BERİŞİM GROUP COMPANIES VISITOR INFORMATION TEXT

Dear Visitor,

Birleşim Group and the Group Companies whose information is included in the attached list (Birleşim Engineering Heating Cooling Ventilation Industry Trade Joint Stock Company, Birleşim Construction Industry and Trade Joint Stock Company, Birleşim Mining Industry Trade Joint Stock Company, Birleşim Makina Agriculture Tourism Real Estate Food Industry and Trade Joint Stock Company, Erde Mühendislik As Sanayi ve Ticaret Anonim Şirketi, Toro Makina Anonim Şirketi, Edikli GES Enerji Anonim Şirketi, Solar Santral Enerji Anonim Şirketi (together referred to as “Birleşim Group Companies”), we attach importance to the security of your personal data that we process as data controller.

For this reason, we would like to inform you (“Relevant Person”) about your rights regarding the use and protection of your personal data in accordance with the Personal Data Protection Law No. 6698 (“Law”).

Your personal data under all circumstances;

In accordance with the law and the rules of honesty;
By maintaining the accuracy of the personal data you share and the most up-to-date version as you notify us;
For specific, clear and lawful purposes;
In a manner that is relevant, limited and proportionate to the purpose for which they will be processed;
By keeping them for the period stipulated in the relevant legislation or necessary for the purpose for which they are processed,
We declare that we will process it.

Within the scope of the law, personal data refers to any information regarding an identified or identifiable natural person. Data regarding people’s race, ethnic origin, political opinion, philosophical belief, religion, sect or other beliefs, appearance and dress, association, foundation or union membership, health, sexual life, criminal conviction and security measures, as well as biometric and genetic data are considered private. It is qualified personal data. Birleşim Group Companies do not process sensitive personal data of visitors.

A. PURPOSES OF PROCESSING PERSONAL DATA:
The main purposes/reasons of Birleşim Group Companies for processing identity and contact data of visitors to their campuses, physical location security data including entry and exit records and camera recordings, transaction security data including IP address information, website entry and exit information, and motor vehicle license plate data. are:

Keeping the entrance and exit to the company center under control,
Preventing unauthorized entry and exit,
In order to ensure the physical location security of the Company,
Ensuring that the visitor entry card is delivered to you,
Keeping records of visit entry and exit times,
Planning and execution of emergency management processes (terrorism, fire, etc.),
If you benefit from the internet access offered by the company to visitors, your personal data transmitted by you, managing access records,
Informing law enforcement in case of crime or violation of law.
Your personal data will be retained for the maximum period stipulated in the relevant legislation or necessary for the purpose for which they are processed.

B. METHODS AND LEGAL REASONS OF COLLECTION OF PERSONAL DATA:
Your personal data is collected by Birleşim Group Companies based on the legal reasons specified in Article 5 of the Law, that it is clearly stipulated in the law, that it is mandatory for the data controller to fulfill its legal obligation, that it is made public by the relevant person, and that data processing is mandatory for the legitimate interests of the data controller. Your personal data; It is collected electronically, physically, verbally or in written form, through your internet access within the company building, through your identity document, through your license plate information, verbally or through closed circuit cameras located on our campus.

C. TRANSFER OF PERSONAL DATA:
Birleşim Group Companies may transfer the personal data they process as data controllers to our group companies and legally authorized public institutions and organizations within the framework of the purposes set out in section (A), especially the management of access records, the fulfillment of our obligations arising from the legislation and the establishment of physical security in the company campuses.

D. RIGHTS OF THE RELATED PERSON MENTIONED IN ARTICLE 11 OF THE LAW:
Within the scope of the law, the relevant person has the right to be informed and obtain consent before the personal data is processed, recorded, transferred, shared and stored, and the right to determine the fate of the data after the data is processed, recorded, transferred, shared and stored. In this context, the relevant person

Learning whether personal data is being processed or not;
Request information regarding personal data if they have been processed;
Learning the purposes of processing personal data and whether they are used in accordance with these purposes;
Having information about third parties to whom personal data is transferred domestically or abroad;
Request correction of personal data if they are incomplete or incorrectly processed;
Request deletion or destruction of personal data;
To request that transactions regarding the correction, deletion or destruction of personal data be notified to third parties to whom personal data has been transferred;
Object to the emergence of a result that is unfavorable to the person by analyzing the processed data exclusively through automatic systems;
Request compensation for damages in case of loss due to unlawful processing of personal data,
has the rights.

You can submit your requests regarding your rights listed above, along with the necessary information that identifies you and your explanations about the right you want to use, in accordance with the application procedures stipulated in the Communiqué on the Procedures and Principles of Application to the Data Controller, via the e-mail address of the Company you are a visitor to, from the e-mail addresses in the list at the end of the text. If you send it to the postal address or “Dudullu Organized Industrial Zone 1. Cadde N 3 Ümraniye – İSTANBUL” address, your request will be concluded as soon as possible and within 30 (thirty) days at the latest, depending on its nature. Although no fee is charged for applications, if the finalization of such requests requires an additional cost, the applicant may be charged a fee in the tariff determined by the Personal Data Protection Board affiliated with the Ministry of Justice.

Additional:
The information and contact information of Birleşim Group Companies are listed below:
-kvkk@birlesim.com
-kvkk@erdegrubu.com.tr
-birlesimmuhendislik@hs02.kep.tr
-erdemuhendislik@hs02.kep.tr
-info@toromakina.com
-info@birlesimyesilenerji.com
-info@birlesimyapi.com
-info@birlesimgrup.com
-birlesim@birlesim.com