Information Security and Data Protection Policy

This lighting text; With the 10th article of the Law on Protection of Personal Data No. 6698, the obligation to inform in its place in bringing will be obeyed method and the fundamentals about notification in the scope of data in charge as GERPA ELEKTRİK TEKSTİL SAN.VE TİC.A.Ş. (Trademark: GERPAAS) (referred to as GERPAAS).

As GERPAAS, we manufacture and sell electrical and mechanical product groups by metal processing. It is audited and updated with the joint work of our Quality & Information units in order to legally process, access, ensure and protect the information of our customers, dealer network, suppliers, references, employees, shareholders, managers in the national and international markets, in accordance with the following principles.

Our principles:

• Compliant with the law and honesty rules
• Accurate and up-to-date when needed
• For specific, explicit, and legitimate purposes
• Relating to the purpose for which they are processed, limited and restrained being.
• Storage for the period stipulated in the relevant legislation or required for the purpose for which they are not to be

Personal data, as stated in the 5th article of the aforementioned law, the protection and integrity of the life of the person himself and others; the data of the parties, provided that they are directly related to the contracts made between the parties; It is processed by considering the existence of a right, its preservation, and its compliance with the conditions of preservation of rights and freedoms.

Personal data is deleted by the data entry officer in the relevant unit upon the instruction of the General Manager when deemed necessary.

Personal data can be transferred to the relevant authorities by ensuring the security of the person's ethnic origin, beliefs, social life, and private qualities. In addition to this information, personal data abroad; can be transferred to the relevant units regarding the international agreements, laws, and the confidentiality commitment of the data security officer of the organization.

GERPAAS aspect special To life-related your privacy protection, information of safety providing and protection, fundamental right and freedoms preservation and moral to values respectful be the most priority is our principle. GERPAAS with The data of the persons who have communicated are processed in accordance with the Law on the Protection of Personal Data No. 6698 and adhering to the administrative and technical conditions specified in the KVKK. we protect.

The purpose of our processing of personal data;

• products or services to our customers in the business areas in which we to present,
• Communication with our customers and suppliers for sales and marketing activities to ensure,
• Our commercial relations with our customers and suppliers develop,
• Commercial operations and logistics operations to be able to execute
• the interests of our employees to protect,
• Our financial activities to be able to execute
• Our IT activities to be able to execute
• Our administrative activities to be able to execute
• Our quality and sustainability activities to be able to execute
• Our research and development activities to be able to execute
• Our production and planning activities to be able to execute
• Our legal and contractual activities to be able to execute
• Occupational safety and health activities are to

As a data controller, to understand your personal data, consumer needs, respond to your requests faster, and provide better service by improving our communication with our consumers, to inform you about our products and services.

to inform, product and Our services about your feedback to receive, your requests, and your needs It can be stored and processed for purposes such as developing and diversifying our products and services in line with them, and performing our necessary quality and standard audits as stipulated by the relevant laws and regulations, or fulfilling our reporting and other obligations stipulated within the scope of the relevant legislation. GERPAAS provides this service from third parties. receivable.

Personal your data Storage Time: GERPAAS, data owner by provided personal data, it offers your services and commercial from relationships caused your obligations in its place bringing in for the purpose of, your services provided duration and commercial will keep it for the duration of the relationship. Your personal data will be deleted, destroyed, or anonymized and continued to be used by us when the purpose for which it is to be processed disappears and/or when the time-out period for which we are required to process your data in accordance with the legislation expires. In addition, GERPAAS, in case of any dispute that may arise between the data owner and the personal data, is limited to the purpose of making the necessary defenses within the scope of the dispute and during the time-out periods determined in accordance with the relevant legislation. will be able to store it.

Your Rights Under the Law:

The rights of the personal data owners arising from KVKK in Article 11 of the Law on the Protection of Personal Data No. 6698 (“KVKK”) are included with their details and are listed below in general terms.

Article 11 of the KVKK No. 6698 entered into force on 07 October 2016, and the rights you have under this Law are as follows;

1. Whether personal data is processed learning,
2. If personal data has been processed, request information about it don't,
3. The purpose of processing personal data and whether they are used in accordance with the purpose of learning,
4. Third parties to whom personal data is transferred at home or abroad don't know,
5. In case of incomplete or incorrect processing of personal data, their correction don't want,
6. of Law 7. in the article envisaged conditions in the framework of personal data to be deleted or none to be made request and notification of the transactions made to the third parties to whom the personal data has been transferred. don't want,
7. operand data exclusively automatic systems by analysis to be made by means of of the person itself against an objection to the occurrence of a result don't,
8. Personal data to the law against aspect processing due to to the loss to be hit in case of your damage removal of don't demand

Interested persons can apply to the Company through the following methods:

Personal application, through a notary public,

By sending an e-mail to the registered e-mail address of the Company by signing with a secure electronic signature or mobile signature,

By sending an e-mail from your e-mail address previously reported to our company and registered in the system.

* It is necessary to write "Information Request Under KVKK" in the subject part of the post.

Relevant person requests In accordance with Article 13/2 of the KVKK, the requests of the relevant person shall be made as soon as possible and at the latest within 30 days, depending on the nature of the request.

 It will be finalized within (thirty) days.