**INFORMATION NOTICE REGARDING THE PROCESSING OF PERSONAL DATA**  
("INFORMATION NOTICE")  

Kalitetürk Certification Consultancy presents this information notice (“Information Notice”) to you as the data controller to inform you about the protection of personal data, data privacy, and security regarding its customers, business partners, and other third parties with whom it interacts.

This Information Notice is prepared to fulfill the obligation to inform, as a “Data Controller,” in relation to the processing of your personal data (any information relating to an identified or identifiable natural person, such as your name, address, phone number, email address) (“Personal Data(s)”), which has been provided and/or collected for the purpose of Consultancy, monitoring of our processes, establishment and/or execution of a certification, training, consultancy agreement, and recruitment processes with Kalitetürk Certification Consultancy in accordance with Article 10 of the Law on Protection of Personal Data No. 6698 (“KVKK”). Kalitetürk Certification Consultancy, in terms of the processing of Personal Data, has the status of a data controller under the KVKK. Personal Data may be processed and stored by Kalitetürk Certification Consultancy in accordance with the KVKK and the legislation on the protection of personal data.

**Purposes of Processing Personal Data**  

Your personal data, in compliance with Article 20 of the Constitution of the Republic of Turkey and Article 4 of the KVKK, may be processed by Kalitetürk Certification Consultancy as the data controller for the following purposes:

- Providing the services you request in line with your needs,  
- Planning commercial business strategies,  
- Conducting customer meetings within our consultancy office, preparing consultancy offers, process reports, and reviewing submitted proposals,  
- Executing the information security process,  
- Establishing and/or executing a consultancy agreement,  
- Managing processes with customers and management systems,  
- Executing contract processes,  
- Recording necessary identity, address, tax number, and other information to identify the owners and addressees of all kinds of business and transactions, and organizing them on paper or electronically,  
- Evaluating candidates in recruitment processes.  

**Methods and Legal Grounds for Collecting Personal Data**  

Personal Data is collected by Kalitetürk Certification Consultancy through all sorts of tools and channels, verbally, in writing, or electronically, primarily for consultancy, report preparation, and offering proposals, and/or establishing and/or executing a consultancy agreement with Kalitetürk Certification Consultancy, based on the legal grounds of ensuring that Kalitetürk Certification Consultancy can fully and correctly fulfill its responsibilities arising from contracts and laws. The Personal Data collected on these legal grounds may be processed and transferred by Kalitetürk Certification Consultancy in compliance with the fundamental principles set forth by the KVKK and the personal data processing conditions and purposes specified in Articles 5 and 6 of the KVKK, for the purposes outlined in this document.

**Processing of Personal Data**  

Kalitetürk Certification Consultancy will only collect Personal Data for specific, explicit, and lawful purposes, and store it for the duration required for the purposes of processing the Personal Data as explained in the relevant section above. It will not process Personal Data in a way that is incompatible with the purposes for which it was collected, and when the reasons for processing cease to exist, unless there is a legal obligation to retain the data, it will delete, destroy, or anonymize it ex officio or upon the request of the data subject.  

**Transfer of Personal Data**  

Your Personal Data may be transferred by Kalitetürk Certification Consultancy to competent courts and/or enforcement offices and public institutions and organizations within the country in accordance with Article 8 of the Law, to fulfill the purposes of Processing Personal Data specified in this Information Notice and for the additional purposes of data processing stated below.

All necessary technical and administrative measures are taken by Kalitetürk Certification Consultancy in cases where your personal data is transferred within the country. Additionally, third parties transferring data are required to commit to taking necessary technical and administrative measures.

**Rights of the Data Subject**  

Article 20 of the Constitution of the Republic of Turkey stipulates that everyone has the right to be informed about personal data concerning themselves. Article 11 of the KVKK regulates that among the rights of the Personal Data owner is the "right to request information." In this context, Kalitetürk Certification Consultancy provides the necessary information upon request by the personal data owner and, with this Information Notice, informs the data owner about how the right to request information is exercised and how matters related to the information request are evaluated.

Data subjects have the following rights under the KVKK:

- To learn whether their Personal Data is being processed,  
- To request information if their Personal Data has been processed,  
- To learn the purpose of processing their Personal Data and whether it is used in accordance with its purpose,  
- To know the third parties to whom their Personal Data has been transferred, domestically or internationally,  
- To request the correction of incomplete or incorrect processing of their Personal Data,  
- To request the deletion or destruction of their Personal Data within the framework of the conditions set forth in Article 7 of the KVKK and to request notification of this to third parties to whom the Personal Data has been transferred,  
- To object to any adverse outcome resulting from the analysis of processed data exclusively through automated systems,  
- To demand compensation if they suffer damage due to the unlawful processing of their Personal Data.

**Application of the Data Subject**  

You may submit your requests regarding your rights mentioned above in writing to kalite@kaliteturk.com or to our address below. If there is an additional cost involved in fulfilling these requests, Kalitetürk Certification Consultancy may charge the applicant a fee according to the tariff set by the Personal Data Protection Board.  

Cevizlik Mahallesi, Reyhan Sokak, Uğur İşhanı, No: 14/4, Bakırköy – Istanbul  
Tel: +90 212 583 02 04