Law on the Protection of Personal Data

EP-CO Electronic Parts and Component Manufacturing San. and tic. A.Sh. as a company, we attach great importance to the privacy and security of your personal data.

In this context, EP-CO Electronic Parts and Component Manufacturing San, including our customers and business contacts who benefit from our products and services. and tic. A.Sh. one of our priorities is to process and store all kinds of personal data belonging to all related persons in accordance with the Law on the Protection of Personal Data numbered 6698 (“KVKK”). We would like to inform you about the purposes of processing your personal data, the methods and reasons for collecting your data, your rights to the processing of your personal data, and the application procedures and principles that are the method of exercising these rights, with the title of "Data Controller" that we carry in accordance with the KVKK and the awareness of this responsibility, as follows.

a. What is Personal Data? Which Personal Data do we collect?

Personal data, personal information belonging to your identity (name, surname, Turkish identity number, etc.), especially address and telephone information, vehicle and license plate information, family status information, IP address, bank account information, as well as any information related to you (“Personal Data”) and Special Personal Data, which is a special type of Personal Data, race, ethnicity, political thought, philosophical belief, religion, sect or other beliefs, disguise and clothing, association, foundation or trade union membership, health, sexual life, it refers to sensitive qualified personal data such as your data related to criminal convictions and security measures, as well as your biometric and genetic data (“Special Qualified Personal Data”). The explanations we have made for your Personal Data on this page also cover your Personal Data of a Special Nature.

In this context, EP-CO Electronic Parts and Component Manufacturing San. and tic. A.Sh. as required, we collect Personal Data belonging to our customers, business contacts, employees, employee candidates, platform (internet / mobile sites and applications) users, visitors, subcontractors and similar authorized and employees of the institution with which we have business relations in accordance with the KVKK, if necessary. We may detail the Personal Data we collect as follows:

Identity Data: Name, surname, T that we collect from our customers, business contacts, employees, employee candidates, platform (internet / mobile sites and applications) users, visitors, subcontractors and similar authorized and employees of the institution with which we have business relations.C. an ID number is data about a person's identity, such as a photocopy of an ID card.< / li>
Contact Data: These are the data that we collect from our customers, business contacts, employees, employee candidates, platform (internet /mobile sites and applications) users, visitors, and subcontractors and similar authorized and employees of the institution with which we have a business relationship, such as phone number, address, e-mail address, IP address, which allows us to communicate with a person.< / li>
Data belonging to Family Members: These are data about the family members and relatives of the relevant person that we collect from our employees, employee candidates, subcontractors and similar authorized and employees of the institution with which we have a business relationship in accordance with the relevant legislation and/or in order to protect the legal and other interests of our Company or the relevant person.< / li>
Financial Data: These are data such as wages, salary information, bank account information that we collect from our employees, employee candidates, customers, business contacts, subcontractors and similar authorized and employees of the institution with which we have a business relationship according to the legal relationship that our company has established with the data subject related person.< / li>
Personal Data: It is all kinds of personal data that we collect from our employees, employee candidates, subcontractors and similar employees of the institution with which we have a business relationship, which is the basis for the formation of the personal rights of real people who are in a working relationship with our Company.< / li>
Physical Space Security Data: These are personal data such as security and camera recordings obtained from our customers, business contacts, employees, employee candidates, visitors and subcontractors and similar officials and employees of the institution with which we have a business relationship, at the entrance to the physical space and during the stay in the space.< / li>
Communication and Complaint Management Data: These are the personal data obtained from our customers, business connections, platform (internet / mobile sites and applications) users, visitors, subcontractors and similar officials and employees of the institution with which we have business relations during the processes of receiving and evaluating all kinds of requests or complaints against our company.< / li>
Special Personal Data: 6 of the KVKK, which we collect from our customers, business contacts, employees, employee candidates, visitors, subcontractors and similar authorized and employees of the institution with which we have business relations. the health data specified in the article are data such as biometric data (audio and video recordings), religion and information about the association, trade union of which one is a member.< / li>
Other Data: The data we collect from our customers, business contacts, employees, employee candidates, platform (internet / mobile sites and applications) users and subcontractors and similar institution officials and employees are processed for technical transaction security, purchase information, cookies and other data collected automatically by other means.< / li>

b. By What Methods and for Legal Reasons Do We Collect / Process Your Personal Data?

