Personal Data Protection Policy

1- In accordance with the Law on the Protection of Personal Data No. 6698 (“KVKK”), as Demirci Makina Sanayi ve Ticaret Limited Şirketi (“Company”), as the data controller, we process the personal data of our employees within the scope of the following purposes; We will be able to process, record, store, classify, update in accordance with the law and the rules of honesty and, where permitted by the legislation, transfer them to third parties limited to the purpose for which they are processed. This information is provided to fulfill the Company's obligation to inform its employees (including Interns) within the scope of the Law.

2- The Company may process the personal data of its employees with whom it has established a service relationship, without seeking consent, to the extent necessary for the execution of the service contract, the fulfillment of mutual obligations and the fulfillment of other legal obligations. The company ensures the confidentiality and protection of its employees' data.

3- Computers, telephones, e-mails, other electronic communication channels and tools allocated to employees within the company are allocated to employees only for business purposes. The employee cannot use these means allocated to him by the company for purposes other than the allocation or for personal communication. The company can control and audit all data on these tools. Employees undertake that they will not keep any other data or information outside of work on the computers, phones or other devices assigned to them from the moment they start working. Legal, administrative and criminal liability arising from improper use of vehicles belongs to the employee.

Identity Data: Name, surname, date of birth, country of birth, city of birth, gender, marital status, nationality, TR ID card information

Contact Data: Telephone number, full address information, e-mail address, internal company contact information

Financial Data: Financial and salary details, payrolls, premium progress payments, premium amounts, file and debt information regarding enforcement proceedings, bank account book, minimum subsistence allowance information, private health insurance amount

Special Personal Data: Union, ex-convict status/criminal record, disability status/definition/percentage, religion, health data, blood type, private health insurance policy, health reports, on-the-job health report, chest x-ray, hearing test, eye test , employment and periodic examination forms signed by the workplace doctor, pregnancy status, pregnancy report, health and maternity leave information, association/foundation memberships.

Education Data: Education status, certificate and diploma information, foreign language information, education and skills, CV, courses taken

Visual and Audio Data: Photographs, audio recordings, camera recordings of a real person
Physical Location Security Information: Clearly belonging to an identified or identifiable real person; processed partially or fully automatically or non-automatically as part of the data recording system; Personal data regarding records and documents received upon entering the physical location and during the stay in the physical location; camera records, fingerprint records and records taken at security points, etc.

Employee Performance and Career Development Data: Education and skills, information on which training was received on which date, e-mail, signed participation form, customer meeting quality evaluation form, monthly performance evaluation and goal achievement status, activity information.

Family Relative Data: Marriage certificate; name, surname, TR Identity Number, gender, date of birth, height, weight, position, telephone number of spouse and children; Name, surname and telephone number of relatives

Working Data: Registration number, position name, department and unit, title, last employment date, employment entry and exit dates, insurance entry/retirement, allocation number, social security number, TTF number, tax office number, working status at flexible hours, company registration number, travel status, pension fund, pension fund entry date, pension fund registration number, Bağkur entry date, Bağkur registration number, accounting code, number of working days, projects worked, monthly total overtime information, severance pay base date, severance pay additional day, day on strike

Leave Data: Leave seniority date, leave seniority additional day, leave group, departure/return date, day, reason for leave, address/phone number to be on leave.

Other: Military service postponement, vehicle license plate, vehicle license copy, vehicle km information, vehicle location, driver's license copy, traffic ticket inquiry result, special ballot box name, special ballot box entry date, special ballot box registration number, height, weight, status of being a martyr's relative.

4- Personal data provided by company employees can be processed. Personal data that may be subject to processing are as follows:

5- Personal data may be processed by the Company for similar purposes and reasons, such as but not limited to the purposes and legal reasons stated below.

