Processing Personal Data

GENERAL INFORMATION NOTICE ON

PERSONAL DATA PROCESSING

a. Data Controller

In accordance with the Law on the Protection of Personal Data No. 6698 (“Law”), your personal data will be processed by Setaş Sistem Bilişim Sanayi Ticaret Anonim Şirketi (“Setaş” or “Company”) as the data controller.

b. Purposes for Processing Personal Data

Your personal data may be processed for purposes including emergency management, employee recruitment processes for candidates, trainees, or students, managing employee application processes, fulfilling employment contract obligations and legal requirements, managing employee benefits, conducting audit/ethical activities, implementing educational activities, ensuring compliance with regulations, carrying out financial and accounting functions, maintaining physical space security, managing assignment processes, legal process tracking, performing internal audit/investigation/intelligence activities, handling communications, planning HR processes, executing and monitoring business operations, promoting occupational health and safety, evaluating and improving work processes, ensuring business continuity, conducting logistics activities, handling procurement processes, providing post-sale support services, managing sales processes, overseeing production and operations, handling customer relationship management, conducting customer satisfaction activities, organizing events, managing risk, handling contract processes, conducting strategic planning, tracking requests/complaints, ensuring the security of assets, managing supply chain processes, implementing compensation policies, managing investment processes, providing information to authorized individuals and institutions, and managing corporate activities.

c. Method and Legal Basis for Collecting Personal Data

Your personal data is collected based on the following legal grounds: “explicitly provided by law,” “necessary for contract performance or contract-related obligations,” “required for the data controller’s legal responsibilities,” “necessary for establishing, exercising, or protecting a right,” “made public by the data subject,” and “required for legitimate interests without harming the rights and freedoms of individuals.” Personal data is collected through job application forms, submitted documents, postal and email communications, as well as systems such as computers and cameras.

d. Recipients and Purpose of Personal Data Transfer

Your personal data may be transferred to group companies, individuals or private legal entities, authorized public institutions, suppliers, and business partners (including Gediz Elektrik, banks, tax offices, e-finance, Netsis, cargo companies, consulates, and transportation companies) for purposes strictly necessary to fulfill the objectives outlined, which include emergency management, recruitment, regulatory compliance, financial operations, internal and external auditing, communications, HR planning, occupational health and safety, continuous business improvement, logistics, procurement, customer relationship management, risk management, contract and strategic planning, and other management functions.

e. Rights of the Data Subject Under Article 11 of the Law

You may submit requests and applications regarding your rights as stipulated in Article 11 of the Law. Please fill out the application form available on our website and submit it in one of the following ways:

• By delivering a signed copy in person or via a notary to our postal address,
• Electronically via our registered electronic mail (KEP) address, secure electronic signature, mobile signature, or by using the email address you previously provided to our Company that is recorded in our system.

Address: Mansuroğlu Mah.283/6 Sk. No:2 Bayraklı/ İZMİR

KEP Address: setasbilisim@hs01.kep.tr

Email: setas@setasbilisim.com.tr

You can review our company's "Personal Data Protection and Processing Policy" for detailed information.