PROTECTION OF PERSONAL DATA

GENERAL CLARIFICATION TEXT

1. Data Controller

This clarification text has been issued by Eti Bakır A.Ş. Mazıdağı Branch (ETİ GÜBRE) as a “data controller” within the scope of Personal Data Protection Law No 6698 (PDP Law), which is one of the group companies affiliated to Cengiz Holding A.Ş. (“Holding”).

2. Personal Data Processing and Purposes of Processing

The personal data of the following subjects can be processed to provide the services in the best manner although it may vary regarding services and transactions offered by Eti Gübre. In this context;

• If you are an employee/contact person/company shareholder/authority of Holding/Eti Bakır A.Ş./its branch Eti Gübre/other group companies affiliated to the Holding/natural person merchant/suppliers with legal entity/subcontractor/third parties whose services are employed;

Your Identity (Name-Surname, Parents' Name, Mother's Maiden Name, Date of Birth, Birthplace, Marital Status, Identity Card Serial Order No, T.R. ID number, etc.),
Contact (E-mail Address, Contact Address, Registered E-mail Address (REM), Mobile Number, GSM No, etc),
Personnel (Payroll, Disciplinary Proceeding, Statement of Employment, Declaration of Property, CV, Performance Assessment Reports, etc.),
Legal Transaction Information (Information in Official Correspondence with Judicial Authorities/the Case File, etc.) ,
Customer Transactions Information (Call Centre Records, Receipt/Promissory Note/Cheque Information, Information on Box Office Receipt, Ordering Information, Request information),
Physical Space Security Information (Entrance and Exit Registration Information of Employees and Visitors, Security Footage, etc.),
Risk Management (Processed Information to Managing the Commercial, Technical and Administrative Risks, etc.),
Finance (Iban/ Bank Account Information),
Occupational Experience (Diploma, Courses, Intensive-additional Vocational Training Courses, Certificates, Transcript, etc.),
In case of your audio-visual records and sensitive personal data are shared by you or your employer;
Your Health Status Information (Disability Status Information, Blood Group Information, Device Used and Prothesis Information etc),
Information on Criminal Conviction/Security Measures,
Biometric Data (Information About Your Palm, Fingerprint, Retinal Scanning, Facial Recognition, etc),
Religion and Blood Group Information Which Is In Your ID (They Can Be Obtained Indirectly Through Copies of ID or Drive License.),

Within the Scope of Activities of Holding, Eti Bakır and Its Branch Eti Gübre;
Execution of Emergency Management Processes,
Execution of Information Security Processes,
Execution of Employee Candidate / Intern / Student Selection and Placement Processes,
Execution of Employee Candidate Application Processes, Fulfillment of Employment Contract and Regulatory Obligations for Employees,
Execution of Benefits and Benefits Processes for Employees, Conducting Audit / Ethics Activities, Conducting Training Activities,
Execution of Access Authorizations,
Execution of Activities in Compliance with The Legislation,
Execution of Finance and Accounting Affairs,Providing Physical Space Security,
Execution of Assignment Process, Follow-up and Execution of Legal Affairs,
Execution Internal Audit/Investigation/Intelligence Activities,Receiving and Evaluating Suggestions for Improvement of Business Processes,
Execution of Occupational Health/Safety Activities,
Execution of Communication Activities,
Planning of Human Resources Processes,
Execution/Supervision of Business Activites,
Conducting Business Continuity Ensuring Activities,
Execution of Logistics Activities,
Execution of Performance Evaluation Processes,
Execution of Goods/Services Procurement Processes,
Execution of Good/Service Sales Processes,
Execution of Goods/Services Production and Operation Processes, Organization and Event Management,
Execution of Risk Management Processes,
Execution of Storage and Archive Activities,
Execution of Contract Processes,
Execution of Sponsorship Activities,
Execution of Strategic Planning Activities, Follow-up of Requests/Complaints, Ensuring the Security of Movable Property and Resources,
Execution of Supply Chain Management Processes,
Execution, Wage Policy, Work and Residence Permit Procedures of Foreign Personnel,
Execution of Talent/Career Development Activities, Providing Information to Authorized Persons, Institutions and Organizations ,
Execution of Management Activities, Work and Residence Permit Procedures of Foreign Supplier’s Personnel,
Execution of Communication Activities, Composing of Press Release Within the Scope of Corporate Communication Processes, Organization and Event Management Including hotel, visa, flight reservations,
Execution of logistic and Cargo activitie, conducting internal audit/investigation/intelligence activities, Providing Information to Authorized Persons, Institutions and Organizations Upon Request,
Execution of Contuinity of Information Systems,
Execution of Storage and Archive Activities,


