Personal Data Protection Law

1. Scope

This Personal Data Protection Policy (“Policy”) has been prepared to ensure that Ege Seramik Sanayi ve Ticaret A.Ş., its affiliated companies, subsidiaries, and shareholders (“Ege Seramik”) process personal data belonging to third parties in compliance with Law No. 6698 on the Protection of Personal Data (“Law”).

Violations of the Law are taken seriously by Ege Seramik and are evaluated within the scope of disciplinary procedures.

Definitions

• Personal Data: Any information relating to an identified or identifiable natural person.
• Processing of Personal Data: Any operation performed on personal data.
• Special Categories of Personal Data: Data relating to race, ethnic origin, political opinion, health, sexual life, biometric and genetic data.
• Data Controller: The person who determines the purposes and means of processing personal data.
• Data Processor: A third party who processes data on behalf of the data controller.
• Data Subject: The natural person whose personal data is processed.
• Law: Law No. 6698 on the Protection of Personal Data.

2. Principles Regarding the Processing of Personal Data

Ege Seramik processes personal data in line with the purposes of activity stated in its trade registry.

The personal data that may be processed include:

• Identity documents (ID card, passport, driver’s license, etc.)
• Health information (medical reports, blood type, etc.)
• Photographs and video recordings
• Security camera recordings
• Phone number and email address
• Criminal record and information regarding security measures
• Signatures and official documents

3. Methods of Data Collection

Personal data may be collected through the following means:

• Email
• Fax
• Telephone
• SMS
• Mail and courier
• Website and social media accounts
• Online platforms
• Hand delivery

4. Processing and Transfer of Personal Data

Personal data are processed and transferred with the explicit consent of the data subject. In cases where explicit consent is not available, the exceptions specified in the Law shall apply.

Special categories of personal data are processed only with explicit consent. Data relating to health and sexual life may be processed without consent in cases stipulated by the Law.

Personal data may be transferred to countries with adequate protection or abroad, provided that the permission of the Board is obtained where required.

5. Security of Personal Data

Ege Seramik takes the necessary technical and administrative measures to ensure the security of personal data.

• Prevention of unlawful processing and access
• Secure storage of data
• Prevention of unauthorized access

6. Rights of the Data Subject

Data subjects have the following rights:

• To learn whether their personal data are processed
• To request information
• To learn the purpose of processing
• To know the third parties to whom data are transferred
• To request correction or deletion
• To object to automated systems
• To request compensation for damages

Applications may be submitted via email to kvkk@egeseramik.com or in writing to Ege Seramik Sanayi ve Ticaret A.Ş., Kemalpaşa / İzmir.

7. Accurate and Up-to-Date Retention of Personal Data

• Daily backups
• Firewall and antivirus software
• Encryption and access restrictions
• Physical security measures
• Confidentiality agreements

8. Policy Amendments

This Policy may be updated when necessary. The updated version shall enter into force upon publication at www.egeseramik.com.