Our company attaches great importance to protecting the acquired or to-be acquired personal data in consequence of its activity. In this context, this policy has been prepared in order to determine the principles and measures to be taken regarding the processing, protection, storage, destruction of personal data, and informing data owners. Our company carries out its activities regarding personal data within the scope of both the Personal Data Protection Policy and the Personal Data Protection Law No. 6698.

What Is Personal Data?

Personal data signifies all information that is related to a real person whose identity is or can be determined.

The Legal Reason and Purpose of Processing, Transfer, and Collection Method of Personal Data

Our company processes personal data in order to:

• Carry out the liabilities resulting from the law, and to protect the legal rights of our company
• To carry out contract negotiations, to draw up and execute the contracts, to follow and finalize the contract processes
• To procure better services to clients, to detect projects and services appropriate for clients, and to develop products and services
• To manage, perform, and control the company activities
• To present products and services in accordance with client preferences
• To follow and indulge client requests and complaints, and to evaluate customer satisfaction
• To procure materials and services the company needs
• To define and announce the company activity, and to perform sales and marketing activities
• To procure, plan, manage and evaluate the human resources the company needs, and to provide personal rights
• To provide the necessary coordination and cooperation among the company, and with the affiliations and suppliers, to protect the rights of our company which are resultant of contracts and laws.

The processing of personal data refers to all kinds of operations performed on the data such as non-automatic attainment of data to be made a part of any data entry system, enrollment, storage, retainment, alteration, readjustment, clarification, transposition, acquisition, being made accessible, classification, and inhibition of the use of data.

Our company processes data for its activity as a rule. In this context, our company can transfer the personal data of the data owner and the personal data of a special quality to third parties as a provision (community companies, business partners, shareholders, insurance companies, suppliers, state institutions and organizations, and to other third persons with the same purposes) in line with the purposes of personal data processing which are legal.

Our company stores personal data for the period indicated in the legislation on the condition that it is foreseen in the related legislation. If there is no period specified in the legislation on how much time the personal data needs to be stored, the data is processed for as long as needed according to our company’s practices and commercial practices depending on the activity carried out. In the act that you request for your data to be erased or destroyed or anonymized, your request will be able to be fulfilled at the end of the period determined by our company with legislative regulations; however, your data will not be processed by our company, and it will not be shared with third parties except for obligations regarding the national and international laws, regulations, and contracts.

Also, it can be shared with our shareholders to determine strategies related to our company’s activity and perform the activities of supervision.

Our company will be able to transfer personal data abroad on the condition that there is sufficient protection following this policy, and only if the data supervisors in Turkey and the related foreign country promise sufficient protection in black and white and there is council permission on the condition that there is not sufficient protection.

Rights of the Data Owner

The data owner has the right to be enlightened during the acquisition of personal data. This text has been prepared for enlightening the data owner. Also, the data owner has the right to:

• Learn whether or not the personal data is processed.
• Request information regarding that if the personal data is processed.
• Learn the reason why personal data is processed and whether or not the data is used in a relevant manner.
• Know the third parties in or out of the country to whom the data is transferred
• Request correction on the condition that personal data is processed incompletely and inaccurately.
• Request destruction of personal data in the event of the removal of conditions that require the processing of personal data.
• Request notification of the actions taken in case of correction or destruction of personal data, to third parties to whom personal data has been transferred,
• Object to the emergence of a result against the data owner by analyzing the processed data exclusively through automated systems,
• Request recovery of the loss in case of being damaged due to unlawful processing of data.

The data owner may notify his requests to the following address, telephone number, or e-mail address, provided that he/she certifies his/her identity.

Title: Executas Consultancy and Education Services

Address: NEF09 Office No:10 Floor: 5 Kagithane, Istanbul

E-Mail: executas@executas.com.tr

Phone Number: +90 212 803 37 15

The requests of the data owner are fulfilled within a maximum of 30 (thirty) days and the necessary information is given to the data owner free of charge.