1-Purpose and Scope of the Clarification Text

This Clarification Text has been prepared in accordance with the importance attached to personal data by Arga İş Güvenliği ve Endüstriyel Ürünler A.Ş. (“Arga”); with the purpose of demonstrating our Company’s approach and informing the data subjects accordingly regarding the protection and processing of the personal data of our customers, potential customers, employees, employee candidates, company shareholders, company officials, visitors, employees of institutions with which we cooperate, their shareholders and officials, and third parties (briefly referred to as the “data subject”) within the scope of the Personal Data Protection Law (“KVKK”). The data included in the scope of the Clarification Text on the Processing of Personal Data relates to all personal data of the data subject processed through automated or non-automated means, provided that it is part of any data recording system. This Text, issued by our Company, is dated 01.12.2023. In the event that the text as a whole or certain articles are renewed, the effective date and version of the Text will be updated. The Text is published on our Company’s website on 01/12/2023 and is made available to the access of data subjects upon their request.

2-Principles Regarding Personal Data

2.1. Processing of Personal Data

Our Company processes your personal data in accordance with Article 20 of the Constitution and Article 4 of the KVKK,

• By pursuing specific, explicit, and legitimate purposes,
• Accurately and, where necessary, kept up to date,
• Being relevant to the purpose,
• Limited and proportionate,
• By retaining it for the period stipulated in the laws or required for the purpose of personal data processing

based on one or more of the conditions specified in Article 5 of the KVKK. In accordance with Article 20 of the Constitution and Article 10 of the KVKK, during the acquisition of the personal data in question, our Company fulfills its obligation to inform by providing notification on;

• For what purpose the personal data will be processed,
• The rights possessed by the data subject,
• The method and legal reason for collecting personal data.

thereby fulfilling its disclosure obligation.

2.2. Legal Grounds for Processing Personal Data

Personal data is processed by our Company for the purposes specified in Article 5 of the KVKK and listed below;

• It is clearly stipulated in the Laws that our Company conducts the relevant activity regarding the processing of personal data,
• The processing of personal data by our Company is directly related to and necessary for the establishment or performance of a contract,
• The processing of personal data is mandatory for our Company to fulfill its legal obligations,
• The processing of personal data by our Company is mandatory for the establishment, exercise, or protection of the rights of our Company, the data subject, or third parties,
• Provided that it does not harm the fundamental rights and freedoms of the data subject, it is mandatory to conduct personal data processing activities for the legitimate interests of our Company,
• Conducting data processing activities is mandatory for the protection of the life or physical integrity of the data subject or another person, and in this case, the data subject is unable to express their consent due to actual impossibility or legal invalidity.

2.3. Transfer of Personal Data

The existence of one of the following conditions is required for the transfer of personal data by our Company:

• Obtaining the explicit consent of the data subject,
• It is clearly stipulated in the laws,
• Provided that it is directly related to the establishment or performance of a contract, it is necessary to process the personal data of the parties to the contract,
• It is mandatory for the data controller to fulfill their legal obligation,
• It has been made public by the data subject themselves,
• Data processing is mandatory for the exercise or protection of a right,
• Provided that it does not harm the fundamental rights and freedoms of the data subject, data processing is mandatory for the legitimate interests of the data controller.

2.4. Purpose of Personal Data Collection

Our Company undertakes to ensure data security by executing actions and transactions in compliance with the Law, Regulation, and relevant legal legislation regarding the collection, storage, and destruction of personal data.

• In the collection, storage, erasure, destruction, and anonymization of personal data, actions will be taken in accordance with the principles listed in Article 4 of the Law, the technical and administrative measures to be taken within the scope of Article 12, the provisions of the relevant legislation, the Board decisions, and this Policy.
• In the event that all the processing conditions of personal data set forth in Articles 5 and 6 of the Law disappear, personal data will be erased, destroyed, or anonymized by us ex officio or upon the request of the data subject. The submitted requests will be finalized within 30 (thirty) days at the latest.

2.5. Storage and Destruction of Personal Data

Our Company stores the personal data it processes for the periods specified by the legislation, and in the absence of a specific period determined in the legislation; personal data is stored for the duration required for its processing, and after this period, solely for the purpose of constituting evidence in potential legal disputes. After the expiration of the specified periods, the data is destroyed.

3. Audit

Our Company conducts the necessary audits within its own structure in accordance with Article 12 of the KVK Law. The results of these audits are reported and improvement activities are carried out.

Title: Arga İş Güvenliği ve Endüstriyel Ürünler A.Ş.
Address: Tuna Mahallesi 5500/3 Sokak Irmak Plaza No: Çamdibi – Bornova / İZMİR
Phone Number: 0232 469 69 39 | Fax Number: 0232 457 50 57
E-mail address: [email protected]