1. INTRODUCTION AND PURPOSE

Article 20, paragraph 3 of the Constitution states that “Everyone has the right to request the protection of personal data concerning him/her. This right includes the right to be informed about personal data concerning oneself, to access such data, to request their correction or deletion, and to learn whether they are used for their intended purposes. Personal data may only be processed in cases stipulated by law or with the explicit consent of the person. The principles and procedures regarding the protection of personal data shall be regulated by law.” Within the scope of the Law No. 6698 on the Protection of Personal Data (“KVKK” or “Law”) adopted by the legislator in line with this provision and published in the Official Gazette dated 07.04.2016, Çoruh Boru Plastik Sanayi A.Ş. (“ÇORUH BORU” or the “Company”), which has the title of data controller within the scope of the Law No. 6699 on the Protection of Personal Data (“KVKK” or the “Law”), hereby states that every real and legal person should show the utmost sensitivity to ensure the security of personal data in accordance with the Law with this Clarification and Explicit Consent Text on the Protection of Personal Data and Privacy Policy (“Clarification and Explicit Consent Text”). In this context, our Company has established a policy on the processing of personal data protected by the Law, the purpose of processing, transfer, deletion, retention, anonymization, etc. of both its real person customers, real persons with whom it has commercial cooperation, and its employees (including interns), and announces this Clarification and Explicit Consent Text to you, dear ones, in this regard.

Your personal data, which are both automatically processed on the ÇORUH BORU website (www.coruhboru.com.tr) and notified by contract or approved with explicit consent, may be processed, recorded, stored, classified, updated by the Company within the framework of the Law and policy and may be shared with third parties limited to the purpose for which they are processed in cases permitted by the Law.

With this Clarification and Explicit Consent Text, we aim to fulfill our obligation arising from Article 10 of the KVKK and to inform you about the purposes of processing your personal data, legal grounds and your rights.

2. COLLECTION OF PERSONAL DATA

Some of the data you provide to our Company due to your use of ÇORUH BORU’s services and your employment contract with ÇORUH BORU may be processed:

Your identity data (identity information such as name, surname, Turkish ID number, date of birth, place of birth, religion, blood group, mother and father name), Your bank account number, signature, employment contract and distance sales contract, Visual or auditory data we obtain within the framework of our exams, education, promotion, advertising, campaigns, social responsibility projects and events, In case our Company is visited, your camera recordings, vehicle data such as vehicle license plates, voice recordings, If you are a business partner of our Company, information such as certificate of activity, chamber records, professional data, bank account number, IBAN, signature circular, tax plate, invoice data, stamp copy, name, surname, telephone and e-mail addresses of the relevant employees obtained within the scope of the performance of the contract, Your digital trace data, such as your IP address, All information you have entered on our websites or mobile applications, Your bank or credit card information that you can save in case you shop on our websites or mobile applications, Your addresses.

3. PURPOSES OF PROCESSING PERSONAL DATA

Your personal data may be processed by the Company for the following purposes:

Implementation of company policies and ensuring organization, Provision of services necessary to fulfill the Company’s commercial activities, To enable the Company to perform the necessary quality and standard audits or to fulfill the reporting and other obligations determined by laws and regulations, Effective execution of the Company’s activities, Recording all kinds of access information on the internet in accordance with the “Law on the Regulation of Publications on the Internet and Combating Crimes Committed Through These Publications”, Ensuring general security and building security.

4. PERSONS, INSTITUTIONS AND ORGANIZATIONS TO WHOM PERSONAL DATA MAY BE TRANSFERRED

Your personal data may be transferred to public institutions and organizations, offices providing legal consultancy services, audit firms, business partners, shareholders and service providers within the scope of the obligations imposed on the Company by the legislation, in line with the purposes specified in the Clarification and Explicit Consent Text.

5. LEGAL GROUNDS

Your personal data is collected by the Company for the purposes set out above by verbal, written, visual, auditory or electronic methods and for legal reasons arising from legislation and contractual obligations, especially KVKK.

6. STORAGE PERIOD OF PERSONAL DATA

The Company will keep the personal data of employees, visitors and other legal and natural persons for 10 (ten) years within the limits of the KVKK, and for 10 (ten) years in accordance with Article 146 of the Turkish Code of Obligations and Article 82 of the Turkish Commercial Code from the presentation of each product / service purchased by the customer in internet shopping. After these periods, your personal data are deleted, destroyed or anonymized. If the purpose of processing personal data has ended and the retention periods determined by the relevant legislation and the Company have expired, personal data may only be stored for the purpose of constituting evidence in possible legal disputes or for the assertion or defense of the relevant right related to personal data. In this case, the stored personal data is not accessed for any other purpose and access is provided only when it needs to be used in the relevant legal dispute. After the aforementioned period expires, personal data are deleted, destroyed or anonymized.

7. YOUR RIGHTS

Your personal data by applying to our company:

To learn whether your personal data is processed or not, Do not request information if processed, Learn the purpose of processing and whether it is used for its intended purpose, Knowing the third person or persons to whom it is transferred domestically, Ask for correction if incomplete or inaccurate, To request deletion, destruction or anonymization within the framework of the conditions stipulated in Article 7 of the KVKK, Request deletion, destruction or anonymization from third parties to whom the data is transferred, Object to the occurrence of a result to your detriment due to analysis exclusively by automated systems, If you suffer damage due to unlawful processing, you have the right to demand compensation for the damage.

8. APPLICATION

Requests for such rights may be made by the data subject in writing to the official address of Çoruh Boru Plastik San. Ltd. Şti. in writing to the official address, coruhboru@hs01.kep.tr via registered electronic mail (KEP), secure electronic signature, mobile signature or, if any, to info@coruhboru.com.tr via the electronic mail address you have previously notified to the Company and registered in the Company systems, they will be evaluated and finalized within 30 (thirty) days.