ImajGrup Stand Design Systems Trade Ltd. Personal Data Protection and Processing Policy

1. Purpose

ImajGrup Stand Design Systems Trade Ltd. Co. ("Company" or "ImajGrup") expresses its commitment to protecting the personal data of its customers, business partners, employees and other third parties in accordance with the Personal Data Protection Law No. 6698 ("PDPL") and other related regulations through this policy document.

2. Collection, Processing and Protection of Personal Data

The Company collects, processes and protects personal data within the limitations and for the purposes specified in the PDPL and other relevant legislations. The processing and storage of collected personal data is carried out for the purposes of conducting the Company's services, improving its services, and fulfilling its legal obligations.

3. Transfer of Personal Data

The Company may transfer personal data to third parties within the limitations and conditions stated in the PDPL and other relevant legislations. Personal data may be transferred to third parties from whom the Company receives services for the purpose of conducting its activities and providing its services.

4. Deletion, Destruction or Anonymization of Personal Data

Upon the disappearance of the reasons necessitating the processing of personal data or upon the request of the person concerned, the Company deletes, destroys or anonymizes personal data in accordance with the provisions of the PDPL and other relevant legislation.

5. Rights of the Data Subject

Data subjects have certain rights under Article 11 of the PDPL. These rights include learning whether personal data are processed, requesting information if personal data have been processed, learning the purpose of processing personal data and whether they are used appropriately for their purpose, knowing the third parties to whom personal data are transferred domestically or abroad, requesting correction of personal data in case they are processed incompletely or incorrectly, requesting the deletion or destruction of personal data within the framework of the conditions set forth in Article 7 of the PDPL, requesting notification of the operations carried out to third parties to whom the personal data have been transferred, objecting to the emergence of a result against the person himself by analyzing the processed data exclusively through automated systems, and demanding compensation for the damage arising from the unlawful processing of personal data.

6. Exercise of the Rights of the Data Subject

Data subjects can apply to the Company in writing to exercise the above-mentioned rights. The Company finalizes the request as soon as possible and at the latest within thirty days, depending on the nature of the request. The Company's responses are communicated to the data subject in accordance with the procedure and principles specified in the PDPL and other relevant legislation.

7. Security

The Company takes necessary technical and administrative measures to ensure the security of personal data. These measures aim to prevent unauthorized access to personal data, to prevent unlawful processing of personal data, and to minimize the risks of loss, destruction, alteration, or disclosure of personal data.

8. Policy Changes

The Company can change this Personal Data Protection and Processing Policy at any time. Changes take effect upon the publication of the amended policy on the Company's website.