1- Who is a Personal Data Controller?

Pursuant to the Personal Data Protection Law No.6698, your personal data may be processed within the following scope by Kınık Madem Suları Anonim Şirketi, as the data controller. We, as Data Controller, would like to state that your personal data that you have given to KINIK may be recorded, stored, updated, disclosed/transferred to third parties in cases permitted by the legislation, classified and processed by methods as stated in the Law on the Protection of Personal Data, by adhering to the conditions and limits described below.

2- What is the purpose of processing the personal data?

Your personal data will be processed by KINIK as the data controller in accordance with the law and good faith, for specific, explicit and legitimate purposes in a limited, measured and necessary manner for the purpose. Your personal data collected will be processed within the personal data processing conditions and purposes specified in Articles 5 and 6 of Law No. 6698 in order to carry out the necessary work to benefit you from the products and services offered by our Company; to provide, offer and develop products and services; to ensure the execution of our company's human resources policies; to determine and implement our Company's commercial and business strategies, in line with the necessary legislation and the reasons required by the operation of the company. In the presence of one of the conditions in paragraph 2 of Article 5 of the LPPD No. 6698, it is possible for KINIK to process personal data without seeking explicit consent.

3- To whom and for which purposes the processed personal data may be transferred?

Your personal data may be transferred to administrative and official authorities that are required to be transferred in accordance with the relevant legislation, due to legal obligations and within legal limits. Your personal data may also be transferred for;

• Carrying out the necessary work to ensure that you benefit from the products and services offered by our Company;
• Ensuring the execution of our company's human resources policies;
• Fulfilling the legal obligations and legal obligations of our company;
• Ensuring the legal and commercial security of our Company and those who have business relations with our company;
• Determining and implementing our Company's commercial and business strategies; to the main headquarters of our company, our suppliers, shareholders, affiliates, legally authorized public institutions and private persons, or third parties from whom services are received within the framework of the personal data processing conditions and purposes specified in Articles 8 and 9 of Law No. 6698.

4- The method and legal basis of collection of personal data

Your personal data is collected by our Company via various channels and based on various legal grounds in order to conduct our commercial activities and fulfill our legal responsibilities. Your personal data collected for this legal purpose may also be processed and transferred for the purposes set out in article 3 of this Disclosure Statement in the framework of personal data processing requirements and purposes laid down in Articles 5 and 6 of Law 6698. Video recording is made in certain areas of the Company for the purpose of ensuring security, management and coordination; and the data collected in connection with the purpose are not transferred to third parties except for the request of judicial authorities and law enforcement agencies in accordance with Law No. 6698 and the relevant legislation. All personal data obtained and processed by KINIK will be kept in accordance with the relevant legislation, especially Law No. 6698, and in the event that the purposes of processing disappear, they will be destroyed, deleted, anonymized in accordance with the legislation.

5- Your rights under article 11 of the law on the protection of personal data

As personal data subjects, if you submit your requests about your rights to KINIK, our Company will conclude the request free of charge as soon as possible depending on the nature of the request and within thirty days at the latest. However, if the procedure requires an additional cost, the fee indicated in the price list determined by the Personal Data Protection Board shall be charged by our Company.

In this framework, personal data subjects are entitled to:

• Learn whether your personal data is being processed,
• Request information if the personal data are processed,
• Find out the purpose of the procession of your personal data, and whether your processed personal data have been used for its intended purpose,
• Be informed of the third parties domiciled at home/abroad, to whom your personal data have been transferred,
• Request for the correction of personal data if it is incomplete or incorrectly processed and to ask that the process carried out in this context be notified to the third parties to whom personal data has been transmitted,
• Request the erasure or destruction of your personal data in the event that the reasons for the processing no longer exist despite being processed in compliance with the provisions of the Law no. 6698 and other relevant laws, and to request reporting of the operations carried out within this scope to third parties to whom your personal data have been transferred,
• Object to any unfavorable result that they suffer due to analysis of processed data only by means of automatic systems,
• Request compensation for the damage arising from the unlawful processing of personal data.

6-How and at which addresses can you apply to the Data Controller when exercising these rights?

In order to exercise your rights mentioned above, you must send your request for exercising your abovementioned rights along with information necessary for your identification and description of the right you'd like to use, stating to which right your request is related among the rights specified in article 11 of the LPPD, to the address of "Balat Mah. Sanayi Cad. Kıratlı İş Merkezi No:433/32 Nilüfer/BURSA" by hand or through a notary public by registered letter with return receipt requested, or after signing with your secure electronic signature within the scope of the Electronic Signature Law No. 5070, send your application with secure electronic signature to the e-mail address bilgi@kinikmadensuyu.com.tr, or by filling out the application forms available in the Human Resources department of our Company.