Clarification Text on the Processing of Personal Data

Clarification Text on the Processing of Personal Data

Clarification Text Pursuant to the Law on the Protection of Personal Data No. 6698

1. Data Controller In accordance with the Law on the Protection of Personal Data No. 6698 ("KVKK"), your personal data may be processed by EMKA ALTYAPI İNŞAAT VE TURİZM HİZMETLERİ TİCARET LİMİTED ŞİRKETİ, acting as the data controller, within the scope explained below. Address: Zekeriyaköy Mahallesi Arif Sokak No.17 Sarıyer 34450 Istanbul E-mail: iletisim@emkaaltyapi.com Phone: +90 532 451 49 72

2. Purposes of Personal Data Processing Your collected personal data may be processed for the following purposes:

• Conducting job application processes

• Carrying out communication activities

• Customer relationship management

• Managing tender and contract processes

• Fulfilling legal obligations

• Carrying out occupational health and safety activities

• Conducting finance and accounting transactions

• Planning and execution of corporate communication activities

• Executing goods and service sales processes

• Conducting marketing analysis studies

• Managing risk processes

• Strategic planning activities

• Planning and execution of commercial and business strategies

• Providing information to authorized institutions

• Creation and tracking of visitor records

3. Parties to Whom Personal Data May Be Transferred and Purposes of Transfer In line with the realization of the purposes mentioned above, your collected personal data may be transferred to our business partners, suppliers, shareholders, legally authorized public institutions, and private individuals within the framework of the personal data processing conditions and purposes specified in Articles 8 and 9 of the KVKK.

4. Method of Personal Data Collection and Legal Basis Your personal data may be collected by our Company through various channels and based on different legal grounds; via automated or non-automated methods, through offices, the website, social media channels, mobile applications, and similar means, whether orally, in writing, or electronically. Your personal data may be processed based on the following legal grounds specified in Articles 5 and 6 of the KVKK:

• It is explicitly provided for by the laws.

• It is mandatory for the protection of the life or physical integrity of the person or another person, where the person is physically incapable of giving their consent or their consent is not legally recognized.

• It is necessary to process the personal data of the parties to a contract, provided that it is directly related to the establishment or performance of a contract.

• It is mandatory for the data controller to fulfill its legal obligations.

• It has been made public by the data subject themselves.

• Data processing is mandatory for the establishment, exercise, or protection of a right.

• Data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject.

5. Rights of the Personal Data Subject Under Article 11 of the KVKK As personal data subjects, if you submit your requests regarding your rights to our Company using the methods described below, our Company will conclude the request free of charge within thirty days at the latest, depending on the nature of the request. However, if the transaction requires an additional cost, a fee may be charged by our Company in accordance with the tariff determined by the Personal Data Protection Board. In this context, personal data subjects have the right to:

• Learn whether personal data is being processed,

• Request information if personal data has been processed,

• Learn the purpose of processing the personal data and whether they are used in accordance with their intended purpose,

• Know the third parties to whom personal data is transferred domestically or abroad,

• Request correction of personal data if it is incomplete or incorrectly processed,

• Request the deletion or destruction of personal data,

• Request notification of correction, deletion, and destruction processes to third parties to whom personal data has been transferred,

• Object to the occurrence of a result against the person themselves by analyzing the processed data exclusively through automated systems,

• Request compensation for damages in case personal data is processed unlawfully.

6. Communication and Application Method In accordance with Article 13 of the KVKK, you may submit your request regarding the exercise of your above-mentioned rights to our Company in writing or by other methods determined by the Personal Data Protection Board: E-mail: iletisim@emkaaltyapi.com Postal Address: Zekeriyaköy Mahallesi Arif Sokak No.17 Sarıyer 34450 Istanbul Your applications must contain your name-surname, signature, Turkish ID number, residential or business address, e-mail address, telephone and fax number, and the subject of the request. If there is doubt that the application is made by you, our Company may request identity verification.