Confidentiality Notice

Definitions

In this inform text;

Personal Data: All kinds of information related to an identified or identifiable natural person,Personal Data Protection Law (“KVKK”): The Law on Protection of Personal Data No. 6698, which was published in the Official Gazette on April 7, 2016,

Data Processor: Real or legal person who processes Personal Data on his behalf, based on the authority given by the data controller,

Data Responsible: Refers to the real or legal person who determines the purposes and means of processing Personal Data and is responsible for the establishment and management of the data recording system.

“Bosch Termoteknik Isıtma ve Klima Sanayi Ticaret A.Ş.” (“Our Company”) is one of our primary principles of protecting privacy, protection of information security and respect for ethical values, especially the protection of fundamental rights and freedoms. Accordingly, in order to fulfill our inform obligation arising from Article 10 of the Personal Data Protection Law (“KVKK”), our explanations below are provided for your information;

Data Responsible

Our company, which has the title of "Data responsible" as defined in KVKK, processes your personal data within the framework of the purposes and limits set out by the legislation described below.

Purpose of Processing and Transferring Personal Data

In our company, employees (including volunteer, part-time, trainees, students, candidate employees) and family members and their relatives, customers, suppliers, consultants, business partners, shareholders, Company officials and Company representatives, the person (s) with whom the contract is involved and their employees , identity / contact information (including photo and / or biometric data) of the person / persons who are the addressees of legal transactions (parties to legal proceedings such as / to be filed / to be filed / to be filed against or against the Company, execution proceedings, mediation transactions), survey participants and visitors, family and social life, education and training information, employment information, information about demand / complaint management, information about legal affairs, ethical values ​​and compliance with law, financial information, audit information, use of electronic media, Information about the goods and services provided and provided, business activities, information on trade and other licenses and permits, physical space security information, visual and audio information (photo, camera, sound recordings), telecommunication logs, e-mail and information systems services Your personal data such as usage logs and login logs, and your personally qualified personal data such as union membership, health reports and health data, biometric data and criminal record information (including investigation, prosecution and execution procedures) are collected, recorded and processed in accordance with KVKK.Your personal data, the realization of the commercial activities carried out by our Company and the management and execution of business processes related to this, the relations with business partners and / or suppliers, the technical management of the websites of our Company, the management of customer and complaints, the product surveys and the questions you send to our Company, Commercial electronic works are carried out by our business units to make use of the products and services offered, the planning and execution of the sales, marketing, after-sales processes of the products and / or services, the information about the content of the said products and services, and the approval of the legislation. sending messages, conducting competitions, events and other organizations, Legal and commercial relations with our company and people who have a business relationship with our Company and conducting the security of these relations, administrative operations for communication carried out by our Company, employee management and management, ensuring the physical security and supervision of the Company's locations, planning logistics activities, conducting reputation research processes, compliance with ethical values ​​and law, and conducting legal business and procedures. To benefit from the incentives by following up contract processes and / or legal requests, planning and executing Human Resources and personnel recruitment processes, following and performing education and training activities, planning and / or executing occupational health and / or safety processes, and conducting research and development activities. provision, planning and execution of corporate communication and corporate management activities, carrying out information security management services, finance and / or accounting follow-up and audit of the cause of the business and determination of the financial risks of the customers, determination and implementation of the commercial and business strategies of our company, the creation and monitoring of the visitor records, the fulfillment of legal obligations as required or required by the relevant legislation for the other purposes to be notified to the relevant person. In order to ensure, it is collected and processed within and limited to the personal data processing conditions and purposes specified in Articles 5 and 6 of the KVKK. Your personal data is provided to reliable third parties and / or institutions and organizations and / or our business partners and / or domestic and / or foreign Bosch Group companies and / All measures can be taken by our Company and transferred within the framework of personal data processing conditions and purposes specified in Articles 8 and 9 of KVKK. In addition, personal data can be shared with public institutions and organizations that are authorized to request and receive this data due to a legal requirement.Personal Data Collection Method and Legal Reason

Personal data is collected by our company by giving verbal, written and / or electronic information in a clear and understandable way to personal data owners. When necessary, personal data are collected, used, recorded, stored and processed within the scope of the principle of proportionality, in accordance with the law and integrity rules, in connection with legitimate purposes and limited, by obtaining their explicit consent through verbal, written and / or electronic. We assure that your personal data will not be processed by our company for purposes other than those specified in this inform text, and will not be transferred and stored to third parties at home and abroad.

