CORPORATE

CLARIFICATION TEXT OF THE PERSON RECEIVING THE PRODUCT OR SERVICE UNDER THE 6698 NUMBERED LAW ON THE PROTECTION OF PERSONAL DATA

  1. Purpose and Scope of the Clarification Text

As BTM Bitumlu Tecrit Malzemeleri Sanayi ve Ticaret Anonim Şirketi, we take measures to protect your personal data within the scope of the 6698 numbered Personal Data Protection Law (referred to as “PDPL”). We process your Personal Data within the scope of PDPL and relevant legal legislation, and in our capacity as "data controller", for the reasons and methods described below.

BTM Bitumlu Tecrit Malzemeleri Sanayi ve Ticaret Anonim Şirketi Clarification Text on the Processing of Personal Data is issued according to the article titled “Informing Obligation of the Data Controller” in Article 10 of the PDPL in order to specify the identity of the data controller, the method of collection of your personal data and the legal reason for this data. It has been prepared for the purpose of informing you in the most transparent way about for what purpose it will be processed, to whom, the data processing period and your rights listed in Article 11 of the PDPL. The explanations for your "Personal Data" in the Clarification Text also include your "Sensitive Personal Data".

  1. Data Controller

Company Title: BTM Bitümlü Tecrit Malzemeleri Sanayi ve Ticaret Anonim Şirketi

Address: Kemalpaşa OSB Mahallesi Gazi Bulvar No: 152 Kemalpaşa/İzmir

(It will be referred to as the "Company" within the scope of this Clarification Text.)

  1. Collection Method of your Personal Data and Legal Reason

Your personal data may be collected verbally, in writing or electronically, by automatic or non-automatic methods, by our Company's affiliates, social media channels, software used to carry out activities within the Company, by means of camera shooting and similar means. Your personal data can be processed by being created and updated as long as your relationship with our Company continues within the framework of the period specified in the legislation or the processing purposes, and can be kept in both digital and physical environment.

Your personal data are processed within the scope of personal data processing conditions in line with the purposes set forth in the title of "Your Personal Data Processed and Purposes of Processing" and the provision of express consent within the scope of paragraph 1 of Article 5 of the PDPL or as specified in accordance with paragraph 2 of Article 5;

  1. a) It is clearly stipulated in the laws,
  2. b) It is mandatory for the data controller to fulfil its legal obligation,
  3. c) Data processing is mandatory for the establishment, exercise or protection of a right,
  4. d) Data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data owner,
  1. Your Processed Personal Data and Purposes of Processing

Your personal data is processed securely and in accordance with the PDPL in accordance with legal obligations or in order to provide a more accurate service in our Company's business and transactions. In this context, the data in the table is collected as personal data.

Personal Data Classification

Explanation

Identity Data

It is a data group that contains information about the identity of the person. (Ex: Name, Surname, TR Identity No, Signature, Tax Identity No etc.)

Communication Data

It is the data group that can be used to reach the person. (Ex: Telephone Number, Mail Address, Residential Address etc.)

Visual and Audio Recording Data

It is the data group that contains the visual and auditory data of the individual. (Ex: Camera Recording, Sound Recording etc.)

Finance Data

It is the data group that contains the financial data of the individual. (Ex: Bank Account No, IBAN No etc.)

Customer Transaction Data

This data category is the data group that contains the transaction data of the customer. (Ex: Call Centre Records, Check, Invoice, Promissory Notes, etc.)

Legal Transaction Data

This category of data refers to data types such as information in correspondence with judicial authorities, information in the case file. (Ex: Case Files, Enforcement Files etc.)

Physical Space Security Data

This data category refers to data types such as customer and visitor entry and exit records, camera recordings. (Ex: Image Recording, Cameras etc.)

Marketing Data

This data category is the data group that contains the marketing information of the individual. (Ex: Cookie Records, Survey Results, etc.)

Transaction Security Data

It is a data group that contains digital traces that are formed as a result of processing personal information. (Ex: Log Record, Cookies etc.)

