GLOBAL COMPUTER CONTROL SYSTEMS INDUSTRY AND TRADE LIMITED COMPANY - THE CLARIFICATION TEXT REGARDING APPLICATION PROCESSES TO THE DATA CONTROLLER

1.    IDENTITY OF THE DATA CONTROLLER

In accordance with the Law No. 6698 on the Protection of Personal Data (“Law”, “KVKK”), we prioritize the security of personal data. As the data controller, GLOBAL COMPUTER CONTROL SYSTEMS INDUSTRY AND TRADE LIMITED COMPANY (“Company”), we demonstrate necessary sensitivity regarding the lawful processing of any personal data of relevant persons who apply to our Company in their capacity as data subjects.

This The Clarıfıcatıon Text Regarding Application Processes to the Data Controller ("Clarification Text") aims to explain the personal data processing activities related to data subject applications made to the Company, fulfill the disclosure obligation, and ensure transparency.

Mersis No: 0396005047500010

Website: https://www.gbks.com.tr

Phone Number: +90 (212) 635 96 81

E-mail Address: kvkkglobal@gbks.com

Address: Vatan Cd. İskender Saray Apt No: 31/5 Fatih / Istanbul

2.    PRINCIPLES APPLIED IN THE PROCESSING OF PERSONAL DATA

The processing of personal data complies with the principles set forth in Article 4 of the Law: processing in accordance with the law and fairness, accuracy and updating when necessary, processing for specific, explicit, and legitimate purposes, being relevant, limited, and proportionate to the purposes for which they are processed, and retention for the period stipulated by the relevant legislation or necessary for the purpose of processing.

3.    PURPOSES OF PROCESSING PERSONAL DATA

Your personal data listed in section 3 are processed within the scope of the personal data processing conditions set forth in the KVKK and for the following purposes:

·      Examination, evaluation, and response to applications made by relevant persons to the Company,

·      Follow-up of the evaluation, response, and finalization of relevant persons’ applications,

·      Ensuring that activities are conducted in compliance with legislation,

·      Fulfillment of legal obligations,

·      Follow-up and execution of legal affairs,

·      Tracking of requests and complaints,

·      Execution of management activities,

·      Providing information to authorized persons, institutions, and organizations,

·      Carrying out retention and archiving activities.

4.    PERSONAL DATA PROCESSED AND THE LEGAL BASIS

Personal Data

Legal Basis

Transfer Status and Purpose

Identity Information (Name, Surname, Turkish ID Number, nationality for foreigners, Passport Number or other ID number if available)

KVKK Art. 5/2-ç: “Necessary for the data controller to fulfill its legal obligations.”

KVKK Art. 5/2-e:

“Processing of personal data is necessary for the establishment, exercise or protection of a right.”

To the service-providing law firm (Purpose of transfer: For the follow-up and execution of legal matters, if necessary and limited to what is required.)

To authorized public institutions and organizations (Purpose of transfer: For the follow-up and execution of legal matters, for the management of responses to relevant individual applications, and, if requested by authorized public institutions and organizations, if necessary and limited to what is required.)

To our relevant business partners (Purpose of transfer: For the evaluation and management of relevant individuals’ requests by the Company, if necessary and limited to what is required.)

Contact Information

(Phone number, e-mail address, residential or workplace address for official notifications)

Other Information

(Signature, relationship with the Data Controller, date of application, request of the data subject, preferred method of receiving the response)

5. METHODS OF PERSONAL DATA COLLECTION

Your personal data are collected fully or partially by automated or non-automated means that are part of any data recording system, from electronic and/or physical environments such as the Company’s websites, printed forms, Data Controller Application Form, call center, e-mail, Registered Electronic Mail (KEP), telephone, SMS, fax, cargo/post, online communication platforms, open internet sources, the Company’s headquarters, IT systems, integrated internal systems, and integrated systems with authorized public institutions and private organizations.

6. YOUR RIGHTS UNDER ARTICLE 11 OF THE KVKK

Relevant persons have the following rights under Article 11 of the KVKK:

• To learn whether their personal data are processed,
• To request information if their personal data are processed,
• To learn the purpose of processing and whether personal data are used in accordance with this purpose,
• To know the third parties to whom personal data is transferred domestically or abroad,
• To request correction if personal data is incomplete or inaccurate,
• To request deletion or destruction of personal data,
• To request notification of corrections, deletions, or destructions to third parties to whom personal data have been transferred,
• To object to the emergence of a result against themselves by means of exclusive analysis of processed data through automated systems,
• To demand compensation for damages arising from unlawful processing of personal data.

Relevant persons may submit their requests regarding these rights to the Company in accordance with the Communiqué on Procedures and Principles of Application to Data Controllers. Requests will be evaluated and concluded free of charge within the shortest time possible, and at the latest within thirty (30) days. If evaluation and decision-making require additional costs, the fee determined by the Personal Data Protection Board will apply.

Name – Surname:

Date:

Signature: