Law on the Protection of Personal Data

At GGCHEM Kimya ve Tekstil San. Tic. Ltd. Sti., we attach great importance to the privacy and security of your personal data.

In this context, processing and storing all kinds of personal data belonging to all persons associated with GGCHEM Kimya ve Tekstil San. Tic. Ltd. Sti., including our customers and business contacts who benefit from our products and services, in accordance with the Law on Protection of Personal Data No. 6698 (“KVKK”), is one of our priorities. Aware of our "Data Controller" title and this responsibility under the KVKK, we would like to inform you as follows regarding the purposes for processing your personal data, the methods and reasons for collecting your data, your rights regarding the processing of your personal data, and the application procedure and principles which are the method of exercising these rights.

a. What is Personal Data? Which Personal Data do we collect?

Personal data refers to all kinds of information related to you, including your personal identity information (name, surname, TR identity number, etc.), address and telephone information, vehicle and license plate information, family status information, IP address, bank account information ("Personal Data"), and a special type of this, Special Categories of Personal Data, refers to sensitive personal data such as race, ethnic origin, political opinion, philosophical belief, religion, sect or other beliefs, dress and clothing, association, foundation or union membership, health, sexual life, criminal conviction and security measures related data, and biometric and genetic data ("Special Categories of Personal Data"). The explanations we make on this page for your Personal Data also cover your Special Categories of Personal Data.

In this context, GGCHEM Kimya ve Tekstil San. Tic. Ltd. Sti. collects Personal Data belonging to our customers, business contacts, employees, employee candidates, platform (our internet/mobile sites and applications) users, visitors, and the authorized personnel and employees of our subcontractors and similar business partners, where necessary, in accordance with the KVKK. We can detail the Personal Data we collect as follows:

• Identity Data: Data about the person's identity, such as name, surname, T.R. identity number, photocopy of identity card, which we collect from our customers, business contacts, employees, employee candidates, platform (our internet/mobile sites and applications) users, visitors, and the authorized personnel and employees of our subcontractors and similar business partners.
• Contact Data: Data that enables communication with the person, such as telephone number, address, e-mail address, IP address, which we collect from our customers, business contacts, employees, employee candidates, platform (our internet/mobile sites and applications) users, visitors, and the authorized personnel and employees of our subcontractors and similar business partners.
• Data on Family Members: Data about the related person's family members and relatives, which we collect from our employees, employee candidates, and the authorized personnel and employees of our subcontractors and similar business partners, as required by relevant legislation and/or to protect the legal and other interests of our Company or the related person.
• Financial Data: Data such as salary, wage information, bank account information, which we collect from our employees, employee candidates, customers, business contacts, and the authorized personnel and employees of our subcontractors and similar business partners, according to the legal relationship established by our Company with the data owner related person.
• Personnel Data: All kinds of personal data that form the basis for the personal rights of real persons in a working relationship with our Company, which we collect from our employees, employee candidates, and the employees of our subcontractors and similar business partners.
• Physical Space Security Data: Personal data such as security and camera recordings taken during entry to the physical location and stay within the location, which we collect from our customers, business contacts, employees, employee candidates, visitors, and the authorized personnel and employees of our subcontractors and similar business partners.
• Communication and Complaint Management Data: Personal data obtained from our customers, business contacts, platform (our internet/mobile sites and applications) users, visitors, and the authorized personnel and employees of our subcontractors and similar business partners during the processes of receiving and evaluating all kinds of requests or complaints directed to our Company.
• Special Categories of Personal Data: Data such as health data, biometric data (voice and video recordings), religion, and information about the association and union membership specified in Article 6 of the KVKK, which we collect from our customers, business contacts, employees, employee candidates, visitors, and the authorized personnel and employees of our subcontractors and similar business partners.
• Other Data: Data processed for technical transaction security, purchase information, cookies, and data collected through automatic means by other methods, which we collect from our customers, business contacts, employees, employee candidates, platform (our internet/mobile sites and applications) users, and the authorized personnel and employees of our subcontractors and similar business partners.

b. How and on What Legal Grounds do We Collect / Process Your Personal Data?

We collect your Personal Data through automatic or non-automatic means, verbally, in writing, or electronically, through the main purposes and methods below, and through other channels that may be added in the future.

We collect your Personal Data through our internet and mobile platforms (our internet/mobile sites and applications), through our social media accounts operated on behalf of GGCHEM Kimya ve Tekstil San. Tic. Ltd. Sti. on various social media channels, through our call center managed by GGCHEM Kimya ve Tekstil San. Tic. Ltd. Sti., through other communication methods including e-mail, short messages ("SMS") or multimedia messages ("MMS"), through Contracts signed with you or the company you are authorized for, commercial offers, printed and electronic forms, business cards and other documents provided by you during our customer visits within the scope of GGCHEM Kimya ve Tekstil San. Tic. Ltd. Sti.'s sales and marketing activities, through third parties such as GGCHEM Kimya ve Tekstil San. Tic. Ltd. Sti. group companies, business contacts, dealer and sales channel, manufacturing companies or companies from which we supply service/product, and through various channels including sources such as the Trade Registry, in whole or in part, automatically or non-automatically as part of any data recording system, in verbal, written, or electronic form.

We process your Personal Data collected in line with the above methods, based on one or more of the legal reasons specified below:

• Having your explicit consent,
• The law and regulations in force in the Republic of Turkey allowing the processing,
• Being necessary for the protection of your life or physical integrity or that of another person when you are unable to express your consent due to actual impossibility,
• Being necessary for the performance of the contract we have concluded with you or your company,
• Being necessary to process your Personal Data in order to fulfill our legal obligations,
• Your Personal Data being made public by you,
• Being necessary for the use or protection of our legal or contractual rights as GGCHEM Kimya ve Tekstil San. Tic. Ltd. Sti.,
• Being necessary for our legitimate interests to process your Personal Data, provided that it does not harm your fundamental rights and freedoms.

As GGCHEM Kimya ve Tekstil San. Tic. Ltd. Sti., we keep all the Personal Data we process in accordance with the periods required by the KVKK and other legislation and, in any case, by taking all necessary administrative and technical measures, as long as the legitimate purposes above do not disappear.

c. For What Purpose Do We Process Your Personal Data?

We process the Personal Data we collect for the following general purposes, depending on its nature:

1. Fulfilling the requirements of the contracts concluded by GGCHEM Kimya ve Tekstil San. Tic. Ltd. Sti., providing, manufacturing, selling, delivering, and installing the offered products and services, developing products and services, and conducting the necessary studies and evaluations to benefit you from them, performing after-sales maintenance and repair procedures.
2. Following up and fulfilling obligations arising from consumer legislation and responding to consumer applications.
3. Following up, evaluating requests and complaints of relevant persons such as customers and consumers, and providing support services, managing customer satisfaction, and implementing planning, statistics, and satisfaction surveys in this context.
4. Conducting quality assessment and improvement studies to provide better and more reliable products and services and ensure sustainability, auditing suppliers, subcontractors, and similar business partners.
5. Conducting advertising and marketing activities for the products and services offered by GGCHEM Kimya ve Tekstil San. Tic. Ltd. Sti. to inform about promotion, campaign, offer, event, and similar topics and new products and services, and conducting corporate communication activities.
6. Conducting marketing and CRM (Customer Relationship Management) activities.
7. Organizing corporate communication and other events and invitations in this context and providing information about them, conducting market research studies.
8. Extracting statistics such as the number, type, frequency of visit, behavior, geographical location of users to improve the digital platforms we offer to our customers, consumers, and business contacts and to provide an efficient and personalized experience to platform users, offering personalized content, campaigns, and advertisements according to the interests and needs of platform (internet and mobile site and applications) users, using cookies for this purpose.
9. Ensuring the legal and commercial security of persons who are in a business relationship with GGCHEM Kimya ve Tekstil San. Tic. Ltd. Sti. (planning administrative operations for communication carried out by our Company, ensuring the physical security and supervision of the Company's locations, business partner/customer/supplier (authorized persons or employees) evaluation and audit processes, legal compliance process, etc.).
10. Using legal rights, using information regarding transaction history as evidence in case of a dispute after the termination of the legal relationship.
11. Determining and implementing the commercial, legal, and business strategies of GGCHEM Kimya ve Tekstil San. Tic. Ltd. Sti.
12. Implementing the human resources, accounting/finance policies of GGCHEM Kimya ve Tekstil San. Tic. Ltd. Sti.
13. Planning, auditing, and executing information security processes.
14. Compliance with domestic and international legislation, providing information requested by public institutions and organizations, fulfilling reporting obligations.

d. Transfer of Personal Data and Processing of Personal Data by Third Parties

The Company may transfer personal data to a third natural or legal person in accordance with KVKK regulations. In this case, the Company ensures that the third parties to whom it transfers also comply with this Policy. In this context, the necessary protective provisions are added to the contracts concluded with the third party.

• Transfer of personal data to third parties in Turkey: Personal Data may be transferred by the Company to third parties in Turkey without seeking explicit consent in the exceptional cases specified in KVKK article 5.2 and article 6.3, or by obtaining the explicit consent of the Data Subject in other cases (KVKK article 5.1 and article 6.2).
• Transfer of personal data to third parties abroad: Personal Data may be transferred by the Company to third parties abroad without seeking explicit consent in the exceptional cases specified in KVKK article 5.2 and article 6.3, or by obtaining the explicit consent of the Data Subject in other cases (KVKK article 5.1 and article 6.2). However, the existence of one of the following conditions is required for the foreign country to which the transfer will be made:
• The foreign country to which the personal data is transferred is in the status of countries with adequate protection determined by the Board.
• If the foreign country to which the transfer will take place is not on the Board's list of safe countries, provided that the Company and the Data Controllers in the relevant country provide a written commitment that adequate protection will be provided and obtain permission from the Board.

