Personal Data Protection Information Letter

In accordance with Article 10, titled "Information Obligation of the Data Controller," of the Personal Data Protection Law No. 6698 ("KVKK"), which aims to protect personal data, and the Communiqué on the Procedures and Principles to be Followed in Fulfilling the Information Obligation, we, as the data controller, aim to inform you about the processing of your personal data as Mopak Kağıt Karton Sanayi ve Ticaret A.Ş. ("Mopak" or "Company"), registered in the Izmir Trade Registry under number 141331, located at Kemalpaşa OSB Mah. Sanayi Cad. No:12 Kemalpaşa – Izmir, with MERSİS number 0622005018700012, and tax number Kemalpaşa VD. 6220050187. PERSONAL DATA PROCESSED Within the scope of your relationship with Mopak, your identity information (name and surname, parents' name, ID card, TR ID No., nationality, marital status, date/place of birth, tax identification number, driver's license, passport number), contact information (home/work address, email, mobile phone, residence, registered electronic mail address - KEP), customer transaction information (complaint and request information, invoice, promissory note, check information, order information), transaction security and digital trace information (IP address), bank account data (bank account number, invoice/debt information, IBAN number, credit card number), data related to the security of our company premises (CCTV recordings), visual and audio recording data (voice, conversation, and camera recordings), business/professional life and education data (occupation, school graduated from, professional training received, certificates, resume) are processed. The aforementioned personal data; Mopak Kağıt Karton Sanayi ve Ticaret A.Ş., acting as the "Data Controller," may process your personal data by "MOPAK" within the scope described below. PURPOSE OF PROCESSING PERSONAL DATA Your personal data obtained within the scope of your relationship with Mopak is processed for the purposes set out below; Complying with information storage, reporting, and notification obligations stipulated by law; Executing goods/service production and operational processes; Executing goods/service sales processes; Recording, on paper or electronically, the identity, address, tax number, and other information necessary to identify owners and addressees of all kinds of transactions and transactions; Managing fairs, events, and other events; Conducting social responsibility and civil society activities; Following requests and complaints submitted through the website and social media platforms; Measuring and increasing customer satisfaction; managing complaints; receiving your opinions and suggestions regarding new services and products; receiving your problem and error reports; and informing you about products and services, complaints, and requests; Designing and executing human resources activities and recruitment processes; Executing advertising/campaign/promotion processes, marketing, and analysis processes; Conducting training activities; Conducting communication activities; Procurement operations and Carrying out related processes (request, offer, evaluation, order, contract), Providing after-sales support services for goods/services, Performing financial and accounting affairs, Ensuring information security and physical space security, Providing customer/supplier/business partner registrations and cancellations, Carrying out logistics activities, Following up and carrying out legal affairs, Ensuring and monitoring workplace, occupational, and employee health and safety, Producing company reports, Reviewing, evaluating, and responding to requests from public authorities or relevant persons, TO WHOM AND FOR WHAT PURPOSE CAN PROCESSED PERSONAL DATA BE TRANSFERRED Your personal data; Your personal data will be transferred to our business partners, suppliers, group companies, affiliates, companies and institutions we collaborate with, companies from which we outsource services to fulfill our contractual or legal obligations (related to security, health, occupational safety, legal matters, etc.), and authorized institutions and organizations under the conditions specified in Articles 8 and 9 of the Law. Your personal data, legally processed by MOPAK, may be transferred to countries other than those determined and declared by the Personal Data Protection Board ("Board"), subject to your explicit consent or, in the cases stipulated in Articles 5/2 and 6/3 of the KVKK, without your explicit consent. This data may be transferred to countries other than those determined and declared by the Board, provided that individuals, organizations residing in foreign countries determined and declared by the Personal Data Protection Board ("Board") to have adequate protection, or data controllers in the country to which the personal data is transferred, undertake in writing to provide adequate protection and the Board's permission can be obtained. METHOD AND LEGAL REASON FOR COLLECTING PERSONAL DATA Your personal data will be collected from you, third parties, and legal authorities during the establishment of your legal relationship and for the duration of such relationship, primarily to enable Mopak to carry out its activities, through social media, websites, and career paths.