Our Privacy and Personal Data Protection Policy

Clarification Statement for the Law on the Protection of Personal Data

Definitions

In this clarification text;

Personal Data: Any information relating to an identified or identifiable natural person,

Law on the Protection of Personal Data (“KVKK”): Law No. 6698 on the Protection of Personal Data, which entered into force after being published in the Official Gazette on April 7, 2016

Data Processor: A natural or legal person who processes Personal Data on behalf of the Data Controller based on the authorization granted by the Data Controller,

Data Controller: Natural or legal person who determines the purposes and means of processing Personal Data and is responsible for the establishment and management of the data recording system.

Relevant Person: Refers to the natural person whose personal data is processed.

At Coşkunöz Kalıp Makina Sanayi ve Ticaret Anonim Şirketi (""Our Company""), protection of fundamental rights and freedoms, protection of privacy regarding private lives, ensuring and protecting information security respect for ethical value are among our prioritized principles

Accordingly, within the scope of fulfilling our disclosure obligation arising from Article 10 of the Law on the Protection of Personal Data (""KVKK""), the following explanations are provided for your information

Data Controller

“Data Controller”, in terms of your personal data, is Coşkunöz Kalıp Makina San.ve Tic. A.Ş., registered with the Trade Registry under 90098,

Mersis number 0212047371600014, headquartered in Organized Industrial Zone Sarı Cadde No:1 Bursa.

Parties whose Data are Collected

Within the scope of the Law on the Protection of Personal Data, we collect the data of the following parties who have a business relationship with our company

These are the data of;

Our Employees and prospective Employees

The family members and relatives of our employees and prospective employees,

Our customers,

Our suppliers,

Our consultants,

Our business partners,

Our shareholders,

Our company officials,

Our company representatives,

The person(s) whom we have a contractual relationship with and their employees

Person(s) who are parties to legal transactions,

Survey participants,

Our visitors,

Data that our Company Collects from its Parties and Processes

Within the scope of Articles 5 and 6 of the Law on the Protection of Personal Data, we collect and process the following data

from the parties of our company.

These are the data of;

Information on family and social life,

Information on education and training,

Employment information,

Information in relation to request/complaint management,

Information on legal affairs,

Information on compliance with ethical values and the law,

Financial information,

Audit information,

Information on the use of electronic media,

Information about the goods and services that are provided and procured,

Information on business activities,

Information about trade and other licenses and permits,

Information on the security of the physical location,

Audiovisual information (photo, camera, sound recordings),

Telecommunications records,

Records of use for e-mail and information systems services,

Login records,

Union membership information,

Health reports and health information,

Images and information on occupational accidents, injuries, diagnosis and treatment,

Biometric data and criminal record

HES Codes of our employees,

Covid 19 vaccination status of our employees,

PCR information of our employees,

Our stakeholders’ HES codes, vaccination information,

PCR query results and fever measurement results

Our Company’s Purposes for Data Collection

Within the scope of Articles 5 and 6 of the Law on the Protection of Personal Data, we collect and process the following data limited to the relevant purposes

. These are the data of;

Performing our company’s commercial activities.

Being able to perform business processes related to commercial activities,

Managing and maintaining relationships with business partners and/or suppliers,

Technical management of our company’s websites,

Customer management and tracking of complaints,

Product surveys and follow-up of the questions you send to our Company,

The necessary work to be done by our business units for you to benefit from the products and services offered by our company,

Planning and execution of sales, marketing, after-sales processes of products and/or services,

Providing information about the contents of products and services,

Being able to send commercial electronic messages by obtaining additional approval in accordance with the regulatory requirements,

Execution of competitions, events and other organizations,

Carrying out the legal and commercial affairs for our company and with people who have business relationships with our Company and ensuring the security of such relationships,

Administrative operations for communication, which are carried out by our company,

Personnel administration and management,

Ensuring the physical security and control of the company’s locations,

Planning of logistics activities,

Conducting credibility investigation processes,

Compliance with ethical values and the law and execution of legal affairs and procedures,

Monitoring the contractual processes and/or legal requests,

Planning and execution of Human Resources and personnel recruitment processes and monitoring and realization of education and training activities,

Planning and/or execution of occupational health and/or safety processes,

Ensuring that our Company can benefit from incentives through the execution of research and development activities,

Planning and executing corporate communication and corporate management activities,

Execution of information security management services,

Carrying out activities for monitoring and auditing financial and/or accounting affairs and determining financial risks of customers,

Determination and implementation of our company’s commercial and business strategies,

Creating and monitoring visitor records,

For other purpose(s) to be notified to the relevant person during the acquisition of the information

To ensure that legal obligations are fulfilled as required by the relevant legislation,

HES Codes of our employees, PCR query results and fever measurement results, preventing the spread of the contagion,

Acting in accordance with the communiqués published by public institutions and organizations,

Ensuring occupational health and safety of employees entering the company,

Execution of emergency processes, and most importantly, protection of public health.

