) Storage is required because it is directly related to the establishment and execution of contracts,

g) Data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data owner.

4. RIGHTS OF THE PERSONAL DATA OWNER STATED IN ARTICLE 11 OF THE LAW

Personal data owners can apply to Net Kimya and exercise the following rights:

Learning whether Net Kimya processes the personal data of the data owner,

Requesting information about this data processing activity if Net Kimya has processed personal data,

Learning the purpose of the personal data processing activity and whether it is used in accordance with the purpose of processing,

Requesting information about these third parties if personal data is transferred to third parties in the country or abroad,

Requesting correction of personal data if it is processed incompletely or incorrectly,

Requesting notification of this situation to third parties to whom personal data is transferred if personal data is processed incompletely or incorrectly by Net Kimya,

Requesting the deletion, destruction or anonymization of personal data if the reasons requiring processing are eliminated despite the fact that personal data has been processed in accordance with the Law and other relevant provisions of law,

Requesting the processing of personal data if the reasons are eliminated, to request that this situation be notified to third parties to whom personal data is transferred,

To object to the analysis of personal data processed by Net Kimya exclusively through automated systems and to the emergence of results that the person concerned believes are detrimental to the person,

To request compensation for damages in the event of damages incurred due to unlawful processing of personal data.

5. APPLICATION PROCEDURES AND PRINCIPLES IN ACCORDANCE WITH LPPD

If personal data owners submit their requests regarding the rights listed above to the company, Net Kimya will finalize the request free of charge as soon as possible and within 30 (thirty) days at the latest, depending on the nature of the request. However, if a fee is foreseen by the Personal Data Protection Board, the fee in the specified tariff may be charged. Applications may be submitted to the company in writing or by other methods determined by the Personal Data Protection Board. In this context, the channels and procedures through which applications to be made to Net Kimya Company within the scope of Article 11 of the Law will be forwarded are explained below.

You can submit your request, which includes your explanations regarding the right you request to exercise from the rights specified in Article 11 of the Law, together with documents proving your identity;

a) You can personally deliver a signed copy to “Eyüp Sultan Mah. Aktar Sok. No. 2 C/D Sancaktepe – İstanbul”,

b) You can send it to our address above via notary or registered mail,

c) You can send it by signing it with an electronic signature or by sending it to the e-mail address “info@netkimya.com.tr” via the customer’s e-mail address registered with Net Kimya.

5. CHANGES

Net Kimya has the right to make changes to this disclosure notice due to possible changes in the Personal Data Protection Law and the methods to be determined by the Personal Data Protection Board.