P.M.S. Metal Profil Aluminium San ve Tic. A.S.

Website Contact Clarification Text

1. Identity of the Data Controller

This Clarification Text has been prepared by P.M.S. Metal Profil Aluminium San ve Tic. A.Ş. (‘P.M.S.’ or ‘Company’) as the data controller in accordance with Article 10 of the Law No. 6698 on the Protection of Personal Data (‘KVK Law’) and the Communiqué on the Procedures and Principles to be Followed in Fulfilling the Disclosure Obligation. A.Ş. (‘P.M.S.’ or ‘Company’) as the data controller. Your Personal Data may be processed by P.M.S. as the data controller within the scope described below.

1. Processed Data Categories and Sample Data Types

1. Purpose for which Personal Data will be Processed

Your above-mentioned personal data may be processed in proportion to the purposes stated below and subject to your disclosure of such data to P.M.S.; within the personal data processing conditions specified in Articles 4, 5 and 6 of the Law:

• Fulfilment of Request/Complaint Processes
• Fulfilment of Corporate Communication Activities

1. To whom and for what purpose the processed personal data can be transferred

Your personal data obtained; in line with the realisation of the above-mentioned purposes and limited to the fulfilment of these purposes; to our business partners, suppliers,

It may be transferred to legally authorised public/private institutions and private persons or organisations and the personal data processing conditions specified in Articles 8 and 9 of the Law and limited to the purposes specified above, and may be processed domestically.

1. Methods and Legal Grounds for Collecting Personal Data

P.M.S. collects personal data directly from third parties, e-mail, mail, website, fax, notifications from administrative and judicial authorities and other communication channels through auditory, electronic or written data in accordance with the following legal reasons specified in Articles 5 and 6 of the Law:

• The laws clearly stipulate the process in which we process your personal data (e.g. keeping log records regarding explicit consent in case of contact from the website)
• You sharing your personal data (e.g. sharing your information by contacting our Company)
• We are obliged to process data in order to establish, exercise and protect a right for you (e.g. processing your contact details in order for our company to fulfil your requests and complaints)
• Provided that it does not harm your fundamental rights and freedoms, it is mandatory for us to process your data (e.g. processing of log records and IP addresses)

1. Your Rights Enumerated in Article 11 of the Law as a Data Subject Whose Data is Processed

In this context, personal data owners; (i) To learn whether personal data is processed, (ii) To request information if personal data has been processed, (iii) To learn the purpose of processing personal data and whether it is used in accordance with its purpose, (iv) To know the third parties to whom personal data is transferred domestically or abroad, (v) To request correction of personal data in case of incomplete or incorrect processing, (vi) To request deletion or destruction of personal data within the framework of the conditions stipulated in Article 7 of the KVK Law, (vii)

(d) and (e), (viii) To object to the occurrence of a result to the detriment of the person himself/herself by analysing the processed data exclusively through automated systems, (ix) To request compensation for the damage in case of damage due to unlawful processing of personal data.

As personal data owners, in order to specify your requests regarding your rights and to exercise your rights on your personal data; You can make the necessary changes, updates and / or deletions and related requests via P.M.S. official e-mail address kisiselveri@pmsaluminyum.com by filling out the ‘Application Form for Data Subjects whose Data is Processed’ that you can access from the P.M.S. Website.

If you submit your requests to us by the specified methods, the Company will finalise the request free of charge as soon as possible and within thirty days at the latest, depending on the nature of your request. However, if the transaction requires an additional cost, the fee in the tariff determined by the Personal Data Protection Board will be charged by the Company.