- Approving employees' leave, viewing remaining leaves, making leave arrangements
- Performing employee dismissal procedures
- Ensuring payroll transactions
- Making salary payments to employees
- Providing health services to employees, keeping blood type lists

In order to fulfill the requirements within the scope of the Labor Law, Occupational Health and Safety Law, Social Security Law and relevant legislation and other laws and legislation;

- Creation of personnel personnel file
- Planning and execution of human resources processes,
- SSI notifications, İŞKUR notifications, police station notifications and incentive and legal obligation information
- Employee contract process management, execution of insurance renewal processes,
- Ensuring the opening of compulsory private pension insurance accounts
- Employees Checking entry and exit records and determining the match of camera records with door entry and exit records for R&D
- Making card and service records for personnel entries,
- Calculating incentives for R&D
- Planning and executing in-company training and orientation programs,
- Management Management of board decisions,
- General assembly meeting planning and management,
- Follow-up of litigation and legal affairs
, - Continuity of budgeting processes,
- Provision and management of personnel training
- Payment of employees' salary garnishment deductions to enforcement files
- Making legal notifications of work accidents
- Occupational health and safety - Carrying out
occupational health and safety processes
- Accident and legislation management within the scope of occupational health and safety,
- Complying with other information storage, reporting and information obligations stipulated by the legislation, relevant regulatory bodies and other authorities
- Establishing service procurement contract processes,
- Replacing court decisions - In order to
ensure security within the company;
- Ensuring workplace safety
- Ensuring employee entry and exit to company buildings and structures
- Due to the necessity arising from the execution of customer contracts;
- Making a distinction between customer's right and wrong in customer complaints, increasing customer satisfaction, understanding customer needs and ensuring the improvement of customer-related processes
- Evaluating customer service quality and providing training to employees
- For the purpose of managing the company, running the business and implementing company policies;
- Tracking and reporting the sales performance of company employees
- Making expense payments to employees
- Ensuring communication with employees
- Planning staff travels and carrying out advance
payment processes, - Execution and follow-up of paperwork
- Planning and execution of corporate communication activities
- Confirming that the employee who has been allocated or used a vehicle is competent to drive and has not lost his/her driver's license for any reason
- Providing a vehicle to the employee and arranging a parking space - Ensuring that the packages arriving via cargo and courier are delivered to the relevant employee -
Ensuring that the employees are delivered to the relevant employee
Monitoring the use of company vehicles for security and work execution
- Providing service and travel organization
- Creating the employee's work e-mail by entering employee data into Outlook
- Keeping internet log records,
- Planning, auditing and executing information security processes
- E-mail accounts for employees opening and authorizing,
- Conducting research projects related to employees
- Ensuring the control of employees' entry and exit from work
- Recording the documents collected during the job applications and interviews of employees
- Providing communication for celebration purposes
- Making training planning, reporting the trainings, preparing training certificates, participating in the trainings tracking employees, monitoring the development processes of employees as a result of the training they receive,
- Ensuring quality control
, - Providing communication with relevant persons in case of emergency
, - Carrying out the processes of obtaining power of attorney and signature circulars,
- Conducting compliance assessments within the scope of subcontracting,
- Making emergency preparations and carrying out operations

6- In order for the safety of employees and for our Company to fulfill its obligations under the law, personal data is processed under the Labor Law, the Worker's Health and Occupational Safety Law, the Social Insurance and General Health Insurance Law, the Law on the Regulation of Publications Made on the Internet and the Fight against Crimes Committed through These Publications, Turkish Relevant institutions or organizations to the extent permitted and required by the Commercial Code, Personal Data Protection Law No. 6698, Identity Notification Law and but not limited to other legislative provisions; It may be shared with public legal entities such as the Personal Data Protection Authority, the Ministry of Finance, the Ministry of Customs and Trade, the Ministry of Labor and Social Security, the Turkish Employment Agency (İş-Kur), the Information Technologies and Communication Authority.

