Protection of Personal Data

OZAR GROUP GENERAL DECLARATION ON THE PROTECTION AND PROCESSING OF PERSONAL DATA

1. Data Controller Pursuant to the Law No. 6698 on the Protection of Personal Data (“Law No. 6698”), your personal data may be processed by Ozar Group (“Company”) as the data controller within the scope described below.

Our Company shows a high level of sensitivity to the protection of your personal data, and you can access the “General Declaration on the Protection and Processing of Personal Data” created within this scope via the website https://www.ozargroup.com.tr/.

2. Purposes and Legal Reasons for Processing Your Personal Data

Your personal data;

• Fulfillment of legal and administrative obligations by the Company,
• Establishment and execution of the contracts you will make with the Company, to be used in the products and services you receive / will receive from the Company, to communicate regarding the product and service you receive / will receive, as well as to be used in marketing activities if you have given permission in this regard, product / service offer, modeling, reporting, scoring, risk monitoring, intelligence, existing or new product studies,
• Ensuring the legal and commercial security of persons who are in a business relationship with the Company, determining and implementing the commercial and business strategies of the Company, ensuring and improving coordination, cooperation and efficiency within and between the units within the Company, resolving existing and future legal disputes,
• Ensuring the security of the Company’s website and other electronic systems and physical environments, notifying the changes in the legislation or in the rules and policies adopted by the Company or making other notifications concerning you, and investigating, detecting, preventing and notifying the relevant administrative or judicial authorities of violations of the contract and the law in order to carry out our activities we offer to you,
• In line with the purpose of ensuring the execution of the Company’s human resources policies; it may be processed within the personal data processing conditions and purposes specified in Articles 5 and 6 of the Personal Data Protection Law No. 6698 in order to provide personnel suitable for open positions, to carry out human resources operations, to select employee candidates, to manage personnel affairs, to determine training and career plans, to fulfill obligations within the framework of occupational health and safety and to take necessary measures and to fulfill our other legitimate interests.

3. Transfer of Your Personal Data Our Company, provided that it complies with the general principles listed in Article 4 of the Law No. 6698 and the conditions stipulated in Articles 8 and 9 of the Law No. 6698 and takes the necessary security measures, for the purposes shown under the heading “Purposes and Legal Reasons for Processing Your Personal Data” of this General Declaration on the Protection and Processing of Personal Data, and to the administrative and official authorities that are legally required to transfer your personal data, It may be transferred to third parties that outsource services to carry out our activities, domestic/foreign/international organizations with which we cooperate or are project/program partners, subcontractors, legal entities such as independent audit and support service providers, and legal entities such as organizations that receive independent audit and support services, and to ensure the legal and commercial security of third parties in cooperation and to ensure the security of electronic and physical environments and due to legal obligations and within the framework of legal limitations.

4. Method and Legal Reason for Collecting Personal Data Your personal data; all contracts, information/request forms and other documents issued with your approval and/or signature, notifications you will make with your electronic approval and/or signature, our General Directorate, physical environments, call centers, websites, mobile applications, internet transactions, social media and other public channels, user interviews, scanning of forensic records, market intelligence, SMS channels, It is collected as part of any data recording system that is fully or partially automated or as part of any data recording system through verbal, written, visual, audio recording or electronic channels that have been contacted or may be contacted in the future through methods such as digital applications to websites, written/digital applications to sales teams and stored within the legal periods in accordance with the relevant legislation. Your personal data collected with the specified methods and legal reasons may be processed and transferred within the scope of the personal data processing conditions and purposes specified in Articles 5 and 6 of Law No. 6698 and the data processing conditions and purposes specified in Articles 2 and 3 of this text.

5. Rights of the Data Subject Pursuant to Article 11 of Law No. 6698, your personal data by applying to our Company in accordance with the procedure stipulated in Article 6 of this text;

• Find out if it is being processed,
• Do not request information if processed,
• Learn the purpose of processing and whether it is used for its intended purpose,
• Knowing the 3rd parties to whom it is transferred domestically / abroad,
• Request correction if incomplete / incorrectly processed,
• To request the deletion or destruction of personal data in case the reasons requiring the processing of personal data disappear,
• To request notification of the transactions made in accordance with paragraphs 5 and 6 above to the third parties to whom it is transferred,
• Object to the occurrence of a result to your detriment due to analysis exclusively by automated systems,
• If you suffer damage due to unlawful processing, you have the right to demand compensation for the damage.

6. Exercise of Rights by the Data Subject Personal data subjects may submit their requests regarding their rights specified in Article 11 of the Law No. 6698 by completely filling out the application forum on the website https://www.ozargroup.com.tr/;

• By registered letter with return receipt,
• Through a notary public,
• 5070 numbered “secure electronic signature” defined in the Electronic Signature Law and send it to the registered e-mail address of our company.

Applications made by registered letter with return receipt or through a notary public should be sent to Tacettin Veli Mah. Halit Narin Cad. Bahadır Plaza 7/11 Melikgazi/Kayseri – Turkey.

Duly submitted requests will be finalized within thirty days at the latest. In the event that the finalization of such requests requires an additional cost, our company will charge the applicant the fee in the tariff determined by the Board.

In order for a person other than the personal data owner to make a request, there must be a special power of attorney issued by the personal data owner on behalf of the person who will make the application.