Personal Data Protection Law Clarification Text

Aeris Technology Inc., hereinafter referred to as “Aeris,” takes the highest level of security measures to ensure the lawful collection, storage, and sharing of your personal data and to protect your privacy.

Our aim is to provide you with the most transparent information regarding how your personal data is collected, the purposes of processing, the recipients, legal grounds, and your rights in accordance with Article 10 of the Personal Data Protection Law numbered 6698, and to ensure your satisfaction.

1 – Data Controller

6698 sayılı Kişisel Verilerin Korunması Kanunu (KVKK) 6698 sayılı Kanun uyarınca, kişisel verileriniz; veri sorumlusu olarak Aeris Teknoloji Çözümleri Ltd. Şti. (“Aeris”) tarafından aşağıda açıklanan kapsamda toplanacak ve işlenebilecektir.

2 – The Purposes of Processing Personal Data;

Aeris may collect personal data from parties such as customers, employees, potential customers, job applicants, business partners, and suppliers. These personal data categories may include identity information, customer information, contact information, customer transaction information, transaction security information, legal transaction and compliance information, and marketing and sales information.

Without limiting the following and subject to compliance with legal requirements, you can see your personal data that is collected:

Planning and execution of customs operations, production and/or operation processes, planning and execution of supply chain management, planning and execution of customer relationship management processes, Ensuring the delivery of Aeris products and services to you, pricing and invoicing of products, sales of products and services, realization and tracking of transactions you request regarding purchased and/or used products and services, delivery of products, installation, maintenance, repair, etc., post-sales service processes, Management of Aeris’ commercial and business strategies; financial operations carried out by Aeris, communication, market research, and social responsibility activities, procurement operations (request, proposal, evaluation, order, budgeting, contract), internal company system and application management operations, legal operations, Use in all products and services that will be provided to you as part of the main contract with Aeris, which regulates the works specified in the Aeris main contract where you disclose your personal data, Establishing communication to provide information related to information technology requirements, system structure, and the necessity of providing you with information about the support services for information processing received, Planning and execution of call center, reception services, return of faulty products, maintenance and repair services, on-site repair services, customer information services, Taking your orders, completing your payment transactions, providing logistics collaboration with third parties for product shipments, suggesting products and services that may interest you, online behavioral advertising and marketing, customer portfolio management, measurement and improvement of service quality, communication, optimization, audit, risk management and control, promotion, analysis, determining areas of interest, scoring, profiling, marketing, sales, advertising, communication, Planning and execution of consulting services, maintenance, support, and reporting services, Fulfilling our obligations to you, preparing records and documents, complying with local and international legal obligations regarding information storage, reporting, informing, taxation, and other obligations, Measurement and enhancement of customer satisfaction, complaint management, obtaining your opinions and suggestions regarding new services and products, receiving problem/error notifications, providing information about products and services in response to complaints and requests, Providing promotional, advertising, campaign, discount, benefit, condition, pricing, advantages, and other benefits for sales and marketing activities aimed at improving the quality of service and products, Carrying out traffic measurement, statistical analysis, segmentation/profiling, and CRM activities to be carried out for sales and marketing activities, Complying with information storage, reporting, and notification obligations prescribed by official institutions, fulfilling the requirements of contracts, and performing legal obligations that Aeris is subject to regarding the use of these services, Examining, evaluating, and responding to requests from official authorities or you, within the purposes stated in Articles 5 and 6 of Law No. 6698.

3 – To Whom and for What Purpose Personal Data Can Be Transferred

Your collected personal data, with the sole purpose of realizing the objectives mentioned above, may be transferred:

• To foreign companies and affiliates,
• To individuals or organizations permitted by tax legislation, Social Security Institution legislation, Court of Accounts, Law on the Prevention of Laundering of Crime Revenues, Law on Prevention of Money Laundering, Turkish Commercial Code, Turkish Code of Obligations, and other related legislations,
• To consultants, auditors, lawyers, and other third parties from whom services are obtained,
• To real persons or legal entities with whom we collaborate and from whom we receive services in product/service comparison, analysis, assessment, advertising, and in realizing the objectives mentioned above, to program partner institutions and organizations, and to institutions with which we have agreements for sending messages to our customers, and to cargo companies that deliver orders to you in accordance with the personal data processing conditions and objectives outlined in Articles 8 and 9 of Law No. 6698,
• To legally authorized public institutions and organizations, administrative authorities, and legal authorities,

4 – Method of Personal Data Collection and Legal Basis

Your personal data is collected by Aeris within the framework of legal regulations, through various channels such as applications made through affiliated websites, transactions made within the scope of all types of contracts with real and/or legal entities, dealers, electronic mail, our website, interactive voice response system, and mobile application, and through written, verbal, or electronic means or any future channels that may be established.

5 – Rights of Personal Data Subject as Stated in Article 11 of Law No. 6698

As personal data subjects, if you communicate your requests regarding your rights through the methods specified below, Aeris will respond to your request in the shortest time, no later than thirty days, depending on the nature of the request. For responses provided, no fee will be charged for up to ten pages. An operational fee of 1 Turkish Lira per page will be charged for each page beyond ten pages. If the response is to be provided in a recording medium such as a flash drive or CD, the fee requested by our company will not exceed the cost of the recording medium.

Within this scope, personal data subjects have the following rights:

• To request the correction of personal data if they are incomplete or incorrectly processed and to request that the process be communicated to third parties to whom personal data has been transferred within the scope of this,
• To learn the purpose of processing personal data and whether they are used in accordance with their purpose,
• To learn whether personal data is processed,
• To request information if personal data has been processed,
• To learn the third parties to whom personal data is transferred domestically or abroad,
• To request the deletion or destruction of personal data if the reasons requiring the processing have disappeared, despite the fact that they have been processed in accordance with the provisions of Law No. 6698 and other related laws, and to request that the process be communicated to third parties to whom personal data has been transferred within the scope of this,
• To object to a result against yourself that arises by analyzing the processed data exclusively through automated systems,
• To know the third parties to whom personal data is transferred domestically or abroad,
• You can submit your request regarding the use of your above-mentioned rights in accordance with Article 13, paragraph 1 of Law No. 6698 and the Notification on the Procedures and Principles of Application to the Data Controller No. 30356 dated 10.03.2018, in writing and in Turkish, or using a registered electronic mail (KEP) address, secure electronic signature, mobile signature, or the electronic mail address previously notified to Aeris and registered in our system. In applications, information will only be provided about the person making the application, and information about other family members and third parties will not be obtainable. Aeris reserves the right to verify your identity before responding.

In your application, it is mandatory to include:

• Your name, surname, and your signature if the application is in writing,
• For Turkish Republic citizens, your Turkish Republic identification number; if you are a foreign national, your nationality, passport number, or any available identification number,
• Your primary residential or workplace address for notifications,
• If available, your primary email address for notifications, phone, and fax number,
• The subject of your request,
• If available, any relevant information and documents related to the subject should be attached to the application.

If you wish to make a written application, you can submit it, along with the necessary documents, to our company at the address 19 Mayıs Mh. 19 Mayıs Cd. No:37 UBM Plaza. If you prefer to apply via email, you can send your application to [email protected]. Depending on the nature of your request, providing complete and accurate information and documents that enable identity verification is required. In case the requested information and documents are not provided as required, there may be delays and shortcomings in the investigations to be conducted by Aeris in response to your request. In this regard, Aeris declares that it reserves its legal rights. Therefore, it is necessary to send the requested information and documents, complete and relevant to the nature of your request, for the purpose of proper identification.