7- Your personal data processed within the scope of the explained purposes; In order to carry out the processes listed above, in accordance with the basic principles stipulated in the KVKK and within the personal data processing conditions and purposes specified in Articles 8 and 9 of the KVKK; It can be transferred to our business partners, shareholders, authorized public institutions and organizations, private individuals, labor unions of which you are a member, companies from which we receive support services in order to carry out our activities, and independent audit companies within the framework of legal obligations and legal limitations.

8- In accordance with Article 11 of KVKK, you, our valued employees, can forward your requests regarding your rights to our company. Depending on the nature of the request, the Company will finalize the request free of charge as soon as possible and within thirty (30) days at the latest. However, if the transaction requires an additional cost, we will charge the fee in the tariff determined by the Board. Our company may accept the application request of the personal data owner, or reject it by explaining the reason for the following reasons, and notify the relevant person in writing or electronically of its response.

- Preventing the rights and freedoms of other people,

- Requires disproportionate effort,

- The information is publicly available,

- Endangering the privacy of others,

In cases where one of the situations outside the scope of the KVK Law exists, the personal data owner's application is rejected, the answer given is insufficient, or the application is not responded to in time, to file a complaint with the KVK Board within thirty days from the date of learning the answer of the data controller and in any case within sixty days from the date of application. has the right

9- The rights you have in accordance with Article 11 of the KVKK are as follows:

- Learning whether personal data has been processed,
- Requesting information if personal data has been processed,
- Learning the purpose of processing personal data and whether they are used in accordance with their purpose,
- Knowing the third parties to whom personal data are transferred domestically or abroad,
- Personal data processed incompletely or incorrectly - Requesting
the deletion or destruction of personal data within the framework of the conditions stipulated in Article 7,
- Requesting that the transactions carried out in accordance with paragraphs (d) and (e) be notified to third parties to whom personal data have been transferred, - Requesting that
the processed data be analyzed exclusively through automatic systems. - To object to the emergence of a result against the person by making a decision against himself/herself, - To request compensation
of the damage in case of damage due to the illegal processing of personal data.

10- The personal data we collect must be accurate and up-to-date when necessary. Therefore, if there is any change in your personal data, you can report this to the relevant unit of our company.

11- Although no period is determined for the storage of personal data within the scope of the law, in accordance with general principles, it is essential that personal data be kept for the period stipulated in the relevant legislation or for the period required for the purpose for which they are processed. In order to determine retention periods in accordance with the said principle, the Data Controller Company makes an evaluation based on the legislation in force regarding each data processing process and the purpose of the process. In this regard, personal data is stored at least for the period required by legal obligations and until the statute of limitations subject to the relevant Law expires.

Personal data may be stored in case of any dispute that may arise between you and the Data Controller, in order to provide the necessary defenses within the scope of the dispute. When the purpose of processing the relevant personal data disappears within the scope of any process, including the expiration of the mentioned periods, personal data is anonymized, deleted or destroyed in accordance with the Law.

12- In accordance with the 1st paragraph of the 13th article of the Personal Data Protection Law, you must submit your request to exercise your above-mentioned rights to our Company in “writing” or by other methods determined by the Personal Data Protection Board.

In this context, in your applications to our Company within the scope of Article 11 of the KVK Law, you must submit your request together with the necessary information to identify you in order to use your rights mentioned above and your explanations about the right you want to use, stating which of your rights specified in Article 11 of the KVK Law is related to the exercise. You can send it via registered letter to the following address:

ADDRESS: OFFICIAL ADDRESS OF DEMİRCİ MAKİNA SANAYİ ve TİCARET LİMİTED ŞİRKETİ

It is not possible for third parties to make requests on behalf of personal data owners. In order for a person other than the personal data owner to make a request, there must be a special power of attorney issued by the personal data owner on behalf of the person making the application.

13- The personal data we collect must be accurate and up-to-date when necessary. Therefore, if there is any change in your personal data, you can report this to the relevant unit of our Company.

14- This Information and Consent Text may be updated from time to time to comply with changing conditions and legislation.

You can access the necessary explanations and the relevant form from the KVK Application and Information Request Form .