PDPL

REGARDING THE PROTECTION AND PROCESSING OF PERSONAL DATA

ECE MERMER TURİZM SAN. VE TİC.LTD. ŞTİ.

SUPPLIER INFORMATION NOTICE

This information notice has been prepared by ECE MERMER TURİZM SAN. VE TİC.LTD. ŞTİ. (“Company”) in the capacity of data controller, within the scope of Article 10 of the Law No. 6698 on the Protection of Personal Data and the Communiqué on the Procedures and Principles to be Followed in Fulfilling the Obligation to Inform.

The Company aims to process the personal data of its suppliers in accordance with the Law No. 6698 on the Protection of Personal Data (“KVK Law”) and other applicable legislation.

With this Information Notice, it has been adopted to maintain and improve the activities carried out by the Company in compliance with the principles set forth in the KVK Law.

Personal data collected and used by our Company regarding suppliers are in particular as follows:

Your personal data specified above are processed in any case in compliance with the law and the rules of good faith, by preserving the accuracy and the most up-to-date form of the personal data you have shared, for specific, explicit and lawful purposes, and in a manner that is relevant, limited and proportionate to the purpose for which they are processed.

For What Purpose Personal Data Will Be Processed:

Your personal data are processed by our Company, limited to the purposes of procuring and monitoring supply services, conducting quality control and evaluation regarding service/contract performance, carrying out finance and accounting activities, performing payment transactions and ensuring communication.

To Whom and For What Purpose Processed Personal Data May Be Transferred:

In this process, your personal data collected; may be transferred to institutions or organizations permitted by the Labor Law, the Turkish Commercial Code, the Tax Procedure Law, the Law No. 6698 on the Protection of Personal Data and other legislative provisions; to public legal entities such as the Personal Data Protection Authority, the Ministry of Finance, the Ministry of Customs and Trade, the Ministry of Labor and Social Security, the Information and Communication Technologies Authority, and to domestic/foreign organizations that are our program partners and that are jointly and severally responsible with us for taking workplace security measures such as the storage of your personal data, prevention of unauthorized access and prevention of unlawful processing, with whom we have contracted to receive services and cooperate in order to carry out our activities as ECE MERMER TURİZM SAN. VE TİC.LTD. ŞTİ..

Method and Legal Basis of Collecting Personal Data:

Your personal data are collected in physical and electronic media for the purposes specified above, based on the legal grounds set forth in Articles 5 and 6 of the KVK Law; namely, that it is necessary to process the personal data of the parties to a contract provided that it is directly related to the establishment or performance of a contract, and that it is mandatory for the data controller to fulfill its legal obligation.

Your personal data will be retained for the period specified in the relevant legislation or for a reasonable period until the purpose of processing ceases, and in any case for the statutory limitation periods.

. 4. Rights of the Supplier

Pursuant to Article 11 of the KVK Law, by applying to our Company you may submit requests regarding your personal data on the following matters:

1. Learning whether personal data are processed,
2. Requesting information if personal data have been processed,
3. Learning the purpose of processing personal data and whether they are used in accordance with their purpose,
4. Knowing the third parties to whom personal data are transferred domestically or abroad,
5. Requesting correction of personal data if they are processed incompletely or inaccurately and requesting notification of the transaction made within this scope to third parties to whom personal data are transferred,
6. Requesting deletion or destruction of personal data in the event that the reasons requiring processing cease to exist, even though they have been processed in accordance with the Law No. 6698 and other relevant laws, and requesting notification of the transaction made within this scope to third parties to whom personal data are transferred,
7. Objecting to the occurrence of a result against the data subject as a result of analyzing processed personal data exclusively through automated systems,
8. Requesting compensation for damages in case personal data are processed unlawfully.

Method of Submitting a Request:

According to the “Communiqué on the Procedures and Principles of Application to the Data Controller”, you may submit your requests within the scope of Article 11 of the Law, which regulates the rights of the data subject, by filling in and signing the application form available on the Company’s website and delivering/notifying it in writing to the Company’s address GÜRLEYİK MAH.601 SOKAK NO:3/1 HONAZ / DENİZLİ in person by proving your identity or via a notary public; or you may send it to our Company via the verified e-mail address through which your membership is confirmed, or via your Registered Electronic Mail (KEP) address. Depending on the nature of your request, your applications will be concluded free of charge as soon as possible and at the latest within 30 (thirty) days. However, if the transaction requires an additional cost, a fee may be charged according to the tariff to be determined by the Personal Data Protection Board. If the responses to applications exceed 10 (ten) pages, an administrative fee of 1.00 TL (one Turkish Lira) will be charged for each page. If it is requested that the response be provided on a recording medium such as CD or flash memory, a fee may be requested according to the cost of the requested recording medium.

Changes:

The information notice may be amended depending on changes in legislation. In case of any changes, necessary announcements will be made on our website, and it will be appropriate for you to visit our website regularly in order to be informed of such changes.