FERAT ELECTRIC CONTRACTING CONSTRUCTION INDUSTRY AND TRADE LIMITED COMPANY PERSONAL DATA PROTECTION COMMITTEE INTERNAL REGULATION

The Personal Data Protection Committee (“Committee”) Internal Regulation (“Internal Regulation”), prepared in accordance with the Personal Data Protection Law numbered 6698 published in the Official Gazette dated 07/04/2016 and numbered 29677 (“Law”), the Regulation on Deletion, Destruction or Anonymization of Personal Data published by the Personal Data Protection Authority in the Official Gazette dated 28/10/2017 and numbered 30224 (“Regulation”), FERAT ELECTRIC CONTRACTING CONSTRUCTION INDUSTRY AND TRADE LIMITED COMPANY Personal Data Protection and Processing Policy (“Policy”), and FERAT ELECTRIC CONTRACTING CONSTRUCTION INDUSTRY AND TRADE LIMITED COMPANY Personal Data Retention and Destruction Policy (“Retention and Destruction Policy”) has been prepared.

In order to carry out the personal data storage and destruction processes in accordance with the Law and Regulation and to perform the necessary tasks and processes, a Personal Data Protection Committee has been established within FERAT ELECTRIC CONTRACTING CONSTRUCTION INDUSTRY AND TRADE LIMITED COMPANY. Within this scope, necessary internal regulations are made by FERAT ELECTRIC CONTRACTING CONSTRUCTION INDUSTRY AND TRADE LIMITED COMPANY for the storage and destruction of personal data in accordance with personal data protection regulations and policies, and a system needed for awareness is established.

Purpose:

Article 1- This Internal Regulation has been prepared for the purpose of determining the principles that the Committee must comply with in the implementation of its duties, the basic principles to be followed within the framework of personal data protection regulations and Policies, and the procedures to be applied in accordance with the Policies.

Scope:

Article 2- This Internal Regulation covers the responsibilities, work, and activities of the Committee and its members.

Foundation:

Article 3- This Internal Regulation has been prepared in accordance with the Personal Data Protection Law numbered 6698 and the relevant regulations mentioned above.

Personal Data Protection Committee:

Article 4- The Committee is appointed by the board of directors of FERAT ELECTRIC CONTRACTING CONSTRUCTION INDUSTRY AND TRADE LIMITED COMPANY in order to fulfill its obligations under the Law, to ensure the implementation and supervision of the Policies, to make recommendations for the functioning of these and to ensure compliance with the policies. The Committee is responsible for ensuring compliance with the KVKK regulations of FERAT ELECTRIC CONTRACTING CONSTRUCTION INDUSTRY AND TRADE LIMITED COMPANY, which is responsible for audits, compliance, and sustainable efficiency. The distribution of tasks among Committee members, the removal or addition of members from the Committee are carried out by the Committee Chairman with the authorization given by the data controller.

Data Controller Representative:

Article 5- The Data Controller Representative is selected from within the Committee and conducts FERAT ELECTRIC CONTRACTING CONSTRUCTION INDUSTRY AND TRADE LIMITED COMPANY's relations with the Institution.

Members:

Article 6- The formation of the Committee and the responsibilities of individuals are specified below.

Article 7- The Committee is responsible for the operation of the processes for the protection, storage, processing of personal data, and deletion, destruction, and anonymization of personal data.

Within this scope, the Committee;

1. Establishes necessary procedures and ensures the implementation of the said procedure.
2. If there is a change in the legislation regarding personal data, ensures the internal procedures and processes of FERAT ELECTRIC CONTRACTING CONSTRUCTION INDUSTRY AND TRADE LIMITED COMPANY are carried out for compliance with new regulations.
3. Prepares an inventory of personal data.
4. Periodically updates the inventory of personal data.
5. Reports the inventory of personal data to the register and ensures it is kept up-to-date.
6. Corresponds with the register and keeps the correspondence.