• Managing goods/service after-sales support processes,
• Receiving and evaluating suggestions for improving business processes,
• Execution of customer relationship management processes,
• Carrying out activities aimed at customer satisfaction,
• Executing the marketing processes of products / services,
• Execution of advertising / campaign / promotion processes 
• Planning and execution of our company's commercial and/or business strategies,
• Performance of Finance and Accounting Affairs
• Following and Execution of Legal Affairs
• Execution of Logistics Activities
• Execution of Goods / Service Purchasing Processes
• Execution of Goods / Service After-Sales Support Services
• Execution of Goods / Service Sales Processes
• Execution of Goods / Service Production and Operation Processes
• Execution of Customer Relationship Management Processes
• Execution of Contract Processes
• Execution of Strategic Planning Activities
• Conducting Marketing Analysis Studies
• Execution of Activities for Customer Satisfaction
• Execution of Customer Relationship Management Processes
• Execution of Wage Policy

8.2. STORAGE PERIOD OF PERSONAL DATA

COMPANY determines whether a certain period of time is foreseen in the relevant legislation for the storage of personal data, and complies with Article 138 of the Turkish Penal Code and Articles 4 and 7 of the KVKK Law. aspect; It ensures that the processed personal data is retained only for the period stipulated in the relevant legislation, or for the period required for the purpose of personal data processing, if no period is stipulated in the relevant legislation.

9. DELETION, DESTRUCTION AND ANONYMOSIS OF PERSONAL DATA

If the purpose of processing personal data has expired and the storage periods determined by the relevant legislation and/or theCOMPANY have come to an end, personal data may be processed at the request of the data owner or ex officio COMPANY  is deleted, destroyed or anonymized by

The procedures and principles regarding this issue have been determined within the framework of the Personal Data Protection Law and the Regulation on Deletion, Destruction or Anonymization of Personal Data.

9.1. TECHNIQUES FOR DELETION AND DESTRUCTION OF PERSONAL DATA

It is essential that personal data be deleted and destroyed by methods appropriate to the recording environment. Regarding the deletion and destruction techniques of personal data, the deletion or destruction techniques that are likely to be used by the COMPANY are listed below:

• Physically destroy

Personal data can also be processed by non-automatic means, provided that it is part of any data recording system. When such data is deleted/destroyed, a system of physical destruction of personal data in such a way that it cannot be used later is implemented.

• Secure Deletion/Destruction from Software

When data processed wholly or partially automatically and stored in digital media is deleted/destroyed; Methods are used to delete the data from the relevant software so that it cannot be recovered by certain people or in any way.

• Secure Deletion/Destruction by Expert

COMPANY in some cases, it may contract with an expert to delete/destroy personal data on its behalf. In this case, personal data is securely deleted/destroyed by an expert in this field so that it cannot be recovered again.

9.2. TECHNIQUES FOR ANONYMIZING PERSONAL DATA

Anonymizing personal data means making Personal Data impossible to associate with an identified or identifiable natural person in any way, even by matching it with other data.

In accordance with Article 28 of the KVKK Law; Anonymized personal data may be processed for purposes such as research, planning and statistics. Such processing is outside the scope of the KVKK Law and the express consent of the personal data owner will not be required. Since personal data processed by anonymization will be outside the scope of the KVKK Law, the rights set out in Section 12 of this Policy will not be valid for this data. The anonymization techniques most likely to be used by the COMPANY are listed below.

• Masking

Data masking is a method of anonymizing personal data by removing the basic identifying information of personal data from the data set.

• Consolidation

With the data aggregation method, many data are aggregated and personal data is made unable to be associated with any individual.

• Data Derivation

With the data derivation method, a more general content is created from the content of personal data and it is ensured that personal data cannot be associated with any individual.

• Data Mixing

With the data mixing method, the connection between values ​​and individuals is broken by mixing the values ​​in the personal data set.

10. THIRD PARTIES TO WHICH PERSONAL DATA IS TRANSFERRED AND THE PURPOSES OF TRANSFER

The procedures and principles to be applied in personal data transfers are regulated in Articles 8 and 9 of the KVKK Law. In order to fulfill the services offered by the COMPANY, personal data is processed according to the Labor Law, Occupational Health and to real persons or private law legal entities, It can be transferred to our business partners, affiliates and subsidiaries, organizations from which we receive information technology support, and authorized public institutions and individuals.

It is not possible to transfer personal data without the express consent of the personal data owner, except for the exceptional cases specified in the KVKK Law.

10.1. TRANSFER OF PERSONAL DATA DOMESTIC

In accordance with Article 8 of the Personal Data Protection Law, the transfer of personal data within the country is subject to Article 6.1 of this Policy titled "Terms of Processing of Personal Data". It is possible, provided that one of the conditions specified in the section is met.

10.2. TRANSFER OF PERSONAL DATA ABROAD

In accordance with Article 9 of the KVKK Law, in case personal data is transferred abroad, in addition to the conditions for domestic transfers being met, one of the following conditions is required:

• The country to be transferred must be considered among the countries with adequate protection declared by the KVKK Board
• If there is no adequate protection in the country to be transferred, the data controllers in Turkey and the relevant foreign country must undertake in writing to provide adequate protection and have the permission of the KVKK Board for this.

