INFORMING TEXT ON THE PROCESSING AND PROTECTION OF PERSONAL DATA

IDENTIFICATION OF THE PERSON RESPONSIBLE FOR DATA
We, Üntes Isıtma Klima Soğutma Sanayi ve Ticaret Anonim Şirketi (“The Company”) (Üntes Heating Air Conditioning Cooling Industry and Trade Incorporated) care for the security and privacy of your personal data and in this respect, we, as the “Person Responsible for Data”, hereby submit the following matters to your information in the scope of the Law on Protection of Personal Data numbered 6698 (“KKVK”) in relation with your personal data, which we requested from you and which you shared with us, in order to comply with our informing obligation under article 10 of the Law.
WHICH OF YOUR PERSONAL DATA WILL BE PROCESSED
Your personal data are processed in verbal, written or electronic way using automatic or non-automatic methods through call center, internet site, social media, electronic mail, etc. Due to your interest in the services and products of our company or due to use of our products by you, the following personal data belonging to you, which you provided us and/or which can be updated, (not being limited with the following), can be processed:
• Name, surname, date of birth and other data included in your identification card,
• Your contact information such as your telephone number, electronic mail address, home address,
• In case you use our internet sites, your behavior and digital footprint information that we obtained through cookies,
• In case you visited our company, your identification and communication information, your videos taken through closed circuit camera recording,
• Your visual and audio that we obtained in the frame of promotion, advertisement, campaign, social responsibility projects, organizations
• If you are a business partner of our Company, your financial data such as bank account number, IBAN, invoicing information and your contact person information, information on the partnership structure and shareholders of your company,
• Signature authentication document and signature data, which are obtained when necessary, as well as professional data such as certificate of activity, chamber of profession registration etc., which are obtained in the scope of execution of the contract,
• If you are an employee of our Company, or if you work for an employer, who is a business partner of our Company, your educational data, service contract within the frame of your business relations, data on your suitability for the work and your performance, your health data, your data on private health insurance and its financing, your Social Insurance Institution data; R.T. ID visa/ passport data; vehicle data and other personal data that can be processed in the scope of your service contract not being limited with the above.

PURPOSE OF PROCESSING PERSONAL DATA
Your personal data are collected and processed for the personal data processing conditions and purposes indicated in articles 5 and 6 of KVKK and being limited with such purposes with the following targets: Realization of commercial activities carried out by our Company and management and execution of the relevant work processes and relations with the business partners and/or suppliers, technical management of the web sites of our company, customer management and complaint follow-up, product questionnaires and follow up of questions that you sent to our Company, performance of works necessary to allow you make use of the products and services provided by our Company, by our work units, planning and execution of sales, aftersales, marketing processes of the products and/ or services, providing information on the contents of the products and services of our Company, management of customer satisfaction, customer complaints and demands, customer relations, sending commercial electronic messages after obtaining approval in compliance with the legal legislation, performing activities, trainings and other organizations in our Company, carrying out the legal and commercial relations with the people in our company and in a business relationship with our company and ensuring the security of such relationships, administrative operations for communication performed by our Company, employee administration and management, ensuring the physical security and control of locations belonging to the Company, logistic activity planning, follow – up of contractual processes and/or legal requests, planning and execution of Human Resources and personnel recruitment processes and follow – up and realization of training and education activities, planning and/or execution of occupational health and/or safety processes, execution of research and development activities and ensuring that our Company can make use of subventions, planning and execution of institutional communication and institutional management activities, execution of information security management services, follow – up and auditing of finance and/or accounting works, determination and application of commercial and business strategies of our Company, creation and follow – up of visitor records, ensuring compliance with the legal obligations in accordance with the purposes to be notified to the relevant person while obtaining the information and as required under the relevant legislation.
TO WHOM AND FOR WHAT PURPOSE THE PERSONAL DATA CAN BE TRANSFERRED
Under the provisions of the Law on the transfer of personal data and the transfer of personal data to other countries, your personal data can be shared for the purposes indicated in this informing text with the domestic public institutions and organizations, security forces, courts and execution directorates, domestic/ foreign third party real and legal people, which we are related to, service provider firms and their authorities, business partners and shareholders of our company, our group companies and our direct or indirect domestic and foreign participations, suppliers and support service suppliers, domestic people and organizations, from whom we purchase service for saving data in cloud medium.
METHOD AND LEGAL REASON FOR PERSONAL DATA COLLECTION
Data is collected by using verbal, written or electronic means through the use of application forms, employment contracts, contracts, resumes, electronic follow – up and physical access control systems at the worksite, (e.g. biometric and card entrance systems, CCTV), information systems and electronic devices (e.g. telecommunication infrastructure, computer and telephones), İŞKUR and special employment offices (Kariyer.net, etc. included), parties providing Headhunter service, third parties (e.g. KKB and Findeks), online web site, Cookies created by our own site, Tracking Cookies created by third parties (e.g. Hotjar), measurement systems for site use and other documents submitted by the relevant person.
Your personal data obtained by using the above mentioned methods are processed within the frame of personal data processing conditions indicated in articles 5 and 6 of KVKK and in line with the basic principles of the law on protection of personal data.

