MVD MACHINERY INDUSTRY JOINT-STOCK COMPANY

Personal Data Protection Statement and Clarification Text

MVD Makina SAN A.Ş (hereinafter referred to as MVD for short), the protection of your personal data and private information is important to us. Therefore, we strive to preserve and process personal data of individuals related to MVD in accordance with the Law No. 6698 on the Protection of Personal Data. As a Data Controller, MVD takes the necessary administrative and technical measures to protect your data in all transactions related to your personal data. In line with PDPL (Personal Data Protection Law), MVD processes your personal data within the limits stipulated by the following conditions and legislation.

Personal information recorded during the visit of our website is processed in accordance with the legislation on the Protection of Personal Data. Please refer to our Privacy Policy , which can be found on our page. However, we note that no guarantees can be provided for data security on other websites in the directions made on the MVD website. The relevant page’s policy on data security should be carefully examined.

1. Legal Nature and Scope

Article 10 of the Law No. 6698 on the Protection of Personal Data (“PDPL”) requested that the individuals whose data were processed be clarified in order to obtain their personal data. Title of the Article “Clarification is Obligation of the Data Controller.”

According to PDLP provisions, MVD is the “Data Controller”. In this context, with the obligation to clarify the data owners, the identity of the data controller, the purposes of personal data processing, the persons to whom the personal data is transferred and the purposes of transfer, the legal reasons for the collection of personal data, who can be transferred and the methods, the update, deletion or anonymization of the personal data subject to the data controller and the rights referred to by the data subject in Article 11 of the PDLP.

As a Data Controller, MVD informs and illuminates data subjects that it processes your personal data within the limits and conditions stipulated by the legislation in accordance with the Clarification Text on the Processing of Personal Data and Article 10 of the Law on Protection of Personal Data.

2. Identity of the Data Controller

In the versicle (I) of the first paragraph of Article 3 of the Law on the Protection of Personal Data, the data controller is defined as “Real or legal persons who determine the purposes and means of processing personal data and are responsible for the establishment and management of the data recording system”. Accordingly, the data controller is MVD MAKİNA SAN. AŞ where you visited the website.

MVD MAKİNA SAN. A.Ş

Address: Konya Organised Industrial Zone, Evrenköy Avenue, St. number 1, No:3 42050 Selçuklu/KONYA

Phone: +90 332 239 22 33 / Fax #: +90 332 239 21 21 / 444 9 683

E-mail: mvdmakina@hs01.kep.tr

The real or legal person who processes personal data on her/his behalf based on the authority given by the data controller is defined as the “Data Processor” in Article 3 of the Law on the Protection of Personal Data.

3. Purposes for Processing Your Personal Data

In accordance with the principles of the Law on the Protection of Personal Data;

• Your awareness of the products and services offered by MVD, and your better utilization;
• Improving the quality of products/services offered by MVD, customizing and recommending them according to the needs, tastes and usage habits of our customers;
• Inform you of our services and inform you when necessary;
• The best planning and implementation of our human resources policies; accurately plan and execute our commercial partnerships and strategies; Ensuring the legal, commercial and physical security of our company and business partners, ensuring the corporate functioning of the company, and making efforts to make the most of the products and services offered by our company,
• Ensure the highest level of data security, the databases, develop the services provided on our company website, contact the persons who communicate their requests and complaints, correct the errors that occur on our company website, and ensure compliance with the provisions of the Privacy Policy that are shared on our website,
• The personal data processing requirements stated in Articles 5 and 6 of the Law on the Protection of Personal Data are processed for the purpose of determining the company’s strategies.

4. Our Principles for Processing Personal Data

We, MVD, have adopted the principles of;

• Act in accordance with the rules of law and integrity,
• Strive to ensure accuracy and updates,
• Processing for specific, clear and legitimate purposes,
• To be limited and measured for the purposes for which they are processed,
• We have adopted the principle of maintaining the required time required by the relevant legislation or for the purposes for which they are processed.

