PERSONAL DATA PROTECTION LAW NO. 6698 (“KVKK”)
INFORMATION AND CLARIFICATION TEXT

We take care to process and protect your personal data in accordance with the Personal Data Protection Law No. 6698 ("Law") and relevant legislation. Necessary technical and administrative measures are taken in accordance with the legislation we are subject to in order to prevent unlawful processing of personal data, prevent unlawful access to personal data, and ensure the protection and preservation of personal data.

As you visit our website www.gokdag.com operated by our company, fill out the forms containing personal data on our website, and contact our company, your personal data is processed in accordance with the principles specified in Article 4 of the Law. You can review our Privacy and Cookie Policy published on our website.

In accordance with Article 10 of the Law and the Communiqué on the Procedures and Principles to be Followed in Fulfilling the Disclosure Obligation; We inform you with this information text, which has been prepared to cover our employees, suppliers, business partners, customers who purchase products or services, potential product or service buyers and relevant third parties who visit our website. You can obtain information texts prepared separately for the relevant person group from our authorized units.

1. DATA CONTROLLER:

Your personal data is processed by Gökdağ Plastik Kauçuk Sanayi ve Ticaret Limited Şirketi (“Gökdağ”) as the “Data Controller” defined in Article 3 of the Law, in accordance with the Personal Data Protection Law No. 6698 (“Law”).

2. PURPOSE FOR WHICH PERSONAL DATA WILL BE PROCESSED:

Your personal data; It is processed for the following purposes in line with the principles set out in Articles 4, 5 and 6 of the Law.

3. PROCESSED PERSONAL DATA:

Identity Information (For employees and employee candidates; identification number, name, surname, place and date of birth, mother and father's name, spouse, child, family closeness information, marital status information, gender, identity information on shared official identity documents)

Personnel Information (For employees, employment contract, education, diploma information, certificate information, SSI employment entry and exit declaration, AGİ form information, dependents, spouse, child relationship information, family members' identity, population registration information, depending on the nature of the job. embezzlement certificate received, employment certificate, resignation, termination, severance and notice pay slip, payroll information, SSI registration information, service record, CV information, leave information, personnel performance evaluation reports, work accident information, information in the job application form, reference information, military service information, bank account information, IBAN number information, personal information written on the job application form for employee candidates)

Legal Transaction Information (For relevant persons who have legal contact with the Company; personal information in correspondence with judicial authorities, case and enforcement file information regarding mediators, labor courts and other courts, investigation information)

Customer, Supplier, Service Provider, Business Partner Transaction Information (Name, Surname of real persons, identification number, tax number, tax office, chamber registry information, address, location, e-mail information, telephone contact information, bank account information, check, Payment information such as promissory note, credit card, finance, invoice, delivery note, product order request information, authorization, signature circular, marketing, transaction security, risk management information, profession, duty, title information, visual photograph information on shared documents, personal information written on shared official identity documents, identity, contact, duty, profession and title information of legal entity officials and employees, visual and audio recording information, legal transaction and transaction security information)

Physical Space Security Information (Customers receiving products or services, potential customers, suppliers, service providers, business partners and legal entity representatives and employees, company partners, company employees, interns, employee candidates, visitors and relevant third parties, company-owned buildings, parking lots and camera recording information received in its attachments, workplace entry and exit registration information for employees),

Transaction Security Information (username and password information for software, hardware and applications used by company employees, log records information, website login and exit records, project follow-up transaction information for customers)

Financial Information (For customers and suppliers; invoice, tax identification number, tax office, bank account number, Iban number, credit card information, check, promissory note, mail order, payment, insurance policy, contract information, asset information, bank account information, current account information, financial information reported to public institutions and organizations, bank account information for employees, interns, company shareholders, Iban number, declarations, other financial information).

Professional Experience Information (In terms of employees, interns, employee candidates, education, vocational courses, work experience information, diploma information, working life, reference information, in-service training information, certificates, professional qualification information, other professional information in the notified forms, company partners, duties, titles, professional information, record, expertise, training, diploma, certificate, qualification information in terms of customers, business partners, service supplier officials and employees, and representatives and personnel of public institutions and organizations).

Visual and Audio Records (For the relevant person; photographic information on your completed, printed forms, diplomas, certificates, shared documents and official documents, visual record information taken when necessary within the scope of job applications and company activities)

Health Information (Health status information written on job application forms for employees and employee candidates, health reports for employees, general health report examinations, HES code, epidemic disease information, blood group information, laboratory tests, personal health and physical disability status information)

Information on Criminal Convictions and Security Measures (Criminal record, conviction, judicial status information for employees and shareholders/partners),

Information obtained through corporate communication services, your personal information obtained via e-mail, letter or other communication tools.

