MARTAŞ AUTOMOTIV SPARE PARTS TIC. VE SAN. A.Ş. CLARIFICATION STATEMENT ON THE PROCESSING OF VISITOR PERSONAL DATA

1. Data Controller and Representative
In accordance with Law No. 6698 on the Protection of Personal Data (“KVKK”), Martaş Otomotiv Yedek Parça Tic. ve San. A.Ş. (“Company”), as the data controller, we will be able to process, record, store, store, classify, update, and, where permitted by the legislation, disclose/transfer the personal data of our visitors to third parties limited to the purpose for which they are processed, within the scope of the purposes set out below.

2. Purpose of Processing Your Personal Data
Within the scope of the KVKK legislation and other relevant legislation, your personal data are processed in accordance with the basic principles stipulated in the KVKK, in accordance with the basic principles stipulated in the KVKK, within the scope of the obligations and responsibilities stipulated by the relevant legislation and within the scope of the obligations and responsibilities stipulated by the relevant legislation for purposes such as image recording processes for security purposes, recording of identity information at the entrances to the facility and carrying out access permission processes, coordination of emergency operations, guest internet usage records, and are stored securely in physical or electronic media for the appropriate period of time for the purpose of processing. Within the scope of these activities, the Company acts in accordance with the obligations stipulated in all relevant legislation, especially KVKK, regarding the protection of personal data. Detailed information on the purposes of processing by our organization; You can access the KVKK Policy at www.martas.com.tr

3. Transfer of Your Personal Data
Your personal data processed within the scope of the purposes described; In accordance with the basic principles stipulated in the KVKK and within the personal data processing conditions and purposes specified in Article 8 of the KVKK, limited to the purposes stated above by the Company; If necessary, it may be transferred to authorized public institutions and organizations, companies that receive support services in order to carry out our business activities, and independent audit companies within the framework of legal obligations and legal limitations.

4. Collection Method and Legal Reason of Your Personal Data
Your personal data is collected by the Institution through camera recording system, visitor entry form, visitor internet entry and registration system and similar channels and based on the legal reasons stated above in order to carry out our activities; in order to improve the services we offer and to carry out our commercial activities. In this context, your personal data may be processed and transferred by obtaining explicit consent in the light of the principles stipulated in Article 4.2 of the KVKK or without explicit consent in the presence of the situations stipulated in Articles 5.2 and 6.3.

5. Retention Periods for Your Personal Data
The retention periods for your personal data are as stated below:
● If a provision in the law or relevant legislation specifies a period of time for the storage of data, the data must be kept for at least this period. The data in question is deleted at the end of the specified period.
● If a period of time has not been determined by law regarding the storage of the data we process, the data in question; It is stored for 6 months for the period determined in accordance with the relationship between us, for a maximum of 1 year, and it is deleted - without the need for your request - when the specified period expires.
● If a period of time is stipulated in the legislation regarding the storage of data and you request the deletion of the data in question before this period, this request cannot be realized. In cases where the period for the storage of data is not specified in the legislation, if you request the deletion of the data, your data will be deleted immediately and within 30 days at the latest.

6. Your Rights as a Data Subject Pursuant to Article 11 of the LPPD
The rights you have pursuant to Article 11 of the LPPD are as follows:
● Learn whether personal data is being processed,
● Request information if their personal data has been processed,
● To learn the purpose of processing personal data and whether they are used for their intended purpose,
● To know the third parties to whom personal data are transferred domestically or abroad,
● To request correction of personal data in case of incomplete or incorrect processing and to request notification of the transaction made within this scope to third parties to whom personal data is transferred,
● Although it has been processed in accordance with the provisions of the KVK Law and other relevant laws, to request the deletion or destruction of personal data in the event that the reasons requiring its processing disappear and to request notification of the transaction made within this scope to third parties to whom personal data is transferred,
● To object to the emergence of a result to the detriment of the person himself/herself by analyzing the processed data exclusively through automated systems,
● In case of damage due to unlawful processing of personal data, to demand compensation for the damage,

You, our esteemed visitors, personal data owners, may submit your requests regarding the above-mentioned rights via this method or Martaş Otomotiv Yedek Parça Tic. ve San. A.Ş. with the relevant person application form or Martaş Otomotiv Yedek Parça Tic. ve San. A.Ş. Merve Mahallesi Necip Fazıl Caddesi No: 10/B Sancaktepe 34791 Istanbul, Turkey in writing and with wet signature or by sending it to our registered e-mail address martasoto@hs01.kep.tr signed with a secure electronic signature.

Martaş Otomotiv Yedek Parça Tic. ve San. A.Ş. will finalize the request free of charge as soon as possible and within thirty (30) days at the latest, depending on the nature of the request.

Although it is essential not to charge any fee for the requests, the Authority reserves the right to charge a fee over the fee tariff determined by the Personal Data Protection Board.

Sincerely,