LIGHTING TEXT REGARDING CAMERA RECORDINGS WITHIN THE SCOPE OF PDPL

Işık Plastik ve Org. Inc. Co. The personal data processing activities carried out by the (“Company” or “Isik Plastik”) at the entrance of the building and within the facility are carried out in accordance with the Constitution of the Republic of Turkey, the Law on the Protection of Personal Data (“PDP Law”) and other relevant legislation. In order to ensure security as the data controller in accordance with the PDP Law, Işık Plastik carries out personal data processing activities for monitoring the entrance and exit of guests, subcontractors and their vehicles with security cameras in our company’s buildings, factories and facilities. By using security cameras and recording guest entries and exits, personal data processing activities are carried out by Işık Plastik as a data controller.

1. Işık Plastik and Org. Inc. Co. CAMERA MONITORING AND RECORDING ACTIVITIES CONDUCTED AT AND IN THE BUILDING, FACILITY ENTRANCES;

Işık Plastik processes personal data by means of a closed circuit camera system (CCTV) in order to ensure legal, technical and commercial occupational safety. 1.1. Legal Basis of Camera Surveillance and Collection Method of Personal Data Camera monitoring and recording activities carried out by Işık Plastik are carried out in accordance with the Law No. 5188 on Private Security Services and the regulation regarding the implementation of this law, and based on a legal reason based on the legitimate interest of our Company.

Personal data is collected in electronic environment through closed circuit camera systems in order to ensure the security of Işık Plastik buildings, within the framework of the personal data processing conditions specified in the 5th and 6th articles of the PDP Law. 1.2. Conducting Security Camera Monitoring Activity According to PDP Law Işık Plastik carries out security camera monitoring activities in order to ensure security in its buildings and facilities, for the purposes stipulated in the relevant legislation in force and in accordance with the personal data processing conditions listed in the PDP Law. 1.3. Announcement of Camera Surveillance Activity Isik Plastik informs the personal data owner in accordance with Article 10 of the PDP Law. Işık Plastik provides notifications with more than one method regarding the camera monitoring activities of the lighting it performs regarding general issues. Thus, it is aimed to prevent harming the fundamental rights and freedoms of the personal data owner, to ensure transparency and to enlighten the personal data owner. For the camera monitoring activity by Işık Plastik; A notification letter stating that monitoring will be carried out is posted at the entrances of the areas where monitoring is done.

1.4. Purpose of Execution of Surveillance with Camera and Limitation of Purpose The purpose of maintaining closed circuit camera monitoring by Işık Plastik is limited to the purposes listed in this Policy. In this direction, the monitoring areas, the number of security cameras and when they will be monitored are implemented as sufficient to achieve the security purpose and in a limited manner for this purpose. The privacy of the person is not subject to monitoring in areas (for example, dressing-changing rooms, toilets, etc.) that may result in an intervention exceeding security purposes. 1.5. Ensuring the Security of the Obtained Data Isik Plastik takes the necessary technical and administrative measures to ensure the security of the personal data obtained as a result of camera monitoring in accordance with Article 12 of the PDP Law. 1.6. Retention Period of Personal Data Obtained by Camera Monitoring 1.7. To Whom the Obtained Personal Data Will Be Transferred for What Purposes A limited number of employees have access to the information obtained as a result of monitoring. In order to ensure the security of Işık Plastik buildings, camera images can be transferred to authorized public institutions in accordance with the legislation within the framework of the personal data processing conditions and purposes specified in Articles 8 and 9 of the PDP Law. (For example, with the written request of the prosecutor’s office or the judge during the investigation of an incident) A limited number of people who have access to the records declare that they will protect the confidentiality of the data they access with a confidentiality agreement.

2. Işık Plastik and Org. Inc. Co. FOLLOW-UP OF THE ENTRANCES AND EXITS OF GUESTS AND SUBCONTRACTORS AT THE ENTRANCES AND INSIDE THE BUILDING, FACILITY by Işık Plastik;

As a data controller in accordance with the PDP Law, personal data processing activities are carried out for the purposes of ensuring security and tracking guest entries and exits in Işık Plastik buildings and facilities for the purposes specified in this Policy.

While obtaining the names and surnames of people who come to Işık Plastik buildings as guests, or through texts posted by Işık Plastik or made available to guests in other ways, the personal data owners in question are enlightened in this context. The data obtained for the purpose of tracking guest entry-exit is processed only for this purpose, and the relevant personal data is physically used during the visit of Işık Plastik building, within the framework of the personal data processing conditions specified in the 5th and 6th articles of the PDP Law, the legal reason for the legitimate interest of our Company. are collected and recorded in the data recording system. Personal data collected within the scope of visiting Işık Plastik buildings can be transferred to authorized public institutions in accordance with the legislation within the framework of the personal data processing conditions and purposes specified in Articles 8 and 9 of the PDP Law in order to ensure the security of Işık Plastik buildings.

3. PURPOSE OF PROCESSING, CATEGORIZATION AND STORAGE PERIOD OF THE PROCESSED PERSONAL DATA

Işık Plastik notifies the personal data owner of which personal data groups are processing which personal data, the purposes of processing the personal data of the personal data owner and the storage periods within the scope of the obligation to inform in accordance with Article 10 of the PDP Law.

4. DELETING, DESTROYING AND ANONYMIZING PERSONAL DATA

Although Işık Plastik has processed the personal data subject to this Policy in accordance with the provisions of the relevant law, as regulated in Article 138 of the Turkish Penal Code and Article 7 of the PDP Law, in the event that the reasons requiring its processing are eliminated, Işık Plastik decides on its own. Personal data is deleted, destroyed or anonymized on the basis of or upon the request of the personal data owner. 4.1. ETİ Obligation to Delete, Destroy and Anonymize Personal Data Even though the Personal Data has been processed in accordance with the provisions of the relevant law as set forth in Article 138 of the Turkish Penal Code and Article 7 of the PDP Law, in the event that the reasons for processing it disappear, Işık Plastik’s liability Personal data is deleted, destroyed or anonymized upon the decision of the personal data owner or upon the request of the personal data owner. In this context, Işık Plastik fulfills its obligations with the methods described in this section. 4.2. Techniques for Deletion, Destruction and Anonymization of Personal Data Even though the Personal Data has been processed in accordance with the provisions of the relevant law as set forth in Article 138 of the Turkish Penal Code and Article 7 of the PDP Law, in the event that the reasons for its processing disappear, Işık Plastik’s decision shall be taken. Personal data is deleted, destroyed or anonymized on the basis of or upon the request of the personal data owner. In this context, Işık Plastik fulfills its obligations with the methods described in this section. 4.2.1. Deletion and Destruction Techniques of Personal Data

Although it has been processed in accordance with the provisions of the relevant law, Işık Plastik may delete or destroy personal data at its own discretion or upon the request of the personal data owner, in the event that the reasons requiring processing are eliminated. The most used erasing or destruction techniques by Işık Plastik are listed below:
4.2.1.1. Physical Destruction Personal data can also be processed by non-automatic means, provided that it is a part of any data recording system. While such data is being deleted/destroyed, a system of physical destruction of personal data is applied so that it cannot be used later.
4.2.1.2. Secure Deletion from Software While deleting/destroying data processed by fully or partially automated means and stored in digital media; methods are used to delete the data from the relevant software in a way that cannot be recovered again.
4.2.1.3. Safe Deletion by an Expert Isik Plastik may in some cases agree with an expert to delete personal data on its behalf. In this case, personal data is securely deleted/destroyed by the person who is an expert in this field, in a way that cannot be recovered.
4.2.2. Techniques for Making Personal Data Anonymous Anonymization of personal data means making personal data unable to be associated with an identified or identifiable natural person under any circumstances, even by matching them with other data. Işık Plastik can anonymize personal data when the reasons requiring the processing of personal data processed in accordance with the law are eliminated. In accordance with Article 28 of the PDP Law; Anonymized personal data may be processed for purposes such as research, planning and statistics. Such processing is outside the scope of the PDP Law and the explicit consent of the personal data owner will not be sought. Personal data processed by anonymizing will be outside the scope of the PDP Law. The most used anonymization techniques by Işık Plastik are listed below.
4.2.2.1. Masking Data masking is the method of anonymizing personal data by removing the basic identifier information of the personal data from the data set. Example: Name, TR Identity Number, etc. that enables the identification of the personal data owner. converting the information into a data set where it becomes impossible to identify the personal data subject.

4.2.2.2. Aggregation With the data aggregation method, many data are aggregated and personal data is rendered incapable of being associated with any person. Example: Revealing that there are Z number of employees at the age of X without showing the age of the employees one by one.
4.2.2.3. Data Derivation With the data derivation method, a more general content is created than the content of personal data and it is ensured that personal data cannot be associated with any person. Example: Specifying ages instead of birth dates; specifying the area of ​​residence instead of the full address.
4.2.2.4. Data Mixing With the data mixing method, the values ​​in the personal data set are mixed, thereby breaking the bond between the values ​​and individuals. Example: Changing the quality of the sound recordings so that the sounds and the data owner cannot be associated.
Physical Space Security Information: It is clear that it belongs to an identified or identifiable natural person; processed partially or fully automatically or non-automatically as part of the data recording system; Personal data regarding the records and documents taken at the entrance to the physical space, during the stay in the physical space; camera records, fingerprint records and records taken at the security point. Audio/Visual Information: Clearly belonging to an identified or identifiable natural person; Photographs and camera recordings, audio recordings (excluding the recordings included in the Physical Space Security Information), and data contained in documents that are copies of documents containing personal data.

5. RIGHTS OF THE PERSONAL DATA OWNER STATED IN ARTICLE 11 OF THE PDP LAW

We declare that personal data owners have the following rights in accordance with Article 11 of the PDP Law:
Learning whether personal data is processed or not,
If personal data has been processed, requesting information about it,
Learning the purpose of processing personal data and whether they are used in accordance with their purpose,
Knowing the third parties to whom personal data is transferred in the country or abroad,
Requesting correction of personal data in case of incomplete or incorrect processing and requesting notification of the transaction made within this scope to third parties to whom personal data has been transferred,
Requesting the deletion or destruction of personal data in the event that the reasons requiring its processing cease to exist despite the fact that it has been processed in accordance with the provisions of the law and other relevant laws, and in this context, and in case of incomplete or incorrect processing of personal data, to notify the third parties to whom the personal data has been transferred,
Objecting to the emergence of a negative result by analyzing the processed data exclusively through automated systems,
To request the compensation of the damage in case of loss due to unlawful processing of personal data.

You can submit your applications regarding your rights listed above to our Company with the information you can access through our general lighting text at https://www.isikplastic.com/tr/contracts/. Depending on the nature of your request, your applications will be concluded free of charge as soon as possible and within thirty days at the latest; however, if the transaction requires an additional cost, you may be charged a fee according to the tariff to be determined by the Personal Data Protection Board.

OUR INFORMATION TEXT ON THE LAW ON THE PROTECTION OF PERSONAL DATA NUMBER 6698 (“PDPL”)

The usage rights of the Isik Plastic brand belong to Işık Plastik and Ahmet Tolga Güven.

As Işık Plastik (“Company”); We have prepared this Clarification Text in order to tell you about the privacy policy and for what purposes we will process your personal data.

Regardless of whether you are our customer, our dealer, the personal data you provide to us below will be recorded, stored, preserved, within the scope of our legal relations, within the scope of the purpose requiring their processing and in connection with this purpose, in a limited and measured manner, by preserving the accuracy and most up-to-date version of the personal data you have notified or notified to us. We hereby inform you that it will be reorganized when necessary, shared with the institutions that are legally authorized to request this personal data, and that it can be transferred, transferred, classified to third parties at home and abroad, under the conditions stipulated by the PDPL, and processed in other ways listed in the PDPL.

WHICH PERSONAL DATA DO WE PROCESS?

Your personal data that may be subject to processing by us, if you share it with us or if necessary, are as follows:

* Identity Data: Your name, surname, T.C. Your ID number, date and place of birth, gender, marital status, nationality
* Contact Data: Your e-mail address, address, city/town where you live, home and/or mobile phone number
* Other data: Site cookies, Driver’s license data, dealer competencies,

HOW AND FOR WHAT REASONS DO WE COLLECT YOUR PERSONAL DATA?

As a company, we collect your personal data, which we request from you in accordance with the legitimate interests of the company, by fulfilling our legal obligations, by sending us physical or electronic media, by entering information, audio and video on our platforms, and by recording information on the internet that is accessible to third parties. .

We collect your personal data electronically through the cookies used on our website, as detailed in our Cookie Policy, in line with the Company’s legitimate interest in improving and making its platform more effective.

FOR WHAT PURPOSES DO WE PROCESS YOUR PERSONAL DATA?

Your personal data, which we have mentioned above, is processed for the following purposes for the performance of this Service Agreement regarding the service we provide to you.

* Answering your incoming calls and responding to your support needs
* To conclude the complaint in case of a complaint regarding the services we provide
* To examine your information in line with your request or in case of complaints on social media
* Budget management and reporting

We strive to continuously improve and progress in order to fulfill the service we provide to you in the best way possible. For this, we may process your personal data as follows:

* Market interpretation, sales, marketing analysis, managerial analysis, financial planning, site usage and other communication ways.
* To increase the quality of the service we provide to you and to ensure quality control
* Sending bulk e-mails and SMS to assist in consultancy processes
* Marketing the product in the process of developing and managing our current and R&D applications
* Developing the software used in the company by using internal and external resources

Finally, we have an obligation to share your personal data when we are asked to share your personal data through legal requests such as legal and procedural prosecution requests and court decisions, and in accordance with the legal notifications regulated in the legislation.

In addition, if your personal data is the subject of a dispute in which we are also a party, we may need to share your personal data with media and persons such as lawyers, experts, courts, which are necessary for us to exercise our right of defense. We may process your personal data in order to fulfill these legal obligations and to exercise our right of defense.

WHERE DO WE TRANSFER YOUR PERSONAL DATA?

We strive to continuously improve and progress in order to fulfill the service we provide to you in the best way possible. For this, we can transfer your personal data to the relevant units at home and abroad as follows:

* If you prefer to be informed about our campaigns and promotions, we transfer your personal data, including your contact information, to the domestic and foreign contracted suppliers that provide the relevant service in order to send you a mass e-mail.
* We can transfer your personal data collected within the framework of the Cookie Policy, customer candidates and user movement data within the site we collect (where clicked, how long, etc.) to companies that provide business development by making such analyzes in order to provide better service to our customers.
* We can transfer your personal data to companies we work with, such as Google Analytics, Yandex Metrika, for sales, marketing and reporting activities.
* For official transactions, we can transfer this personal data to institutions that are legally authorized to request it.
* In addition, we can transfer all your personal data, including your sensitive personal data, to our lawyers or legal consultants in order to exercise our right of defense, and we can transfer all your personal data, including your sensitive personal data, in case of a duly legal request to transfer your personal data to us.

WHAT ARE YOUR RIGHTS?

In accordance with Article 11 of the KVKK, regarding your personal data, provided that you prove your identity;
* To learn whether the Company processes personal data about you, and if so, to request information about it,
* To learn the purpose of processing your personal data and whether they are used in accordance with the purpose,
* You have the right to learn whether personal data is transferred to domestic and foreign institutions and organizations and to whom.

In addition, you have the right to request the Company to correct your inaccurate and incomplete personal data and to inform the recipients whose data has been or may have been transferred. You can request the destruction (deletion, destruction or anonymization) of your personal data from our Company within the framework of the conditions stipulated in Article 7 of the PDPL. At the same time, you can request that the third parties to whom the data has been or may be transferred be informed about your destruction request. However, by evaluating your destruction request, we will evaluate which method is appropriate according to the conditions of the concrete case. In this context, you can always request information from us about why we have chosen the destruction method we have chosen.

You can object to the results of your personal data analysis, created exclusively using an automated system, if these results are contrary to your interests. If you suffer damage due to the unlawful processing of your personal data, you can request the removal of the damage. Your requests in your application will be concluded free of charge within thirty days at the latest, depending on the nature of the request. However, if the transaction requires a separate cost for the Company, the fee in the tariff determined in the Communiqué on the Procedures and Principles of Application to the Data Controller may be charged by the Personal Data Protection Board.

If necessary, you must submit your application to our Company in writing to the registered e-mail address on the company’s internet address regarding the processing of your personal data, using secure electronic signature, mobile signature or your e-mail address that you have previously informed us and included in our records. Depending on the nature of your request and your application method, the Company may request additional verifications (such as sending a message to your registered phone, calling) in order to determine whether the application belongs to you and thus protect your rights. For example, if you apply through your e-mail address registered with the Company, we may contact you using another communication method registered with the Company and request confirmation of whether the application belongs to you.

PRIVACY AND SECURITY POLICY

All services and content provided on isikplastic.com belong to Işık Plastik and are operated by our company.

As we have stated in our KVKK text, our business may collect personal data for various purposes. By filling out various forms and questionnaires on Işık Plastik, our company collects some information about the members themselves or the businesses they represent (such as name-surname, company information, telephone, address or e-mail addresses) due to the nature of the business. Our company may send campaign information, information about new products, promotional offers to its customers and members in some periods. Our members have the right to choose and change whether or not to receive such information.

Our business may record the IP address of its visitors in order to identify system-related problems and to quickly resolve any problems or disputes that may arise regarding the service provided. IP addresses can also be used to identify users in a general way and to gather comprehensive demographic information.

Our business is committed to keeping confidential information strictly private and confidential, considering it a confidentiality obligation, and taking all necessary precautions and diligence to ensure and maintain confidentiality, to prevent all or any part of confidential information from entering the public domain or unauthorized use or disclosure to a third party. commits to show

THIRD PARTY WEBSITES AND APPS

Our business may link to other sites within its website. Our company does not bear any responsibility for the privacy practices and content of the sites accessed through these links. The Privacy and Security Policy in this contract is only for the use of isikplastic.com and does not cover third party websites.

EXCEPTIONAL CIRCUMSTANCES

In the limited cases specified below, our business may disclose the information of users to third parties within the provisions of this “Privacy and Security Policy”.

These cases are limited in number;

1. Law, Decree-Law, Regulation, etc. To comply with the obligations imposed by the legal rules in force issued by the competent legal authority,
2. Requesting information about users for the purpose of conducting a research or investigation duly carried out by the authorized administrative and judicial authority,
3. It is necessary to provide information in order to protect the rights or security of users.

EMAIL SECURITY

Never write down your credit card number or passwords in the e-mails you send to our Customer Service regarding any of your orders. Remember that none of our employees will ask you for your credit card information. Information contained in e-mails can be viewed by third parties. Under no circumstances can our business guarantee the security of the information transmitted from your emails.

BROWSER COOKIES

Our business can obtain information about the users visiting our site and the use of the website by using a technical communication file (Cookie). The technical communication files mentioned are small text files that a website sends to the user’s browser to be stored in the main memory. The technical communication file facilitates the use of the Internet by storing the status and preferences about the site.
The technical communication file also helps to obtain statistical information about how many people visit the site, for what purpose, how many times a person visits the site and how long they stay on the site, and to dynamically generate advertisements and content from specially designed user pages for users.

Most of the browsers are initially designed to accept the technical communication file, but users can change the settings so that the technical communication file does not arrive or a warning is given when the technical communication file is sent.

You can send us an e-mail for any questions and suggestions regarding our privacy policy.

SITE TERMS OF USE

Everyone who uses our website should pay attention to the conditions stated below.

www.isikplastic.com web pages and all related pages (‘site’) are the property of Işık Plastik legal entity (Business) and Ahmet Tolga Güven at Maltepe Mahallesi Yılanlı Ayazma Yolu Yıldız Sanayi Sitesi No:18/1B09 Zeytinburnu – İSTANBUL. By using and continuing to use the service on the site, you (‘User’) are subject to the following conditions while using all the services offered on the site; You agree that you have read and understood this agreement and that you are bound by the terms written in the agreement. This contract imposes the rights and obligations of the parties on the site that is the subject of the contract, and when the parties accept this contract, they declare that they will fulfill the aforementioned rights and obligations completely, accurately, on time, and within the terms requested in this contract.

