Your Permission for the submission of our Electronical messages

As per the Law on the Regulation of Electronic Commerce numbered 6563, I hereby agree that Soyak Yapı Insaat Sanayi ve Ticaret A.Ş. to transmit commercial electronic messages directly or indirectly to the electronic communication addresses owned by my side via electronic communication means to promote or enhance its goods or services and to process all of my data in the service provider's information system, to transmit commercial electronic content and other records for the submission to the Turkish Republic Ministry of Customs and Trade.

EXPLICIT CONSENT LETTER

I read and understood the whole "Letter on the Protection of Personal Data" related to the Law on Protection of Personal Data numbered 6698, a copy of which has been delivered and explained to my side by Soyak Yapı İnşaat Sanayi ve Ticaret A.Ş (“Your Company”). Within this scope, in accordance with the Law on Protection of Personal Data numbered 6698 that I hereby grant my approval with disclosed explicit consent, having knowledge of the subject matter without any doubt for all or part of the personal and/or private personal data to be obtained, recorded, stored, updated, periodically controlled, reorganized, classified, maintained as long as the period required for such data to be processed or the period stipulated under the law, sharing the same with the governmental institutions and organizations to which your Company is legally liable or which your Company works with and or with the third party service providers, supplier companies, insurance companies either in Turkey or residing abroad and your Companies and/or your group companies and affiliates if needed legally or if needed for actual requirements based on the service and/or work relation, for it to be processed including its transfer to abroad if needed legally or if needed for actual requirements based on the service and/or work relation through all channels including but not limited to your Company and your branches, group companies, affiliates or your web sites.

INFORMATION AND DISCLOSURE LETTER ON THE PROTECTION OF PERSONAL DATA

As Soyak Yapı İnşaat Sanayi ve Ticaret A.Ş (“Soyak”) within the capacity of a Data Officere under the Law on Protection of Personal Data ("LPPD") numbered 6698 published in the Official Gazette dated 07.04.2016 and numbered 29677, we maintain personal and confidential data of our customers, business partners, employees and business people who have contacted us for themselves or as the representative of a company or organization or have visited us on our internet site or established any relationship with us by other means. We want to give information about the processing of personal data in the framework of LPPD which is in effect with regard to the use of personal data because of the importance paid by our side and the respect we have for fundamental rights and freedoms and due to the privacy of private life.

PERSONAL DATA

Any information related to the identity of the specific or identifiable real person. In this context, anonymous information, anonymized information and other data not associated with a particular person are not considered as personal data. (LPPD art. 3/I (ç)) Data related to race, ethnicity, political thought, philosophical belief, religion, sect or other beliefs, dress codes, association, foundation or trade union memberships, health, sexual life, criminal conviction and security measures as well as biometric and genetic data are considered as special quality data. (LPPD art. 6)

GENERAL PRINCIPLES RELATED TO PROCESSING OF PERSONAL DATA

Any action realized on the data such as obtaining, recording, storage, preservation, alteration, rearrangement, disclosure, transfer, acquisition, recapture, classification or preventing the use of the same by non-automatic means provided that personal data is a part of a wholly or partially automatic data recording system means "processing of personal data". (LPPD art. 3/I (d))

As Soyak, we process personal data including and in accordance with but not limited to the principles set out in this information and disclosure letter under the title "Purpose of Processing of Personal Data" in the context of the following purposes:

1. Acting in accordance with the law and integrity rules,
2. Being correct and up-to-date when required,
3. Processing with certain, explicit and legitimate objectives,
4. Personal Data is linked to, limited and measured with the purpose of being processed
5. Personal data is maintained for the time stipulated in the relevant legislation or for the time required regarding the purpose for which they are being processed.

DATA PROCESSED BY SOYAK

Soyak is able to process general and specific personal data upon the explicit consent of the data owner or in cases stipulated in articles 5 and 6 of the LPPD. The examples to the general and special quality data processed by our company are given below. However, which data shall be processed for each personal data owner may vary according to different factors such as the type of the relation between the personal data owner and our Company, the attribute and the communication channel used. The following types of data can be processed by Soyak in accordance with the relevant legislation and the principles set out in this information and disclosure letter:

1. A description of the data owner, such as name, surname, occupation, title, institution/organization information, educational background, work history, gender, marital status, citizenship status, tax liability status and information regarding custodian, guardian and proxy
2. Information included in identification documents such as identity card, passport, driver's license such as date of birth, place of birth, identity number, marital status, gender, blood type, religion and photograph,
3. Address, telephone, e-mail and fax number, contact information for home, place of work or temporary residence,
4. Products, projects and services that are offered by the data owner, purchased and found to be appropriate for the data owner,
5. Telephone correspondence with Soyak, correspondence records such as electronic mail correspondence and other audio and visual data,
6. Information about transactions and actions carried out by sales and customer representatives via voice mail records maintained by call centre standards and via electronic mail, letter or other means,
7. The data obtained through sales, such as the demand and transaction information in the sales channels,
8. Various information including the resume provided in this respect and any data related to service flow and employment if you are a Soyak employee or a related employee,
9. Information related to the activities and transactions performed through Internet protocol (IP) address, device ID, unique identifier, device type, advertisement ID, unique device icon, statistics about internet page views, incoming and outgoing traffic information, routing URL, internet log information, location information, visited sites and our web sites, our platforms, our internet network, our advertising and electronic mail content.

