GPDR

Şahmaksan MAKİNA CLARIFICATION TEXT WITHIN THE SCOPE OF THE LAW ON THE PROTECTION OF PERSONAL DATA NUMBERED 6698

a) Data Controller

As Şahmaksan MAKİNA (hereinafter referred to as "Company"), we inform you that we process your personal data in the capacity of data controller within the scope of the Law No. 6698 on the Protection of Personal Data (hereinafter referred to as "KVKK") and other relevant legislation.

b) Processed Personal Data

Your personal data consisting of your identity and contact information (Name-Surname, Telephone Number and e-mail address) will be processed within the scope of the purposes and legal reasons specified in this Clarification Text in accordance with the KVKK and other relevant legislation.

c) Purposes for which Personal Data will be Processed

Your personal data,

• Carrying out the necessary work by our business units in order for you to benefit from the products and services offered by our company,
• Recommending the products and services offered by our Company to you; planning and/or execution of market research activities for the sales and marketing of products and services,
• Informing our customers who benefit from our products and services about sector developments and managing these processes for the purpose of "a) Explicitly stipulated in the law "c) It is necessary to process personal data belonging to the parties to the contract, provided that it is directly related to the establishment or performance of a contract", "ç) It is mandatory for the data controller to fulfil its legal obligation", "e) Data processing is mandatory for the establishment, exercise or protection of a right".

d) To Whom and for What Purpose the Processed Personal Data can be Transferred

Your personal data processed by our Company are not transferred to any institution, real persons or private legal entities. Pursuant to Article 8 (2) (a) of the KVKK, your personal data may be shared with the relevant public institutions and organisations, if necessary or upon request, in order to fulfil legal obligations in accordance with the relevant legislation, without seeking the explicit consent of the person concerned.

e) Transfer Abroad

Your personal data processed on the basis of the legal grounds specified in Article 5 (2) of the LPPD, due to the fact that the sales and marketing activities of the Company's products and services are carried out through online software systems whose databases are abroad, in line with the conditions for transfer abroad in Article 9 (2) of the LPPD, without obtaining the explicit consent of the person concerned,

• Foreign countries declared to have adequate protection by the Personal Data Protection Board (hereinafter referred to as the "Board") ("Foreign Country with Adequate Protection")
• Provided that it is limited to the foreign country and/or countries where the data controllers in Turkey and the relevant foreign country undertake adequate protection in writing and where the Board has authorised such transfer ("Foreign Country Where the Data Controller Undertakes Adequate Protection").

The transfer of your personal data processed within the scope of the purposes described above will be carried out by our Company in accordance with the decisions taken by the Board and the relevant regulations, in particular the KVKK and other relevant legislation, by taking all necessary care and taking all necessary security measures.

f) Management and Legal Grounds for Collecting Personal Data

In order to fulfil the purposes specified in paragraph (c) of this text, your personal data are obtained by filling out the contact form, sending e-mail messages and visiting the website in electronic environment by automatic or non-automatic methods, based on the legal reasons specified in Article 5 (2) of the KVKK.

g) User's Rights under Article 11 of KVKK

Within the scope of Article 11 of the KVKK, you have rights as a data subject and you can submit your requests regarding these rights preferably by filling in all the information specified in the Application Form on our website in accordance with Article 11 and paragraph 1 of Article 13 of the KVKK and the Communiqué on the Procedures and Principles of Application to the Data Controller,

• "Tatlısu Mahallesi Arif Ay Sokak No: 40/4 MTK Plaza PK: 34774 Ümraniye / Istanbul ′′ by coming to our Company in person,
• in writing through a notary public or by registered letter with return receipt in order to determine your identity and not to provide information to the wrong persons,
• (if any) by sending an electronic mail to the address by using the electronic mail address previously notified by you to our Company and registered in our systems or by other methods to be determined by the Board in the future.

h) Retention Period of Personal Data

The Company deletes, destroys, destroys or anonymises personal data upon the disappearance of the purpose of processing personal data and the expiration of the mandatory retention periods determined within the scope of the Laws and other relevant legislation.

i) Changes and Updates

This clarification text has been prepared within the scope of the Law No. 6698 on the Protection of Personal Data and other relevant legislation. Necessary changes may be made in the said clarification text in line with the relevant legal legislation and / or changes in the Company's personal data processing purposes and policies.

DISCLOSURE TEXT ON COOKIES

This text has been prepared by the Personal Data Protection Authority (Nasuh Akar Mahallesi 1407. Sok. No:4, 06520 Çankaya/Ankara) as the data controller within the scope of Article 10 of the Law No. 6698 on the Protection of Personal Data (Law) and the Communiqué on the Procedures and Principles to be Followed in Fulfilling the Obligation to Inform. The purpose of this Cookie Clarification Text is to inform you about the purposes and types of cookies we use, the legal reason and your rights regarding the processing of personal data obtained automatically through the placement of cookies used on our website on your device. First-party session and persistent cookies are used on our website only as strictly necessary for the provision of the service.

Types of cookies according to the duration of use: Session cookies are used to ensure the continuity of the session and these cookies are deleted when the user closes the browser. Persistent cookies, on the other hand, are not deleted when the internet browser is closed and are automatically deleted on a certain date or after a certain period of time. In this context, session and persistent cookies are used on our website according to the duration of use.

First party and third party cookies: First-party cookies are placed directly by the website visited by the user, i.e. the address shown in the address bar of the browser. Third-party cookies, on the other hand, are placed by a different domain other than the address visited by the user. In this context, only first-party cookies are used on our website. Types of cookies according to their intended use: Cookies may be used for strictly necessary, functional or advertising/marketing purposes according to their intended use. In this context, strictly necessary cookies are used on our website in order to provide the information society services you have explicitly requested. In this context;

A) First-party persistent cookie named cookiesession1 (stored for one year) in order to understand whether subsequent requests to the website on the website are reliable,
B) A first-party session cookie named ASP.NET_SessionId to identify the language in which visitors view the web page,
C) In order to confirm that the cookie clarification text has been read, the first-party persistent cookie named cookiepolicy_status (stored for one year.)

Your personal data is processed by associating it with your IP information. Your personal data in question is not transferred to other data controllers. In the processing of personal data through the aforementioned cookies, in accordance with subparagraph (f) of the second paragraph of Article 5 of the Law No. 6698 on the Protection of Personal Data, the processing condition is based on the processing condition that "data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject". You can submit your requests within the scope of Article 11 of Law No. 6698 "regulating the rights of the data subject" to the Personal Data Protection Authority in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller.