SÖNMEZ POLYMER CHEMICAL INDUSTRY TRADE INCORPORATED COMPANY

CUSTOMER PERSONAL DATA PROCESSING INFORMATION NOTICE

As SÖNMEZ POLİMER KİMYA SANAYİ TİCARET ANONİM ŞİRKETİ (“Company” or “Sönmez Polimer”), as the data controller, we attach great importance to the processing and protection of your personal data in accordance with the Personal Data Protection Law No. 6698 (“Law”). This disclosure statement has been prepared in accordance with Article 10 of the Law to inform you about how your personal data is processed within the scope of your commercial relationship with our Company.

For more detailed information regarding the processing of your personal data, please refer to the SÖNMEZ POLİMER KİMYA SANAYİ TİCARET ANONİM ŞİRKETİ Personal Data Protection and Processing Policy published at https://sonmezpolimer.com.tr/.

1. Identity of the Data Controller

In accordance with the law, the data controller is SÖNMEZ POLİMER KİMYA SANAYİ TİCARET ANONİM ŞİRKETİ, whose details are provided below.

●Trade Name: SÖNMEZ POLYMER CHEMICAL INDUSTRY TRADE INCORPORATED COMPANY

●Address: BAŞPINAR (ORGANIZED) OSB MAH. O.S.B. 3rd REGION 83318 STREET NO: 17 ŞEHİTKAMİL / GAZİANTEP

●KEP Address: sonmezpolimer@hs02.kep.tr

●Email Address: muhasebe@sonmezpolimer.com.tr

2. Processed Personal Data

Within the scope of the business relationship you have established with our company, the following categories of your personal data are being processed

●      Identity Information: Information used to verify your identity, such as your first and last name, Turkish ID number, tax ID number, and signature.

●      Contact Information: Information that allows us to contact you, such as your address, phone number, email address, and KEP address.

●      Financial Information: Bank account number (IBAN), invoice, debt, and receivable information, as well as other data related to financial transactions.

●      Customer Transaction Information: Sipariş bilgileri, talep ve şikayet kayıtları, ticari işlemlere ilişkin kayıtlar gibi ticari ilişkimiz kapsamında oluşan bilgiler.

●      Legal Transaction Information: Information generated within the scope of our business relationship, such as order details, request and complaint records, and records related to commercial transactions.

● Transaction Security Information: When you use our website, information such as your IP address and website entry and exit information (log records).

●Physical Premises Security: Customer entry and exit records, camera recordings, and similar information

● Risk Management: Information processed for the management of commercial, technical, and administrative risks

3. Purposes for Processing Your Personal Data

Your collected personal data will be processed in accordance with the personal data processing conditions specified in Articles 5 and 6 of the Law for the following purposes [3, 3]:

●      Conducting sales and purchasing processes for goods/services,

●      Conducting contract processes,

●      Conducting financial and accounting operations,

●      Execution of customer relationship management processes,

●      Conducting logistics and after-sales support services activities,

●      Conducting communication activities,

●     Tracking and resolution of your requests and complaints,

●      Conducting activities in compliance with the regulations,

●      Monitoring and execution of legal matters,

●       Implementation of information security processes,

●      Ensuring Physical Premises Security

●      Implementation of Risk Management Processes

●      Conducting/Monitoring Business Activities

●     Providing information to authorized persons, institutions, and organizations.

4. Method and Legal Basis for Collecting Personal Data

Your personal data is collected by automated means, either fully or partially, or by non-automated means as part of a data recording system, depending on the nature of your commercial relationship with our Company. These methods include contracts, order forms, emails, telephone conversations, our website, fairs and events, and physical delivery of documents.

Your personal data is processed based on the following legal grounds specified in Article 5 of the Law

●     Provided that it is directly related to the establishment or performance of a contract, the processing of personal data belonging to the parties to the contract is necessary,

●   The processing is necessary for us to fulfill our legal obligations as the data controller (e.g., Tax Procedure Law, Turkish Commercial Code),

●   Where processing is necessary for the establishment, exercise, or defense of legal claims,

●   Provided that it does not infringe upon your fundamental rights and freedoms, the processing of data is necessary for the legitimate interests of our Company,

● Data processing activities must be explicitly provided for in the relevant laws.

In cases where data processing is required for purposes other than these legal reasons, such as marketing and promotion, your explicit consent will be obtained.

5. Transfer of Personal Data

Your collected personal data may be transferred to the following recipient groups within the country in accordance with Article 8 of the Law for the purposes specified above and to fulfill legal obligations.

Your personal data is not transferred abroad.

6. İlgili Kişi Olarak Haklarınız

Pursuant to Article 11 of the Law, you have the following rights by applying to our Company

● To learn whether your personal data has been processed,

● To request information regarding the processing of your personal data,

● To learn the purpose of the processing of your personal data and whether it is being used for its intended purpose,

● To know the third parties to whom your personal data has been transferred within or outside the country,

● Requesting the correction of your personal data if it has been processed incompletely or incorrectly, and requesting that this action be communicated to third parties to whom your personal data has been transferred,

● To request the deletion or destruction of your personal data if the reasons for processing it no longer exist, even if it has been processed in accordance with the law and other relevant legal provisions, and to request that this action be communicated to third parties to whom your personal data has been transferred,

● Object to a result being produced against you solely through the analysis of your processed data by automated systems,

● Request compensation for any damage suffered as a result of the unlawful processing of your personal data.

7. Application Methods

You may submit your requests regarding the above-mentioned rights to our Company using the DATA REQUEST FORM available at https://sonmezpolimer.com.tr or by submitting a petition that meets the minimum requirements set forth in the Communication on the Procedures and Principles for Submitting Requests to the Data Controller using the following methods:

● In writing:You can deliver your wet-signed application form or petition containing your request in person to our address at “BAŞPINAR(ORGANİZE) OSB MAH. O.S.B. 3.BÖLGE 83318 NOLU CAD. NO: 17 ŞEHİTKAMİL / GAZİANTEP” or send it via a notary public.

● Registered Electronic Mail (KEP): sonmezpolimer@hs02.kep.tr KEP you can send it to our address with a secure electronic signature.

● By email: You can send it to us via secure electronic signature or mobile signature, or via the email address previously provided to our Company and registered in our system, to muhasebe@sonmezpolimer.com.tr.

Depending on the nature of your application, your request will be processed free of charge as soon as possible and within 30 (thirty) days at the latest. However, if the process incurs additional costs, fees set by the Personal Data Protection Board may be charged.