Personal data is processed by EY Turkey in accordance with
The Law on the Protection of Personal Date numbered 6698, its secondary
regulations and miscellaneous legislation regarding protection of personal data
in scope of this clarification text.

 

Personal data means all types of information which may
define your identity define or make it definable in accordance with the Law on
the Protection of Personal Data. Your personal data, processed by companies
within EY Turkey network as controllers, and processing purposes, recipient
groups, collection method, legal backgrounds of your personal data and your
rights with respect to such personal data and the contact information in terms
of using your rights are below.

 

A- OUR ONLINE VISITORS

 

A.I. WHICH PERSONAL DATA IS PROCESSED?

 

The following personal data can be processed in case you
visit our website:

 

Identity Information (credentials): Name, Surname,

Contact Information: Address information, e-mail address,
phone number, information regarding your employer company, title of the company

Process Security Information: IP address information,
username and password, log information, internet access log information,
traffic information,

A.II. PROCESSING PURPOSES OF YOUR PERSONAL DATA

 

Your personal data can be processed with the following
purposes in accordance with the related legislation in case you visit our
website:

 

Planning and execution of corporate communication
activities,

Planning, controlling and execution of information security
processes,

Conducting sponsorship activities,

Planning and execution of event and training activities,

Execution of the entrepreneur of the year program,

Conducting entrepreneurial women winning program,

Conducting the tax marathon competition,

Managing code of ethics,

Establishment and management of former employee network,

Announcement of circulars or bulletins,

Management of marketing and sales activities,

Analysing and reporting studies,

Managing our relations with our customers, suppliers and
business partners,

Evaluating and responding to suggestions, requests and
complaints submitted to our company and performing improvement activities in
accordance with notifications.

Development and diversification of our company’s business
processes,

Execution of our quality and standard examinations,

Monitoring finance and accounting affairs,

Contract management, establishment of legal transactions and
follow-up of legal processes,

If you are an employee candidate, evaluation of the
application if a job application is made through our website,

Conducting communication activities,

Fulfilling the obligations arising from the Law No. 5651,

Maintenance of your information that must be kept in
accordance with the relevant legislation; copying, back-up to prevent
information loss; Ensuring the control of the consistency of your information,
taking the necessary technical and administrative measures for the security of
our networks and your information,

Fulfilling the legal obligations required or obliged by
legal regulations with regulatory and supervisory institutions, carrying out
legal follow-ups and legal processes.

A.III. TRANSFER OF YOUR PERSONAL DATA

 

Your personal data shall be transferred to official bodies
and institutions, our related domestic and foreign suppliers and companies
within the Global EY network to the extent purposes included under A.II title
of this Clarification Text in scope of the provisions of Law on the Protection
of Personal Data regarding transferring of personal data.

 

A.IV. LEGAL GROUNDS FOR PROCESSING OF PERSONAL DATA AND
COLLECTION METHOD

 

Your personal data is processed through automatic or manual
processes based on the following compliance with laws reasons and listed under
the provisions of article 5, 8 and 9 of the Law on the Protection of Personal
Data in the abovementioned framework over electronic environments during your
visit of our website and through the declaration of you or third parties and/or
cookies.

 

Having explicit consent,

Clearly anticipated under the Laws,

Personal data regarding parties of the contract is required
to be processed provided that they are directly related to conclude and execute
such contract,

It is obligatory to fulfil legal obligations,

It is made publicly available by the related individual,

It is obligatory to process data in order to grant, use or
protect a right,

It is obligatory to process data for the legitimate
interests of the controller provided not causing any harm on fundamental rights
and freedom of the data subject.

B- OUR PHYSICAL (ON-SITE) VISITORS

 

B.I. WHICH PERSONAL DATA IS PROCESSED?

 

In scope of your visit to premises of EY Turkey, information
regarding name/surname, National ID, telephone number, e-mail address,
entry-exit registration information of visitor, camera records and in case you
have a wi-fi internet access, information with respect to IP address and
logging data are processed.

 

B.II. PROCESSING PURPOSES OF PERSONAL DATA

 

Your personal data can be processed with the following
purposes in accordance with related legislation in case you visit premises of
EY Turkey:

 

Monitoring with camera records in order to ensure security
regarding visitors within the building of or company,

Receiving visitor information during issuance of the gate
entrance report,

Providing guest wi-fi network.

B.III. TRANSFERRING OF PROCESSED PERSONAL DATA

 

Your personal data shall be transferred to official bodies
and institutions, courts, law enforcement officers, related service provider
firms and our business partners to the extent purposes included under B.II
title of this Clarification Text in scope of the provisions of Law on the
Protection of Personal Data regarding transferring of personal data.