According to the circular dated 02.09.2021 published by the Ministry of Labor and Social Security, your vaccination status will be processed as personal data by requesting your vaccination cards to determine whether you have been vaccinated or not. In addition, PCR tests will be requested from our employees who are not vaccinated once a week in line with the circular and the results will be requested for necessary actions to be taken.

The HES codes, vaccination status, PCR query results and fever measurement results of our stakeholders will be processed in order to Acting in accordance with the communiqués published by public institutions and organizations, to ensure occupational health and safety at the entrances to the company and to detect non-risk entries, and no personal data processing activities will be carried out other than the act of detection.

Transfer of Data Collected and Processed by Our Company

Your personal data, which is collected by our company under the terms and purposes for processing personal data, which are specified in Articles 8 and 9 of the Law on the Protection of Personal Data, can be shared with our affiliates, shareholders, business partners (only anonymously), legally authorized public institutions, private persons and other person

in line with our purposes that are detailed above.

The Method of and Legal Reason for Data Collection by our Company

Personal data is collected, used, recorded, stored and processed orally, in writing and/or electronically, or in a cloud environment abroad, in accordance with the rules of law and integrity, under the principle of proportionality by sending clear and understandable, oral, written and/or electronic notifications to personal data owners and obtaining their express consent where necessary, provided that such activities are related to and limited by the above-mentioned legitimate purposes.

HES codes, which are the personal data of our employees and stakeholders, are collected by the relevant person by submitting them to our company, and the HES Code inquiry results, which are other considered other categories of personal data, are collected as a result of querying the submitted codes electronically through the application (Hayat Eve Sığar / E-devlet)

. If the fever measurement result is personal data, this information is obtained electronically through non-contact thermometers given to the person concerned. Only employee HES codes and fever measurement results will be recorded in a physical/electronic environment.

Vaccination status and PCR tests collected from employees in order to fulfill the obligations of the employer as announced in the circular will be recorded.

Your personal data in question is processed primarily for fulfilling the legal obligations within the scope of Covid-19 measures announced by the Ministries (Ministry of Health; Ministry of Family, Labor and Social Services; Ministry of Industry and Technology). In addition, the processing of all these personal data carries the legal reason of fulfilling the legitimate interests of our company. In cases where explicit consent is required for such personal data processing activities, our company will carry out personal data processing activities by requesting your explicit consent.

We assure you that your personal data shall not be processed by our company for purposes other than those specified in this clarification document; shall not be transferred to third parties at home and abroad; and shall not be stored.

Period of Retention for Data Collected by Our Company

Your personal data is stored for the retention periods specified in the relevant legal regulations, and if no such period is specified in the relevant legal regulations, for a period in line with the practices and commercial life practices of our Company or for a period as required by the above-mentioned processing purposes, and then it is deleted, destroyed or anonymized in accordance with Article 7 of the Law on the Protection of Personal Data.

Security of Your Data which is Collected and Processed by Our Company In order to ensure that your personal data are not exposed to unauthorized access, lost and damaged in the environments where they are processed and stored, the technical and administrative measures of the Information Security Management System (ISO 27001 Standard and good practice booklet 27018) promoted by our management, the requirements of the Personal Data Protection Management System (Bureau Veritas - Data Protection Technical Standard, BS 10012 Data Protection Personal Information Management System Standard), as well as the requirements of the.

Personal Data Security Guide published by the KVKK board are constantly operated and developed within the scope of continuous improvement efforts.

Rights of the Person whose Data is Collected and Processed In accordance with Article 11 of the Law on the Protection of Personal Data, everyone is entitled to contact their data controller and;

a) Learn whether their personal data is processed or not,

b) Request information in relation to the processing of their personal data, if it is processed,

c) Learn the purpose for the personal data to be processed and whether they are used for their intended purposes,

d) Learn about the third parties to whom personal data are transferred domestically or abroad,

e) Request the correction of personal data if they are incomplete or incorrectly processed,

f) Request the deletion or destruction of personal data under the terms stipulated in Article 7,

g) Request that the transactions that are performed in accordance with subparagraphs (e) and (f) are notified to third parties to whom personal data were transferred,

h) Object to the emergence of a result against him/her through the exclusive analysis of the processed data by automated systems,

i) Request to be indemnified for any damages that are incurred due to the illegal processing of personal data.

Application Methods in the Context of the Relevant Person’s Rights

Pursuant to paragraph 1 of Article 13 of the Law on the Protection of Personal Data, you may fulfill your request for exercising your above-mentioned rights through the following methods and information in accordance with the ""Communiqué No. 30356 for the Procedures and Principles for Applying to the Data Controller"" dated March 10, 2018.

