INFORMATION NOTICE ON PERSONAL DATA PROTECTION PURSUANT TO THE PERSONAL DATA PROTECTION LAW NO. 6698 (THE "LAW”)

We at TARGET PAZARLAMA PLASTİK SANAYİ VE TİCARET ANONİM ŞİRKETİ (“TARGET TRADE”) in the capacity of data controller would like to inform you in respect of the Personal Data Protection Law No. 6695 (the “Law”) published on the Official Journal, issue no. 29677, of April 7, 2016, pursuant to the article ten “Data Controller’s Obligation for Information” of the Law, in order to protect the fundamental rights and freedoms, in particular, the right to privacy, during the personal data processing, and identify the respective obligations and liabilities of the real persons and legal entities that process personal data and information.

What are Personal Data?

Pursuant to the applicable provisions of the PDPL, the personal data covers any type of information about a real person who is identified or identifiable.

2) How to Collect (Process) Personal Data

We at TARGET TRADE collect and process the identity, contact, location, personal, legal procedure, customer procedure, physical location security, visual and audio records, professional experience information and data of the data subjects on verbal, written and electronic environments through websites, various agreements, electronic mails, applications forms and via any type of written or verbal communication channels with our Company during the establishment of your legal relationship with our Company and as long as this relationship is in force, from you, third parties and legal authorities. The legal reasons are deemed to have been fulfilled when there is an explicit provision under the applicable laws and regulations and, when it is necessary to process the personal data in order to enter into or perform an agreement, fulfill a legal obligation, establish, use or protect a legal right and, when it is necessary to process the personal data for the legitimate interests of the data controller provided that there will be no harm to the fundamental rights and freedoms of the data subject.

3) Purposes of Personal Data Processing

• The purposes of processing the personal data are: to perform and carry out such procedures and transactions as required to enter into and perform agreements for services, sales etc.;
• Provide security, and ensure that the information and judicial procedures are securely carried out and monitored;
• Manage the corporate procedures, carry out the business operations and, enforce the internal directives and other policies;
• Plan and perform the business operations as well as production and sales processes;
• Record notifications such as complaints, objections, requests, suggestions, satisfactions etc. to offer better services;
• Carry out legal proceedings and procedures relating to our Company;
• Record the camera footages at the locations owned by our Company for security purposes and/or within the scope of our obligations under the applicable laws and regulations;
• Establish communication through phone or electronic mail for communication purposes concerning such services received and offered or for mandatory legal procedures;
• Ensure that the data are kept accurately and up-to-date;
• Make sure that such technical and administrative precautions for the data security are properly taken.

4) How Long We Process Your Personal Data

Your personal data are processed for such periods as provided under the laws and regulations concerning the Personal Data Protection and other applicable legislations, in particular, the PDPL and in any case, as long as the above-mentioned legitimate interests are valid.

5) How to Store Personal Data

Your personal data will be maintained for the maximum period that is stated under the applicable legislation or that is necessary for the purpose of processing thereof and in all cases, for the legal prescription period. In case there is no further ground or legal reason and such requirements as set forth the pertinent agreements are not valid any more, then your personal data, the purpose of the processing of which is no longer valid, are to be deleted, destructed or anonymized.

6) Transfer of Personal Data

Within the framework of the purposes listed above, your personal data may be shared with the respective departments and offices, in particular, the competent courts and judicial authorities, to such extent permitted and required by the applicable laws and regulations, in particular, including but not limited to the Personal Data Protection Law No. 6698 and the Code of Civil Procedures. Your personal data may also be shared with such real persons and legal entities, with whom we act in cooperation, if our legal relationship with you or the data processing purpose directly require us to do so. Please make a written application to us to get further information.

7) Your Rights Arising from the PDPL concerning your Personal Data and our Support as Data Controller
Pursuant to the article 11 of the PDPL, you are entitled, by means of applying to the Company, to:

• Learn if your personal data are processed;
• Request for information if your personal data are processed;
• Learn the purpose of the processing of your personal data and if the same are used for the intended purposes,
• Learn the identity of such third parties, to whom your personal data are transferred locally or internationally;
• Ask for correction of your personal data if it is processed deficiently or wrongly,
• Ask for the deletion or destruction of your personal data in case the reasons to process your personal data are no longer valid concerning the purpose, period and legitimacy thereof.
• Request the respective third parties, to whom your personal data are transferred, are informed accordingly when your personal data are corrected, deleted or destructed.
• Object to any negative consequences against you as a result of analyses of your personal data exclusively by means of automatic systems;
• Request for the indemnification in case of any loss and damage against you due to the illegal processing of your personal data,

You may also request that the third parties, to whom your personal data have been or may be transferred, are informed about your request for the destruction However, we are to assess your request for the destruction of your personal data and the method to be used for this purpose considering the respective conditions. You may ask us to provide information about the reason for the destruction method at any time.

You may provide us with your applications and requests pursuant to the Law by means of filling in the “Application Form” available at www.targettrade.com.tr pursuant to the Personal Data Protection Law and by means of personal delivery or a delivery through a Notary Public to the address “Barbaros Hayrettinpaşa Mahallesi 1992. Sokak A Blok No: 16 Kat: 10 Daire 225 Vetrocity / Esenyurt, Istanbul “ or sending them to targetpazarlama@h03.kep.tr with your secure electronic signature or to kvkk@targettrade.com through your registered electronic e-mail address pursuant to the Communique on Procedures and Principles for Applications to Data Controller.

You are hereby informed under the scope of our information obligation.

TARGET PAZARLAMA PLASTİK SANAYİ VE TİCARET ANONİM ŞİRKETİ