PERSONAL DATA PROTECTION NOTICE

The privacy and security of your personal information are important to Tyrone Industries. Accordingly, we would like to inform you about the principles and procedures applicable to the protection of personal data, as well as your rights and freedoms under Turkish Law No. 6698 on the Protection of Personal Data (“KVKK” or the “Law”), which entered into force on 7 April 2016.

This notice is provided in accordance with Article 10 of the KVKK and as part of our legal obligation to inform data subjects about the processing of their personal data.

Purposes of Collecting and Processing Personal Data

Your personal data may be processed by Tyrone Industries in order to conduct and manage activities necessary for the provision of our products and services, including purchasing, procurement of external services, logistics, customer and supplier relations, human resources management and other operational activities.

Personal data may also be processed for purposes including:

  • Managing and maintaining business relationships with customers, suppliers, employees and business partners,

  • Carrying out purchasing, manufacturing, logistics and supply-chain activities,

  • Managing human resources processes and protecting employee rights,

  • Supporting the implementation of commercial and operational decisions,

  • Ensuring the legal and commercial security of Tyrone Industries and the individuals and organizations with whom we have business relationships,

  • Communicating with you and other relevant parties as part of our business activities,

  • Fulfilling contractual and legal obligations,

  • Protecting the Company's legitimate commercial interests,

  • Complying with applicable legislation and regulatory requirements, including anti-money laundering and counter-terrorism regulations where applicable,

  • Complying with judicial and administrative procedures,

  • Responding to requests from courts, public authorities, governmental institutions and other authorized bodies,

  • Protecting information security and business continuity.

Your personal data may be processed for these and similar purposes in accordance with Articles 5 and 6 of the KVKK.

Processing of Personal Data Without Explicit Consent

Where permitted by applicable legislation, Tyrone Industries may process personal data without obtaining explicit consent if one or more of the following legal conditions apply:

  • Processing is necessary to protect the life or physical integrity of a person who is unable to provide consent due to actual impossibility or whose consent is not legally valid,

  • Processing is directly related to the establishment or performance of a contract and is necessary for processing personal data belonging to the parties to that contract,

  • Processing is necessary for Tyrone Industries to comply with its legal obligations as a data controller,

  • The personal data has been made public by the data subject,

  • Processing is necessary for the establishment, exercise or protection of a legal right,

  • Processing is necessary for the legitimate interests of the data controller, provided that such processing does not adversely affect the fundamental rights and freedoms of the data subject.

Where one or more of these conditions apply, personal data may be processed for the purposes described in this notice.

Sharing and Transfer of Personal Data

In accordance with the KVKK and subject to appropriate security and confidentiality measures, personal data obtained directly from you or through other lawful channels may be shared or transferred, where necessary, with:

  • Group or affiliated companies, where applicable,

  • Business partners,

  • Customers and suppliers,

  • Logistics providers,

  • Service providers and subcontractors,

  • Professional consultants,

  • Auditing and certification organizations,

  • Banks and financial institutions where required for business transactions,

  • Information technology and infrastructure service providers,

  • Authorized public institutions and organizations,

  • Judicial and administrative authorities,

  • Other third parties where disclosure is required or permitted by applicable legislation.

Where legally permitted and necessary for our international business operations, personal data may also be transferred abroad in accordance with the applicable provisions of the KVKK and other relevant legislation.

All such transfers are carried out within the limits required for the relevant business purpose and subject to appropriate data protection measures.

Data Security and Retention

Tyrone Industries implements appropriate administrative and technical measures to protect personal data against unauthorized access, unlawful processing, alteration, loss, destruction or damage.

Our business processes and information-security infrastructure are designed and continuously reviewed to maintain an appropriate level of protection for personal data stored or processed by the Company.

Personal data will only be processed for the purposes and within the scope communicated to you and will be retained for the period required by applicable legislation or for as long as necessary for the purpose for which it was processed.

Once the applicable retention period expires or the purpose of processing no longer exists, personal data will be deleted, destroyed or anonymized in accordance with applicable legislation and Tyrone Industries' internal data-retention procedures.

Your Rights Under the KVKK

Pursuant to Article 11 of the KVKK, you have the right to apply to Tyrone Industries and:

  • Learn whether your personal data is being processed,

  • Request information regarding the processing of your personal data,

  • Learn the purpose of processing and whether your personal data is being used in accordance with that purpose,

  • Learn the third parties to whom your personal data has been transferred in Türkiye or abroad,

  • Request correction of incomplete or inaccurate personal data,

  • Request deletion or destruction of your personal data where the conditions stipulated by applicable legislation are met,

  • Request notification of correction, deletion or destruction procedures to third parties to whom your personal data has been transferred,

  • Object to any outcome that is detrimental to you and results exclusively from the analysis of personal data through automated systems,

  • Request compensation for damages arising from the unlawful processing of your personal data.

You may also request that the accuracy and current status of your personal data be reviewed and, where applicable, request that your personal information be updated.

Exercising Your Rights

In accordance with Article 13 of the KVKK, requests concerning the rights listed above must be submitted to Tyrone Industries in accordance with the procedures prescribed by applicable legislation.

Your application should clearly specify the right you wish to exercise under Article 11 of the KVKK and include sufficient information and documentation to verify your identity.

Applications may be submitted in writing to:

Tyrone Industries
Atatürk Plastik OSB Mh.
7. Sokak No: 4
Menemen / İzmir
Türkiye

Applications may be delivered personally with appropriate identification documents, sent through a notary public, or submitted using any other method permitted by the Turkish Personal Data Protection Authority (KVKK Authority).

Tyrone Industries will evaluate applications and respond within the periods prescribed under applicable legislation.

A digital illustration of a security shield with a padlock, surrounded by icons of a fingerprint scanner, a user profile, a document with a padlock, and digital network connections, indicating cybersecurity and data protection.