INFORMATION TEXT WITHIN THE FRAMEWORK OF THE PERSONAL DATA PROTECTION LAW

Information Text

As TÜRBOSAN TURBOMAKINALAR SANAYİ VE TİCARET A.Ş. (Hereinafter referred to as the "Company"), we show the necessary sensitivity regarding the security of your personal data.

Great importance is given to the processing and preservation of all personal data belonging to all persons associated with the Company in accordance with the Personal Data Protection Law No. 6698 (“Law”).

We process your personal data that you share with the Company as a data owner in the capacity of a product and service recipient or customer, potential pump, pump equipment or service recipient, intern, employee, supplier, supplier employee, dealer, dealer employee, visitor, business partner and/or that the Company has obtained within the framework of its business, procedures and transactions, as explained below and within the limits specified by the legislation with full awareness of this responsibility.

This “TÜRBOSAN TÜRBOMAKİNALAR SANAYİ VE TİCARET A.Ş." General Information Text” has been prepared to inform you about the purposes for which the Company will process your personal data as the "Data Controller", to whom and for what purposes your processed personal data may be transferred, the personal data collection method and legal basis, and your rights as the personal data owner under Article 11 of the Law.

1.Purpose of Processing Personal Data:

Your personal data will be processed by the Company for the purposes of determining and implementing our Company's commercial business and strategies, carrying out the commercial activities carried out by our Company, planning and executing human resources policies and processes, carrying out the necessary work to ensure that customers benefit from the products and services offered by the Company, providing services in a complete and timely manner within the legal framework and by personalizing them according to the preferences of data owners, keeping data owners informed about the latest developments regarding our services by sending informative and promotional e-mails in line with the consent of data owners, fulfilling legal obligations under the legislation, ensuring occupational safety in all physical areas of the Company, and fully and accurately fulfilling responsibilities arising from business, service, power of attorney, work, and other agreements and legislation to which the Company is a party.

2.Personal Data can be processed for what purposes and be transferred to whom:

Your personal data may be shared with our business partners, suppliers, institutions we cooperate with and legally authorized authorities to fulfill our legal obligations, in accordance with the personal data processing conditions and purposes specified in Articles 8 and 9 of the Law, for the purposes of providing the products and services offered by the Company in a full and timely manner within the legal framework, fulfilling legal obligations under the legislation, and fulfilling responsibilities arising from contracts and legislation in a complete and accurate manner.

In this context, we transfer your personal data, in particular, to our business partners in order to ensure the fulfillment of the purposes of establishing the business partnership,to our Suppliers in order to ensure the provision of the services necessary for the Company to carry out the commercial activities of the Company, which the Company has outsourced from suppliers, to Auditors, Legal Advisors and Consultants in order to ensure the provision of the services necessary for the Company to carry out the commercial, legal and economic activities of the Company, which the Company has outsourced from suppliers and to Legally Authorized Public Institutions and Organizations, limited to the purposes requested by the relevant public institutions and organizations within their legal authority.

3.Method and Legal Reason for Collecting Personal Data:

Your personal data may vary depending on your relationship with the Company; it is collected through the website, social media platforms, physical or electronic forms, security cameras, voice recordings and similar means, and other collection methods, partially or fully automated or non-automatic, including written or electronic media, and is processed based on the legal grounds that processing is necessary for the parties to a contract, to fulfill the Company's legal obligation, and directly related to the establishment or performance of a contract, or that processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the relevant person, or based on your explicit consent.

4.Data Owner's Rights Listed in Article 11 of the Law:

In accordance with Article 11 of the Law titled “Rights of the Relevant Person”, personal data owners may apply to the Company in writing or through other methods determined by the “Personal Data Protection Board”;

• They have the right to learn whether their personal data is being processed.
• If their personal data is being processed, they have the right to request information about it.
• If their personal data is being processed, they have the right to learn the purpose of the processing and whether it is being used in accordance with its intended purpose.
• If their personal data is being transferred to third parties, either domestically or abroad, they have the right to know the third parties to whom their personal data has been transferred.
• They have the right to request correction of their personal data if it is incomplete or inaccurate, and to request notification of the action taken in this context to third parties to whom their personal data has been transferred.
• They have the right to request the deletion or destruction of their personal data if the reasons requiring processing no longer exist, despite the processing being in accordance with the provisions of the Law and other relevant laws, and to request notification of the action taken in this context to third parties to whom their personal data has been transferred.
• They have the right to object to any results that may be detrimental to them, particularly if their data is analyzed by automated systems.
• They have the right to demand compensation if their personal data is processed illegally or if they suffer damage.

5- Deletion, Destruction and Anonymization of Personal Data

Pursuant to Article 7 of the Personal Data Protection Law and other relevant legislation, if the reasons for processing personal data no longer exist, personal data will be deleted, destroyed, or anonymized upon the Company's decision, periodic inspection, and/or upon the request of the data subject.

The Company will not retain personal data for longer than necessary in connection with the reason for which the personal data was obtained.

The Company will delete, destroy, or anonymize personal data in the first periodic destruction operation following the date on which the obligation to delete, destroy, or anonymize personal data arises after the reasons for processing no longer exist.

The Company has prepared a Retention and Destruction Policy to determine the procedures and principles in this regard.

The retention period for each category of personal data, the criteria used for retention and destruction, including the legal obligations under which the Company is obligated to retain the data, are specified in this Retention and Destruction Policy.

The Company complies with the Retention and Destruction Policy, relevant legislation, and Board decisions regarding the deletion, destruction, or anonymization of personal data.

Personal data will be destroyed securely and using the most appropriate method, in accordance with the provisions of the Personal Data Protection Law, relevant legislation, and the Company's Storage and Destruction Policy. The Company will select the appropriate method upon request by the data subject, explaining the reasoning behind it.

To exercise your rights specified above, you may complete the "Application Form to the Data Controller" available at the Company's website https://www.turbosan.com/, including the necessary information to identify you and your explanations regarding the right you wish to exercise among those specified in Article 11 of the Law, and deliver a signed copy of the form personally to the address "Makine İhtisas Org. San. Bölge 5. Cadde NO:33 41455 Dilovası/Kocaeli" or send it via other methods specified in the Law.

The Company will process your requests as quickly as possible, depending on the nature of the request, and within thirty days at the latest. However, if the process requires additional costs for the Company, the fee set by the Personal Data Protection Board will be charged.