OLİMPİA OTO CAMLARI SANAYİ VE TİCARET ANONİM ŞİRKETİ DATA POLICY

At Olimpia Oto Camları Sanayi ve Ticaret Anonim Şirketi (hereinafter referred to as the “Company”), we exercise maximum care about the security of your personal data. With this in mind, we attach great importance to ensuring that all kinds of personal data belonging to persons affiliated with the Company are processed and stored in compliance with the Law No. 6698 on the Protection of Personal Data (the “Law”). As we fully understand this responsibility we have, the personal data you share with the Company as the data owner as a customer, supplier, employee, visitor or business partner, and/or your personal data obtained through the Company’s business, procedures and operations are processed as described below and within the limits defined by the legislation.

This Information Text was written to inform you about the purposes for which the Company can process your personal data as the “Data Controller”; to whom and for which purposes it can transfer your personal data; the method and legal basis to collect personal data; and your rights as per Article 11 of the Law as the data owner.

1. Purposes for Which the Personal Data Can Be Processed:

Your personal data shall be processed by the Company to ensure that the products and services offered by the Company can be provided in a legal, complete and timely manner; to ensure that orders can be received and shipped; to fulfil the legal obligations stated in the legislation; to keep especially the payment records within the Company; and to fully and correctly fulfil the obligations arising from the legislation and the business, service, sales, power of attorney, work and other contracts to which the Company is a party.

2. For Which Purposes and To Whom the Processed Personal Data Can Be Transferred:

In order to fully and timely provide the products and services offered by the Company in a legal manner, fulfil our legal obligations stated in the legislation, and fully and correctly fulfil our contractual and legislative obligations, your personal data can be shared with our dealers from which we receive services to carry out the Company’s activities, with our business partners, suppliers, organizations we are in collaboration with and the legally authorized bodies to ensure that we can fulfil our legal obligations, under the personal data processing conditions and purposes stated in Articles 8 and 9 of the Law.

3. Method and Legal Basis to Collect Personal Data:

Although it varies depending on your relationship with the Company, your personal data is collected because it is clearly stipulated in law, because it is necessary to process personal data of the parties to a contract on the condition that such processing is directly related to the issuing or performance of the contract, because it is necessary to ensure that the Company can perform its commercial activities in the legal framework in a complete and timely manner and can completely and correctly fulfil its legal obligations in this regard; and personal data acquired for such legal reasons is collected through partially or fully automated means or other collection means that are not automated, including oral, written and electronic environments, through Company dealerships, website, social media platforms, etc.

4. Rights of the Data Owner as per Article 11 of the Law:

As per Article 11 of the Law titled “Rights of the Data Subject”, personal data owners can apply to the Company with a written letter or with other methods determined by the Personal Data Protection Council to exercise the following rights:

• To learn if their personal data has been processed;
• If their personal data has been processed, to request information about such processing;
• If their personal data is processed, to learn the purpose of such processing and find out if the data is used in compliance with this;
• If their personal data is transferred to third parties in or outside the country, to find out these third parties to whom their data is transferred;
• If their personal data has been processed in an incomplete or inaccurate manner, to ask for rectification and to request that the third parties to whom their personal data was transferred are informed about such rectification;
• Although the personal data was processed in compliance with the Law and provisions of other relevant laws, if reasons for processing personal data are no longer valid, to ask for deletion or destruction of the personal data and request that the third parties to which the personal data was transferred are informed about such deletion or destruction;
• To object to a result that is against them arising from the analysis of processed data exclusively through automated systems;
• If they incur losses due to unlawful processing of personal data, to request compensation for such loss.

To exercise the rights above, you can write your identification details and your explanation regarding the right you wish to use among the ones stated in Article 11 of the Law in a letter of request, completely fill out the “Form of Application to Data Controller” at Veri-Sorumlusuna-Basvuru-Formu.pdf address of the Company, and bring a wet ink signed copy of the form to “Köşklüçeşme Mah. İstanbul Cad. No:97 Gebze/KOCAELİ” in person, send it through a notary or using other methods stated in the Law.

Your request in the application shall be concluded free of charge by the Company in the shortest time possible but no later than thirty days, depending on the nature of the request. However, if this procedure incurs a separate fee for the Company, the fee stated in the tariff defined by the Personal Data Protection Council shall be charged.