Personal Data Protection Law Policy

DOKA PLASTİK VE KALIP ENGINEERING PERSONAL DATA PROTECTION POLICY

1. Introduction and Purpose

Doka Plastik ve Kalıp Mühendislik (“DOKA” or “Company”) attaches great importance to the principle of confidentiality, security and lawful processing of personal data within the scope of the Personal Data Protection Law No. 6698 (“KVKK”). This policy explains the procedures and principles regarding the processing and protection of personal data of all our stakeholders, including our customers, employees, suppliers and business partners.

2. Scope

This policy applies to all personal data processed by DOKA as the data controller, the rights of data owners, data security measures and data processing processes.

3. Principles of Processing Personal Data

DOKA processes personal data in accordance with the basic principles set forth in Article 4 of the KVKK:

Being in compliance with the law and rules of honesty,

Being accurate and up-to-date when necessary,

Being processed for specific, clear and legitimate purposes,

Being connected, limited and proportionate to the purpose for which they are processed,

Being stored for the period stipulated in the relevant legislation or necessary for the purpose for which they are processed.

4. Purposes of Processing Personal Data

Personal data is processed for the following purposes:

Conducting product and service processes,

Customer relations management,

Conducting personnel management and human resources processes,

Managing supplier relations,

Finance, accounting and invoicing transactions,

Fulfilling legal obligations,

Ensuring physical location security,

Conducting quality and audit processes,

Conducting marketing and promotional activities (provided that explicit consent is obtained).

5. Methods of Collecting Personal Data

Personal data can be collected in the following ways:

Contracts, offers, applications made with our company,

Physical forms, e-mails, fax, telephone conversations,

Camera recordings, visitor log,

Automatically through the website, mobile applications and cookies.

6. Legal Reasons for Personal Data

Personal data is processed in accordance with the following legal reasons:

Explicitly provided for in the laws,

Directly related to the establishment or performance of a contract,

Fulfillment of a legal obligation,

Data processing is mandatory for the establishment, exercise or protection of a right,

Explicit consent of the relevant person.

7. Transfer of Personal Data

Personal data may be transferred to the following persons and institutions in accordance with Articles 8 and 9 of the KVKK:

Authorized public institutions and organizations,

Firms providing financial consultancy services,

Legal advisors and legal consultants,

Suppliers and business partners (limited to the purpose),

Data processors from whom services are received if explicit consent is obtained for overseas transfer.

8. Rights of Personal Data Owners

Data owners have the following rights in accordance with Article 11 of the KVKK:

To learn whether their personal data has been processed,

To request information about it if it has been processed,

To learn the purpose of processing and whether it is used in accordance with its purpose,

To know the third parties to whom personal data is transferred domestically or abroad,

To request correction if it is processed incompletely or incorrectly,

To request deletion or destruction in accordance with the law,

To request notification to third parties to whom it is transferred,

To object to the emergence of a result against them by exclusively analyzing the processed data through automated systems,

To request compensation for damages in the event of damages due to processing in violation of the law.

9. Application Methods

Data owners can apply to exercise their rights in the following ways:

With a written petition to the company headquarters,

Via registered electronic mail (KEP) address,

With mobile signature or secure electronic signature,

By sending an e-mail to info@dokaplastik.com.tr.

10. Data Security Measures

DOKA implements the following to ensure the security of personal data:

Access controls,

Software and hardware to prevent unauthorized access,

KVKK trainings for employees,

Physical security measures,

Periodic audits and internal control systems.

11. Storage Period and Destruction Policy

Personal data is stored for the period stipulated in the relevant legislation and for the period necessary for the purpose for which it is processed. At the end of the period, the data is deleted, destroyed or anonymized in accordance with DOKA's "Data Storage and Destruction Policy".

12. Policy Changes

This policy may be updated from time to time. The current version shall enter into force upon publication on DOKA’s website.

13. Effective Date

This policy shall enter into force on the date of publication by DOKA and shall be binding on all employees, directors, suppliers and business partners.