INFORMATION TEXT WITHIN THE SCOPE OF THE PERSONAL DATA PROTECTION LAW NO. 6698

Law No. 6698 on the Protection of Personal Data (hereinafter referred to as the “Law”) was published and entered into force on April 7, 2016, imposing certain obligations on Data Controllers. Within the scope of this law, our Company, HAS ETİKET TİC ve SAN A.Ş. (hereinafter referred to as the “Company”), holds the title of “Data Controller” and meticulously fulfills the obligations entailed by this title. It attaches great importance to the confidentiality of personal data and adopts this as a working principle. The Company is extremely sensitive to the security of personal data; with this awareness, it attaches great importance to the processing and preservation of relevant personal data of all individuals affiliated with the Company in accordance with the Law.

This disclosure text is in accordance with Article 10 of the Law. It has been prepared by the company acting as the data controller in accordance with the Communiqué on the Procedures and Principles to be Followed in Fulfilling the Information Obligation, in order to inform you about the matters specified below and to fulfill the information obligation.

PERSONAL DATA COLLECTED AND COLLECTION METHOD

As Has Etiket Ticaret ve San. A.Ş., acting as the Data Controller, your personal data in the categories of identification information, contact information, customer information, customer transaction information, transaction security information, legal transaction and compliance information, and marketing and sales information are collected verbally, in writing, or electronically, through automatic or non-automatic methods, from the COMPANY Head Office, applications made through contracted websites, other institutions from which we provide/receive support services, and from real and/or legal persons with whom transactions are carried out under any legislation or contract, our website, mobile application, call centers, and social media accounts.

PROCESSING PURPOSES

Your personal data collected by our Company is processed for the purposes of ensuring that our business units carry out the necessary work to enable you to benefit from the products and services offered by our Company, to fulfill our obligations and responsibilities regarding all products and services offered by our Company, to provide the best service and product that we aim to provide, to ensure the legal and commercial security of our Company and those who have a business relationship with our Company, to carry out all activities related to the activities carried out by our Company in accordance with the legislation, to carry out business activities, to store the information requested by public institutions to which we are obliged to provide information, to provide, receive and report information to Authorized Persons, Institutions and Organizations within the scope of our activities in accordance with the legislation and to meet the information and document requests of these institutions, to carry out marketing activities, to carry out Information Security Processes, to follow up and carry out legal affairs, to carry out communication activities, to carry out goods/services production, purchase and sale and operation processes, to carry out advertising/campaign processes, to carry out storage and archive activities, to carry out contract processes, and to ensure the security of data controller operations.

LEGAL REASON FOR PROCESSING PERSONAL DATA

Your personal data that is not included within the scope of special personal data is subject to Article 5 of the Law. The legal grounds specified in the article are “it is clearly prescribed by law”, “it is necessary to process personal data of the parties to the contract, provided that it is directly related to the establishment or execution of a contract”, “it is necessary for the data controller to fulfil its legal obligation”, “data processing is necessary for the establishment, exercise or protection of a right”, “data processing is necessary for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the relevant person”; in cases where these legal grounds cannot be based on, Article 5 of the Law shall apply. Data is processed based on the legal ground of “explicit consent of the relevant person” specified in the article.

TRANSFER OF PROCESSED PERSONAL DATA AND PURPOSE OF TRANSFER

Your collected personal data may be shared with the COMPANY’s business partners, suppliers, shareholders, real or legal persons from whom it receives services and cooperates in the realization of the above-mentioned purposes, limited to the purpose of achieving the above-mentioned purposes, for the purpose of carrying out and improving the activities, /service comparison, analysis, evaluation, advertising and the above-mentioned purposes, legally authorized public institutions and organizations, administrative authorities and legal authorities and persons or organizations permitted by the legislation, in accordance with Article 8 of the Law. Personal data may be transferred within the framework of the processing conditions and purposes specified in the article.

RIGHTS OF THE PERSON WHOSE PERSONAL DATA IS PROCESSED

In accordance with the provisions of the Personal Data Protection Law, you have the right to learn whether or not your personal data is being processed, to request information about your personal data if it has been processed, to learn the purpose of processing your personal data and whether it is being used in accordance with its purpose, to know the third parties to whom your personal data is transferred, whether domestically or internationally, to request correction of incomplete or inaccurate personal data, to request deletion or destruction of your personal data, to request notification of the correction, deletion or destruction of your personal data to third parties to whom your personal data is transferred, to object to any detrimental results arising from the analysis of processed data exclusively through automated systems, and to request compensation for damages in the event of damages arising from the unlawful processing of your personal data. When exercising these rights, it is mandatory to include your name, surname, and signature if the application is in writing; your Turkish Republic ID number for citizens of the Republic of Turkey; your nationality, passport number or ID number if you are a foreigner; your residence or workplace address for notification; your email address, telephone and fax numbers for notification, and the subject of your request; and any relevant information and documents must also be attached to the application. Your requests submitted within this scope will be finalized within 30 days. If you would like to contact our company, provide feedback or ask questions regarding your applications within the scope of KVKK, please submit your requests in writing. You can send it to Bağlar mah.49.sok.no:50 Bağcılar/Güneşli, you can send it through a notary, or you can send it with a secure electronic signature to our website www.hasetiket.com.tr.

Respectfully presented for your information.