TÜRKİYE ŞİŞE VE CAM FABRİKALARI A.Ş.

CLARIFICATION TEXT ON THE PROCESSING OF PERSONAL DATA

 OF CUSTOMER AND PROSPECTIVE CUSTOMER

As Türkiye Şişe ve Cam Fabrikaları A.Ş. ("Şişecam"), the protection of your personal data is among our priorities. Şişecam shall conduct all processing of personal data in accordance with Personal Data Protection Law No. 6698 ("KVKK")") and other secondary legislation. The personal data of customers and prospective customers that we obtain through this form are processed only for the purposes specified in this information text within the framework of the relevant legislation. Within the scope of Article 10 of KVKK and the Communiqué on Procedures and Principles to be Observed in Fulfilment of the Clarification Obligation (the "Communiqué"), we hereby share this clarification text with you in order to inform you about the purpose of processing your personal data, the storage period and your rights.

Data Controller:

Pursuant to the Law and the Communiqué, your personal data shall be processed by Şişecam as data controller. As stated in this information, Şişecam engages in personal data processing activities as the data controller. Necessary technical and legal measures are taken to prevent violations of rights that may occur during data transfer to third parties. However, Şişecam declares that it shall not be responsible for the data protection policies of the third party receiving the personal data.

Which Personal Data Do We Process?

When you fill out the form, the following personal data is collected and processed by us as part of this clarification text:

For What Purposes Do We Process Your Personal Data?

Personal data belonging to you;

• Recording the necessary information for communication with customers and prospects,
• Carrying out communication, information and guidance activities,
• Evaluating potential candidates and determining their compliance with Şişecam's policies,
• Carrying out pre-contract processes,
• Analyzing access traffic and form usage statistics,
• Measuring customer satisfaction and collecting their feedback,
• Carrying out campaign, promotion, information and marketing activities,

• Providing information about products and services,
• Carrying out customer relations management and communication processes,
• Developing and improving the services offered by our company,
• Fulfill the obligations arising from the "KVKK" and other applicable legislation and exercise our rights arising from the legislation,

will be processed limited to their purpose.

To Whom and For What Purposes Can Your Personal Data Be Transferred?

Personal data belonging to you that have been/will be processed within the scope of this information text are stored in accordance with the law and rules of good faith and in connection with the purpose for which they are processed, in a limited and measured manner, for the period provided in the relevant legislation or required for the purpose for which they are processed, within the framework of Articles 8 and 9 of the Law, Şişecam Group companies, relevant legally authorized judicial and administrative authorities, public institutions and organizations, third party service providers processing personal data on behalf of Şişecam, our business partners, suppliers, legally authorized real and legal persons such as independent audit companies, and/or domestic/foreign persons and institutions from which we receive data storage services in the cloud environment.

How and for Which Legal Compliance Reasons Do We Collect Your Personal Data?

We collect your above-mentioned personal data in a fully and partially automatic and/or non-automatic manner upon your submission of the form electronically based on the legal compliance reasons mentioned below:

Identity Data, Communication Data, Professional Information and Other Data Provided that it is directly related to the establishment or performance of a contract specified in Article 5 of the KVKK, it is necessary to process the personal data of the parties to the contract; personal data processing is necessary for our legitimate interests; It is collected automatically by contacting us by filling out the form based on the legal reasons that data processing is mandatory for the establishment, exercise or protection of a right and for the data controller to fulfill its legal obligations, and it is processed by Şişecam, which is specified as the data controller in this text, in accordance with the Law and other relevant secondary legislation.

Security of Your Personal Data

Şişecam Group companies hold ISO/IEC 27001 Certification for Information Security Management Systems. All personal data and information shared with Şişecam Group companies are stored in accordance with the security measures required by ISO/IEC 27001 Certification. As one of the Şişecam Group companies, Şişecam complies with the requirements of ISO/IEC 27001 Certification and is regularly audited internally and externally within this framework.

In this context; Şişecam uses the necessary technologies to prevent unauthorized access and use of personal data, stores personal data in computer systems with limited access kept in facilities under its control, uses Secure Sockets Layer (SSL) and similar encryption methods, establishes the necessary organization to protect the confidentiality and integrity of personal data and takes all necessary technical and takes administrative measures.

Your Rights as a Personal Data Subject:

In accordance with the KVKK, your personal data; to learn whether it has been processed, to request information if it has been processed, to learn the purpose of processing and whether it is used in accordance with its purpose, to learn the third parties to which it has been transferred in the country and abroad, to request correction if it has been incomplete or incorrectly processed, to request its deletion or destruction within the framework of the conditions stipulated in Article 7 of the KVKK, to request the notification of the transactions made to the third parties to whom it has been transferred, exclusively We would like to remind you that you have the right to object to the emergence of a result against you due to analysis with automatic systems and to demand the compensation of any damage if you suffer damage due to processing in violation of KVKK.

Regarding the processing of your personal data by Şişecam; You can submit all kinds of requests, questions, requests, suggestions and complaints to exercise your rights within the scope of Article 11 of the Law regulating the rights of the relevant person, via [email protected] or in writing to the address "İçmeler Mahallesi, D-100 Karayolu Caddesi No:44/A Tuzla – Istanbul".