Data Protection Policy

YILDIRIMLAR DOKUMA ÖRME TEKSTİL SANAYİ VE TİCARET ANONİM ŞİRKETİ DATA PROCESSING POLICY

PURPOSE

This Policy has been prepared to inform personal data subjects about the methods we follow regarding the processing of your personal data obtained during the activities of Yıldırımlar Dokuma Örme Tekstil Sanayi ve Ticaret Anonim Şirketi (“Company”).

CATEGORIZATION OF PERSONAL DATA

Within the scope of data processing activities carried out by the COMPANY, the categories and explanations of personal data, which are processed partially or completely automatically or non-automatically, provided that it is a part of a data recording system, to which the real person belongs and/or can be determined, are as follows:

PERSONAL DATA CATEGORY	PERSONAL DATA	DATA SUBJECT
Identity	Name Surname	Employee, Employee Candidate, Consumer, Shareholder
Identity	Mother’s name, father’s name, birth date, birth place, maritual status, national identity number, signature information	Employee, Employee Candidate, Shareholder
Education	Educational Background	Employee, Employee Candidate
Other	Military Service Information	Employee, Employee Candidate
Personal Competencies	Driver Licence Information	Employee, Employee Candidate
Personal Competencies	Attended course information	Employee
Other	Number of Children	Employee, Employee Candidate
Other	Reason for leaving the last firm he/she worked for, information of firm which he/she last worked, information of job and salary in the last company she/he worked for, information about how many years he/she worked at the last firm he/she worked for	Employee, Employee Candidate
Health	Blood type, employment examination form, chest radiography resulst, respiratory function test results, hearing test results, complete blood count diagnostics	Employee
Personnel Information	Passport photo ; Spouse of Employee’s name, surname, work and income status; Children of Employee’s name, surname, date of birth, TR identity number, gender, mother and father name, self / step /grandchild / fosterling information, school name, school enrollment date and class information	Employee, Spouse of Employee and children of Employee
Contact Information	Address and telephone number	Employee, Employee Candidate, Customer, Shareholder
Security	CCTV records	Employee, Employee Candidate, Customer, Visitor

PURPOSE OF PROCESSING PERSONAL DATA

Fulfillment of obligations arising from labor contract and legislation for employees
Conducting communication activities
Follow-up and execution of legal affairs
Ensuring physical space security
Carrying out training activities
Carrying out occupational health and safety activities
Conducting employee candidate recruitment processes
Execution of goods sales processes
Calculation of the minimum living allowance amounts to be paid to the employee
Conducting business activities
Planning human resources processes

TO WHICH PARTIES AND FOR WHAT PURPOSES YOUR PERSONAL DATA MAY BE TRANSFERRED

The Company may transfer the personal data of the relevant persons to the categories of persons listed below in accordance with Articles 8 and 9 of the Personal Data Protection Law numbered 6698:

Persons To Whom Data Can Be Transferred	Definition	Purpose of Data Transfer
Shareholders	Shareholders of the company	Informing Shareholders about Employees and business activities
Service Providers	Parties providing services to our COMPANY	Conducting communication activities (For example, conducting communication activities through the use of mail service providers whose servers are located abroad.)
Financial Advisors	Parties providing financial consultancy services to our COMPANY	Conducting the financial transactions of the COMPANY
Judicial Authorities and Law Enforcement	It refers to the judicial authorities and law enforcement agencies that can request data from the Company in accordance with the resolution of legal disputes or the relevant legislation.	Resolution of legal disputes. For example, in case of a theft, the transfer of CCTV records recorded for Company security to the judicial authorities.

DATA SUBJECTS RIGHTS

As data subjects, as per article 11 of Data Protection Law numbered 6698, by applying to us, you have the right,

To be informed about whether your personal data are processed
If your personal data have been processed, to request information regarding this activity
To be informed about the purpose of processing your personal data and whether they are used appropriately for their purpose
To be informed about the third parties to whom personal data are transferred domestically or abroad
To request correction of your personal data in case of incomplete or incorrect processing
To request the deletion or termination of your personal data within the framework of the conditions provided by KVKK legislation
To request the notification of the third parties to whom your personal data are transferred, regarding the process when it is requested that your incomplete or incorrect personal data to be corrected and your personal data to be deleted or terminated
To object to the emergence of a result against the person whose data is processed by analyzing the processed data exclusively through automated systems
In case of damage due to unlawful processing of personal data, to request the removal of this damage

APPLICATION METHOD OF DATA SUBJECTS TO COMPANY

Data Subjects, will be able to submit their requests regarding the use of the legally recognized rights to the company by filling out the “Data Subject Application Form” prepared by the COMPANY, using the methods shown in the table below and also methods published by the Turkish Data Protection Authority.

	APPLICATION METHOD	ADDRESS TO APPLY	INFORMATION TO BE SHOWN IN THE APPLICATION
1. Written Application	By sending Data Subject Application Form with wet signature in person or via notery	Barakfakih Mahallesi Vatan Cadde No:47 A /1 Adres No:2044006498 Kestel/Bursa	Write “request for information/edit within the scope of personal data protection law” on the envelope.
2. Online Application	Using the registered electronic mail (REM), secure e-signature, mobile signature or the e-mail address which is registered in the data controller’s system and was previously notified to the data controller.	[email protected]	Type “request for information/edit within the scope of personal data protection law” in the subject line.