 

B.IV. LEGAL GROUNDS FOR PROCESSING OF PERSONAL DATA AND
COLLECTION METHOD

 

Your personal data is collected, kept and processed based on
the following compliance with laws reasons and listed under the provisions of
article 5 and 8 of the Law on the Protection of Personal Data in the
abovementioned framework from you with physical, written, verbal or CCTV camera
during your visit of our premises of our company which is within the network of
EY Turkey.

 

Clearly anticipated under the Laws,

Personal data regarding parties of the contract is required
to be processed provided that they are directly related to conclude and execute
such contract and to fulfil obligations of contracts concluded and render the
requested product and services,

It is obligatory to fulfil legal obligations,

It is made publicly available by the related individual
(data subject?),

It is obligatory to process data in order to grant, use or
protect a right,

It is obligatory to process data for the legitimate
interests of the controller provided not causing any harm on fundamental rights
and freedom of the data subject.

C- OUR POTENTIAL CLIENT/SUPPLIERS/BUSINESS PARTNERS

 

C.I. WHICH PERSONAL DATA IS PROCESSED?

 

Following personal data is processed within the framework of
your relation with EY Turkey:

 

Identity Information: Name/surname, date and place of birth.

Contact Information: Address information, e-mail address,
phone number, social media.

C.II. PROCESSING PURPOSES OF YOUR PERSONAL DATA

 

Your personal data can be processed with the following
purposes in accordance with the related legislation in scope of your
relationship with EY Turkey:

 

Conducting communication activities,

Conducting the offer process for services and products,

Fulfilling promotional and marketing activities,

Fulfilling the legal obligations arising from the
legislation,

Carrying out custody and archive activities,

Execution of legal, litigation and administrative affairs.

C.III. TRANSFER OF PERSONAL DATA

 

Your personal data shall be transferred to domestic judicial
authorities or law enforcement officers to the extent required by purposes
included under C.II title of this Clarification Text or requested by such
authorities in accordance with related legislation in scope of the provisions
of Law on the Protection of Personal Data regarding transferring of personal
data.

 

C.IV. LEGAL GROUNDS FOR PROCESSING OF PERSONAL DATA AND
COLLECTION METHOD

 

Your personal data is processed through automatic or manual
processes based on the following compliance with laws reasons and listed under
the provisions of article 5 and 8 of the Law on the Protection of Personal Data
in the abovementioned framework directly from you or supplier firms or business
partners and from legal authorities via internet, telephone, email and
physical, written, verbal and electronic environments in scope of your relation
with EY Turkey.

 

processing of personal data belonging to the parties of a
contract, is necessary provided that it is directly related to the conclusion
or fulfilment of that contract,

the data concerned is made available to the public by the
data subject himself,

it is mandatory for the legitimate interests of the
controller, provided that this processing shall not violate the fundamental
rights and freedoms of the data subject.

D- OUR CLIENTS

 

D.I. WHICH PERSONAL DATA IS PROCESSED?

 

Following personal data is processed within the framework of
your relation with EY Turkey;

 

Identity Information: Name/surname, national ID card,
National ID, nationality, marital status, date and place of birth.

Contact Information: Address information, e-mail address,
mobile phone number,

Your Financial Information: Bank and account information,
balance sheet information, invoice and debt information, collection risk
information, financial performance information, credit and risk information,
assets information,

Your Visual Record Data: Photo information,

Your Customer Transaction Data: Order and request
information, promissory note and cheque information,

Your Professional Experience Data: CV,

Your Risk Management Data: Information processed to manage
commercial / technical / administrative risks,

Your Legal Transaction Data: Data in the lawsuit file,

D.II. PROCESSING PURPOSES OF YOUR PERSONAL DATA

 

Your personal data can be processed with the following
purposes in accordance with the related legislation in scope of your
relationship with EY Turkey:

 

Execution of service sales processes,

Carrying out after-sales support services,

Submission of service offers,

Execution of contract processes,

Conducting communication activities

Providing advisory services,

Sending e-mail or gift for celebration and congratulation
within the scope of customer relations management

Carrying out organization and event management activities,

Carrying out travel and accommodation processes,

Determining the target audience for customers and carrying
out marketing activities,

Execution of finance and accounting processes,

Payroll / Budget reporting process,

Execution of the current card opening form process,

Execution of legal processes,

Management of anti-money laundering (AML) processes,

Giving information to authorized persons, institutions and
organizations.

D.III. TRANSFERRING OF PROCESSED PERSONAL DATA

 

Your personal data shall be transferred to official bodies
and institutions, our related domestic and foreign suppliers and our business
partners to the extent purposes included under D.II title of this Clarification
Text in scope of the provisions of Law on the Protection of Personal Data
regarding transferring of personal data domestically and overseas.

 

D.IV. LEGAL GROUNDS FOR PROCESSING OF PERSONAL DATA AND
COLLECTION METHOD

 

Your personal data is processed based on the following
compliance with laws reasons and listed under the provisions of article 5, 8
and 9 of the Law on the Protection of Personal Data in the abovementioned
framework directly from you or supplier firms or business partners and from
legal authorities via internet, telephone, email and physical, written, verbal
and electronic environments in scope of establishment of your legal relation
with EY Turkey.

 

Having explicit consent,

it is clearly provided for by the legislation such as Tax
Procedure Law, Turkish Code of Obligations, Turkish Code of Commerce which are
applicable for our company,

Personal data regarding parties of the contract is required
to be processed provided that they are directly related to conclude and execute
such contract,

It is obligatory to fulfil legal obligations,

It is made publicly available by the related individual
(data subject?),

It is obligatory to process data in order to grant, use or
protect a right,

It is obligatory to process data for the legitimate
interests of the controller provided not causing any harm on fundamental rights
and freedom of the data subject.

E- SUPPLIER/ BUSINESS PARTNER OFFICERS

 

E.I. WHICH PERSONAL DATA IS PROCESSED?

 

Following personal data is processed within the framework of
your relation with EY Turkey;

 

Identity Information: Name/surname, mother/father name,
national ID card, driving license information, passport number, tax
identification number, signature, National ID, nationality, marital status,
date and place of birth.

Contact Information: Address information, e-mail address,
mobile phone number,

Your Financial Information: Bank account and card
information, invoice and debt information,

Your Legal Transaction Data: Information in correspondence
with judicial authorities, Data in the lawsuit file,

Your Professional Experience Data: CV,

E.II. PROCESSING PURPOSES OF YOUR PERSONAL DATA

 

Your personal data can be processed with the following
purposes in accordance with the related legislation in scope of your
relationship with EY Turkey:

 

Carrying out the procurement processes of goods and
services,

Conducting communication activities,

Execution of contract processes,

Conducting audit activities,

Opening / changing and checking the current account,

Fulfilling the legal obligations arising from the
legislation,

Execution of legal, litigation and administrative affairs,

Conducting accounting processes,

Giving information to authorized persons, institutions and
organizations.

E.III. TRANSFER OF PERSONAL DATA

 

Your personal data shall be transferred to official bodies
and institutions, our related domestic and foreign suppliers and our business
partners to the extent purposes included under E.II title of this Clarification
Text in scope of the provisions of Law on the Protection of Personal Data
regarding transferring of personal data domestically and overseas.

 

E.IV. LEGAL GROUNDS FOR PROCESSING OF PERSONAL DATA AND
COLLECTION METHOD

 

Your personal data is collected from you, our business
partners and legal authorities during the establishment of your legal relation
with EY Turkey and maintenance of such relation via website, contracts,
electronic mail verbally, in written and in electronic environment. In this
context, your personal data collected is automatically or manually processed
based on the following compliance with laws reasons and listed under the
provisions of article 5, 8 and 9 of the Law on the Protection of Personal Data
in the abovementioned framework.

 

it is clearly provided for by the legislation such as Tax
Procedure Law, Turkish Code of Obligations, Turkish Code of Commerce which are
applicable for our company,

Personal data regarding parties of the contract is required
to be processed provided that they are directly related to conclude and execute
such contract,

It is obligatory to fulfil legal obligations,

It is made publicly available by the related individual
(data subject?),

It is obligatory to process data in order to grant, use or
protect a right,

It is obligatory to process data for the legitimate
interests of the controller provided not causing any harm on fundamental rights
and freedom of the data subject.

F. YOUR RIGHTS IN TERMS OF PROTECTING YOUR PERSONAL DATA

 

You have the following rights through applying to the
companies which are within the body of EY Turkey network via the methods
included under “Contact” section of this Clarification Text:

 

to learn whether your personal data is processed or not,

to request information if your personal data is processed,

to learn the purpose of your data processing and whether
this data is used for intended purposes,

to be informed about the third parties to whom your personal
data is transferred domestically or abroad,

to request the rectification of the incomplete or inaccurate
data, if any,

to request the erasure or destruction of your personal data
under the conditions laid down in Law on Protection of Personal Data,

to request notification of the operations carried out in
compliance with abovementioned rectification, erasure and destruction to third
parties to whom your personal data has been transferred,

to object to the processing, exclusively by automatic means,
of your personal data, which leads to an unfavourable consequence for you,

to request compensation for the damage arising from the
unlawful processing of your personal data.

CONTACT INFORMATION FOR YOUR RIGHTS AND REQUESTS

You may deliver by hand or via notary public your questions
and requests regarding your personal data through making identity determination
to the addresses of our following companies which are within the network of EY
Turkey accompanied with the petition issued in line with the requirements
mentioned in the Communique on Principles and Procedures for Application to
Data Controller. Moreover, you may also submit such questions and requests to
registered electronic mail addresses of our companies, which are within the
network of EY Turkey, through using secured electronic signature and mobile
signature or electronic mail addresses, which have been previously notified to
our Companies and verified, of your Company.

 

Our Application Channels and Addresses

 

Samiron Metal Industry