Protection of Third Parties' Personal Data

SIGMA would like to inform you about your personal data pursuant to Law No. 6698 on the Protection of Personal Data ("KVKK"), which was prepared and entered into force for the purpose of protecting fundamental rights and freedoms, in particular the right to privacy.

Your personal data are processed within the framework of the methods, legal grounds, purposes and conditions set out below, for the period stipulated in the relevant legislation or necessary for the purposes for which they are processed, and all administrative and technical measures necessary for their protection are taken by our company.

Method of Collecting Personal Data:

Your personal data may be collected by automated or non-automated means, in written, verbal or electronic form, through the Company headquarters and all of its affiliated units, the website, social media accounts, integration systems, the parties from which our company obtains services that complement or extend its activities, contracted institutions, business partners, suppliers and other similar channels.

Legal Grounds for Collecting Personal Data and Purposes of Processing:

Customer Data:

The collected personal data will be processed, in the course of conducting our commercial activities, within the personal data processing conditions and purposes set out in Articles 5 and 6 of Law No. 6698, for the purposes of: the performance by our business units of the work necessary for our customers to benefit from the products and services offered by our Company; customizing the products and services offered by our Company according to customers' preferences, usage habits and needs and recommending them to customers; ensuring the execution of our Company's human resources policies; ensuring the legal and commercial security of our Company and of the persons in a business relationship with our Company; and determining and implementing our Company's commercial and business strategies. Detailed information on the purposes for which your personal data are processed by our Company is available in the Personal Data Protection Policy made available to the public on the www.sigmamuhendislik.com.tr website.

Since most of our customers are corporate legal entities, the natural persons whose personal data we process are generally data subjects acting as Representatives/Employees of Corporate Customers. The Personal Data relating to these persons are as follows:

E-mail Addresses, Name-Surname, Telephone and Address Information used for correspondence and campaign notifications
Turkish ID, Civil Registry Information, Signature, Telephone and Address Information contained in the Signature Circulars submitted together with Contracts
Name-Surname, Signature, Telephone and Address Information in the "Delivered By" field on Waybill Forms
Name-Surname, Turkish ID Number, Telephone and Address Information of the Customer Representatives who will take delivery of goods belonging to the Customer
Name-Surname, Company, Position, Address Information, Telephone and E-Mail Information of persons participating in Dealer/Service trainings

Our Company may process the following personal data of its customers who are natural persons in order to provide them with better service and to fulfil its contractual and legal obligations.

Name-Surname, Turkish ID Number, Address Information, Telephone, E-Mail Information

Visitor Data:

Camera recordings are made at our Company headquarters and other business units for security purposes. For security purposes, the name-surname, vehicle licence plate number, Turkish ID card / passport / driving licence and their numbers, and entry-exit times of visitors coming to our Company headquarters and other business units are recorded.

Data of Parties and Suppliers Obtained Within the Scope of Commercial Business Relationships:

Within the scope of our Company's commercial business relationships with third parties, such as the procurement of goods and services, leasing, carriage/joint carriage, agency, etc., personal data of the parties and persons concerned, such as name-surname, Turkish ID number, identity document, signature circular, contact details and, depending on the nature of the situation, licence plate number and account number, may be obtained for the purposes of negotiating, establishing, performing and proving the contract.

Since the type of business relationship may vary from person to person, not all of the information listed above will apply to every natural person; it will vary according to the nature of the business. Your personal data are processed for the purposes of fulfilling our legal obligations arising from the legislation; providing Production, Sales, Marketing, Raw Material Import, Product Export and Customs Clearance services, and carrying out, conducting, performing, proving and developing the related transactions; reporting to customers; fulfilling the requirements of the contracts concluded by you and/or by us; statistics, customer satisfaction studies, ensuring security, developing commercial and business strategies, analysing the services provided, and compliance with domestic and international legislation; complying with the information retention, reporting and notification obligations stipulated by the Ministry of Interior, the General Directorate of Security, Local Administrations, the Ministry of Customs, the Free Zones Directorate, Customs Directorates, the Ministry of Finance, the Revenue Administration, the Ministry of Labour and Social Security, the Social Security Institution and other authorities; carrying out promotional, marketing and campaign activities for these services and products, subject to your permission; and developing services and products suitable for you and maintaining them without interruption.

Pursuant to the KVKK, personal data of a general nature may be processed without seeking your explicit consent where one of the conditions listed in the Law exists:

It is expressly provided for by law,
It is necessary for the protection of the life or bodily integrity of the person himself/herself, or of another person, who is unable to express his/her consent due to actual impossibility or whose consent is not deemed legally valid
The processing of personal data of the parties to a contract is necessary, provided that it is directly related to the establishment or performance of that contract,
It is necessary for the data controller to fulfil its legal obligation,
The data has been made public by the data subject himself/herself,
Data processing is necessary for the establishment, exercise or protection of a right
Data processing is necessary for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject.

Persons/Organizations to Which Personal Data May Be Transferred:

In line with the purposes stated above, your personal data may be transferred, depending on the type of personal data and limited to the purpose, within the legal framework, to: the parties to and persons concerned with cargo/postal shipments; our company's domestic and foreign affiliates and their subsidiaries; employees, company officers, legal, financial and tax advisors, auditors, firms from which our company obtains services that complement or extend its activities, consultants with which it cooperates, suppliers, sub-carriers, agencies, operators, dealers, service providers, banks and financial institutions; authorized public institutions and organizations such as authorities like the Ministry of Interior, the General Directorate of Security, Local Administrations, the Ministry of Customs, Customs Directorates, the Free Zones Directorate, the Ministry of Finance, the Revenue Administration, the Ministry of Labour and Social Security and the Social Security Institution, other Ministries, judicial authorities and administrative authorities; and persons permitted by the provisions of the legislation or institutions and organizations for which you have given your consent.

Rights of the Data Subject:

Pursuant to Article 11 of the KVKK, you have the following rights regarding your personal data;

To learn whether personal data is being processed,
To request information about the processing if personal data has been processed,
To learn the purpose of the processing of personal data and whether they are used in accordance with their purpose,
To know the third parties to whom personal data are transferred domestically or abroad,
To request the rectification of personal data if they have been processed incompletely or inaccurately, and to request that the operations carried out be notified to the third parties to whom the personal data have been transferred,
To request the erasure or destruction of personal data within the framework of the conditions stipulated in the KVKK, and to request that the operations carried out be notified to the third parties to whom the personal data have been transferred,
To object to the occurrence of a result to the detriment of the person himself/herself by means of the analysis of the processed data exclusively through automated systems,
To request compensation for the damage in the event of loss due to the unlawful processing of personal data.
Until a different method is determined by the Board, applications concerning your rights shall be made in writing directly to the address of our company's Head Office. If the procedure additionally entails a cost, the fee set out in the tariff determined by the Board may be charged.
You are required to submit your application on matters relating to the processing of your personal data to our Company by completing the application form available on the Company's www.sigmamuhendislik.com.tr website and delivering it in person or through a notary public, or by using a registered electronic mail (KEP) address, a secure electronic signature, a mobile signature or your e-mail address previously notified to us and registered in our records. Depending on the nature of your request and your application method, the Company may request additional verifications (such as sending a message to your registered telephone number or calling you) in order to determine whether the application belongs to you and thereby protect your rights. For example, if you apply via your e-mail address registered with the Company, we may contact you using another contact method registered with the Company and request confirmation as to whether the application belongs to you.

This notice is published for information and disclosure purposes.

Respectfully,

SIGMA