CLARIFICATION TEXT FOR THE INTERNET SITE UNDER THE LAW ON THE PROTECTION OF PERSONAL DATA WITH THE NUMBER 6698

Purpose and Scope of the Clarification Text

As Estuz Eskişehir Tuz Gıda Sanayi ve Ticaret Anonim Şirketi, we take measures to protect your personal data within the scope of the Personal Data Protection Law numbered 6698 (referred to as “KVKK” or “Law”). We process your Personal Data within the scope of KVKK and related legal legislation and in our capacity as “data controller” for the reasons and methods as stated hereinafter.

Estuz Eskişehir Tuz Gıda Sanayi ve Ticaret Anonim Şirketi Clarification Text on the Processing of Personal Data, in accordance with the article titled “Data Supervisor’s Obligation of Disclosure” in Article 10 of the KVKK; It has been prepared in order to inform you in the most transparent way about the identity of the data controller, the method of collecting your personal data and the legal reason, the purpose for which this data will be processed, to whom and for what purpose it can be transferred, the data processing period and what your rights are as specified in Article 11 of the KVKK. The explanations made for your “Personal Data” in the clarification text also include your “Personal Data with Special Qualifications”.

Data Controller

Company Title: Estuz Eskişehir Tuz Gıda Sanayi ve Ticaret Anonim Şirketi

Address: 75. Yıl Organize Sanayi Bölgesi Mah. 111 Cad. No:3 Odunpazarı/ESKİŞEHİR

(It will be referred to as “Company” or “Estuz” within the scope of this Clarification Text.)

Collection Method of Your Personal Data and the Legal Reason behind it

Your personal data may be collected verbally, in writing or electronically through the company’s affiliates, website, social media channels, call center, mobile applications and similar means, automatically or non-automatically. Your personal data can be created and updated as long as your relationship with the Company is maintained and can be processed and kept in both digital and physical environment.

In line with the purposes in the heading “Your Personal Data Processed and Purposes of Processing” and within the scope of the 1st paragraph of the 5th article of the Law numbered 6698, It can be processed and transferred within the scope of the conditions and purposes of personal data processing specified in the clauses “ç, e and f” in accordance with the clause 2 of article 5 or provision of an open consent.

Your Processed Personal Data and Processing Purposes

Your Personal Data is processed securely and in accordance with the Law on Protection of Personal Data in order to provide a more appropriate service in company business and transactions, in accordance with legal obligations.

In this context, the data in the table are collected as personal data:

Communication Data: It is the data group that can be used to reach the person (Phone, address, e-mail).

Identity Data: It is the data group that contains information about the person’s identity (name, surname, Turkish ID number, place of birth, date of birth, gender, tax number, nationality data)

Company Data: Personal company data (Company address).

Professional Experience: It is the data group that contains information about the occupation of the person (institution information, course / certification information, in-service training information, diploma information)

Transaction Security Data: This data category refers to data types such as IP address information, website login and exit information, password and password information.

Your collected personal data shall be collected for the reasons mentioned hereinafter;

• In order for real and / or legal third persons, institutions and organizations (employees, visitors, patients, suppliers, business partners, etc.) to benefit from the products and services of our company, our relevant business units can do the necessary work,
• Fulfillment of legal and regulatory requirements arising / likely to arise from all relevant laws and secondary regulations and taking necessary measures within this scope,
• Carrying out the supervision and / or regulation duties to be carried out by official and authorized public institutions and organizations and professional organizations that have the characteristics of public institutions,
• Fulfilling the information and document requests requested by the judicial bodies and / or administrative authorities,
• To conduct listing, reporting, verification analysis studies regarding the usage of the products and services offered in our company and all centers and units affiliated with the company, to produce statistical and scientific information on this matter, to improve our products and services accordingly, to increase satisfaction with our products and services and to make customizations regarding the user within this scope,
• To be able to conduct market research, promotion and necessary information regarding our products and services, to evaluate complaints and suggestions, and to contact you directly through communication channels shared with the Company,
• Carrying out risk management and quality improvement activities,
• Taking all necessary technical and administrative measures for the system and applications within the scope of data security,

And shall be processed within the scope of the personal data processing conditions and purposes specified in Articles 5 and 6 of Law No. 6698.

To Whom and For What Purpose Your Processed Personal Data Can Be Transferred

By ensuring that all necessary technical and administrative measures are taken to ensure the appropriate level of security in accordance with the KVKK and the relevant legislation, your Personal Data can be transferred to the following institutions in line with the above-mentioned purposes;

• Persons / institutions and organizations permitted by other relevant legislation provisions,
• Private insurance companies, banks,
• Our direct / indirect domestic / foreign shareholders,
• Our subsidiaries and / or affiliates,
• Consultants,
• Business partners,
• In order to carry out our activities, it can be transferred within the framework of the personal data processing conditions and purposes specified in Articles 8 and 9 of the KVK Law with domestic / foreign organizations that we contractually provide and / or cooperate with in terms of services.

Data Processing and Storage Duration

Your personal data, limited to the purposes specified in this Clarification Text, shall be processed in accordance with the data processing and limitation periods in all relevant laws and other legal regulations to which our company is subjected to. In case of changes in the laws regarding data processing times, the new terms will be taken as basis.

Your personal data are processed for a limited period of time that requires the fulfillment of the purposes described in this Clarification Text as a requirement of the principle of limitation for purpose and in any case to be processed in accordance with the practices of the Company and commercial life and after the expiration date, they are deleted, destroyed or anonymized. In this context, the storage period of process-based personal data is as follows:

Related Person’s Rights and Exercises of These Rights

As a relevant person, your requests within the scope of Article 11 of the Law regulating the rights of the person concerned, according to the “Communiqué on the Procedures and Principles of Application to the Data Officer”, relevant persons shall be able to use their rights on the condition that they would send a notification to the following address “75. Yıl Organized Sanayi Bölgesi Mah. 111 Cad. No: 3 Odunpazarı / ESKİŞEHİR” in writing or by sending a mail to “estuz@estuz.com” e-mail address in electronic environment. A more comprehensive regulation on this issue has been made in the “Personal Data Application and Response Procedure” and “Personal Data Protection and Processing Policy”.