Personal Data Protection Notice

Definitions

The terms used in this information notice are defined below:

Personal Data

Any information relating to an identified or identifiable natural person.

Personal Data Protection Law (“PDP Law”)

Law No. 6698 on the Protection of Personal Data, published in the Official Gazette and entered into force on 7 April 2016.

APV HEMİSAN

The company located at 7501 Sokak Yunus Emre Mahallesi No:1, 35060 Pınarbaşı Bornova/İzmir, Türkiye.

Data Processor

The natural or legal person who processes personal data on behalf of the data controller upon its authorisation.

Data Controller

The natural or legal person who determines the purposes and means of processing personal data and is responsible for establishing and managing the data filing system.

Data Controller and Representative

Pursuant to Personal Data Protection Law No. 6698 (“Law No. 6698”), the personal data you share in your capacity as a customer, employee, intern, supplier or visitor may be processed within the scope set out below by Hemisan Gıda Ve Makina Demir Çelik San. Tic. A.Ş., established at “7501 Sokak Yunus Emre Mahallesi No:1, 35060 Pınarbaşı Bornova, İZMİR”, acting as data controller.

Purposes of Processing Personal Data

Your collected personal data will be processed in order for our business units to carry out the work necessary to enable you to benefit from the services offered by our Company; to recommend those services to you by tailoring them to your preferences, usage habits and needs; to ensure the conduct of our Company’s human resources policies; to ensure the legal and commercial security of our Company and of those in a business relationship with it; and to determine and implement our Company’s commercial and business strategies. Such processing takes place within the framework of our commercial activities, within the personal data processing conditions and purposes set out in Articles 5 and 6 of Law No. 6698, in compliance with the law and the rules of good faith, accurately and where necessary kept up to date, for specified, explicit and legitimate purposes, in a manner connected with, limited to and proportionate to those purposes, and retained for the period stipulated in the relevant legislation or required for the purpose of processing.

Among the purposes for which APV HEMİSAN processes personal data in the course of its activities are customer visits; the installation of a new production plant or the revision of an existing plant; plant automation system software and commissioning or revision; electrical installation; equipment installation and assembly; organising training; carrying out plant breakdown and planned maintenance work; establishing and conducting communication relating to these activities; the provision of products and services together with after-sales support; the conduct of customer relations processes; the management of communication channels; the assessment of your requests and complaints; the conduct of authorised service processes; increasing customer satisfaction; measuring and improving brand perception; and the performance by our relevant business units of the work necessary to carry out the commercial activities conducted by our Company, together with the related business processes.

To Whom and For What Purpose Processed Personal Data May Be Transferred

Your collected personal data may be transferred — in order for our business units to carry out the work necessary to enable you to benefit from the services offered by our Company; to recommend those services to you by tailoring them to your preferences; to ensure the conduct of our Company’s human resources policies; to ensure the legal and commercial security of our Company and of those in a business relationship with it; and to determine and implement our Company’s commercial and business strategies — to third-party data processors assisting us, financial institutions, other third-party service providers in Türkiye and abroad, our business partners, shareholders and affiliates, and to legally authorised public institutions and private persons, within the framework of our commercial activities and within the personal data processing conditions and purposes set out in Articles 8 and 9 of Law No. 6698.

Method and Legal Grounds of Collecting Personal Data

Your personal data is collected by our Company through technical and procedural methods applied across different channels such as the website, mobile applications and physical channels; by automated or non-automated means; in written or electronic form; and within the framework of the legal grounds arising from and applied under the relevant legislation, contracts, requests, commercial custom and the rules of good faith that apply when we use these channels to provide you with our commercial services and to conduct our commercial activities accordingly.

Your personal data may be collected by APV HEMİSAN through channels such as Job Application Forms, Customer Contact details, Production Forms, Plant Commissioning Forms and the Automation Software Form. Personal data collected on this legal basis may be processed and transferred for the purposes set out in the sections “Purposes of Processing Personal Data” and “To Whom and For What Purpose Processed Personal Data May Be Transferred” of this Information Notice, within the personal data processing conditions and purposes set out in Articles 5 and 6 of Law No. 6698.

Rights of the Data Subject Listed in Article 11 of Law No. 6698

If you, as a data subject, submit requests concerning your rights, our Company will conclude the request as soon as possible and within thirty days at the latest, depending on the nature of the request. However, should the process require an additional cost, our Company will charge the fee set out in the tariff determined by the Personal Data Protection Board. In this context, data subjects have the right to request from our Company:

• to learn whether personal data is processed;
• to request information if personal data has been processed;
• to learn the purpose of processing personal data and whether the data is used in accordance with that purpose;
• to know the third parties in Türkiye or abroad to whom personal data is transferred;
• to request the correction of personal data that is incomplete or incorrectly processed, and to request that the action taken be notified to the third parties to whom the personal data has been transferred;
• to request the erasure or destruction of personal data where the reasons requiring its processing have ceased to exist, even though it has been processed in accordance with Law No. 6698 and other applicable legislation, and to request that the action taken be notified to the third parties to whom the personal data has been transferred;
• to object to a result arising against the person themselves through the analysis of processed data exclusively by automated systems;
• to claim compensation for damage suffered as a result of the unlawful processing of personal data.

Pursuant to Article 13(1) of PDP Law No. 6698, you may submit your request regarding the exercise of the rights set out above to our Company in writing. To exercise those rights, you may deliver in person to “7501 Sokak Yunus Emre Mahallesi No:1, 35060 Pınarbaşı Bornova, İZMİR”, together with documents establishing your identity, a request containing the information necessary to identify you and your explanations concerning the right you wish to exercise under Article 11 of PDP Law No. 6698, using the application form available from our head office; or you may send it by notary or by the other methods set out in Law No. 6698.

In addition, pursuant to Article 5 of the “Communiqué on the Procedures and Principles of Application to the Data Controller”, you may send your request to hemisan@apvhemisan.com using a registered electronic mail (KEP) address, a secure electronic signature, a mobile signature, or the electronic mail address you have previously notified to our Company and which is registered in our systems.