Information that is required to be included in the application;

1. Name and Surname of the applicant.

2. If the applicant is a citizen of the Republic of Turkey, his/her Identity Number, if not, his/her Nationality and Passport number or ID number, if available.

3. Applicant’s residence or business address for Notices to be served.

4. Applicant’s electronic mail address, telephone or fax number for notifications.

5. Subject matter of the applicant’s Request.

6. Information and documents in relation to the subject matter of the applicant’s request.

Application Methods;

1. The applicant can personally make an application to Coşkunöz Kalıp Makina San.ve Tic.A.Ş.* by filling in the «Application Form», placing it in a sealed envelope with the note «Information Request in line with the Law on the Protection of Personal Data» and receiving a delivery note at the reception desk.

2. The applicant may serve a notice to Coşkunöz Kalıp Makina San.ve Tic.A.Ş.* via the Notary Public, but the envelope to be served must have the note «Information Request as per the

Protection of Personal Data» on it.

3. The applicant can personally apply to our company by sending an e-mail with the subject, «Information Request in line with the Law on the Protection of Personal Data» to our company’s

Registered Electronic Mail «coskunoz.holding@hs02.kep.tr» via the «Secure Electronic Signature» which is defined in the Electronic

Signature Law No. 5070. *Organize Sanayi Bölgesi Sarı Cadde No:1 Bursa


You can find detailed information on the application and complaint processes in relation to your above-mentioned rights here.

You can reach our application form in relation to your above-mentioned rights here.

Other Legal Disclaimer Data protection.

In some sections of this site, you are asked to provide your personal information. Sharing personal data such as your name, surname, mobile number and e-mail address is entirely at your own choice.

This information is used in the sending of all kinds of commercial electronic messages, including marketing communication activities related to products, services, special offers and campaigns to be made by COŞKUNÖZ KALIP MAKİNA SANAYİ VE TİCARET for you, and similar invitations, promotions, celebrations and survey applications, through E-mail, Telephone, SMS / SMS channels, and this information is processed and stored by COŞKUNÖZ KALIP MAKİNA SANAYİ VE TİCARET A.Ş. if you consent to the sending of commercial electronic messages. Your contact information may be shared with third parties from whom services are received for sending commercial electronic messages, and your personal data may be processed, retained and shared with third parties under such activities The content of the commercial electronic message and other records related to the delivery shall be recorded and stored for submission to the Ministry of Customs and Trade, where required. You are entitled to find out which data of you we have in our database, to request that your incorrect data is corrected and to request not to receive any communications.

Cookies.

Cookies are small text files that are copied to your computer by a website. Such files do not harm your computer and do not contain viruses. The cookies used on our website do not extract personal information. You can disable the cookies that are used at any time by using the settings in your browser. In principle, the cookies on our website are only used for the purpose of evaluating anonymous information and statistical information throughout the session and providing ease of use. Cookies can sometimes be used for additional transactions on certain sections of our website, and when you enter such sections, you shall be informed accordingly.

Copyright.

© Copyright 2018 COŞKUNÖZ KALIP MAKİNA SANAYİ VE TİCARET A.Ş

Bursa, Türkiye All rights reserved. The text, visual, audio, animation and video files and designs published on this website are protected by Law

No. 5846 and the relevant Legislation, and cannot be copied for purposes of commercial use or distribution, and cannot be used on other websites by being modified or copied warranties.

All information is provided by COŞKUNÖZ HOLDİNG ANONİM ŞİRKETİ “as is" and without any warranty or undertaking, either express or implied. All product, price, exchange rate and duration information on this websitehave been prepared for publication in line with the most recently acquired information. COŞKUNÖZ KALIP MAKİNA SANAYİ VE TİCARET A.Ş, reserves the right to change the information at any time and without any prior notice. No responsibility shall be taken for any spelling errors. Although it is assumed that the information is accurate, it may contain some errors or mistakes. COŞKUNÖZ KALIP MAKİNA SANAYİ VE TİCARET A.Ş, is not responsible for the content that is accessed through external links for other sites, that are provided on this website.

Trademarks.

 All logos and brand emblems that are published on our website are protected by the provisions of the Decree Law No. 556 on the Protection of Trademarks. Unless otherwise specified, they cannot be copied or used. 

Licenses.

COŞKUNÖZ KALIP MAKİNA SANAYİ VE TİCARET A.Ş tried to prepare an informative website full of innovations. However, you should note that COŞKUNÖZ KALIP MAKİNA SANAYİ VE TİCARET A.Ş has to protect the intellectual property rights, including patents, trademarks and copyrights. Therefore, you are kindly requested to understand that the intellectual property rights of COŞKUNÖZ KALIP MAKİNA SANAYİ VE TİCARET A.Ş or third parties are not allowed to be exercised on our website.