• If you are an employee/contact person/company shareholder/authority of Holding/Eti Bakır A.Ş./its branch Eti Gübre/other group companies affiliated with the Holding/natural person merchant/customers who have a legal entity

Your Identity (Name-Surname, Parents' Name, Mother's Maiden Name, Date of Birth, Birthplace, Marital Status, Identity Card Serial Order No, T.R. ID number, etc.),
Contact (E-mail Address, Contact Address, Registered E-mail Address (REM), Mobile Number, GSM No, etc.),
Personnel (Payroll, Disciplinary Proceeding, Statement of Employment, Declaration of Property, CV, Carrier Assessment Reports, etc.),
Legal Transaction Information (Information in Official Correspondence with Judicial Authorities/the Case File, etc.)
Customer Transactions Information (Call Centre Records, Receipt/Promissory Note/Cheque Information, Information on Box Office Receipt, Ordering Information, Request Information),
Physical Space Security Information (Entrance and Exit Registration Information of Employees and Visitors, Security Footage, etc.),
Risk Management (Processed Information to Managing the Commercial, Technical and Administrative Risks, etc.),
Finance (IBAN/ Bank Account Information),
Occupational Experience (Diploma, Courses, Intensive-additional Vocational Training Courses, Certificates, Transcript etc.),
In case of your audio-visual records and sensitive personal data that are shared by you or your employer;
Your Health Status Information (disability status information, blood group information, the device used and prosthesis information etc),
Criminal conviction and security measures (Information of criminal conviction/security measures etc),
Biometric data (information about your palm, fingerprint, retinal scanning, facial recognition etc),
Religion and blood group information which is in your ID (they can be obtained indirectly through copies of ID or drive license.),

Within The Scope Of Activities Of Holding, Eti Bakır And Its Branch Eti Gübre;

Execution Of Management Processes,
Execution Of Information Security Processes,
Execution Of Employee Candidate / Intern / Student Selection And Placement Processes,
Execution Of Employee Candidate Application Processes, Fulfillment Of Employment Contract And Regulatory Obligations For Employees,
Execution Of Benefits And Benefits Processes For Employees, Conducting Audit / Ethics Activities, Conducting Training Activities,
Execution Of Access Authorizations,
Execution Of Activities İn Compliance With The Legislation,
Execution Of Finance And Accounting Affairs, Providing Physical Space Security,
Execution Of Assignment Process, Follow-Up
Execution Of Legal Affairs,
Execution Internal Audit/Investigation/Intelligence Activities, Receiving And Evaluating Suggestions For Improvement Of Business Processes,
Execution Of Occupational Health/Safety Activities,
Execution Of Communication Activities,
Planning Of Human Resources Processes,
Execution/Supervision Of Business Activites, Conducting Business Continuity Ensuring Activities,
Execution Of Logistics Activities,
Execution Of Performance Evaluation Processes,
Execution Of Goods/Services Procurement Processes,
Execution Of Good/Service Sales Processes,
Execution Of Goods/Services Production And Operation Processes,
Organization And Event Management,
Execution Of Risk Management Processes,
Execution Of Storage And Archive Activities,
Execution Of Contract Processes,
Execution Of Sponsorship Activities,
Execution Of Strategic Planning Activities, Follow-Up Of Requests/Complaints, Ensuring The Security Of Movable Property And Resources,
Execution Of Supply Chain Management Processes,
Execution, Wage Policy, Work And Residence Permit Procedures Of Foreign Personnel,
Execution Of Talent/Career Development Activities, Providing Information To Authorized Persons, Institutions And Organizations ,
Execution Of Management Activities, Work And Residence Permit Procedures Of Foreign Supplier’s Personnel,
Execution Of Communication Activities, Composing Of Press Release Within The Scope Of Corporate Communication Processes, Organization And Event Management Including Hotel, Visa, Flight Reservations,
Execution Of Logistic And Cargo Activities, Conducting Internal Audit/Investigation/Intelligence Activities, Providing Information To Authorized Persons, Institutions And Organizations Upon Request,
Execution Of Contuinity Of Information Systems,
Execution Of Storage And Archive Activities, • If you visit our workplace, your identity/communication/physical space security/process security data may be processed for providing physical space security, execution of occupational health safety processes in case of an occupational accident, execution of continuity of information systems, providing information to authorized persons, institutions and organizations upon request,

