ABOUT THE PROTECTION AND PROCESSING OF PERSONAL DATA

GENERAL INFORMATION TEXT

Uygun Audit Inc. As (“Uygun Audit” or “Company”), we pay utmost attention to the security of your personal data. With this awareness, the personal data of real persons with whom the Company interacts are subject to the Personal Data Protection Law No. 6698 (“Law”), secondary regulations (regulations, communiqués, etc.) that have been put into effect or will be put into effect pursuant to the Law, and binding Personal Data. We attach great importance to its processing and preservation in accordance with the decisions taken and to be taken by the Preservation Board. With full understanding of this responsibility, we process your personal data as “Data Controller” as defined in the Law, as explained below and within the limits prescribed by the legislation.

1.     Information Regarding the Data Controller

In accordance with the law, “Uygun Danışmanlık A.Ş.” is registered at the Istanbul Trade Registry Office with the address “19 Mayıs Mah. Büyükdere Cad. Basman Han. No:4 Kat:7 34360 Şişli – İSTANBUL”. He is the Data Controller.

2.      Purposes of Processing Personal Data

Your personal data by the Company; Carrying out the necessary work by the Company’s business units in order to carry out the commercial activities carried out by the Company in accordance with the legislation and Company policies and carrying out activities in this direction, determining, planning and implementing the Company’s commercial policies in the short, medium and long term, within the limits specified in the Law, for the purposes of designing and carrying out the human resources activities of the Company, fulfilling the obligations of the Company arising from the relevant legislation, managing customer relations and corporate communication processes, and ensuring the commercial and legal security of real and legal persons with whom the Company has business relations. is processed in a limited and measured manner, in accordance with the rules of honesty and always in connection with these purposes.

3.      Transfer of Personal Data

In order to achieve the above-mentioned purposes and to carry out the Company’s commercial operations and business processes uninterruptedly, your personal data may be transferred to legally authorized public institutions, judicial and administrative authorities, private law legal and real persons permitted by other legislation, in accordance with the conditions specified in Articles 8 and 9 of the Law. persons, institutions and organizations authorized to audit the Company, contracted payment institutions for the fulfillment of payments and financial obligations, business partners from whom services are received or cooperated for the execution and development of the Company’s activities, and only when necessary, the Company’s suppliers and two companies. In order to ensure the coordination of the existing joint management and operation structuring between the Company’s affiliates/partners Uygun Danışman GRUP, it is transferred to the companies by taking the necessary and sufficient data security measures specified in the Law.

4.      Collection Method and Legal Reason for Personal Data

Your personal data is collected by the Company’s authorized units and employees by automatic and non-automatic methods, verbally, in writing or electronically. In this context, personal data in the categories of identity, communication, location, personnel, legal transaction, customer transaction, physical location security, transaction security, risk management, finance, professional experience, marketing, visual and audio records and health information; It is clearly foreseen in the laws shown in paragraphs 5/2/a-c-ç-d-e-f of the Law, it is mandatory to process personal data of the parties to the contract because it is directly related to the establishment or execution of a contract, data processing is mandatory in order for the data controller to fulfill its legal obligation, the relevant It is processed based on the legal grounds that it is made public by the person himself, that data processing is mandatory for the establishment, exercise or protection of a right, and that data processing is mandatory for the legitimate interests of the Company, provided that it does not harm the fundamental rights and freedoms of the relevant person.

Health information in the category of special personal data is classified as confidential based on legal reasons for the protection of public health, preventive medicine, medical diagnosis, execution of treatment and care services, planning and management of health services and financing, in accordance with Article 6/3 of the Law. It is processed by workplace health and safety experts and workplace physicians who are under the obligation to keep it. In addition, personal data processed within the scope of sending informative commercial electronic messages for advertising, campaign and promotional purposes within the scope of product and service marketing and strategic marketing activities can be processed based on the legal reason of having your express consent in paragraph 5/1 of the Law, and based on obtaining your express consent separately.

5.      Rights of Data Owners Under the Law

By applying to Appropriate Audit at any time;

·         Learning whether your personal data is being processed or not,

·         Requesting information if your personal data has been processed,

·         Learning the purpose of processing your personal data and whether it is used appropriately,

·         Knowing the third parties to whom your personal data is transferred at home or abroad,

·         Requesting correction of your personal data if it is incomplete or incorrectly processed,

·         Requesting the deletion or destruction of personal data within the framework of the conditions stipulated in Article 7 of the Law,

·         Requesting that the transactions carried out in accordance with paragraphs (d) and (e) of Article 11 of the Law be notified to third parties to whom your personal data has been transferred,

·         Objecting to the emergence of a result that is unfavorable to you by analyzing your processed data exclusively through automatic systems,

·         Request compensation for the damage in case you suffer damage due to unlawful processing of your personal data,

You can request to exercise your rights. You can submit your requests regarding your rights and the implementation of the Law by filling out the application form, which you can obtain from http://www.uygundenetim.com.tr/, with a wet signature and addressed to “Kore Şehitleri Cad.” Utgm. Mehmet Gönenç Sk. No:3 Şişli/İstanbul”, through a notary, by registered mail, or with your personal application, or by signing the application form you have filled out electronically with your mobile signature, secure electronic signature, and then using your KEP address or your e-mail address already registered in the Company’s data recording system. You can send it to the contact addresses [info@uygundenetim.com.tr, kvkk@uygundenetim.com.tr]. If Appropriate Audit requests within this scope will be answered in writing, up to ten pages without charge; will respond by charging a processing fee of 1 Turkish lira for each page over ten pages. If the response to the application is given on a recording medium such as a CD or flash memory, the fee that may be requested by the Company will not exceed the cost of the recording medium.

In your application containing your explanations regarding the rights you have as a personal data owner and request to use, to exercise your rights mentioned above; If the matter you request is clear and understandable, if the matter you request relates to you personally or if you are acting on behalf of someone else, you will need to submit your special power of attorney certified by a notary. In your applications, name-surname, signature, T.R. It is mandatory to have the requested elements such as identity number, residence or workplace address, e-mail address, telephone and fax number, in accordance with the “Communiqué on the Procedures and Principles of Application to the Data Controller”. Applications that do not contain the mentioned elements will be rejected by Appropriate Audit.

Uygun Audit reserves the right to make changes in this disclosure text at all times for reasons arising from the Law, secondary regulations and Board decisions. Changes to be made in the information text and the updated text will take effect immediately as of the date they are notified to you.