We collect your Personal Data for the following main purposes and methods and by automatic or non-automatic means, audio, oral, written or electronic means through other channels that may be added to them in the future.

We share your Personal Data on our internet and mobile platforms (internet /mobile sites and applications), various social media channels with EP-CO Electronic Parts and Component Manufacturing San. and tic. A.Sh. . through our social media accounts operated on behalf of EP-CO Electronic Parts and Component Manufacturing San. and tic. A.Sh. through our call center managed by EP-CO Electronic Parts and Component Manufacturing San., through other communication methods, including e-mail, text messages (“SMS”) or multi-media messages (“MMS”). and tic. A.Sh. EP-CO Electronic Parts and Component Manufacturing San. through the Contracts we have signed with you personally or with your company, commercial offers submitted, printed and electronic forms, business cards and other documents provided by you as part of our customer visits, within the scope of sales and marketing activities. and tic. A.Sh. we collect group companies through various methods that are fully or partially automated or not automated as part of any data recording system, whether through third parties such as business contacts, dealers and sales channels, manufacturer companies or companies that supply services/products, and through various channels including sources such as the Trade registry, in oral, written or electronic form.

We process your Personal Data, which we collect in accordance with the above methods, based on one or more of the following legal reasons:

Having your explicit consent,
Allowing the operation of the provisions of the laws and regulations in force in the Republic of Turkey,
It is mandatory for the protection of the life or body integrity of your person or someone else when you are unable to disclose your consent due to actual impossibility,
It is necessary for the performance of the contract we have concluded with your party or company,
It is necessary to process your Personal Data in order to fulfill our legal obligations,
The fact that your Personal Data has been made public by you,
EP-CO Electronic Parts and Component Manufacturing Co., Ltd. and tic. A.Sh. . as necessary for the exercise or protection of our legal or contractual rights,
The processing of your Personal Data is necessary for our legitimate interests, provided that it does not harm your fundamental rights and freedoms.< / li>

EP-CO Electronic Parts and Component Manufacturing San. and tic. A.Sh. as a Personal Data protection company, we keep all the Personal Data we process in accordance with the periods mandated by the KVKK and other legislation and in any case by taking all necessary administrative and technical measures as long as the above legitimate purposes do not disappear.

c. For What Purpose do we process Your Personal Data?

We process your Personal Data that we collect for the following general purposes according to its nature:

EP-CO Electronic Parts and Component Manufacturing Co., Ltd. and tic. A.Sh. fulfilling the requirements of the contracts concluded by Jul, supplying, manufacturing, sales, delivery and installation of the products and services offered, developing the products and services and carrying out the necessary studies and evaluations to benefit you from them, performing after-sales maintenance and repair operations
Tracking and fulfilling the obligations arising from the consumer legislation and answering consumer applications
Monitoring, evaluation and provision of support services for requests and complaints of related persons such as customers and consumers, consumer satisfaction management and implementation of planning, statistics and satisfaction surveys in this context
Conducting quality assessment and improvement studies in order to provide better and reliable products and services and ensure sustainability, auditing of suppliers, subcontractors and similar people with whom we have business relations
EP-CO Electronic Parts and Component Manufacturing Co., Ltd. and tic. A.Sh. conducting advertising and marketing activities for products and services offered by it, providing information on promotion, promotion, campaigns, offers, events and similar issues, as well as new products and services, conducting corporate communication activities
Execution of Marketing and CRM (Customer Relationship Management) studies
Corporate communication and organizing other events and invitations in this context and providing information about them, conducting Sunday research studies
Improving the digital platforms that we offer for the use of our customer, consumer and business connections and extracting statistics on the number, type, frequency of visits, behaviors, geographical locations and similar statistics for the purpose of providing an efficient and personalized experience to platform users, presenting personalized content, campaigns and advertisements according to the interests and needs of platform users (Internet and mobile sites and applications), using cookies for this purpose
EP-CO Electronic Parts and Component Manufacturing Co., Ltd. and tic. A.Sh. . ensuring the legal and commercial security of the persons who are in a business relationship with Jul (Planning administrative operations for communication carried out by our company, ensuring the physical security and supervision of Company locations, business partner / customer / supplier (authorized or employees) evaluation and audit processes, such as the legal compliance process.)
Exercise of legal rights, use of information about the transaction history as evidence in case of dispute after the termination of the legal relationship
EP-CO Electronic Parts and Component Manufacturing Co., Ltd. and tic. A.Sh. determination and implementation of commercial, legal and business strategies
EP-CO Electronic Parts and Component Manufacturing Co., Ltd. and tic. A.Sh. execution of human resources, accounting/finance policies
Planning, supervision and execution of information security processes
Compliance with domestic and international legislation, provision of information requested by public institutions and organizations, fulfillment of reporting obligations Jul.< / li>

d. Transfer of Personal Data And Processing of Personal Data by Third Parties

The Company may transfer personal data to a third natural or legal person in accordance with the KVKK regulations. In this case, the Company ensures that the third parties it transfers also comply with this Policy. In this context, the necessary protective regulations are added to the contracts concluded with the third party.

Transfer of personal data to third parties located in Turkey; Personal Data may be transferred by the Company to third parties located in Turkey without seeking explicit consent in the exceptional cases specified in Article 5.2 and article 6.3 of the KVKK, or in other cases with the explicit consent of the Relevant Person (article 5.1 and article 6.2 of the KVKK).< / li>
Transfer of personal data to third parties located abroad; Personal Data may be transferred by the Company to third parties located abroad without seeking explicit consent in the exceptional cases specified in Article 5.2 and article 6.3 of the KVKK, or in other cases with the explicit consent of the Relevant Person (article 5.1 and article 6.2 of the KVKK). However, the existence of one of the following conditions is required for the foreign country to be transferred.< / li>
The fact that the foreign country to which the personal data is transferred has the status of countries where adequate protection is provided by the Board
If the foreign country where the transfer will take place is not included in the Board's list of safe countries, the Company and the Data Controllers in the relevant country will provide adequate protection by making a written commitment and obtaining permission from the Board

e. Your Rights and Application Procedure

e.1. Your Rights regarding Your Personal Data

EP-CO Electronic Parts and Component Manufacturing San. and tic. A.Sh. . and we would like to point out that you have the following rights regarding your data being processed within the structure of its subsidiaries:

To learn whether your Personal Data has been processed,
If your Personal Data are being processed, to obtain information about them
To find out what the purpose of processing your Personal Data is and whether your personal data is used in accordance with its purpose,
To find out who the third parties are to whom the data are transferred at home or abroad, if any, and which data are transferred,
Requesting correction of the processed Personal Data if it is incomplete or incorrect,
In case of correction, deletion or destruction of your personal data, requesting that these transactions be notified to the third parties to whom your Personal Data has been transferred,
In case the reasons requiring the processing of your Personal Data disappear or your Personal Data loses its timeliness, requesting the deletion or destruction of your processed Personal Data,
Do not object to the occurrence of a result against you by analyzing your processed Personal Data exclusively through automated systems,
If you suffer damage due to the unlawful processing of your Personal Data, you have the right to request compensation for the damage.< / li>

e.2. Application

Your requests for your Personal Data by filling out the application form provided below:

By being delivered to the consulting office at our company address located in the field of Data Controller Credentials or by being notified to the same address through a Notary,
Can be done via registered electronic mail.< / li>

EP-CO Electronic Parts and Component Manufacturing San. and tic. A.Sh. he will finalize the requests submitted to him free of charge as soon as possible and no later than 30 (thirty) days, depending on the nature of the request. If a cost arises due to the fulfillment of your requests, we can only charge you the fees in the tariff determined by the Personal Data Protection Board.

EP-CO Electronic Parts and Component Manufacturing San. and tic. A.Sh. as a result of the requests submitted, we may accept the requests or reject them by explaining the reason and we may forward this response in writing or electronically to the person making the request. If the request is accepted, EP-CO Electronic Parts and Component Manufacturing San. and tic. A.Sh. we are obliged to fulfill the requirement of the request immediately.

e.3. Complaint

EP-CO Electronic Parts and Component Manufacturing San. and tic. A.Sh. the requests you have directed to EP-CO Electronic Parts and Component Manufacturing San. and tic. A.Sh. rejected by EP-CO Electronic Parts and Component Manufacturing San. and tic. A.Sh. if you are not satisfied with the answer given by you or if there is no answer, you can file a complaint with the Personal Data Protection Board within 30 days from the date of notification of the answer to you and within 30 days from the end of the 30 (thirty) day period if there is no answer.

f. Data Controller Credentials

EP-CO Electronic Parts and Component Manufacturing Industry used in this text. and tic. A.Sh. EP-CO Electronic Parts and Component Manufacturing San, whose statement is based in Turkey and whose information is given below. and tic. A.Sh. it has been arranged for its subsidiary and is addressed to the relevant persons of the data for which the following company is the data controller:

EP-CO Electronic Parts and Component Manufacturing San. and tic. A.Sh.

Address: Ikitelli Organized Industrial Zone Environmental Industrial Site 7. Block No.: 11 Başakşehir/Istanbul

Phone: +90 212 486 11 49

Phone: +90 532 244 81 23

E-Mail: arge@epcoelektronik.com

E-Mail: epco@epcoelektronik.com

Application Form Within the Scope of KVKK

The right to make certain requests regarding the processing of personal data has been granted to the personal data owners (hereinafter referred to as the “Applicant”) defined as the relevant person in the Personal Data Protection Law No. 6698 (the “KVK Law“) in Article 11 of the KVK Law. In accordance with the first paragraph of Article 13 of the KVK Law; applications to be made to our Company, which is the data controller, regarding these rights must be submitted to us personally, in writing in Turkish and by the following methods determined by the Personal Data Protection Board (“Board”).

Below is the information about how the written applications will be delivered to us.

Communiqué on the Application Procedures and Principles to the Data Controller (R dated 10/03/2018 and numbered 30356.G.) in accordance with this, it is mandatory to have the following information in the applications.

Information to be Filled in During the Application:

If the name, surname and application are written, the signature,
T for citizens of the Republic of Turkey .C. identification number, nationality for foreigners, passport number or identification number, if any,
The address of the place of residence or workplace based on the notification,
If any, the electronic mail address, telephone and fax number based on the notification,
Subject of request

In addition, information and documents related to the subject are added to the application.

If you want to make an application regarding your personal data, the following application form must be completed without any deficiencies.This application form has been prepared in order to determine your relationship with our Company, to determine your personal data processed by our Company in full, if any, so that your relevant application can be answered correctly and within the legal time limit. In order to eliminate the legal risks that may arise from illegally and unjustly sharing data and especially to ensure the security of your personal data, our Company provides additional documents and information (copy of identity card or driver's license, etc.) for identification and authorization determination. Oct.) reserves the right to request. If the information about your requests that you are submitting within the scope of the Form is not accurate and up-to-date, or if an unauthorized application is made, our Company does not accept liability for such incorrect information or unauthorized application-based requests.

Your applications submitted to us will be answered free of charge in writing no later than thirty days from the date your request reaches us, according to the nature of the request, in accordance with paragraph 2 of Article 13 of the Law on Personal Data protection, depending on the nature of the request.