Information Text on The Prodection of Personal Data

INFORMATION TEXT ON THE PROTECTION OF PERSONAL DATA

10 of the Law on the Protection of Personal Data (“KVKK”), published in the Official Gazette dated 7 April 2016 and numbered 29677, which aims to protect the fundamental rights and freedoms of individuals, especially the privacy of private life, in the processing of personal data. Pursuant to the Communiqué on the Procedures and Principles to be Complied with in Fulfilling the Lighting Obligation, published in the Official Gazette dated March 10, 2018 and numbered 30356, our Company Güzel Enerji Akaryakıt A.Ş. We aim to inform you about your personal data processed by

1. IDENTITY OF DATA SUBJECT

Güzel Enerji Akaryakıt A.Ş. has the title of "Data Controller" within the scope of KVKK and related regulations, and you can reach us via the contact information given below.

Address: OYAK Dragos Plaza, Cevizli Mah. Tugay Yolu CAD. No:10/C K:18 34846 Maltepe / Istanbul
Phone: 0 216 606 73 93
E-mail: [email protected]

2. PROCESSED PERSONAL DATA

Güzel Enerji Akaryakıt A.Ş. The following personal data are processed within the scope of your relationship with;

(I) Your Identity Information: name and surname, identity card, identification number, tax identification number;
(II) Your Contact Information: business address, home address, e-mail, telephone, mobile phone, residence, address registration system records;
(III) Your Education, Work and Professional Life Data: work history, graduated school, professional competencies, CV information;
(IV) Your Information Regarding Family Status: Marital status;
(V) Your Payment and Financial Information: collection risk, property declaration, information,
(VI) Data Related to the Security of Our Company Campus: CCTV records, visitor records, entry and exit records to stations;
(VII) Your Vehicle Information: plate number;
(VIII) Your Customer Tracking Information: customer number, customer transaction information;
(IX) Your Visual and Audio Recording Data; audio recordings,
(X) Your Special Qualified Data: health status.

3. PURPOSE OF PROCESSING PERSONAL DATA

Güzel Enerji Akaryakıt A.Ş. Your personal data obtained within the scope of your relationship with us is processed for the purposes listed below.

• Follow-up and execution of legal affairs,
• Uploading customer information to the system for the purpose of carrying out archive activities,
• Execution of finance and accounting works,
• Execution of advertisement/campaign/promotion processes,
• Execution of contract processes,
• Preparation of Monthly Concise Statement,
• Execution of the follow-up process of requests and complaints,
• Issuing a power of attorney on behalf of third parties (lawyer, customs consultant, company personnel, financial advisor, environmental consultant) to represent the company in various matters,
• Ensuring the security of movable property and resources,
• Execution of activities in accordance with the legislation,
• Execution of the wage policy,
• Execution of marketing processes of products/services,
• Execution of goods/service purchasing processes,
• Execution of goods/service sales processes,
• Carrying out marketing and analysis studies,
• Ensuring physical space security,
• Execution of logistics activities,
• Execution of strategic planning activities,

4. TRANSFER OF PROCESSED PERSONAL DATA

Your personal data, for the purposes set forth in Article 3 of this Clarification Text, within the scope of the provisions of the Law on the transfer of personal data and its transfer abroad; It can be transferred to official institutions and organizations in the country, law enforcement, courts and enforcement offices, third party real and legal persons with whom we are related, service provider companies and their officials, business partners, banks, shareholders of our Company, our group companies and affiliates, suppliers and support service providers. .

5. COLLECTION METHODS AND LEGAL REASONS OF PERSONAL DATA

Güzel Enerji Akaryakıt A.Ş. During the establishment of your legal relationship with our Company and during the continuation of the said relationship, provided that from you, third parties and legal authorities, via internet, telephone, e-mail and physical, written, verbal and electronic media, within the scope of the above-mentioned purposes, It is collected, stored and processed based on the reasons for compliance with the law listed below and listed in the provisions of Articles 6 and 8.

• Having your explicit consent,
• It is clearly stipulated in the legislation to which our Company is subject, including the Tax Procedure Law, the Turkish Code of Obligations, and the Turkish Commercial Code,
• To comply with the national and international principles and principles regarding the recognition of customers, to comply with the information storage, reporting and information obligations stipulated by the legislation and official authorities,
• Provided that it is directly related to the establishment or performance of a contract, it is necessary to process the personal data of the parties to the contract, to be able to provide the requested products and services and to fulfill the requirements of the contracts you have concluded.

to be made,
• It is compulsory for the fulfillment of the legal obligation,
• The person concerned has been made public by himself,
• Data processing is mandatory for the establishment, exercise or protection of a right,
• Data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject.

Your sensitive personal data is collected, stored and processed based on the following legal compliance reasons:

• Having your explicit consent,
• Personal data other than health, without your explicit consent in cases stipulated by law,
• Personal data related to health, on the other hand, only for the purposes of protecting public health, performing preventive medicine, medical diagnosis, treatment and care services, planning and managing health services and financing, without your explicit consent by persons or authorized institutions and organizations who are under the obligation to keep secrets.

6. RIGHTS OF THE RELATED PERSON whose PERSONAL DATA IS PROCESSED

In accordance with the provisions of Article 11 of the Law, you have the following rights regarding your personal data.

• Learning whether personal data is processed or not,
• If personal data has been processed, requesting information about it,
• To learn the purpose of processing personal data and whether they are used in accordance with the purpose,
• Knowing the third parties to whom personal data is transferred in the country or abroad,
• Requesting correction of personal data in case of incomplete or incorrect processing,
• Requesting the deletion or destruction of personal data,
• In case of correction, deletion or destruction of personal data, requesting that these transactions be notified to third parties to whom personal data has been transferred,
• Objecting to the emergence of a result against the person himself by analyzing the processed data exclusively through automated systems,
• Requesting the compensation of the damage in case of loss due to unlawful processing of personal data.

7. IF YOU WOULD LIKE TO CONTACT US FOR YOUR RIGHTS AND REQUESTS

In accordance with your legal rights envisaged under the relevant law and other legislation, you can personally submit your requests to our address above with a petition, or send them through a notary public. In addition, in accordance with the 5th article of the "Communiqué on Application Procedures and Principles to the Data Controller", using the registered e-mail (KEP) address, secure electronic signature, mobile signature or the e-mail address you have previously notified to our Company and registered in our systems, You can send it to @totalistasyonlari.com.tr.

Applications to be made within this scope will be accepted following the identity verification to be made by us, and your requests will be finalized as soon as possible and within 30 days at the latest, depending on the nature of the request. In case of a written response to the application, no fee will be charged for up to 10 pages, and a processing fee of 1 Turkish Lira may be charged for each page over 10 pages. If the response to the application is given in a recording medium such as CD or flash memory, a fee may be charged in the amount of the cost of the recording medium.