K.V.K.K. Politikası 4

3.4. Audit Obligation

COŞKUNOĞLU PESTİL carries out the necessary audits, especially regarding technical and administrative measures, at regular intervals in order to ensure the COŞKUNOĞLU PESTİL principles and legislative requirements for the protection of personal data in its own institutions or organizations and third parties to whom it transfers data.

3.5. RIGHTS AND REQUESTS OF THE PERSONAL DATA OWNER

In accordance with Article 13 of the COŞKUNOĞLU PESTİL KVK Law, as the data controller, the personal data application and response procedure, which is an annex to the personal data inventory, and the written template guidance procedures have been established for applications that do not meet the application conditions specified in the law. Technical preparations have been made to carry out the necessary operations in accordance with these procedures. There is a systematic infrastructure within COŞKUNOĞLU PESTİL to enable the implementation of this procedure.

Requests of personal data owners regarding the rights listed below; By personal application with presentation of identity, or in writing, or by using the registered electronic mail (KEP) address, secure electronic signature, mobile signature or the e-mail address previously notified to COŞKUNOĞLU PESTİL by the relevant person and registered in COŞKUNOĞLU PESTİL's system, or If they transmit their identities to COŞKUNOĞLU PESTİL in a verifiable manner through a software or application developed for the purpose of application, COŞKUNOĞLU PESTİL; Depending on the nature of the request, the request will be answered free of charge within thirty days at the latest. However, if the application of the relevant person will be answered in writing, a processing fee of 1 Turkish Lira will be charged for each page exceeding ten pages.

In accordance with the communiqué on application procedures to the data controller, the relevant person's a) Name, surname and signature if the application is written, b) T.R. for citizens of the Republic of Turkey. It is mandatory to specify the identity number, nationality for foreigners, passport number or identification number, if any, c) Residence or workplace address for notification, d) Email address, telephone and fax number for notification, if any, d) Subject of the request. Otherwise, the application will not be considered a valid application.

If the answer to the application is given on a recording medium such as a CD or flash memory, a fee equal to the cost of the recording medium may be requested. Personal data owners; By applying in accordance with this procedure, they will be able to request all rights in the relevant article of the law, including all processing processes, purposes and transfer information of their personal data.

3.6. PROTECTION OF SPECIAL PERSONAL DATA

With the Personal Data Protection Law, special importance has been attached to certain personal data due to the risk of causing victimization or discrimination when processed unlawfully.

3.7. STORAGE PERIOD OF PERSONAL DATA

COŞKUNOĞLU PESTİL stores personal data for the period specified in the relevant laws and regulations, if required.

If a period of time is not regulated in the legislation regarding how long personal data should be stored, Personal Data is stored for the period required to be kept in accordance with COŞKUNOĞLU PESTİL's practices and industry practices, depending on the activity carried out by COŞKUNOĞLU PESTİL while processing that data, and then, in accordance with the nature of the data, COŞKUNOĞLU PESTİL It is deleted, destroyed or anonymized in accordance with the relevant Policy.

The purpose of processing personal data has expired; If the storage periods determined by the relevant legislation and COŞKUNOĞLU PESTİL have come to an end; Personal data can only be stored to serve as evidence in possible legal disputes or to assert the relevant right based on personal data or to establish a defense. In establishing the periods here, the limitation periods for asserting the mentioned right and the storage periods are determined based on the examples in the requests previously directed to COŞKUNOĞLU PESTİL on the same issues, even though the limitation periods have passed. In this case, the stored personal data is not accessed for any other purpose and the relevant personal data is accessed only when it needs to be used in the relevant legal dispute. Here too, after the mentioned period expires, personal data is deleted, destroyed or anonymized.