e. Your Rights and Application Procedure

e.1. Your Rights Regarding Your Personal Data

We would like to state that you have the following rights regarding your data processed within GGCHEM Kimya ve Tekstil San. Tic. Ltd. Sti. and its affiliates:

1. Learning whether your Personal Data is processed,
2. Requesting information if your Personal Data has been processed,
3. Learning the purpose of processing your Personal Data and whether your personal data is used in accordance with the purpose,
4. Learning the third parties to whom the data is transferred, if any, domestically or abroad, and which data is transferred,
5. Requesting the correction of your processed Personal Data if it is incomplete or incorrectly processed,
6. Requesting that the operations of correction, deletion, or destruction of Personal Data be notified to third parties to whom your Personal Data has been transferred,
7. Requesting the deletion or destruction of your processed Personal Data if the reasons requiring the processing of your Personal Data disappear or your Personal Data loses its currency,
8. Objecting to the emergence of a result against you by analyzing your processed Personal Data exclusively through automated systems,
9. Demanding the compensation of the damage if you suffer damage due to the unlawful processing of your Personal Data.

e.2. Application

You can submit your requests regarding your Personal Data by filling out the application form linked below:

1. By delivering it to the consultancy office at our company address located in the Data Controller Identity Information section or by sending a notice via Notary to the same address,
2. It can be done via registered electronic mail.

GGCHEM Kimya ve Tekstil San. Tic. Ltd. Sti. will finalize the requests directed to it free of charge as soon as possible and within 30 (thirty) days at the latest, depending on the nature of the request. If a cost arises due to the fulfillment of your requests, we may only request the fees determined in the tariff determined by the Personal Data Protection Board.

As a result of the requests directed to GGCHEM Kimya ve Tekstil San. Tic. Ltd. Sti., we may accept the requests or reject them by explaining the reason and may transmit this answer in writing or electronically to the person making the request. If the request is accepted, we, as GGCHEM Kimya ve Tekstil San. Tic. Ltd. Sti., are obliged to fulfill the requirement of the request immediately.

e.3. Complaint

If your requests directed to GGCHEM Kimya ve Tekstil San. Tic. Ltd. Sti. are rejected by GGCHEM Kimya ve Tekstil San. Tic. Ltd. Sti., if you are not satisfied with the answer given by GGCHEM Kimya ve Tekstil San. Tic. Ltd. Sti., or if no answer is given, you can file a complaint with the Personal Data Protection Board within 30 (thirty) days from the date the answer is notified to you, and within 30 days from the end of the 30-day period if no answer is given.

f. Data Controller Identity Information

The expression GGCHEM Kimya ve Tekstil San. Tic. Ltd. Sti. used in this text has been prepared for the affiliate of GGCHEM Kimya ve Tekstil San. Tic. Ltd. Sti. established in Turkey, the information of which is given below, and is addressed to the relevant persons whose data the company specified below is the data controller:

GGCHEM Kimya ve Tekstil San. Tic. Ltd. Sti.

E-Mail: info@ggchemical.net

Application Form within the Scope of KVKK

Personal data owners, who are defined as the data subject in the Law on the Protection of Personal Data No. 6698 ("KVK Law") ("hereinafter referred to as the "Applicant"), are granted the right to make certain requests regarding the processing of their personal data in Article 11 of the KVK Law. Pursuant to the first paragraph of Article 13 of the KVK Law, applications regarding these rights to our Company, which is the data controller, must be submitted to us personally, in writing in Turkish, and through the methods determined by the Personal Data Protection Board ("Board") below.

Below is information on how written applications should be delivered to us.

In accordance with the Communiqué on the Procedures and Principles for Application to the Data Controller (Official Gazette dated 10/03/2018 and numbered 30356), the following information is mandatory in applications:

Information to be Filled in During Application:

• Name, surname, and signature if the application is written,
• T.C. identity number for citizens of the Republic of Turkey, nationality, passport number, or identity number if any, for foreigners,
• Residential address or business address based on notification,
• Electronic mail address, telephone, and fax number for notification, if any,
• Subject of the request

In addition, information and documents related to the subject are attached to the application.

If you wish to make an application regarding your personal data, the application form below must be filled out completely. This application form has been prepared to determine your relationship with our Company, to fully determine your personal data processed by our Company, if any, and to provide an accurate and legal response to your relevant application within the legal period. Our Company reserves the right to request additional documents and information (copy of identity card or driver's license, etc.) for identity and authorization determination in order to eliminate legal risks that may arise from unlawful and unfair data sharing and especially to ensure the security of your personal data. Our Company does not accept responsibility for requests arising from such wrong information or unauthorized application if the information regarding your requests submitted within the scope of the form is inaccurate or not up-to-date, or if an unauthorized application is made.

Your applications submitted to us will be answered in writing free of charge within thirty days at the latest from the date your request reaches us, depending on the nature of the request, in accordance with paragraph 2 of Article 13 of the KVK Law.