Company Privacy Notice

This notice has been prepared by Vekmar Elektrik Sistemleri Yatırım ve Tic. A.Ş. (“Company”), acting as data controller, for the purpose of informing you about the processing of your personal data in accordance with Article 10 of Law No. 6698 on the Protection of Personal Data (“Law”). Our Company carries out personal data processing activities by taking the necessary security measures, primarily for the protection of privacy and fundamental rights and freedoms. The purpose of this text is to inform you about the methods by which your personal data is obtained, the purposes of processing, legal grounds, third parties to whom data may be transferred, and your rights.

Law No. 6698 on the Protection of Personal Data was adopted on March 24, 2016, and entered into force upon publication in the Official Gazette on April 7, 2016. Furthermore, pursuant to Article 32 of the Law titled “Entry into Force,” Articles 8, 9, 11, 13, 14, 15, 16, 17, and 18 of the Law entered into force as of October 7, 2016. The Law was adopted to protect the fundamental rights and freedoms of individuals — primarily the right to privacy — in the processing of personal data, and to regulate the obligations of natural and legal persons who process personal data and the procedures and principles they must follow. This text serves to inform and enlighten job applicants on behalf of Vekmar Elektrik Sistemleri Yatırım ve Tic. A.Ş.

The personal data you have shared will be recorded, updated, disclosed/transferred to third parties, and stored by our Company in accordance with the Law.

A – What Personal Data Will Be Processed and for What Purposes

For the purpose of evaluating you for the position you have applied for and/or for future positions that may arise if you are not accepted for the applied position, and to be able to contact you again; and if you are accepted for the applied position, for the establishment and performance of your employment contract — the following data will be processed: name and surname, gender, date of birth, photograph (optional), nationality, mobile phone number, email address, address (city/district), country of residence, CV information, educational information (school/department, most recent school graduated from, graduation date, current school/department), computer skills, foreign language proficiency, certificates, abilities, seminars and courses attended, work experience (company name, years, last title, most recent employer, last position level, other benefits/social assistance provided at previous employer, total experience), military service status (place/date of service, deferment and exemption information), current salary and salary expectations, and driver’s license data — based on the legal grounds that data processing is necessary for the legitimate interests of the data controller without prejudicing the fundamental rights and freedoms of the data subject, and that processing of personal data of the contracting parties is necessary where directly related to the establishment or performance of a contract.

— If you come for a face-to-face interview as a job applicant, in addition to the above, the following data will also be processed via interview notes and a physical application form: your last job description, the position you applied for, the date you could start if accepted, whether you have any acquaintances working at our Company (and if so, their name and surname), the method of application, and your signature — based on the same legal grounds as above; and for security purposes, your name and surname, identity number, reason for visit recorded in the visitor logbook, and your image captured by in-building camera recording — based on the legal ground that processing is necessary for the legitimate interests of the data controller without prejudicing fundamental rights and freedoms.

— Within the framework of our Company’s human resources policies, for the purpose of assessing your competencies and suitability for certain positions and/or roles, the following additional data will be processed: personality inventory results and general aptitude test results — based on the legal ground that processing is necessary for the legitimate interests of the data controller without prejudicing fundamental rights and freedoms.

— If you are being considered for a position designated for persons with disabilities, or if you have been referred for employment for this purpose by İŞKUR, in addition to the above, information regarding whether you have a disability and your degree of disability (percentage) will be processed — based on the legal grounds that processing of personal data of the contracting parties is necessary where directly related to the establishment or performance of a contract, and that it is expressly provided for by law.

— Other personal data you may include in your CV or upload to online career sites without being requested by our Company through the Job Application Form (such as your photograph, place of birth, full address, marital status) and special categories of personal data (such as association memberships, health information).

— As a rule, only the personal data necessary to assess your suitability for the job and position will be collected. Therefore, we recommend not sharing personal data beyond what is necessary for your suitability for the job and position in CV texts or personal data shared with us through online career sites.

— Responsibility for informing your references and family members whose personal data you will share with our Company, and for obtaining their explicit consent where necessary, lies with you.

— If you are accepted for the position you applied for, the data listed in this Notice will continue to be processed as employee data.

B – Method of Collecting Your Personal Data

Your personal data is collected in compliance with the Law through both automated and non-automated means, including: applications to positions posted on online career sites our Company is a member of, messages/CVs sent to our recruitment officers through those websites, CVs sent via email to our employees, information shared with our Company by consulting firms or İŞKUR, job application forms, job interviews, reports and interview notes from candidate evaluations during the recruitment process, personality inventory results and general aptitude test results (where required by the position), relevant exam results such as foreign language and skills assessments, information obtained directly from you, and through your references or former employers or via communication tools.

C – To Whom and for What Purposes Your Personal Data May Be Transferred

We transfer your personal data to third parties only in accordance with the purposes stated in this Notice and in compliance with Articles 8 and 9 of the Law. In this context:

— We transfer data to domestic and international business partners, suppliers, and service providers (such as database and server service providers, infrastructure maintenance and support and software licensing service providers, and legal consultancy service providers) involved in supporting our Company’s human resources processes, solely for use within the scope of services provided to fulfill Vekmar Elektrik’s operations.

— In order to fulfill our obligations to provide information and documents to authorized public or private institutions and organizations, judicial authorities, and official bodies, and to exercise our legal rights such as litigation and response rights, we may transfer data to the following institutions and organizations under the relevant laws and secondary legislation, based on our legal obligations: competent law enforcement authorities, public prosecutors’ offices, and courts pursuant to Law No. 5271 on Criminal Procedure; and the Personal Data Protection Authority pursuant to Law No. 6698.

— In addition, in order to fulfill our obligations arising from other legislation, we may transfer your personal data to other relevant institutions and organizations, as well as public institutions and organizations, upon request.

D – Your Rights as a Data Subject under Article 11 of the Law

With respect to the personal data processed by our Company, under Article 11 of the Law, you have the following rights: to learn whether your personal data is being processed, the purpose of processing and whether it is being used in accordance with that purpose, and the third parties to whom personal data is transferred domestically or abroad; to request information if your data has been processed; to request the correction of incomplete or inaccurate personal data; to request the deletion or destruction of personal data under the conditions stipulated by the Law; to request that these matters be notified to the third parties to whom personal data has been transferred; to object to outcomes arising against you as a result of analysis of processed data exclusively through automated systems; and to claim compensation for damages in the event that personal data is processed in violation of the Law. You may submit your requests at any time in writing in accordance with the Communiqué on Procedures and Principles for Application to the Data Controller, or by using a secure electronic signature, mobile signature, or your email address previously notified to our Company and registered in our system, to the addresses below.

Data Controller: Vekmar Elektrik Sistemleri Yatırım ve Tic. A.Ş. Email: ik@vekmar.com.tr Address: İTOSB İstanbul Tuzla Organized Industrial Zone, 8th Street No: 7, Tepeören, Tuzla – İSTANBUL

I consent to the processing of my personal data and, where shared, my special categories of personal data, for the purposes set out in the “Vekmar Elektrik Sistemleri Yatırım ve Tic. A.Ş. Clarification Text on the Protection of Personal Data Regarding Employee Application Processes” described above.

AMENDMENT

Amendment 1: No amendments have been made to the document yet.

Amendment Details: