Personal Data Protection Law (PDPL) Clarification Text

1. The Purpose of the ClarificationText and the Position of the Data Controller of Our Company:

This clarification text of the processing of personal data, particularly to protect the fundamental rights and freedoms of individuals to privacy and the obligations of real and legal persons who process personal data in order to determine provide explanations and inform about the processing of personal data of customers / users in accordance with the Article. It has been written accordingly to Resmi Gazete no: 29677 published in April 7, 2016, Kişisel Verilerin Korunması Kanunu no: 6698, under the subject Veri Sorumlusu Aydınlatma Yükümlülüğü.

2. The Purpose of the Processing of Personal Data

The personal data of the customers about the products and services offered by the Mollaoglu Metal sheet and Structural Steel trading joint stock company (Hereinafter referred as “company”) giving the benefit of the people of the work carried out by business units and relevant business processes necessary for the execution of business activities to be conducted by the company as required by the business units and related business processes relevant for the realization of the execution of the company's commercial and/or business strategies for the planning and execution of the company and of the persons concerned in legal business relationship with the company, Jul 5 of the Law, including the provision of technical and commercial occupational safety. and 6. personal data are processed within the framework of the processing conditions and purposes specified in the articles.

According to 4th law the article, personal data must be processed in accordance with the procedures and principles provided for in the Law and other relevant legislation. In this context, data controllers are obliged to comply with the following general principles regarding the processing of personal data:

• Compliance with the law and the rules of decency.
• Be accurate and up-to-date when necessary.
• Processing for specific, explicit and legitimate purposes.
• Being connected, limited and measured with the purpose for which they are processed.
• To be kept for the period stipulated in the relevant legislation or necessary for the purpose for which they are processed.

3. Data proccessed by the company

Identity Data	Name, surname, photocopy of identity card (name, surname, T.C. identity number, wallet serial number, father's name, mother's name, place of birth, date of birth, marital status, province-district-neighborhood-village where it is registered, volume no- family row no- row no place of issue, reason for issue, registration no, date of issue, maiden name), gender, signature declaration
Contact Data	E-mail, mobile phone, business phone, workplace address, postal address, postal code
Financial Data	Bank account details, credit card number, expiration date, cvc number, payment amount, payment date, currency, voucher, description, debit, credit, balance, contract amount, type of product items, VAT Information, period of service, the collection process, the screen billing information (first name, last name, billing records, billing nicks, the tax office, tax ID, tax ID, address, Country, City, County, Precinct, zip code, e-mail, invoice currency, whether it is exempt from VAT)The billing information screen (Current) (title, address, serial number, invoice ID, invoice type, invoice date, customer-V.D./No/Real person, accounting transfer status, invoice status, calculation option, invoice class, waybill date, fat. Currency exchange and tour/setup, code, description, unit price, amount, period, period, type of income, Amount, total, VAT rate, VAT, total general account information screen (Payment type, the first and the last 4 digits of card nos, payment amount, the account start date, type of income, open account, warning limits , finance, sales, supply, sales,customer card of the current (market Code, sales representative, name, surname, payment methods, method of collection, delivery, the current currency types of risk, risk limit, open account, cash, local currency currency currency current account of the Company, connection definitions accounting accounting accounting accounting accounting, whether he is an e-Billing user or not.
Private Qualified Data	A photocopy of an identity card or a photo found on a driver's license, blood type
Work/Education Data	Company, position, school, department information, title, past work experience, time worked in the past, past salary information, past position information, salary to work, position and department information.
Visual and Auditory Data	Real person photos, voice recordings, camera recording

4. Parties to Whom Personal Data May be Transferred

Personal data of customers about the products and services offered by the company giving the benefit of the people of the work carried out by business units and relevant business processes necessary for the execution of business activities to be conducted by the company as required by the business units and related business processes relevant for the realization of the execution of the company's commercial and/or our affiliates for the purposes of planning and execution of business strategy, shareholders, business partners, suppliers to company officials are authorized to share according to 8th and 9th of the Law with legally authorized public institutions and private persons and other persons. Personal data may be shared within the framework of the processing conditions and purposes specified in the articles.

5. The Method and Legal Reason for the Collection of Personal Data

By company through different channels and based on different legal grounds; develop products and services that we offer we process your personal data in order to carry out our business activities and the identification, communication, curriculum vitae, legal process, customer, transaction, location, information risk management, finance, professional experience, visual and audio records, demographic information, educational level and income level your information; Your legal relationship during the establishment of our company, and during the continuation of the relationship in question, you from third parties, regulatory authorities and is subject to the internet site, various contracts, electronic mail tools through an application form from our company, through the channels of oral communication, written or oral, written, or electronically in the physical environment is collected automatically. Your personal data is also subject to Section 5th and 6th of the Law within the scope of the personal data processing conditions and purposes specified in the articles in the 2nd and 3rd of this Clarification and Consent Text. it can be processed and shared in accordance with the legal reasons and purposes specified in the articles.

6. Personal Data Owner’s Rights According to Law 6698 11th

Everyone can contact the data controller about themselves;

• Learn whether personal data is processed or not
• If personal data has been processed, request information about it,
• Learn the purpose of the processing of personal data and whether they are used in accordance with the purpose,
• Know the third parties to whom personal data is transferred in the country or abroad,
• Request correction of personal data in case of incomplete or incorrect processing or request deletion or destruction of personal data within the framework of the conditions stipulated in the law,
• Requesting notification of the transactions made in accordance with subparagraphs (d) and (e) to the third parties to whom personal data is transferred,
• By analyzing the processed data exclusively through automated systems, one don't argue with the emergence of a result against one's self,
• In case of damage caused due to the unlawful processing of personal data, they have the right to demand compensation for the damage.

As personal data owners, you may submit your requests regarding your rights to the company by the methods specified in the company’s Personal Data Protection and Processing Policy. The company will conclude the request free of charge as soon as possible and within thirty days at the latest, depending on the nature of the request. However, if the transaction requires an additional cost, the company reserves the right to charge a fee based on the tariff determined by the Personal Data Protection Board.