CLARIFICATON TEXT UNDER THE LAW ON THE PROTECTION OF PERSONAL DATA NUMBER 6698

CertBy Uluslararası Denetim Belgelendirme ve Eğitim Hizmetleri Ltd. Şti. (“CertBy or the Institution”) takes all kinds of technical and legal measures in accordance with the Law on the Protection of Personal Data No. 6698 (“KVKK”) in the processing of your personal data due to the activities it carries out. The persons concerned can obtain detailed information on the processing of their personal data, their transfer to third parties, the legal reasons for collecting personal data and their rights in the KVKK from the following clarification text.

I. Purposes of Processing Personal Data

Your personal data may be processed by the data controller or real/legal persons to be appointed under the following conditions and conditions:

Carrying out the certification services that we are authorized in accordance with the relevant standards,

In order to improve, develop and diversify our services and to offer alternatives to the real/legal persons we are in contact with,

To raise and develop our service standards, to evaluate new technologies and applications, and to determine and implement our public and business strategies,

In order to prepare various reports, researches and presentations, to plan the management processes for the performance of the work within the scope of ISO/IEC 17025 and ISO/IEC 17065 accreditations to which we are subject, to follow up the finance and accounting works, to ensure security before our Institution,

In order to evaluate the recruitment processes of our employee candidates, to create the personnel files of our employees and to maintain the Human Resources policies of our Institution,

In order to increase the performance level and employee satisfaction of our employees, to control their health status in terms of suitability for the job, to pay their wages, to evaluate their complaints, to determine their training and career plans, or to ensure occupational health and safety,

In order to evaluate the candidates applying for a job or internship, to evaluate the applications made online for recruitment, to start the recruitment processes of the recruited,

For the purpose of arranging the legal leave of the employees, making the process of leaving the job, determining their continuity to work,

In order to record their images in our work areas, workplaces and offices, buildings for security and other reasons and to ensure the safety of visitors entering these places,

Visitors to our institutions, training, seminars and other events organized by our institution, photos and videos taken at corporate meetings; For the purpose of promoting, announcing our institution and the event and informing the public,

Identity information, contact information and other information transmitted to us by adding to the application documents or by hand / verbally; In order to determine the identity of the applicant in all kinds of verbal, written and electronic applications in order to contact our institution,

In order to carry out our necessary quality and standard audits or to fulfill our other obligations determined by laws and regulations,

For the purpose of notifying changes in the legislation or the policies we accept, or making notifications that concern the data subject.

II. Transfer of Personal Data

Your processed personal data for the above purposes and within the framework of the conditions determined by KVKK:

To the relevant independent audit firms, financial advisor/accounting firms, law firms for the purpose of fulfilling our obligations and auditing our commercial activities pursuant to the provisions of the relevant legislation,

Legally authorized public institutions and organizations in line with the demands of the relevant public institutions and organizations and limited to the purpose of the request,

Occupational health and safety companies, hospitals and health institutions in order to fulfill their obligations for emergency medical interventions and occupational health and safety,

Banks and financial institutions for the purpose of carrying out banking and financial transactions,

For the performance of our work, such as TÜRKAK and TSE, mandatory public institutions and organizations, in line with the demands of the relevant public institutions and organizations and limited to the purpose of the request.

III: Method and Legal Reason for Personal Data Collection

Your personal data, by the Institution or real/legal persons processing data on behalf of the Institution, with application forms, website, various contracts, all kinds of information forms, surveys, job application forms, employment contracts, written, verbal and digital notifications from our suppliers and those listed here. your express consent through verbal, written or electronic channels, including but not limited to, or as stipulated in the KVKK; It is collected within the scope of the performance of the contract, stipulated by the laws, legal obligations of our Institution, the use of its rights and legitimate interests.

IV. Storage, Disposal and Anonymization of Personal Data

Our institution stores personal data proportionally for the purpose of processing, in line with the purpose of processing personal data. Personal data is stored until the end of the period required by the relevant legislation, if the purpose and/or reason for processing has disappeared. When the purpose and reason for the processing of personal data ceases, personal data will be destroyed or anonymized when the statute of limitations required to meet our legal obligations is completed.

V. Rights of the Relevant Person

Real persons whose personal data are processed within our organization have the following rights in accordance with Article 11 of the KVKK:

Learning whether personal data is processed or not,

If personal data has been processed, requesting information about it,

To learn the purpose of processing personal data and whether they are used in accordance with the purpose,

Knowing the third parties to whom personal data is transferred in the country or abroad,

Requesting correction of personal data in case of incomplete or incorrect processing and requesting notification of the transaction made within this scope to the third parties to whom the personal data has been transferred,

Requesting the deletion or destruction of personal data in the event that the reasons requiring its processing have disappeared, although it has been processed in accordance with the provisions of the KVKK and other relevant laws, and requesting the notification of the transaction made within this scope to the third parties to whom the personal data has been transferred,

Objecting to the emergence of a result against the person himself by analyzing the processed data exclusively through automated systems,

Requesting the compensation of the damage in case of loss due to the illegal processing of personal data.

You can submit your requests regarding your rights mentioned in Article 11 of the Personal Data Protection Law to our Institution in accordance with the Communiqué on Application Procedures and Principles to the Data Controller. In order to ensure that they can be concluded quickly and effectively, we kindly ask you to fill out the Personal Data Protection Law Application Form. The requests of the person concerned will be evaluated and decided free of charge as soon as possible and ultimately within thirty (30) days at the latest. If the evaluation and decision-making process requires an additional cost, the fee in the tariff determined by the Personal Data Protection Board will be taken as basis.

It is presented to the public with our respect.

CertBy