• If you visit our website, your process security data, If you use the wireless network connection service, your identity/communication/process security data can be processed for fulfilling the obligations under law no 5651, keeping the electronic log records and conducting information security processes in line with our business's legislation and policy and procedure finitely.
Your personal data is also transplanted to a physical archive and information systems to preserve it in the digital and physical space.

3. To Whom and For What Purposes Personal Data Can Be Transferred

Your personal data including those that are sensitive may be transferred within the scope of article 2 of herein clarification text and the Law and other legislation depending on the limited purposes; to legally authorized public institutions and organizations upon request, banks, press associations, auditing and consulting firms, customs companies, customers, insurance companies, travel and visa agencies, firms that we are in cooperation with and take advantage of their services including those who are our business partner and suppliers, group companies and databases that are used with them and firms that provide technological services at home and abroad to adopt the policy and procedures of Holding, execution of operational process and participation in a tender in and out of Türkiye.

4. Personal Data Collection Method and Legal Purposes

Your personal data can be collected for the purposes that are explained in the 2nd article of herein Clarification Text and under the ultimate principles envisaged in the 5th article of the law (Based on and limited to legal reasons of; Performance of the contract, legal obligations of the data owner, establishment/exercise/protection of rights and legitimate interest of data owner) in automatic or manual via written or verbal information that is delivered directly or indirectly to our company’s e-mail, application, software, camera records within the scope of activities of Holding/Eti Bakır/Eti Gübre/Branches of Holding.

5. Your Rights Regarding the Protection of Your Personal Data

Within the scope of the legislation on the protection of personal data, you have the right to; Learning whether your personal data were processed, if these data were processed you can demand relevant information, learning the purpose of the processing of your personal data and whether these data were appropriately used or not, learning about the third persons to whom your personal data were transmitted domestically or internationally, asking the correction of any incompletely or falsely processed personal data, and requesting the notification of this correction procedure to the third persons to whom your personal data were transferred, requesting the deletion, destruction or anonymization of your personal data in case where the reasons requiring the processing of these data are no longer valid; and requesting the notification of this particular procedure to the third persons to whom your personal data were transferred, raising an objection to any results obtained against you as a result of analysing your processed data via exclusively automated systems, demanding the indemnification of losses in cases where you incur losses due to the unlawful processing of your personal data.

6. Application Methods

• You can submit your requests within the scope of Article 11 of PDP Law, which regulates the rights of the data subject, via the registered ”link “ with the “Annex No-1” form under the Communiqué on Application Procedures and Principles to Data Controller, to “Kocakent Mah. Kocakent Kümeevleri. No:490/1-270 Mardin, Türkiye” address in writing or by providing your identity confirmation in person or by using the "secure electronic signature" defined in “the Law No. 5070 on Electronic Signature Mobile Signature” or the e-mail address you have previously notified to our Company and registered in our systems, from the link “ https://etigubre.com/iletisim “, electronic mail address of info@etigubre.com, Registered E-mail Address of etibakir@hs01.kep.tr or other specified methods under the Communiqué.

Your requests regarding your personal data are evaluated and answered within 30 days. If your request is rejected, an explanation of the reasons will be sent to you in writing or electronically.