HOW DO WE KEEP YOUR PERSONAL DATA?
Your personal data, which are shared with our company, are kept on the domestic secure servers of our Company in compliance with the relevant legal regulations, KVKK provisions and company policies.
HOW LONG DO WE KEEP YOUR PERSONAL DATA?
In compliance with KVKK, when the purpose requiring the processing under article 7/1 of KVKK no more exists and/or when the period of limitation, to which we are subject under the legislation, expires, your personal data will be deleted, removed or their use will be continued after anonymizing them.
OUR PRECAUTIONS FOR THE SECURITY OF YOUR PERSONAL DATA
Our company takes the relevant technical and administrative precautions in order to ensure the necessary security level to prevent the processing of your personal data in violation of the law and to securely save your personal data.
RIGHTS OF THE OWNER OF PERSONAL DATA
a) Under article 11 of KVKK, everyone has the following rights in relation with himself/herself by applying to the person responsible for data;
a) Being informed on whether your personal data is processed,
b) If the personal data is processed, requesting information on such process,
c) Being informed on the purpose of processing the personal data and whether such data is used for the relevant purpose,
d) Being informed on the third people in the country or abroad, to whom the personal data is transferred,
e) In case the personal data is processed in an incomplete or wrong way, requesting its correction,
f) Requesting the deletion or removal of personal data,
g) In case of correction, deletion or removal of personal data, requesting the notification of those transactions to third people, to whom the personal data was transferred,
h) Objecting to a result against the person himself/herself through the analysis of processed data exclusively by automatic systems.
i) Requesting the compensation of the loss in case of damage of personal data due to processing in violation of the law.

HOW CAN YOU USE YOUR RIGHTS?
You can submit your applications in relation with your rights listed hereinabove to the Person Responsible for Data by completing the Application Form, which you can access here.
Under the Notification on the Procedures and Principles of Application to the Person Responsible for Data, the application of the Relevant Person must include name, surname, signature if the application is in writing, R.T. identification number, (passport number if the applicant is foreign), residential place or worksite address for notification, electronic mail address for notification, if any, telephone number and fax number and information on the subject of request. 
The Relevant Person must indicate the matter requested in the application to be made for using the above-mentioned rights by indicating the right requested to be used in a clear and understandable way. The information and documents related with the application have to be added to the application.

The requested matter has to be related with the applicant in person, however, if the application is made on behalf of another person, the applicant has to be specifically authorized for this purpose and such authority has to be documented (special power of attorney). Furthermore, the application must include identification and address information and documents verifying identification have to be attached to the application.
The requests made by unauthorized third people on behalf of another person shall not be assessed.
IN HOW MUCH TIME YOUR REQUESTS ARE ANSWERED?
Your right requests related with you personal data are assessed and are answered within maximum 30 days following the date of their delivery to us. However, if the transaction requires a separate cost, the charge in the tariff determined by the Board on Protection of Personal Data will be collected by our Company.
If your application assessment results negatively, the reasons of rejection will be sent to the address you indicated in your application through one of the procedures selected in the Application Form, mainly through mail or e-mail.

Contact Information of the Person Responsible for Data Protection:
Üntes Isıtma Klima Soğutma Sanayi ve Ticaret Anonim Şirketi
İmrendi Mevkii Küme Evleri No:348 06980 Kahramankazan/Ankara
Tel  : +90 312 818 63 00
E-mail  : untes@untes.hs03.kep.tr