Scope

As Polexchem, we show maximum sensitivity to the security of your personal data.

1/ Purposes of Processing Personal Data

Polexchem processes personal data for the following purposes:

• Execution of Emergency Management Processes
• Execution of Information Security Processes
• Conducting Audit / Ethics Activities
• Execution of Activities in Compliance with the Legislation
• Execution of Finance and Accounting Affairs
• Ensuring Physical Space Security
• Follow-up and Execution of Legal Affairs
• Execution of Occupational Health / Safety Activities
• Receiving and Evaluating Suggestions for Improvement of Business Processes
• Execution of Goods / Service Procurement Processes
• Execution of Goods / Services After Sales Support Services
• Execution of Goods / Service Sales Processes
• Execution of Activities for Customer Satisfaction
• Conducting Marketing Analysis Studies
• Execution of Risk Management Processes
• Execution of Contract Processes
• Tracking Requests / Complaints
• Keeping Facility Entry and Exit Under Control
• Execution of Supply Chain Management Processes
• Ensuring the Security of Data Controller Operations
• Providing Information to Authorized Persons, Institutions and Organizations
• Creating and Tracking Visitor Records

Personal data are collected by Polexchem verbally, in writing or electronically by automatic or non-automatic methods. The personal data in question will be processed by taking all necessary information security measures and will be stored and preserved by transferring them to physical archives and information systems during the legal retention period or for the period required by the purpose of processing. The relevant personal data will be destroyed and destroyed by Polexchem at the end of the period required by the purpose of processing.

2/ To whom and for what purposes personal data may be transferred

Personal data processed by Polexchem may be shared with the following third parties in order to carry out operational processes, to report and inform when necessary and to provide security measures:

• To the extent necessary within the scope of our obligations in accordance with tax, SSI, and related legislation, to the third parties that provide consultancy services to the CPA and consultancy services with whom we have a contractual relationship,
• Legally authorized public institutions and organizations,
• The security company with which the service relationship was established,
• All other natural and legal persons, both in Turkey and abroad, to whom we have obtained your consent for the transfer of personal data,
• With auditors and consultants, limited to the reason for transfer,
• With our business partners and group companies
• Necessary technical and legal measures are taken to prevent violations of rights during data transfer to third parties, and it is monitored that the preservation in accordance with the law will be realized both within Polexchem and in the third party to whom the data is transferred.

3/ Method and Legal Grounds for Processing Personal Data

Personal data processed by Polexchem may be processed for the purposes specified in the section titled “Purposes of Processing Personal Data” above and based on the following legal reasons in the Law:

• Obtaining explicit consent, provided that it is based on information, relates to a specific subject and is freely given
• Data processing is stipulated in the legislation
• Provided that it is necessary for the establishment and performance of the contracts to which we are a party, it is necessary to process the personal data of the contracting parties
• It is mandatory for us to fulfill our legal obligations (especially in relation to our commercial and administrative activities, in order to fulfill our obligations arising from applicable trade, labor, tax and SSI legislation)
• It is mandatory for us to process data for the establishment, exercise or protection of a right
• Data processing is mandatory for our legitimate interests, provided that it does not harm rights and fundamental freedoms
• It is mandatory for the protection of the life or physical integrity of the person who is unable to disclose his/her consent due to actual impossibility or whose consent is not legally valid
• Personal data has been made public by the Data Owner
• Fulfillment of the legal obligation of the data controller

These data may be reported to our company verbally and in writing, as well as obtained from official and institutional organizations within the scope of company activities. The data in question are stored both in physically locked areas and in digital systems that are protected in closed circuit and all kinds of security measures have been taken.

4/ Rights of the Personal Data Owner

Under the Law, the following rights are recognized:

• Learn whether personal data is being processed,
• Request information if personal data has been processed,
• Learn the purpose of processing personal data and whether they are used for their intended purpose,
• To know the third parties to whom personal data is transferred domestically or abroad,
• To request correction of personal data in case of incomplete or incorrect processing and to request notification of the transaction made within this scope to third parties to whom personal data is transferred,
• Although it has been processed in accordance with the provisions of the Law and other relevant laws, to request the deletion or destruction of personal data in the event that the reasons requiring its processing disappear and to request notification of the transaction made within this scope to third parties to whom personal data is transferred,
• To object to the occurrence of a result against you by analyzing the processed data exclusively through automated systems,
• To request compensation for damages in case you suffer damage due to unlawful processing of personal data.

Requests for more information about Polexchem’s compliance and policies regarding the Law and other relevant legislation in force and for the exercise of the rights mentioned above should be submitted to our company in writing.

Application;

• Name, surname
• Signature if the application is in writing
• Turkish Republic ID number for citizens of the Republic of Turkey, nationality, passport number or ID number, if any, for foreigners
• Residential or workplace address for notification
• Electronic mail address, telephone and fax number for notification, if any
• Subject of request

information must be included. In addition, information and documents regarding the request must be attached to the application.

5/ Information and Consultation

To get more detailed information about Polexchem Personal Data Protection Law and to consult about the compliance of the applications with the rules and standards;

Contact Person : Arif ARCAN , Financial Affairs Manager

Tel : +90 212 886 79 70

Fax : +90 212 886 79 77

E-Posta : aarcan@polexchem.com