1. RESPONSIBILITIES

a) The business always reserves the right to make changes on the prices and offered products and services.
b) The enterprise accepts and undertakes that the member will benefit from the contracted services, excluding technical failures.
c) The user agrees in advance that he will not reverse engineer the use of the site or take any other action to find or obtain the source code of them, otherwise he will be liable for all damages that may arise before third parties, and that legal and penal action will be taken against him.
d) The user, in his activities on the site, in any part of the site or in his communications, is against general morality and good manners, is against the law, injures the rights of third parties, is misleading, offensive, obscene, pornographic, injures personal rights, violates copyrights, encourages illegal activities. agrees not to produce or share content. Otherwise, he is fully responsible for the damage and in this case, the ‘Site’ officials may suspend such accounts, terminate them, and reserve the right to initiate legal proceedings. For this reason, it reserves the right to share information requests from judicial authorities regarding activity or user accounts.
e) The relations of the members of the site with each other or with third parties are under their own responsibility.

2. INTELLECTUAL PROPERTY RIGHTS

2.1. All proprietary or unregistered intellectual property rights such as title, business name, brand, patent, logo, design, information and method in this Site belong to the site operator and owner company or the specified person and are under the protection of national and international law. Visiting this Site or utilizing the services on this Site does not grant any right to such intellectual property rights.

2.2. The information on the site cannot be reproduced, published, copied, presented and/or transferred in any way. The whole or part of the Site cannot be used on another website without permission.

3. CONFIDENTIAL INFORMATION

3.1. The business will not disclose personal information transmitted by users through the site to third parties. This personal information; It contains all kinds of other information to identify the User such as person name-surname, address, telephone number, mobile phone, e-mail address, and will be referred to as “Confidential Information” for short.

3.2. The user can only use promotions, advertisements, campaigns, promotions, announcements, etc. He/she accepts and declares that he/she consents to share the communication, portfolio status and demographic information of the owner of the Site with its subsidiaries or group companies to which it is affiliated, limited to its use within the scope of marketing activities. This personal information can be used to determine the customer profile within the company, to offer promotions and campaigns suitable for the customer profile, and to carry out statistical studies.

3.3. Confidential Information can only be disclosed to official authorities if this information is duly requested by official authorities and when disclosure to official authorities is obligatory in accordance with the provisions of the applicable mandatory legislation.

4. NO WARRANTY:

This contract clause shall apply to the maximum extent permitted by applicable law. The services provided by the entity are provided on an “as is” and “as available” basis and are expressed or implied with respect to the services or application (including any information contained therein), including any implied warranties of merchantability, fitness for a particular purpose, or non-infringement. makes no warranty of any kind, statutory or otherwise.

5. REGISTRATION AND SECURITY

The user must provide correct, complete and up-to-date registration information. Otherwise, this Agreement will be deemed to have been violated and the account may be closed without informing the User. The user is responsible for the password and account security on the site and third-party sites. Otherwise, the Company or its representatives cannot be held responsible for data loss, security breaches and material and moral damages.

6. FORCE MAJEURE

not under the control of the parties; Due to reasons such as epidemics, natural disasters, fire, explosions, civil wars, wars, riots, public movements, declaration of mobilization, strikes, lockouts, infrastructure and internet failures, power cuts (collectively referred to as “Force Majeure” below) arising from the contract. If the obligations become unfulfillable by the parties, the parties are not responsible. During this period, the rights and obligations of the Parties arising from this Agreement are suspended.

7. COMPLETENESS AND APPLICABILITY OF THE AGREEMENT

If one of the terms of this contract becomes partially or completely invalid, the rest of the contract will continue to be valid.

8. CHANGES TO THE CONTRACT

The business can change the services offered on the site and the terms of this contract, partially or completely, at any time. Changes will be effective from the date of publication on the site. It is the User’s responsibility to follow the changes. The user is deemed to have accepted these changes by continuing to benefit from the services offered.

9. NOTICE

All notifications to be sent to the parties related to this Agreement will be made through the known e-mail address of the Business and the e-mail address specified by the user at the time of membership. The user accepts that the address he/she specified while becoming a member is a valid notification address, that he/she will notify the business in writing within 5 days in case of change, otherwise, notifications to this address will be deemed valid.

10. EVIDENCE QUALITY

In all kinds of disputes that may arise between the parties for the transactions related to this contract, the books, records, documents and computer records of the Parties will be accepted as evidence in accordance with the Law of Civil Procedure No. 6100, and the user agrees that he will not object to these records.

11. RESOLUTION OF DISPUTES

Istanbul (Central) Courthouse Courts and Enforcement Offices are authorized to resolve any disputes arising from the implementation or interpretation of this Agreement.