Datenschutzbestimmungen

PREFACE

The issue of protecting personal data is of great importance for EBR Elektronik. We meticulously keep the information of everyone who has shared any personal data by contacting us in any way. We have taken all necessary administrative and technical measures within our company to ensure the security of this information. That’s why you can do your transactions with the EBR Elektronik brand with the feeling that your personal data will be safe. Both T.C. We will comply with your rights regarding your data, which are secured by the Constitution and the relevant Laws. With this awareness and trust, we wanted to share with you our corporate Privacy Policy, which we have prepared by adhering to the universal principles of „transparency“ and „accountability“ regarding personal data security.

You can be sure that we will show all sensitivity to improvement suggestions, applications and possible complaints from you. You can contact us for all your doubts about your personal data. As in all our services, we will show the same sensitivity and care in the protection of your personal data.

Regards,

EBR Electronics

Purpose:

As EBR Elektronik (hereinafter “EBR Elektronik”), the personal data collected in accordance with the sensitivity of the works we are dealing with have been kept confidential and have never been shared with third parties for any purpose other than their purpose. Protection of personal data is the basic policy of our company. Even before there was any legal regulation, our company attached great importance to the privacy of personal data and adopted this as a working principle. As EBR Elektronik, we undertake to comply with all responsibilities brought by the Law on the Protection of Personal Data.

1. SCOPE AND MODIFICATION

This Policy, prepared by our company, has been prepared in accordance with the Law on the Protection of Personal Data No. 6698 (“KVK”). The law has entered into force with all its provisions as of today.

The data obtained from you with your consent or due to other legal compliance conditions listed in the Law will be used to increase the quality of the services we provide and to improve our quality policy. Again, some of the data we have is depersonalized and anonymized. These data are data used for statistical purposes and are not subject to Law enforcement and our Policy.

EBR Electronic Privacy Policy aims to protect the automatically obtained data of our customers, prospective customers, employees and companies working in solution partnership with us, their employees or other persons, and includes regulations regarding these.

Our company has the right to change our Policy and Personal Data Directive, provided that it is in compliance with the Law and that personal data is better protected.

2. BASIC RULES ON THE PROCESSING OF PERSONAL DATA

• Compliance with the law and the rules of honesty: EBR Elektronik questions the source of the data it collects or receives from other companies and attaches importance to obtaining them in accordance with the law and within the framework of good faith.

• Being accurate and up-to-date when necessary: EBR Elektronik attaches importance to the fact that all data within the institution are correct, do not contain false information, and finally, if there is a change in personal data, they are updated if they are communicated to it.

• Processing for specific, clear and legitimate purposes: EBR Elektronik processes data only for the purposes it provides and for which it receives consent from individuals during the service. It does not process, use and make use of data other than for business purposes.

• Being connected, limited and measured for the purpose for which they are processed: EBR Elektronik uses the data only for the purpose for which they are processed and to the extent required by the service.

• Retention for the period stipulated in the relevant legislation or required for the purpose for which they are processed: EBR Elektronik retains contractual data as long as the conflict periods of the Law and the requirements of commercial and tax law. However, when these purposes disappear, it deletes or anonymizes the data. It deletes or destroys them according to the Personal Data Deletion Directive.

It should be emphasized that, whether EBR Elektronik has collected or processed the data on the basis of consent or in accordance with the law, these principles listed above still apply.

3. RIGHTS OF THE PERSONAL DATA OWNER STATED IN ARTICLE 11 OF KVK

According to KVK article 11, you have the rights listed below. In order to facilitate these rights, an application form has also been prepared for you by EBR Elektronik and presented to you on your website.

Persons whose personal data are processed, by applying to our contact announced on our website by EBR Elektronik, regarding their own data;

1. Learning whether personal data is processed or not,

2. Requesting information on personal data if it has been processed,

3. To learn the purpose of processing personal data and whether they are used in accordance with the purpose,

4. Knowing the third parties to whom personal data is transferred in the country or abroad,

5. Requesting correction of personal data in case of incomplete or incorrect processing and requesting notification of the transaction made within this scope to the third parties to whom the personal data has been transferred,

6. Within the framework of the conditions stipulated in Article 7 of the KVK Law, although it has been processed in accordance with the provisions of the KVK Law and other relevant laws, to request the deletion or destruction of personal data in the event that the reasons for its processing disappear, and to notify the third parties to whom the personal data is transferred. don’t want,

7. Objecting to the emergence of a result against the person himself by analyzing the processed data exclusively through automated systems,

8. He has the right to demand the compensation of the damage in case of loss due to the unlawful processing of personal data. As EBR Elektronik, we respect these rights.

4. PRINCIPLE OF MAXIMUM SAVINGS/PRINCIPLE OF SLIGHTLY

According to this principle, which is called the principle of maximum savings or the principle of stinginess, the data received by EBR Elektronik is processed into the system only as necessary. Therefore, which data we collect is determined by the purpose. Unnecessary data is not collected. Other data transmitted to our company are transferred to company information systems in the same way. Redundant information is not recorded in the system, deleted or anonymized. These data can be used for statistical purposes.

5. DELETING PERSONAL DATA

Personal data is deleted, destroyed or anonymized by our company, automatically or upon the request of the person concerned, when the periods required to be kept by law, the completion of the judicial processes or other requirements are eliminated.

6. ACCURACY AND DATA CURRENTITY

As a rule, the data within EBR Elektronik are processed as declared by the relevant persons. EBR Elektronik is not obliged to investigate the accuracy of the data declared by customers or persons contacting EBR Elektronik, and this is not done legally and due to our working principles. The declared data is considered correct. The principle of accuracy and timeliness of personal data has also been adopted by EBR Elektronik. It updates the personal data that our company has processed from the official documents it receives or upon the request of the person concerned. It takes the necessary measures for this.

7. PRIVACY AND DATA SECURITY

Personal data is confidential and EBR Elektronik abides by this confidentiality. Only authorized persons can access personal data within the company. All necessary technical and administrative measures are taken to protect the personal data collected by EBR Elektronik, to prevent it from falling into the hands of unauthorized persons and to prevent the data owner from being victimized. In this framework, it is ensured that the software complies with the standards, that the third parties are carefully selected and that the Privacy Policy is complied with within the company. Companies with whom we share personal data in accordance with the law are also requested to protect the data.

8. DATA PROCESSING PURPOSE

EBR Elektronik’s Processing of Personal Data will be carried out in line with the purposes specified in the Illumination Text.

9. CUSTOMER, POSSIBLE CUSTOMER AND BUSINESS AND SOLUTION PARTNERS DATA

a. Collection and Processing of Data for Contractual Relationship

If a contractual relationship is established with customers and prospective customers, the collected personal data can be used without the customer’s consent. However, this use takes place in line with the purpose of the contract. The data is used to the extent of better execution of the contract and the requirements of the service and updated when necessary by contacting the customers.

b. Business and Business Partners Data

EBR Elektronik adopts the principle of acting in accordance with the law when sharing data with both business and solution partners. Data is shared with business and solution partners with the commitment of data confidentiality and only as much as the service requires, and these parties are requested to take measures to ensure data security.

10. ADVERTISING DATA PROCESSING

In accordance with the Law on the Regulation of E-Commerce and the Regulation on Commercial Communications and Commercial Electronic Messages, e-mails for advertising purposes can only be sent to persons with prior approval. The explicit consent of the person to whom the advertisement is sent is required.

Again, EBR Elektronik complies with the details of the „approval“ determined in accordance with the same legislation. The approval to be obtained should cover all commercial electronic messages sent to the electronic communication addresses of the recipients in order to promote your company’s goods and services, market it, promote its business or increase its recognition with content such as congratulations and wishes. This approval can be obtained in writing, in the physical environment or by any electronic means of communication. The important thing is that the buyer has a positive declaration of will that he accepts the sending of commercial electronic messages, his name and surname and his electronic communication address.

11. DATA TRANSACTIONS DUE TO THE COMPANY’S LEGAL OBLIGATION OR EXPRESSLY PROVIDED IN LAW

Personal data may be processed without obtaining separate approval for the purpose of expressly stating the processing in the relevant legislation or fulfilling a legal obligation determined by the legislation. The type and scope of data processing must be necessary for the legally permitted data processing and must comply with the relevant legal provisions.

12. COMPANY’S DATA PROCESSING

Personal data may be processed in line with the service offered by the company and its legitimate purposes. However, the data cannot be used for illegal services in any way.

13. PROCESSING OF PRIVATE DATA

EBR Elektronik takes all the adequate precautions determined separately by the Board in the processing of sensitive personal data. In our company, special categories of personal data are processed in accordance with the „Protection and Processing of Personal Data of Special Categories Policy“.

14. DATA PROCESSED WITH AUTOMATIC SYSTEMS

EBR Elektronik acts in accordance with the Law regarding the data processed through automatic systems. The information obtained from these data cannot be used against the person without the explicit consent of the people. However, EBR Elektronik can make decisions about the people it will process by using the data in its own system.

15. USER INFORMATION AND THE INTERNET

In case of collection, processing and use of personal data on websites and other systems or applications of EBR Elektronik, the relevant persons are informed about the privacy statement and, if necessary, about cookies.

People are informed about our applications on the internet pages. Personal data will be processed in accordance with the law.

16. DATA OF OUR EMPLOYEES

a. Processing of Data for Business Relationship

Personal data of our employees can be processed without consent as far as necessary in terms of business relations and health insurance. However, EBR Elektronik ensures the confidentiality and protection of the data of its employees.

b. Processing by Legal Obligations

EBR Elektronik may process the personal data of its employees without obtaining separate approval in order to clearly state the processing in the relevant legislation or to fulfill a legal obligation determined by the legislation. This issue is limited to the obligations arising from the law.

c. Processing for the Benefit of Employees

EBR Elektronik may process personal data without obtaining approval for transactions that benefit company employees, such as private health insurances. EBR Elektronik may also process employee data for disputes arising from business relations.

D. Processing of Special Qualified Data

According to the Law, data related to the race, ethnic origin, political opinion, philosophical belief, religion, sect or other beliefs, disguise and dress, membership to associations, foundations or trade unions, health, sexual life, criminal convictions and security measures, and biometric and genetic data is personal data of special nature.

EBR Elektronik takes adequate measures, determined separately by the Board, in addition to the approval of the person concerned, in the processing of sensitive personal data. Special categories of personal data can be processed without the consent of the person, but only in relation to the cases permitted by the Law and in a limited manner.

to. Data Processed by Automatic Systems

Employees‘ data processed in relation to automated systems can be used for internal promotions and performance evaluations. Our employees have the right to object to the result against them, and they do so by following internal procedures. The objections of the employees are also evaluated within the company.

f. Telecommunications and Internet

Computers, telephones, e-mails and other applications allocated to the employees within the company are allocated to the employee only for business purposes. The employee cannot use any of these means allocated to him by the company for his private purposes and communication. The company can control and audit all data on these vehicles. The employee undertakes that he/she will not keep any other data or information other than work on the computer, phones or other tools allocated to him from the moment he/she starts the job.

17. TRANSFER OF PERSONAL DATA IN DOMESTIC AND INTERNATIONAL

Personal data may be shared with the controlling shareholder as well as business and solution partners in order for EBR Elektronik to see the service.

EBR Elektronik will be able to transfer personal data to EBR Elektronik’s suppliers on a limited basis, in order to ensure that the services that our Company has outsourced from the supplier and that are necessary to carry out our Company’s commercial activities are provided to our Company.

EBR Elektronik has the authority to transfer personal data within the scope of the conditions determined by the Board, in accordance with the other conditions in the Law and subject to the consent of the person, within the country and abroad.

18. RIGHTS OF THE RELATED PERSON

EBR Elektronik accepts that within the scope of the Law, the data subject has the right to obtain his consent before the data is processed, and that he has the right to determine the fate of the data after the data is processed.

Regarding personal data, by applying to our related person announced on our website by EBR Elektronik;

a) Learning whether your personal data is processed or not,

b) If personal data has been processed, requesting information about it,

c) Learning the purpose of processing personal data and whether they are used in accordance with its purpose,

ç) To know the third parties to whom personal data is transferred in the country or abroad,

d) Requesting correction of personal data in case of incomplete or incorrect processing,

e) Requesting the deletion or destruction of personal data within the framework of the conditions stipulated in Article 7,

f) Requesting notification of the transactions made pursuant to subparagraphs (d) and (e) to third parties to whom personal data has been transferred,

g) Objecting to the emergence of a result against the person himself by analyzing the processed data exclusively through automated systems,

ğ) In case of loss due to unlawful processing of personal data, he has the right to demand the compensation of the damage.

However,

Individuals do not have any rights regarding the anonymized data within the company. EBR Elektronik may share personal data with relevant institutions and organizations in order to exercise the legal powers of a judicial duty or state authority in accordance with the business and contractual relationship.

Personal data owners will be able to submit their requests regarding the above-mentioned rights to the Company by completely filling out the application form, which you can obtain from the Company’s official website, by signing it with a wet signature, by registered letter with return receipt and by sending a photocopy of their identity card (only the front page for the identity card). Your applications will be answered as soon as possible depending on the content of your application or within 30 days at the latest after it reaches our company. You must submit your applications by registered letter with return receipt requested. In addition, only the part of your application about you will be answered, and an application about your spouse, relative or friend will not be accepted.

EBR Elektronik may request other relevant information and documents from the applicants.

19. PRIVACY POLICY

The data of employees or other persons in EBR Elektronik are confidential. No one can use, copy, reproduce, transfer to others, use this data for any other purpose without compliance with the contract or the law.

20. TRADING SECURITY

All necessary technical and administrative measures are taken to protect the personal data collected by EBR Elektronik, to prevent it from falling into the hands of unauthorized persons and to prevent our customers and prospective customers from being victims. In this framework, it is ensured that the software complies with the standards, that the third parties are carefully selected and that the Privacy Policy is complied with within the company. Safety measures are constantly being renewed and improved.

21. AUDIT

EBR Elektronik carries out the necessary internal and external audits on the protection of personal data.

22. NOTIFICATION OF VIOLATIONS

EBR Elektronik acts with the awareness that when it is notified of any violation of personal data, it should notify the KVK Board without delay and within 72 hours at the latest, from the date of learning of this situation. It minimizes the harm of the person concerned and compensates the damage. When personal data is obtained by unauthorized persons, it immediately notifies the Personal Data Protection Board.

With the notification of violations, you can apply according to the procedures specified in our corporate website.