Other

It refers to data such as Vehicle License Plate Information that is not categorized in the Data Controllers Registry

Your collected personal data will be processed in accordance with the personal data processing conditions and purposes specified in Articles 5 and 6 of the PDPL for the following purposes;

  • Necessary work can be carried out by our relevant business units so that real or legal third persons, institutions and organizations (employees, visitors, suppliers, business partners) that have a relationship with our Company can benefit from the products and services of our Company or its headquarters and units,
  • Ensuring the life and property safety and legal, commercial and occupational health safety of real and/or legal third party institutions and organizations in which the company's business is carried out or in the headquarters and units of our Company,
  • Storage of camera images, ensuring discipline, security and inspections in case you are physically present at the headquarters and units of our Company, where the Company's business is carried out,
  • Labour Law No. 4857, Turkish Code of Obligations No. 6098, Occupational Health and Safety Law No. 6331, Vocational Education Law No. 3308, Social Insurance and General Health Insurance Law No. 5510, Regulation on the Processing of Personal Health Data and Protection of Privacy, Protection of Personal Data No. 6698 Fulfilling the legal and regulatory requirements arising from the Law, Tax Procedure Law No. 213, Regulation on Archive Services and all related laws and secondary regulations, and taking necessary measures in this context,
  • Execution of inspection and/or regulation duties to be carried out by authorized and authorized public institutions and organizations and professional organizations in the nature of public institutions,
  • Fulfilment of information and document requests by judicial bodies and/or administrative authorities,
  • Execution of goods/service sales and purchasing processes,
  • Execution of customer relationship management processes,
  • Carrying out activities for customer satisfaction,
  • Planning and management of the financing of all services provided, invoicing,
  • Fulfilling the offers, promotions, exemptions, rights and obligations offered by contracted private insurance companies and other institutions within the framework of agreements,
  • Taking all necessary technical and administrative measures for the system and applications within the scope of data security,
  1. To Whom Your Processed Personal Data Can Be Transferred And For What Purpose

By ensuring that all necessary technical and administrative measures are taken to ensure the appropriate level of security in accordance with the PDPL and relevant legislation, in line with the above-mentioned purposes and within the framework of the personal data processing conditions and purposes specified in Articles 8 and 9 of the PDPL your personal data can be transferred to:

  • Persons/institutions and/or organizations permitted by other relevant legislation provisions,
  • Lawyers or attorney partnerships for the purpose of pursuing legal affairs,
  • Financial advisors for the execution of finance and accounting transactions,
  • Our direct/indirect domestic/foreign shareholders,
  • Private insurance companies, banks, funds, foundations,
  • Our subsidiaries and/or affiliates,
  • Consultants,
  • Business partners,
  • Domestic/foreign organizations that we contractually receive and/or provide services to, cooperate with, to carry out our activities.
  1. Data Processing Time and Retention Time

Your personal data will be processed in accordance with the data processing and time-out periods in all relevant laws and other legal regulations to which our Company and its headquarters and units are subject, limited to the purposes specified in this Clarification Text. In case of changes in the laws regarding data processing periods, the new determined periods will be taken as basis.

Your personal data is processed for a limited period of time that requires the fulfilment of the purposes described in this Clarification Text and in any case, in accordance with the legal terms, practices of our Company and the practices of its commercial life, as a requirement of the purpose-limitation principle. is made anonymous. If you want to get detailed information about the storage periods of your personal data, you can contact us via the addresses in the rights section of the person concerned.

  1. Rights of the related person

As the related person, you may submit your requests within the scope of Article 11 of PDPL, which regulates the rights of the person concerned, in writing to the address “Kemalpaşa OSB Mahallesi Gazi Bulvar No: 152 Kemalpaşa/İzmir” in accordance with the "Communiqué on the Procedures and Principles of Application to the Data Controller" or to KVKK@btm.co.  Provided that your e-mail address is registered in the Company's systems, by sending it electronically to the e-mail address of our Company, it will be able to use the above-mentioned rights by applying via the registered e-mail to the btm@hs03.kep.tr  kep address of our Company. More comprehensive regulations on this subject have been made in the Personal Data Application and Response Procedure of BTM Bitümlü Tecrit Malzemeleri Sanayi ve Ticaret Anonim Şirketi.