GENERAL INFORMATIONON THE PROCESSING OF PERSONAL DATA

In the processing of personal data, Article 10 of the Personal Data Protection Law (“KVKK or the Law”), which aims to protect the fundamental rights and freedoms of individuals, especially the privacy of private life, titled “Informing Obligation of the Data Controller” and the Procedures and Principles to be Complied with in Fulfilling the Obligation to Light Pursuant to the Communiqué, Hayat Holding A.Ş. (“Hayat” or “Company”), we aim to inform you about your personal data processed.

• Processed Personel Data

Within the scope of your relationship with Hayat, your personal data in the following categories may be processed, depending on the nature of the activity;

• Identity Data
• Communication Data
• Financial Data
• Physical Space Security Data
• Transaction Security Data
• Visual and Audio Data
• Legal Transaction Data

• Purpose of Processing Personal Data

Your personal data obtained within the scope of your relationship with Hayat is processed for the following purposes, although it varies on a process-based basis:

Execution of communication activities for Collaborating Customers and Suppliers, and planning and execution of corporate communication activities

Management of relations with business partners and/or Suppliers

Managing the evaluation process of all kinds of requests and complaints you have forwarded to us, especially your contact forms and call center calls

Execution of after-sales support services for goods / services

Execution of customer relationship management processes

Communication within the scope of marketing activities, carrying out satisfaction studies, planning and / or execution of commitment processes to products and / or services

Managing bid and sales processes

Execution of invoicing and document issuance process

Follow-up and execution of legal affairs

Execution of activities in accordance with the legislation

Conducting audit, investigation and intelligence activities through the Ethics Violation Report Line and other related methods

Execution / supervision of business activities

Planning and execution of transport and logistics activities

Planning and execution of human resources processes

Management of website access records, use of mandatory cookies and ensuring data security

Sending celebratory giveaways, calendars, agendas and similar gifts on special occasions

Execution of Information Security processes

Ensuring the security of data controller operations

Collection and use of contact information of persons to be contacted through our employees within the scope of our company's promotional activities

Carrying out business continuity activities

Organization and event management

Conducting social responsibility and civil society activities

Providing information to authorized persons, institutions and organizations

Ensuring the security of the physical space by taking the entrance recording and camera records in order to ensure the security of the company, offices and factories

Execution of emergency management processes

• Personal Data Collection Methods and Legal Reasons

It is necessary to process the personal data of the parties to the contract, provided that your personal data is directly related to the establishment or performance of a contract at the time of your relationship with our Company and during the continuation of the said relationship; It is clearly stipulated in the laws to which our company is subject; it is mandatory for the data controller to fulfill its legal obligation and data processing is mandatory for the establishment, exercise or protection of a right; Data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject; where necessary, based on the legal grounds of your explicit consent, from you, our business partners, group companies and affiliates, third parties and legal authorities, provided that the website, various contracts, mobile applications, e-mail, telephone or application forms and physically, verbally, in writing or in writing. are processed from electronic media in accordance with the Law, automatically and non-automatically, for the above-mentioned purposes.

• Transfer of Processed Personal Data

Your personal data, for the purposes set forth in article 2 of this Clarification Text and in accordance with the conditions set forth in articles 8 and 9 of the KVKK; Program partner institutions and organizations, banks and financing companies, from which we receive service/cooperation according to the nature of the activity, institutions that we consult on legal/financial/tax/operational issues, transportation and logistics companies, Hayat Holding A.Ş. and its group companies, to our Company's subsidiaries abroad and related parties in the services carried out globally, to the servers of our business partners abroad within the framework of the cloud service, and to authorized public institutions and organizations.

• Rights of the Person whose Personal Data is Processed

In accordance with the provisions of Article 11 of the Law, you have the following rights in relation to your personal data:

Learning whether personal data is processed or not,

If personal data has been processed, requesting information about it,

Learning the purpose of processing personal data and whether they are used in accordance with its purpose,
Knowing the third parties to whom personal data is transferred at home or abroad,

Requesting correction of personal data in case of incomplete or incorrect processing,

Requesting the deletion or destruction of your personal data in the event that the reasons for its processing disappear,

In case of correction, deletion or destruction of personal data, requesting the notification of these processes to third parties to whom personal data has been transferred,

Objecting to the emergence of a result against the person himself by analyzing the processed data exclusively through automated systems,

To request the compensation of the damage in case of loss due to unlawful processing of personal data.

• If You Want to Contact Us for Your Rights and Claims

Pursuant to the provisions of Article 11 of the Personal Data Protection Law, your requests regulating the rights of the person concerned are submitted to Mahir İz Cad. No:25 (34662) Altunizade, Üsküdar / Istanbul-Turkey by hand in person, with the recipient being “HAYAT KVKK”, or you can send it via registered mail with return receipt or via notary public. In addition, you can forward it to Hayatkvkk@hayat.com.tr using the e-mail address you have previously notified to our Company and registered in our systems.

You can access the sample application form we have prepared to assist your application through this link . Apart from the application form, we would like to point out that applications made in accordance with the conditions specified in the Communiqué on Application Procedures and Principles to the Data Controller will also be evaluated. Applications to be made will be finalized as soon as possible and within 30 days at the latest, depending on the nature of the request.