5. Ways of Processing Personal Data

Your data will be kept and processed by MVD only if you have consent or if you comply with the law.

• That clearly stipulated in the laws
• That having necessitude, factual impossibility, risk of death
• That processes directly related to the establishment or performance of a contract
• That it is mandatory for the data controller to fulfil her/his legal obligation
• That the relevant person has been compromised by himself/herself
• That the data processing is mandatory to establish, use or protect a right
• That it is mandatory to process data for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the person relevant

6. To Whom and for what purpose the Processed Personal Data can be transferred

Your personal data collected and processed in accordance with the Law on the Protection of Personal Data in our company, for the purposes of the performance of the work and for the purposes of confidentiality agreements;

MVD shall be able to transfer personal data to the solution partners and the companies acting as assistant executives.

7. Method and Legal Reason for Collecting Your Personal Data

Your personal data may vary depending on the service, product or commercial activity provided by our Company;

In accordance with Articles 4, 5 and 6 of the Law on the Protection of Personal Data, offices, call centers, websites, social media channels, mobile applications, and so on shall be collected, updated and processed verbally, in writing, or electronically, by automated or non-automated means.

Your personal data is obtained in all verbal, written or electronic environments so that the products and/or services we provide to the Company for the aforementioned purposes can be provided within the prescribed legal framework and that the Company can fulfil its contractual and legal obligations in full and accurate manner. For this reason, your personal data collected may be processed and transferred within the scope of the personal data processing requirements and purposes stated in Articles 5 and 6 of the Law on Protection of Personal Data for the purposes specified in this Clarification Text.

8. How do we protect?

Necessary technical and administrative measures are taken to protect the personal data collected by MVD and to prevent it from falling into the hands of unauthorized persons and to prevent our customers and prospects from becoming victims. Accordingly, software must comply with standards, be selected with due care by third parties and comply with our internal Privacy Policy.

9. Rights of Personal Data Owner and Application

As personal data owners, if you submit your requests regarding your rights enumerated in Article 11 of the Law on the Protection of Personal Data to our Company using the following methods in this Clarification Text, our Company will finalize the request free of charge within thirty days at the latest, depending on its nature. However, if a fee is stipulated by the Personal Data Protection Board, the fee in the tariff determined by our Company will be charged. In addition, as the applications for personal data must be made by the data subject himself, in accordance with the legislation in force, only the part of your applications will be answered, and an application made about your spouse, relative or friend will not be accepted.

Accordingly, the personal data subjects should apply to our interest announced by MVD on our website to:

• find out if personal data has been processed,
• request information if personal data has been processed,
• learn the purpose of processing personal data and whether it has been used in accordance with its purpose,
• know the third parties to whom personal data is transferred, whether in Turkey or abroad,
• request correction of personal data if it has been processed incompletely or incorrectly,
• request the deletion or destruction of personal data in accordance with the requirements laid down in Article 7 of the Law titled “Deletion, destruction or anonymization of personal data”,
• request deletion or destruction of personal data in the event that the reasons requiring the processing are no longer valid, even if they have been processed in accordance with the Law on the Protection of Personal Data and other relevant laws, and request notification of the third parties to whom the personal data has been transferred,
• object to the occurrence of an outcome against the person by analysing the processed data exclusively through automated systems,
• request compensation for damages if the personal data is incurred due to illegal processing.

10. APPLICATION

Pursuant to 1st paragraph of the Article 13 of the Law on the Protection of Personal Data, and to use your rights specified in Article 11 of the same Law you can send your request to the registered e-mail by using the e-mail address you have previously notified our company and registered our system, or by personally writing and sending it via notary or certified mail.

You can access the application and information request form via the link: Application and Information Request Form

In the application;

• Your name, surname and if the application is in writing, your signature,
• If you are a citizen of the Republic of Turkey, your T.R. Identity Number, if you are a foreigner, your nationality, passport number or identification number, if any,
• Your location or business address for which the notification is based,
• If any, your notification e-mail address, telephone and fax number,
• Your request subject must be available. Information and documents related to the subject should be attached to the application.