This Disclosure Notice has been prepared by Habaş Sınai ve Tıbbi Gazlar İstihsal Endüstrisi A.Ş. in the name of data controller within the scope of Article 10 of the Law No. 6698 and the Communiqué on the Procedures and Principles to be Followed in Fulfilment of the Disclosure Obligation.

1-Personal Data Processed with the Identity of the Data Controller

Your personal data specified below; As the data controller Habaş Sınai ve Tıbbi Gazlar İstihsal Endüstrisi A.Ş. ("HABAŞ"), your personal data (your identity and contact data, your visual data through closed circuit camera recording systems in the building, your vehicle license plate details, your log records if you enable internet access) may be processed by us in accordance with the Law No. 6698 on the Protection of Personal Data ("Law") for the purposes described below.

2-For what purpose your collected personal data will be processed

Your personal data collected by HABAŞ may be processed for the following purposes, including why you disclose your personal data to us, within the personal data processing conditions specified in Article 5 of the Law.

• Execution of Audit / Ethics Activities,
• Ensuring Physical Security,
• Ensuring the Security of the Property and Resources
• Ensuring Visitor Personal Information Security

3-To whom and for what purpose your processed personal data can be transferred

Your collected personal data may be transferred by HABAŞ to legally authorized public institutions and organizations within the framework of the personal data processing conditions and purposes specified in Article 8 of Law No. 6698.

4-Methods and Legal Reasons for Collecting Your Personal Data

Your personal data are collected by HABAŞ through security cameras, through the security unit at the entrance of the Head Office building and from your log records if you enable internet access, by automatic and non-automatic means for legal reasons to fulfil the purposes specified in Article 2 of this Disclosure Notice. Images and log records are recorded by means of security cameras located at the entrance doors, building exterior, cafeteria, warehouses, corridors, and office shared areas within our HQ building. Your personal data collected in this process are automatically based on the legal reason "data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the person concerned" in Article 5 of Law No. 6698.

5-Rights of the Personal Data Owner according to Article 11 of the KVK Law

In this context, as the person concerned, you have the following rights.

1. To learn whether personal data is being processed,
2. Request information if personal data has been processed,
3. To learn the purpose of processing personal data and whether they are used in accordance with their purpose, To know the third parties to whom personal data are transferred domestically or abroad,
4. To request correction of personal data in case of incomplete or incorrect processing,
5. To request the deletion or destruction of personal data within the framework of the conditions stipulated in Article 7 of the Law,
6. To request notification of the transactions made pursuant to subparagraphs (d) and (e) to third parties to whom personal data are transferred,
7. To object to the emergence of a result to the detriment of the person himself/herself by analyzing the processed data exclusively through automated systems,
8. In case of damage due to unlawful processing of personal data, to demand compensation for the damage.

6-Application to HABAŞ for the Rights of Relevant Persons

As a data subject, in case you have a request regarding your rights under Article 11 of Law No. 6698; You can submit your application to our company by one of the following methods by filling out the Data Owner Application Form on the Protection of Personal Data in the KVKK Clarification Text published on the website www.habas.com.tr in accordance with the procedures and principles specified.

• It can be sent from the registered electronic mail (KEP) address of the data owner to habassinai@hs01.kep.tr by writing "Personal Data Protection Law Information Request" in the subject section of the e-mail with a secure electronic signature.
• It can be sent to the e-mail address kvkkhabas@habas.com.tr registered in our company's system by writing "Personal Data Protection Law Information Request" in the subject line.
• In writing to HABAŞ General Directorate - Personal Data Management Department located at the address of Yeni Mah. Fuat Paşa Sokak, No:1, 34880 Soğanlık / Kartal - İstanbul through a notary public or
• You can apply to our branches and facilities in person with an identity document (ID card, driving license, passport, etc.).

In the applications, name, surname information, signature if the application is in written form, TR ID number for citizens of the Republic of Turkey, address information or workplace address for notification, contact telephone or fax number, e-mail address for notification, if any, must be included with the subject of the request.

In accordance with Article 13 of the KVK Law, your application requests for your rights listed above will be finalized as soon as possible and within 30 (thirty) days at the latest, depending on the nature of the request. If the transaction requires cost, a fee may be charged according to the tariff determined by the Personal Data Protection Board. If the request is rejected, the reason(s) for rejection shall be justified in writing or electronically.

In the name of "Data Controller" as defined in the KVK Law and again in Article 10 of the KVK Law in accordance with Article 10 of the KVK Law and the Communiqué on the Procedures and Principles to be Followed in Fulfilling the Obligation to Inform ("Communiqué") published by the Personal Data Protection Board in the Official Gazette dated 10 March 2018 and numbered 30356, to fulfil the duty of informing personal data owners during the acquisition of personal data: During the acquisition of personal data by our Group Companies to personal data owners, we provide this information regarding the identity of our Group Company, the purpose for which personal data will be processed, to whom and for what purpose the processed personal data can be transferred, the method and legal reason for collecting personal data and the rights of the personal data owner under Article 11 of the KVK Law.

Depending on the changes that may occur in the Law over time, necessary updates will be made in this disclosure notice to inform you.