Retention Periods of Personal Data

Your personal data is stored in accordance with the practices and commercial life practices of our Company or for the period required by the above-mentioned processing purposes, and then erased or destroyed in accordance with KVKK, if the retention periods are not specified in the relevant legal regulations.

If the purpose of processing personal data has expired, the relevant legislation and the retention periods determined by our Company have come to an end, personal data can only be stored in order to constitute evidence in possible legal disputes or to establish the relevant right or defense of personal data. Although the time-out periods and the time-out periods have elapsed in order to assert the right mentioned in the establishment of the periods here, the retention periods are determined based on the samples submitted to our Company on the same subjects. In this case, the stored personal data is not accessed for any other purpose, and access is provided only when it is required to be used in the relevant legal dispute. Personal data is deleted, destroyed or anonymized after the mentioned period is over.

Security of Personal Data

Your personal data is protected within the framework of ISO27001 and BS10012 standards, in order not to be exposed to unauthorized access, lost or damaged environments where it is processed and stored. The requirements of the Personal Data Protection Management System as well as the requirements of the Guidelines on the Security of Personal Data published by the KVKK board are continuously operated and developed within the scope of continuous improvement.

Rights of the Personal Data Owner

In accordance with Article 11 of the KVKK, everyone can apply to the data responsible regarding himself;

a) Learning whether personal data is processed,
b) If the personal data is processed, requesting information about it,
c) Learning the purpose of processing personal data and whether it is used in accordance with its purpose,
ç) To know the third parties to whom personal data are transferred domestically or abroad,
d) Requesting correction of personal data if it is incomplete or incorrectly processed,
e) Requesting the deletion or destruction of personal data within the framework of the conditions stipulated in Article 7,
f) To request notification of transactions made in accordance with subparagraphs (d) and (e) to third parties to whom personal data are transferred,
g) To object to the emergence of a result against the person by analyzing the processed data exclusively through automated systems,
ğ) In the event that the personal data is damaged due to the illegal processing of the data, it has the right to demand the removal of the damage.

Application Methods Regarding the Rights of the Personal Data Owner

In accordance with paragraph 1 of Article 13 of the KVKK, you can fulfill your request regarding the exercise of your rights stated above with the following methods and information pursuant to the "Communiqué on the Procedures and Principles of Application to the Data Controller" published in the Official Gazette dated 10 March 2018 and numbered 30356.

Necessary information in the application content;

1. Name, Surname of the applicant.
2. If the applicant is a citizen of the Republic of Turkey together with the ID number if you do not have the nationality, passport number or ID number.
3. The applicant's place of residence or business address for notification.
4. The applicant's electronic mail address, telephone or fax, for notification.
5. The applicant's subject of demand.
6. Information and documents regarding the applicant's request.Application methods available to the person concerned;

1. By filling in the “Application Form” to the Company Address *, the applicant can deliver to the advisory office with a note by hand, on the sealed envelope and the envelope with the note “Requirement Information Request for the Protection of Personal Data Law”.
2. The applicant may receive a notification to the Company's Address * via the Notary Public, but the notice “Information Requirement Information Required by the Law on Protection of Personal Data” must be added on the notification envelope.
3. With the “Secure Electronic Signature” defined in the Electronic Signature Law No. 5070, the applicant can personally apply to the subject section of our Company with the registered address "boschtermoteknikmanp@hs01.kep.tr" with the note "Information Requirement Information Requirement Law".

* Company Address: Bosch Termoteknik Isıtma ve Klima Sanayi Ticaret A.Ş. Aydınevler Mahallesi, İnönü Caddesi No: 20, Küçükyalı Ofispark A Blok 34854 Maltepe-İstanbul