KVKK

INFORMATION FORM

Your personal data may be processed by START MAKİNA SANAYİ SERVİS, in the capacity of Data Controller within the scope of Personal Data Protection Law No. 6698 (“Law”) and relevant legislation, within the framework described below and in accordance with other legislation.

DEFINITIONS

Explicit consent: Consent on a specific subject, based on information and expressed with free will.

Relevant user: Persons who process personal data within the organization of the data controller or in line with the authorization and instruction received from the data controller, excluding the person or unit responsible for technical storage, protection and backup of the data.

Anonymization of personal data: Making personal data cannot be associated with an identified or identifiable natural person under any circumstances, even by matching them with other data.

Personal data: Any information relating to an identified or identifiable natural person.

Processing of personal data: Obtaining, recording, storing, preserving, changing, rearranging, disclosing, transferring, taking over, making available personal data by fully or partially automatic or non-automatic means provided that it is a part of any data recording system, All kinds of operations performed on data such as classification or prevention of use.

Destruction of personal data: Deletion, destruction or anonymization of personal data.

Deletion of personal data: Personal data cannot be accessed in any way for the relevant users and cannot be reused.

rendering it unusable.

Data processor: The natural or legal person who processes personal data on behalf of the data controller, based on the authority granted by him.

Data recording system: It is the recording system in which personal data is processed and structured according to certain criteria.

Data controller: The natural or legal person who determines the purposes and means of processing personal data and is responsible for the establishment and management of the data recording system

BASIC PRINCIPLES OF PROCESSING PERSONAL DATA

Article 4 of the KVK Law contains the principles that must be complied with in the processing of personal data. These principles are listed below:

Compliance with the law and the rules of honesty: Our Company processes Personal Data in accordance with the relevant legislation and the requirements of the rule of good faith and is used within these limits

Being accurate and up-to-date when necessary: Our Company ensures that the Personal Data it processes are accurate and up-to-date, taking into account the fundamental rights and legitimate interests of Personal Data Owners. This

Within the scope, it carefully considers issues such as the sources from which the data is obtained, the confirmation of its accuracy, and the evaluation of whether it needs to be updated.

Processing for specific, clear and legitimate purposes: The KVK Law requires data processing activities to be processed for specific, clear and legitimate purposes. Within the framework of this principle, START MAKİNA SANAYİ SERVİS also carries out personal data processing activities for specific, clear and legitimate purposes required by its commercial activities.

Being connected, limited and measured with the purpose for which they are processed: START MAKİNA SANAYİ SERVİS processes personal data sufficiently to fulfill the purposes determined within the scope of its commercial activities. START MAKİNA SANAYİ SERVİS does not process your personal data for areas other than the work it has done and the service it has provided.

Retention for the period stipulated in the relevant legislation or required for the purpose for which they are processed: START MAKİNA SANAYİ SERVİS preserves Personal Data only for the period required for the purpose for which they are processed. If there is no valid reason for further storage of a Personal Data by our company, the said data is deleted, destroyed or anonymized.

BASIC PRINCIPLES OF PROCESSING PERSONAL DATA

START MAKİNA SANAYİ SERVİS does not process your personal data in any way without the explicit consent of the data owner. However, it is possible to process personal data without seeking the explicit consent of the person concerned, only if one of the conditions set forth in Article 5 of the KVK Law exists. These conditions are;

Having the express consent of the person concerned,

clearly stipulated in the law,

It is compulsory for the protection of the life or physical integrity of the person or another person, who is unable to express his consent due to actual impossibility or whose consent is not legally valid,

It is necessary to process the personal data of the parties to the contract, provided that it is directly related to the establishment or performance of a contract,

• It is mandatory for the data controller to fulfill its legal obligation, * It has been made public by the data owner himself,
• Data processing is mandatory for the establishment, use or protection of a right, * For the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data owner.

REGARDING OBTAINING AND PROCESSING PERSONAL DATA

INFORMATION FORM

Your personal data may be processed by START MAKİNA SANAYİ SERVİS, in the capacity of Data Controller within the scope of Personal Data Protection Law No. 6698 (“Law”) and relevant legislation, within the framework described below and in accordance with other legislation.

DEFINITIONS

Explicit consent: Consent on a specific subject, based on information and expressed with free will.

Relevant user: Persons who process personal data within the organization of the data controller or in line with the authorization and instruction received from the data controller, excluding the person or unit responsible for technical storage, protection and backup of the data.

Anonymization of personal data: Making personal data cannot be associated with an identified or identifiable natural person under any circumstances, even by matching them with other data.

Personal data: Any information relating to an identified or identifiable natural person.

Processing of personal data: Obtaining, recording, storing, preserving, changing, rearranging, disclosing, transferring, taking over, making available personal data by fully or partially automatic or non-automatic means provided that it is a part of any data recording system, All kinds of operations performed on data such as classification or prevention of use.

Destruction of personal data: Deletion, destruction or anonymization of personal data.

Deletion of personal data: Personal data cannot be accessed in any way for the relevant users and cannot be reused.

rendering it unusable.

Data processor: The natural or legal person who processes personal data on behalf of the data controller, based on the authority granted by him.

Data recording system: It is the recording system in which personal data is processed and structured according to certain criteria.

Data controller: The natural or legal person who determines the purposes and means of processing personal data and is responsible for the establishment and management of the data recording system

BASIC PRINCIPLES OF PROCESSING PERSONAL DATA

Article 4 of the KVK Law contains the principles that must be complied with in the processing of personal data. These principles are listed below:

Compliance with the law and the rules of honesty: Our Company processes Personal Data in accordance with the relevant legislation and the requirements of the rule of good faith and is used within these limits

Being accurate and up-to-date when necessary: Our Company ensures that the Personal Data it processes are accurate and up-to-date, taking into account the fundamental rights and legitimate interests of Personal Data Owners. This

Within the scope, it carefully considers issues such as the sources from which the data is obtained, the confirmation of its accuracy, and the evaluation of whether it needs to be updated.

Processing for specific, clear and legitimate purposes: The KVK Law requires data processing activities to be processed for specific, clear and legitimate purposes. Within the framework of this principle, START MAKİNA SANAYİ SERVİS also carries out personal data processing activities for specific, clear and legitimate purposes required by its commercial activities.

Being connected, limited and measured with the purpose for which they are processed: START MAKİNA SANAYİ SERVİS processes personal data sufficiently to fulfill the purposes determined within the scope of its commercial activities. START MAKİNA SANAYİ SERVİS does not process your personal data for areas other than the work it has done and the service it has provided.

Retention for the period stipulated in the relevant legislation or required for the purpose for which they are processed: START MAKİNA SANAYİ SERVİS preserves Personal Data only for the period required for the purpose for which they are processed. If there is no valid reason for further storage of a Personal Data by our company, the said data is deleted, destroyed or anonymized.

BASIC PRINCIPLES OF PROCESSING PERSONAL DATA

START MAKİNA SANAYİ SERVİS does not process your personal data in any way without the explicit consent of the data owner. However, it is possible to process personal data without seeking the explicit consent of the person concerned, only if one of the conditions set forth in Article 5 of the KVK Law exists. These conditions are;

Having the express consent of the person concerned,

clearly stipulated in the law,

It is compulsory for the protection of the life or physical integrity of the person or another person, who is unable to express his consent due to actual impossibility or whose consent is not legally valid,

It is necessary to process the personal data of the parties to the contract, provided that it is directly related to the establishment or performance of a contract,

• It is mandatory for the data controller to fulfill its legal obligation, * It has been made public by the data owner himself,
• Data processing is mandatory for the establishment, use or protection of a right, * For the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data owner.