4. TO WHOM AND FOR WHAT PURPOSE PROCESSED PERSONAL DATA CAN BE TRANSFERRED:

Within the scope of this information text, your specified personal data; limited to the purposes specified in the second article; Establishment of computer operating systems and computer programs used within our company, and maintenance and repair operations of the programs used within our company, to our company representatives, suppliers, service providers, employees' health information to the persons and organizations from which relevant health services are received and insurance companies, to banks and financial institutions in order to carry out the financial transactions of the relevant persons. To software, hardware, informatics and technology companies for the purpose of transferring personal data of special nature within the country, to natural or private law legal entities in cases stipulated by law, by obtaining the express consent of the relevant person, to prosecutor's offices in case of legal disputes, upon request and limited to the purpose of request in accordance with the legislation, Personal data may be transferred to authorized public institutions and organizations, including courts, enforcement offices, Customs administration, Tax Offices, SSI, within the limits of the personal data processing conditions and specified purposes specified in Article 8 of the Law.

5. DATA TRANSFER ABROAD:

4/2 of the KVK Law. In accordance with the principles set out in the article, by obtaining "Explicit Consent Texts" to be collected separately from the relevant persons whose data are processed, or in cases stipulated in Articles 5/2, 6/3 of the Law, without seeking explicit consent, in accordance with the rules in Article 9 of the Law, the Personal Data Protection Board (" After the foreign countries with sufficient protection to be determined by the Board) are declared, only to individuals and organizations resident in these countries, and for the countries where it is determined and declared that there is no sufficient protection, the data controllers in Turkey and the relevant foreign country have committed in writing to adequate protection. and can be transferred on a limited basis by obtaining the necessary permissions from the KVK Board in terms of the relevant transfer.

In this context, within the framework of the limits stipulated by Law No. 6698, by taking all necessary measures, personal information such as identity, contact and professional information of our employees, in accordance with the legislation and limited to the purpose of transfer, in order to carry out business activities and ensure communication, is transferred to foreigners abroad, by obtaining express consent. It may be transferred to our suppliers, relevant persons and organizations.

6. METHOD AND LEGAL REASONS OF COLLECTING PERSONAL DATA:

Your personal data; Within the scope of company activities, limited to the stated purposes, verbal, written or electronic communication, human resources, project tracking and filling out application forms, creation of personnel files, arrangement and execution of contracts, accounting, finance for the establishment and maintenance of financial and social rights. processing personal data received for the purpose of purchasing, marketing, planning, ensuring quality and corporate development, visiting the company buildings and extensions and the website through communication channels such as telephone, fax and e-mail, internal and external services in the company buildings and extensions. In order to ensure venue security, it is processed and collected by fully or partially automatic means, by using a video camera recording system, or by non-automatic means, provided that it is part of any data recording system.

Your personal data; Based on one or more of the conditions stated in the 2nd paragraph of Article 5 of the Law and written below; 5/1- "Obtaining explicit consent" of the Law when necessary, 5/2- a) "Explicitly foreseen in the law", c) "Processing personal data of the parties to the contract is necessary, provided that it is directly related to the establishment or execution of a contract." d) "It is mandatory for the data controller to fulfill its legal obligation", e) "It is mandatory to process data for the establishment, exercise or protection of a right", f) "It is not to harm the fundamental rights and freedoms of the relevant person" Provided that data processing is mandatory for the legitimate interests of the data controller” and Article 6/3 of the Law. According to the article, "it can only be processed without the express consent of the person concerned, by persons under the obligation of confidentiality or authorized institutions and organizations, for the purpose of protecting public health, preventive medicine, medical diagnosis, treatment and care services, planning and management of health services and their financing." Based on the reasons, Articles 5 and 6 of the Law, Article 5/1-h of the Communiqué on the Procedures and Principles to be Followed in Fulfilling the Obligation to Inform. It is processed, collected and transferred limited to the specified purposes in accordance with the article.

7. RIGHTS OF PERSONAL DATA OWNER (RIGHT OF APPLICATION):

Your requests within the scope of Article 11 of the Personal Data Protection Law No. 6698, which "regulates the rights of the relevant person"; In accordance with the provisions of the Communiqué on the Procedures and Principles of Application to the Data Controller, you can personally apply to the address of Gökdağ Plastik Kauçuk Sanayi Ve Ticaret Limited Şirketi (“Gökdağ”), Hasanağa Organize Sanayii Bulvarı 5.Cad No:8 16110 Nilüfer Bursa Turkey, as the data controller, and submit the APPLICATION published on our website. You can fill out the FORM and send it in writing or by sending an e-mail to the company's registered e-mail address gokdagoto@hs01.kep.tr, the corporate e-mail address info@gokdag.com, or via a notary public.

Requests submitted to our company will be answered in writing or electronically, as soon as possible and within thirty days at the latest, depending on the nature of the request, in return for the processing fee determined in Article 7 of the Communiqué on the Procedures and Principles of Application to the Data Controller.

GÖKDAĞ PLASTİK KAUÇUK SANAYİ VE TİCARET LİMİTED ŞİRKETİ

Address : Hasanağa Organize Sanayii Bölgesi 5.Cad No:8 16110 Nilüfer Bursa Türkiye

Phone/Fax : +90 224 484 24 60-61 / +90 224 484 24 78

E-Mail : info@gokdag.com

KEP : gokdagoto@hs01.kep.tr

Web Page : www.gokdag.com