PERSONAL DATA PROTECTION CLARIFICATION TEXT

a) Data Controller
Pursuant to the Personal Data Protection Law No. 6698 (“Law No. 6698”), your personal data will be collected and processed by “BATI OPTİK ANONİM ŞİRKETİ” (“COMPANY”) in its capacity as data controller within the scope described below.

b) Processed Personal Data
1-Identity: Name and surname, mother’s and father’s name, mother’s maiden name, date of birth, place of birth, marital status, ID card serial number, Turkish ID number, etc.
2-Contact: Address number, e-mail address, contact address, registered e-mail address (KEP), phone number, etc.
3-Location: Location information of your whereabouts, etc.
4-Customer Transaction: Call center recordings, invoice, promissory note and check information, information on counter receipts, order information, request information, etc.
5-Marketing: Purchase history information, surveys, cookie records, information obtained through campaign activities, etc.

c) Purposes of Processing Personal Data
Your personal data will be processed by the COMPANY for the following purposes:
• Carrying out necessary work by our business units to ensure that you benefit from our products and services
• Suggesting our products and services to you
• Planning and/or execution of market research activities for the sales and marketing of products and services
• Organization and supervision of all activities such as installation, assembly, and disassembly related to products and services we provide
• Planning and/or execution of after-sales support activities
• Follow-up of contract processes and/or legal affairs and requests
• Ensuring the legal, technical, and commercial job security of related persons within our business relationship
• Contacting you if you request information or a product demo
• Fulfilling the performance of the sales or service contract if you purchase a product or service
• Planning, auditing, and execution of information security processes
• Establishing and managing IT infrastructure
• Following finance and/or accounting processes, issuing invoices and carrying out payment collection procedures
• Recording and fulfilling the requests directed by you
• Planning and execution of company activities
• Contacting you by SMS, e-mail, or phone within the scope of contract execution
• Planning and execution of corporate communication activities
• Planning and execution of logistics activities
• Determining and implementing our company’s commercial and business strategies
Personal data will be processed based on the legal grounds listed in Article 5(2) of the Law, including: “a) Explicitly provided in laws”, “c) Necessary for the establishment or performance of a contract”, “ç) Necessary for the data controller to fulfill its legal obligations”, “e) Necessary for the establishment, use, or protection of a right”, “f) Necessary for the legitimate interests of the data controller provided that fundamental rights and freedoms are not harmed”.

d) Recipients and Purposes of Personal Data Transfers
Your personal data may be transferred without requiring explicit consent of the data subject pursuant to Article 8(2)(a) of the Law for the following purposes:
• To notaries, enforcement offices, courts, and relevant firms for the purpose of carrying out finance and accounting processes and fee collection
• To our attorneys within the obligation of confidentiality for legal processes
• To public institutions and organizations when required by legislation or upon request
• To authorized service providers for installation and disassembly processes within the scope of contract performance
• To persons or institutions permitted by legislation such as the Tax Procedure Law, Social Security Institution legislation, Court of Accounts, Anti-Money Laundering laws, Turkish Commercial Code, Code of Obligations, and other relevant regulations
• To legally authorized public institutions, administrative and judicial authorities

e) Method and Legal Grounds for Collecting Personal Data
Your personal data is collected verbally, in writing, or electronically, automatically or non-automatically, based on legal grounds set out in Article 5(2) of the Law, for the purposes listed in section (b):
• Filling out forms, sending e-mails, contacting by phone, visiting the website/filling out online forms, or contacting via social media
• Sharing business cards at fairs or seminars, establishing communication networks during training and events, or receiving information through partners
• Sharing verbally, in writing, or electronically by you or our dealers/authorized service representatives
• Recording call center conversations

f) Rights of the Personal Data Owner Under Article 11 of Law No. 6698
If you submit your requests regarding your rights to the COMPANY through the methods described below, the COMPANY will finalize your request as soon as possible and no later than thirty days, depending on its nature. The first ten pages of the response will be provided free of charge; each additional page will cost 1 Turkish Lira. If the response is provided on media such as CD or flash drive, the cost of the medium may be charged.
In this context, personal data owners have the right to:
• Learn whether personal data is processed
• Request information if personal data has been processed
• Learn the purpose of processing and whether it is used appropriately
• Learn the third parties to whom data is transferred domestically or abroad
• Request correction of incomplete or incorrect personal data and request notification to third parties to whom the data has been transferred
• Request deletion or destruction of personal data when reasons requiring processing cease to exist, and request notification to third parties
• Object to results arising from automated systems
• Request compensation for damages incurred due to unlawful processing
You may submit your requests regarding your rights, in Turkish, in writing or via registered e-mail (KEP), secure electronic signature, mobile signature, or via the e-mail address previously provided to and registered in the COMPANY’s system, in accordance with Article 13(1) of the Law and the Communiqué on Principles and Procedures for Application to the Data Controller. Information about other persons such as family members will not be provided. The COMPANY reserves the right to verify your identity before responding.
Your application must include:
a) Your name, surname, and signature if in writing
b) Turkish ID number (if foreign, nationality and passport number or equivalent ID number)
c) Residential or workplace address for notifications
ç) If available, e-mail address, telephone and fax number
d) Your request
If written, applications must be submitted with required documents to BATI OPTİK ANONİM ŞİRKETİ, MUAMMER AKAR MAH. İNÖNÜ CAD. HASAN BEY NO: 773N KARABAĞLAR / İZMİR. You may access the application form from here.
Depending on the nature of your request, necessary information and documents enabling identity verification must be provided completely and accurately. Otherwise, the COMPANY may experience difficulties in carrying out the required investigations. In such cases, the COMPANY reserves its legal rights. For this reason, your application must be submitted in full with all required documents.