K.V.K.K.

MYFORM WORK CLOTHES

PERSONAL DATA PROTECTION AND PROCESSING POLICY

This Policy determines the principles to be followed by Myform İş Dressleri regarding the processing of personal data while fulfilling its obligations regarding the Personal Data Protection Law No. 6698 (“KVKK”) and the regulations stipulated in the relevant legislation. The Company undertakes to comply with the procedures and principles set out in this Policy in terms of personal data processed within its own structure.

PURPOSE AND SCOPE
The purpose of this Policy is to determine the principles regarding the methods and processes for the processing and protection of personal data by the Company. This Policy covers all activities regarding personal data processed by the Company and applies to such activities. This Policy may be changed when the Company deems it necessary, if required by the KVK Regulations. In case of any incompatibility between the KVK Regulations and this Policy, the KVK Regulations shall prevail. This Policy may be changed by the Company if deemed necessary and required by KVK Regulations.

DEFINITIONS
The definitions used in this Policy have the following meanings;

“Explicit Consent” refers to consent based on being informed about a specific issue and expressed with free will.

“Anonymization” refers to making personal data impossible to associate with an identified or identifiable natural person in any way, even by matching it with other data.

“Information Obligation” refers to the obligation of the data controller or the person authorized by him to provide information to the data subject within the scope of Article 10 of the KVKK during the acquisition of personal data.

“Personal Data” refers to any information regarding an identified or identifiable natural person (within the scope of this Policy, the expression “Personal Data” will also include “Special Personal Data” defined below to the extent appropriate).

“Personal Data Processing”: Obtaining, recording, storing, preserving, changing, rearranging, disclosing, transferring, taking over, making available personal data by fully or partially automatic or non-automatic means provided that it is part of any data recording system. It refers to any operation performed on data, such as classifying or preventing its use.

“Board” refers to the Personal Data Protection Board.

“Institution” refers to the Personal Data Protection Authority.

“KVKK” refers to the Personal Data Protection Law No. 6698.

“KVK Regulations” means the Personal Data Protection Law No. 6698 and other relevant legislation for the protection of personal data, binding decisions, principle decisions, provisions, instructions and applicable international agreements for the protection of data and other decisions made by regulatory and supervisory authorities, courts and other official authorities. It refers to all kinds of legislation.

"Special Category Personal Data" Data regarding individuals' race, ethnic origin, political thought, philosophical belief, religion, sect or other beliefs, appearance and attire, association, foundation or union membership, health, sexual life, criminal conviction and security measures. It refers to biometric and genetic data.

“Data Processor” refers to the real or legal person who processes Personal Data on behalf of the Data Controller, with authorization from the Data Controller.

“Data Subject” refers to all natural persons whose Personal Data is processed by or on behalf of the Company.

“Data Controller” refers to the natural or legal person who processes Personal Data by specifying the processing purposes and processing methods and is responsible for establishing and managing the data recording system.

PRINCIPLES TO BE APPLIED IN THE PROCESSING OF PERSONAL DATA
 

Processing of Personal Data in Compliance with Law and Integrity Rules
The Company will process personal data only as much as necessary, in accordance with the law, the rules of honesty and the principle of proportionality, and in accordance with the data processing purposes.

Taking Necessary Precautions to Keep Personal Data Accurate and Up-to-Date When Necessary
The company will ensure that the personal data it processes are accurate and up-to-date and will take the necessary measures in this regard. If the data subject requests changes to personal data within the scope of KVK Regulations, the relevant personal data will be updated.

Processing of Personal Data for Specific, Clear and Legitimate Purposes
The company will process personal data for specific, clear and lawful reasons. The Company will determine the purposes for which personal data will be processed and will inform the data subject of these purposes before personal data is processed. In this context, the data subject will be informed within the scope of KVK Regulations and explicit consent will be obtained where necessary.

Personal Data Must Be Related to the Purpose for Processing, Limited and Proportionate
The Company will process personal data in a way that is suitable for achieving the specified purposes and ensures that it is fit for purpose.