PURPOSE OF PROCESSING OF PERSONAL DATA

Soyak may process personal data for the following purposes and may maintain the same for the period required for such purposes:

1. Performance of legal and administrative obligations by Soyak,
2. Negotiation, establishment and performance of the executed / planned to be executed contracts.
3. Identification of appropriate products, projects and services for customers, customization and development of these to customers, provision of effective customer service,
4. Yetkili kılınan vekil veya temsilcilere,
5. Ensuring and developing coordination, cooperation and efficiency between business units or units within Soyak,
6. Notification of changes in the legislation or rules and policies accepted by Soyak or other notifications relating to the data owner,
7. Promotion and marketing of projects and services and their development, receiving the opinion of the data owner with questionnaires and votes,
8. Participation in birthday celebrations, lotteries or competitions, giving gifts and performance of other similar activities on behalf of the data owner as well as promotions and campaigns,
9. To investigate, determine, prevent, and notify the relevant administrative or judicial authorities of the contradictions to the contract and the law,
10. Resolving existing and future legal disputes,
11. Responding to requests and questions,
12. Measuring customer satisfaction,
13. Execution of customer service operations
14. Realization of company and partnership law transactions,
15. Ensuring the need to work within the framework of human resources policies and the execution, development and improvement of recruitment processes,
16. Evaluation of the appropriateness of the business applications, finalization and communication with the candidates in the application for employment,
17. The development and improvement of human resources, public relations and marketing policies,
18. Data processing to be mandatory for the establishment, exercise or protection of a right,
19. Protecting the legitimate interests of Soyak provided that the fundamental rights and freedoms of the personal data owner are not prejudiced.

TRANSFER OF PERSONAL DATA

Even though the description of third person may change depending on the type and nature of the relationship between the data holder and Soyak, in accordance with the general principles set forth in Article 4 of the LPPD and in accordance with the provisions set forth in Sections 8 and 9 and provided that the necessary security measures are taken, the local and abroad third parties to which data may be transferred will be as follows:

1. Our group companies
2. Business partnerships in connection with the delivery of purchased and used products and services,
3. Infrastructure providers and other business partners, suppliers and sub-contractors required to transfer the data to domestic and abroad physical archives and/or information systems and to keep the data in physical and digital environments, on servers or in other electronic environments,
4. Other authorized proxies or representatives,
5. Third parties, insurance agents and companies from whom consultancy services are received including attorneys, tax advisors and supervisors,
6. Authorized regulatory and supervisory authorities, official authorities, private persons.

METHOD TO COLLECT PERSONAL DATA AND LEGAL GROUNDS

While the services provided by Soyak may vary depending on the product or commercial activity, the data may be collected by Soyak for the purposes set out under the articles 5 and 6 of the LPPD and for the purposes set out under the title "Handling of Personal Data" of this information and disclosure letter when a Soyak service or product is purchased or registration has been done for the purpose of purchasing the same, if one subscribes to newsletters, notices and other services related to Soyak, or if one has a question or complaint regarding a product or service and one participates in a competition, is awarded with prizes or takes place in surveys for the establishment of contracts for all kinds of products and services demanded by Soyak and the arrangement of all other records and documents (in paper or electronic environment), the provision of such products and services and the continuation of such services as required and for legal reasons through Soyak sales channels, call centre, internet site-community companies internet pages, mobile applications and similar channels in the headquarters, branch offices, sales offices and other physical, verbal, written or electronic media;

While Soyak generally acquires personal data from the data owners, it does not disclose the personal data of the group companies, the business partners and subcontractors working in Soyak projects and other relevant authorities and organizations in the scope of the conditions stated in Articles 5 and 6 of the Law on PPD or by persons and institutions represented by the applicant in the work and training history, recruitment platforms, data representatives represented by the data owner /representing the data owner.

RIGHTS HELD BY THE DATA OWNER:

As per article 11 of the LPPD, data owners are entitled with the following:

1. To learn whether personal data has been processed or not,
2. If personal data has been processed, to request information regarding this,
3. To learn the purpose of processing personal data and whether they are used appropriately in accordance wtih this purpose,
4. To have information about third parties to which personal data is transferred either in Turkey or abroad,
5. To requesting correction of personal data if it is incomplete or has been improperly processed,
6. To request that personal data be deleted or destroyed in the case that the reasons for such processing are not present any more,
7. To request that third parties are notified regarding the correction and deletion transactions,
8. To object to the occurrence of a result against the person himself by means of analysing the processed data exclusively through automated systems,
9. To demand that damages be eliminated in the event of a corruption due to the processing of personal data contrary to the law.

OUR CONTACT INFORMATION

Pursuant to this, applications to be filed to our Company within the scope of the exercise of the rights mentioned in the article 11 of the LLPD based on article 13 of the same law may be sent in written form to the address Büyükdere Caddesi Soyak Binası No: 38 Mecidiyeköy / Istanbul or sent to the e-mail address soyakyapi@hs02.kep.tr as electronically signed.

The company will conclude the requests from the data owners within thirty days at the latest according to the nature of the claim in the context of the article 13 of LPPD. Positive or negative responses to requests from data owners can be reported to the data owners in written form or electronically. Despite the fact that claims of data owners are to be concluded free of charge as a rule, if any cost is required for the conclusion of such claim, fees may be charged in the amounts set out in the relevant legislation.

AMENDMENTS

It is possible that we make amendments to this Information and Disclosure Letter on the Protection of Personal Data from time to time. The updated version of the letter may be accessed through Soyak web site and the amendments to the Letter may be followed on Soyak web site. The amendments, as a rule, will be made by uploading to the Soyak web site and will become valid as of this date whereas Soyak will be able to notify the changes in other forms deemed suitable by its side.