CLARIFICATION TEXT ON THE PROCESSING OF PERSONAL DATA

This clarification and consent text has been prepared by Siltaş Yapı İnşaat Sanayi ve Ticaret Anonim Şirketi (“Company”), acting as the data controller, in order to obtain the explicit consent of Company customers regarding the processing of their personal data within the scope of Law No. 6698 on the Protection of Personal Data (“Law”) and to inform data subjects, during the collection of personal data, about the issues specified in Article 10 of the Law and the rights set forth in Article 11 of the Law.

1. DEFINITIONS

Within the scope of this clarification text:

Personal Data: Any information relating to an identified or identifiable natural person.

Data Controller: The natural or legal person who determines the purposes and means of processing personal data, and is responsible for establishing and managing the data recording system.

Data Processor: The natural or legal person who processes personal data on behalf of the data controller, based on the authority granted.

KVKK: Refers to Law No. 6698 on the Protection of Personal Data.

2. METHODS AND LEGAL GROUNDS FOR COLLECTING PERSONAL DATA

In accordance with Law No. 6698 (“KVKK”), your personal data is processed by Siltaş Yapı İnşaat Sanayi ve Ticaret A.Ş. (“Company”), acting as the data controller, within the framework explained below. Your personal data is collected verbally, in writing, or electronically, in order to ensure that the products and services we offer as a Company can be provided within the prescribed legal framework, and to fully and accurately fulfill our Company’s contractual and legal obligations.

Your personal data is collected physically or electronically. It may be collected through forms filled out in physical environments, communication forms on our Company’s website, social media messages, digital application channels, e-mail communication, contracts and proposals, and other documents, by automated or non-automated means. The personal data collected for the legal reasons stated in this Clarification Text may be processed and shared within the conditions specified in Articles 5 and 6 of the Law.

3. PURPOSES OF PROCESSING PERSONAL DATA

Your personal data may be processed, within the scope of the personal data processing conditions specified in Articles 5 and 6 of the Law, for the following purposes: planning and execution of activities required to recommend and promote the Company’s products and services to relevant persons by customizing them according to their preferences, usage habits and needs; carrying out the necessary work by the business units to benefit the relevant persons from the products and services offered by the Company; conducting the business processes related to the commercial activities carried out by the Company; planning and executing the Company’s commercial and/or business strategies; and ensuring the legal, technical and commercial-business security of the Company and the relevant persons in a business relationship with the Company.

In addition, your personal data may be processed when you use our call centers or website, when you visit our Company or website, and when you participate in training, seminars or events organized by our Company.

4. PARTIES TO WHOM PERSONAL DATA MAY BE TRANSFERRED AND TRANSFER METHODS

Your personal data may be shared, within the scope of the personal data processing conditions and purposes specified in Articles 8 and 9 of the Law, with the Company’s business partners and suppliers, legally authorized institutions and organizations, and legally authorized private legal entities, for purposes including planning and execution of activities required to recommend and promote the Company’s products and services to relevant persons by customizing them according to their preferences, usage habits and needs; carrying out the necessary work by the business units to benefit the relevant persons from the products and services offered by the Company; conducting the business processes related to the commercial activities carried out by the Company; planning and executing the Company’s commercial and/or business strategies; and ensuring the legal, technical and commercial-business security of the Company and the relevant persons in a business relationship with the Company.

5. RIGHTS OF THE DATA SUBJECT

Data subjects may apply to the Company acting as the data controller and request to:

Learn whether their personal data is processed or not,

Request information if their personal data has been processed,

Learn whether their personal data is processed in accordance with the law,

If personal data has been transferred, learn about the recipients to whom the data has been transferred,

Request correction if their personal data has been processed incompletely or inaccurately,

Request deletion of personal data under the conditions specified in Article 7 of the Law,

Request notification of the transactions made pursuant to subparagraphs (d) and (e) of Article 11 of the Law to third parties to whom their personal data has been transferred,

Object to the occurrence of a result against themselves by analyzing the processed data exclusively through automated systems,

Request compensation if they suffer damage due to unlawful processing of personal data.

6. EXERCISING RIGHTS BY THE DATA SUBJECT

Pursuant to Article 13, paragraph 1 of the KVKK, you may submit your requests regarding the rights stated above to our Company in writing or by other methods determined by the Personal Data Protection Board. As the Personal Data Protection Board has not determined any other methods at this stage, you must submit your application in writing to our Company within the scope of Article 11 of the KVKK. In this context, the channels and procedures through which you may submit your written application to our Company are explained below.

Applications regarding Personal Data within the scope of the Law may be submitted:

• In person, with identity verification, to the address: Yenişehir Mah. Millet Cad. No:26 Pendik / ISTANBUL, or
• Via our Company’s e-mail address info@siltasyapi.com, with identity verification, or through other methods stipulated in the Law and relevant legislation.

The Company responds to data subjects who wish to exercise these rights, within the limits prescribed by the Law, within a maximum of thirty (30) days, as stipulated in the Law. In case of rejection of the request, the reason(s) for rejection will be provided in writing or electronically with justification.