CLARIFICATION TEXT REGARDING THE COLLECTION, PROCESSING, AND DELETION OF PERSONAL DATA

The purpose of this clarification text is to outline the legal terms and conditions related to the processing and transfer of personal data received by BAYKAR MAKİNA SANAYİ VE TİCARET A.Ş. (BAYKAR) when applicants submit internship and employment applications, or for other reasons, and use the content hosted by the website https://baykartech.com/tr/, owned by BAYKAR under the Personal Data Protection Law №6698, published in the Official Gazette on 07.04.2016.

BAYKAR stores personal data, whether automatically or non-automatically, for a certain period of time in an electronic environment via a web page. As a personal data controller, BAYKAR processes personal data in accordance with the Personal Data Protection Law, in line with the following explanations:
One can access detailed information about the data processing purposes applicable to each category of personal data processed by or on behalf of BAYKAR as a data controller via the Data Controllers Registry (VERBIS) maintained by the Personal Data Protection Authority (https://verbis.kvkk.gov.tr/).

1. DATA THAT CAN BE PROCESSED

The following personal data of users may be processed depending on access to the website and actions performed on the website:
•    Information resulting from browsing the website
•   Name, surname, ID number, address, profession, education, marital status, date and place of birth, personal background, email, phone number, gender, license plate, location data when entering the website, IP address
•    Contact details provided to get information about BAYKAR's activities
•    Identity information, education data required for internship and employment application forms, and other information requested in the forms
In addition to the above, other personal data required for the operation of the website may be processed in accordance with the Law.

2. PROCESSING OF PERSONAL DATA

Personal data are collected fully or semi-automatically, or not automatically, in an electronic environment through the website to be stored for the required period.

Personal data are processed based on the explicit consent of the user. However, personal data may be processed without explicit consent on any legal grounds, provided that data processing is mandatory for the legitimate interests of BAYKAR and subject to the provisions of paragraph 2 of Article 5 of the Law, including: (i) clear stipulation in the law, (ii) disclosure of personal data by the personal data owner, (iii) being obligatory for the protection of life or bodily integrity of themselves or someone else who is unable to express their consent due to actual impossibility, (iv) directly related to the establishment or performance of a contract, and it is needed to process the personal data of the parties to the contract, (v) being mandatory for BAYKAR to fulfill its legal obligation, (vi) being mandatory to establish, use or protect any right, (vii) provided that it does not harm the fundamental rights and freedoms of personal data owners.

3. PURPOSE OF PERSONAL DATA PROCESSING

Under Articles 4, 5, and 6 of the Personal Data Protection Law, all personal data will be processed verbally, in writing, or electronically for the following purposes:

•    To carry out Human Resources processes and activities within the determined legal framework
•    To plan, audit, and execute information security processes
•    To create and manage the information technology infrastructure
•    To follow up on finance and/or accounting affairs
•    To follow up on contract management, legal transactions establishment, and legal processes
•    To ensure facility and personnel safety
•    To perform efficiency and/or appropriateness analysis of commercial activities, to plan and/or execute these activities
•    To determine and implement commercial and business strategies
•    To fulfill BAYKAR's contractual and legal obligations fully and duly
•    To evaluate and respond to suggestions, inquiries, complaints, and bug reports received via the website and to make improvements following the reports

4. TRANSFERRING OF PERSONAL DATA

Subject to appropriate measures within the principles of security and confidentiality specified in the Personal Data Protection Law, BAYKAR may transfer your personal data to our direct/indirect/domestic/foreign affiliates, legal entities and individuals with whom we have entered into agreements related to our activities, suppliers, subcontractors, business partners, shareholders, legal, financial, and tax advisors, auditors, audit companies, state institutions or organizations authorized to request such data as required by law, and other relevant persons or institutions within the conditions and purposes of personal data processing specified in Articles 8 and 9 of the Personal Data Protection Law, solely based on the explicit consent of the person or on the legal grounds stipulated by law.

5. DATA SECURITY

BAYKAR takes all necessary technical and administrative measures to prevent the illegal processing of personal data, prevent illegal access to personal data, and ensure the maintenance of personal data and the appropriate level of security. In the event of redirection to other sites or applications through the website, BAYKAR has no information on the compliance of the redirected sites and applications with the legislation on the protection of personal data and is not responsible for their privacy policies and their contents.

6. RIGHTS OF PERSONS WHOSE DATA ARE PROCESSED

BAYKAR informs the relevant person about their rights in accordance with Article 10 of the Law, provides guidance on how to use such rights, and carries out the internal functional, administrative, and technical arrangements necessary for this.

Pursuant to Article 11 of the Law, BAYKAR explains to persons whose personal data are obtained that they have the following rights:

•    To learn if personal data are being processed
•    If personal data have been processed, to request information about them
•    To learn the purpose of personal data processing and whether they are used according to the purpose
•    To know the third parties to whom personal data are transferred within the country or abroad
•    To request correction of personal data if they are incomplete or incorrectly processed
•    To request the deletion or destruction of personal data within the framework of the conditions stipulated in Article 7 of the Law
•   To request informing third parties to whom personal data have been transferred about operations (correction and destruction) carried out in accordance with subparagraphs (d) and (e) of Article 11 of the Law
•    To reject the result against the person, which arose exclusively by analyzing the processed data by automatic systems
•    To claim damages in case of damage due to illegal processing of personal data

Requests and inquiries regarding the implementation of the Law can be submitted in person at "Ömerli Mahallesi Mercedes Bulvarı No: 9 Arnavutköy/İstanbul," by filling out the application form on the website.

All inquiries and requests must include the following:

•    Name, surname, and signature if the application is in writing
•    ID number for citizens of the Republic of Türkiye; nationality, passport number for foreigners, or ID number, if any
•    Residential or workplace address for correspondence
•    Email address, telephone, and fax number for messaging, if available
•    Subject of the request

Information and documents related to the subject should be attached to the request.

BAYKAR resolves inquiries contained in the request free of charge as soon as possible and no later than thirty days, depending on the nature of the request. However, if the related operation requires additional costs, a fee may be charged at a rate determined by the Board.

BAYKAR may accept the request or reject it by explaining the reason and notifying the relevant person in writing or electronically. If the request in the inquiry is accepted, BAYKAR fulfills the requirements as soon as possible and informs the person concerned. If the reason for the request is BAYKAR's fault, the fee charged is returned to the data owner.

In case of rejection of the inquiry, insufficient or untimely response to the inquiry, the data owner has the right to submit a complaint to the Board within thirty days from the date of receipt of the response and in any case within sixty days from the date of inquiry.

By using the website, the User certifies that they have read all the written conditions, are informed about the processing of their personal data, and accept and agree to the processing of their personal data for certain purposes and to a certain extent.