GÜNEYBAĞLILAR OTO YEDEK PARCA IMPORT EXPORT IND. TRADE. LTD. STI. As the (“Company”), we attach utmost importance to the legal processing and protection of personal data in accordance with the Law No. 6698 on the Protection of Personal Data (“Law”), and we act with this care in all our planning and activities.

The main purpose of this information is to To make explanations about the systems for the processing and protection of personal data in accordance with the law and the purpose of the Law, in this context, Company Stakeholders, Company Officials, Company Business Partners, Employee and Employee Candidates, Visitors, Company Customers, Potential Customers and Third Parties. To inform the persons whose personal data are processed by our Company. In this way, it is aimed to ensure full compliance with the legislation in the processing and protection of personal data carried out by our Company and to protect all the rights of personal data owners arising from the legislation regarding personal data.

Scope of Information and Personal Data Owners

This information; By automatic or non-automatic means provided that it is a part of any data recording system, our Company collects personal data, especially Company Stakeholders, Company Officials, Company Business Partners, Employees and Employee Candidates, Visitors, Company Customers, Potential Customers and Third Parties. It has been prepared for the persons being processed and will be implemented within the scope of the specified persons.

Our company enlightens the Personal Data Owners in question about the Law by publishing this information on the website.

General Principles on the Processing of Personal Data

br>Personal Data are processed by the Company in accordance with the procedures and principles stipulated in the Law and this Policy. The Company acts with the following principles while processing Personal Data:

Personal Data is processed in accordance with the relevant legal rules and the requirements of the good faith.
Personal Data is ensured to be accurate and up-to-date. In this context, issues such as determining the sources from which the data is obtained, confirming its accuracy, and evaluating whether it needs to be updated are taken into consideration.
Personal Data; processed for specific, explicit and legitimate purposes. Being legitimate means that the Personal Data processed by the Company is related to and necessary for the work it has done or the service it provides.
Personal Data is related to the purpose in order to achieve the purposes determined by the Company, and Personal Data that is not related to the realization of the purpose or is not needed. processing is avoided. It limits the processed data only to what is necessary for the realization of the purpose. Personal Data processed within this scope are related, limited and measured for the purpose for which they are processed. otherwise, it retains the Personal Data only for the period necessary for the purpose for which they are processed. In the event that there is no valid reason for further preservation of Personal Data, the said data is deleted, destroyed or anonymized.

2.2. Conditions for Processing Personal Data

- The Company does not process Personal Data without the explicit consent of the data owner. In the presence of one of the following conditions, Personal Data may be processed without seeking the explicit consent of the data owner.

- The Company may process the Personal Data of Personal Data Owners in cases expressly stipulated in the law, even if there is no explicit consent. For example; In accordance with Article 230 of the Tax Procedure Law, the explicit consent of the person concerned will not be sought for the name of the person concerned to be included on the invoice. Personal Data may be processed without express consent to protect the life or physical integrity of another person. For example, in a situation where the person's consent is not valid due to unconsciousness or mental illness, the Personal Data of the Personal Data Owner may be processed during medical intervention in order to protect the integrity of life or body. In this context, data such as blood type, past diseases and surgeries, drugs used can be processed through the relevant health system.
Personal Data belonging to the parties to the contract can be processed, provided that it is directly related to the establishment or performance of a contract by the Company. For example, according to a contract made, the account number of the creditor can be obtained in order to pay the money.
- In other words, publicized in any way by the Personal Data Owners by the Company.

- The Company may process the Personal Data of the Personal Data Owners without seeking explicit consent in cases where data processing is necessary for the exercise or protection of a legally legitimate right.