10.3. PERSON GROUPS TO WHICH PERSONAL DATA IS TRANSFERRED BY OUR COMPANY

The COMPANY may transfer the personal data of personal data owners within the scope of this Policy, in accordance with Articles 8 and 9 of the KVKK Law, to the following person groups for the specified purposes:

11. OUR COMPANY'S DISCLOSURE OBLIGATION

The COMPANY informs personal data owners during the collection of personal data, in accordance with Article 10 of the KVKK Law. In this context, the COMPANY fulfills its obligation to inform by providing the following information to personal data owners:

• Title of the COMPANY as data controller
• Purposes for which personal data will be processed
• To whom and for what purpose the processed personal data may be transferred
• Method and legal reason for collecting personal data
• Rights of the personal data owner

12.    RIGHTS OF PERSONAL DATA OWNERS AND THE USE OF THESE RIGHTS

Personal data owners, in accordance with Article 13 of the KVKK Law, 12.1 of this section. If they submit their requests regarding their rights listed under the title to the COMPANY by filling and signing the Application Form using the methods specified below or other methods determined by the KVKK Board, the request in question is concluded free of charge, depending on the nature of the request.

On the COMPANY corporate website (“http://www.teknokrom.com.”) “……………………. After filling out the form under the "page" section;

A signed copy must be submitted personally or through a notary TEKNOKROM MAKİNE ve EKİPMANLARI A.O.S.B. 1009 STREET. NO:8 ÇİĞLİ, İZMİR   or

• After signing with the "secure electronic signature" within the scope of the Electronic Signature Law No. 5070, the secure electronic signature form should be sent toFİRMA@hs03.kep.tr Sending via registered e-mail

The COMPANY may request information from the relevant person in order to determine whether the applicant is the personal data owner and may ask questions to the personal data owner regarding his/her application in order to clarify the issues included in the personal data owner's application.

12.1. RIGHT TO APPLICATION

Personal data owners have the right to request the COMPANY regarding the following issues in accordance with Article 11 of the KVKK Law:

• Learning whether personal data is being processed or not,
• If personal data has been processed, requesting information about it,
• Learning the purpose of processing personal data and whether personal data is used for its intended purpose,
• Learning about third parties to whom personal data is transferred domestically or abroad,
• Requesting correction of personal data if they are incomplete or incorrectly processed, and requesting that the action taken in this context be notified to third parties to whom personal data has been transferred,
• Requesting the deletion, destruction or anonymization of personal data in case the reasons requiring the processing of personal data are eliminated and requesting that the action taken in this context be notified to third parties to whom personal data has been transferred,
• Objecting to the emergence of a result unfavorable to the data owner by analyzing the processed data exclusively through automatic systems,
• Request compensation for the damage in case of damage due to illegal processing of personal data

12.2. SITUATIONS OUTSIDE THE SCOPE OF APPLICATION RIGHT

In accordance with Article 28 of the KVKK Law, it is not possible for personal data owners to assert their application rights since the following situations are excluded from the scope of the KVKK Law:

• Processing personal data for purposes such as research, planning and statistics by anonymizing them with official statistics.
• Processing of personal data for artistic, historical, literary or scientific purposes or within the scope of freedom of expression, provided that it does not violate national defence, national security, public security, public order, economic security, privacy of private life or personal rights or constitute a crime.

In accordance with the second paragraph of Article 28 of the KVKK Law, except for the right to demand compensation for damage, it is not possible for personal data owners to assert their rights in the following cases:

• Processing personal data is necessary for the prevention of crime or criminal investigation.
• Processing of personal data made public by the data subject.

12.3. RESPONDING PROCEDURE

In accordance with Article 13 of the KVKK Law, the COMPANY finalizes the application requests made by the personal data owner, free of charge, as soon as possible and within 30 (thirty) days at the latest, depending on the nature of the request. However, if the transaction requires an additional cost, it is possible to charge the fee in the tariff determined by the KVKK Board.

The COMPANY may accept the application request of the personal data owner, or reject it by explaining the reason for the following reasons, and notify the relevant person in writing or electronically of its response.

• Obstructing the rights and freedoms of other people
• Requires disproportionate effort
• The information is publicly available
• Endangering the privacy of others
• Existence of one of the situations that are excluded from the scope in accordance with the KVK Law

The personal data owner has the right to file a complaint with the KVKK Board within thirty days from the date of learning the response of the data controller and, in any case, within sixty days from the date of application, in cases where his/her application is rejected, the answer given is insufficient, or the application is not responded to in time.

13. PERSONAL DATA PROCESSING ACTIVITIES CONDUCTED WITHIN THE COMPANY AND DATA PROCESSING ACTIVITIES CONDUCTED ON THE WEBSITE

• MONITORING WITH CAMERA

Camera monitoring is carried out inside the building where the COMPANY Headquarters and Dealers are located.

In line with the regulations in the KVKK Law, the COMPANY  camera monitoring activities  A notification letter regarding the activities in question is hung at the entrances of the areas where camera monitoring is carried out and the necessary information is provided on our website with this Policy.

Monitoring is not possible in areas that may result in interference with a person's privacy.  Only a limited number of Company employees and, if needed, security company employees who act as suppliers can access security camera recordings. Those persons who have access to the records declare that they will protect the confidentiality of the data they access, with the confidentiality commitment they sign.

13.2. CUSTOMER ENTRANCES - EXITS VISITING THE COMPANY

Personal data processing activities are carried out to track the entry and exit of our guests visiting the COMPANY. The identity information of people coming to the COMPANY is processed only for the purpose of tracking their entry and exit and the relevant personal data  It is recorded electronically in the registration system.

13.3. WEBSITE VISITORS

The internet movements of people who visit the COMPANY's website are recorded (via technical means, such as cookies) in order to show them customized content and to carry out online advertising activities.