Fair Processing Notice For Suppliers

I. Identity of Data Controller:

As the data controller, Zahit Aluminium (“Company”) will process the personal data of the supplier representatives and supplier employees, with whom we are in contact during our business operations, in connection with and limited to the purpose.

CHAPTER Processed Personal Data:

Supplier Representative: Name and surname, TR ID number, signature, title/position details, phone number, business address, email address, REM address, company title, tax ID number, invoice number/amount, debit/credit amount, bank account details, license plate,

Supplier Employee: Name and surname, TR ID number, place/date of birth, gender, marital status, signature, title/position/occupation, phone number, business address, email address, professional qualification certificate, educational background, work department, criminal record, health data (blood type, medical report, disease details, medical history details, physical examination results, laboratory findings), OHS training documents, OHS instructions, PPE debit minutes, statement of employment, assignment document,

CHAPTER Purposes of Processing of Your Personal Data:

Your personal data shall be processed in order to execute communication activities, to conduct product/service procurement procedures, to carry out financial and accounting transactions, to fulfill the obligations arising from the legislation, to conduct shipping and transport operations, to execute occupational health and safety procedures, and to make payments.

CHAPTER Methods and Legal Grounds for Collecting Personal Data:

Your personal data are collected by our employees through face-to-face meetings or phone calls, printed forms, documents and business cards, and/or WhatsApp, email. Your collected personal data shall be processed on the basis of the legal grounds as “processing of personal data of the contracting parties is necessary provided that it is directly related to the establishment or performance of a contract”, “stipulated by the law”, “fulfillment of our legal obligations”, and “protection of the legitimate interests of our Company provided that it does not harm your fundamental rights and freedoms”, and your sensitive data (medical and criminal records) shall be processed by obtaining your explicit consent within the scope of the conditions specified in Articles 5 and 6 of PDPL.

V. To Whom and for What Purpose the Processed Personal Data may be Transferred

Your personal data shall be shared with the following parties within the scope of the conditions in Article 8 of the Law No. 6698 in connection with and limited to the purpose:

Revenue Administration for invoice transactions,

Our financial consultant for the execution of official accounting transactions,

Independent auditor during financial audits,

Ministry of Industry and Technology for investment incentive procedures, and

Bank for payment transactions.

Furthermore:

At Zahit Aluminium, because of using an email system (Microsoft Office-365) with headquarters outside Türkiye, your personal data shall be shared with the domestic and overseas databases of the relevant communication company (Microsoft Office-365) in accordance with Article 9 of the Law.

CHAPTER Your Rights as Personal Data Subject:

You may submit your requests within the scope of Article 11 of the Law “regulating the rights of the data subject” to Zahit Aluminium by using the “Data Subject Application Form” that you can obtain from https://www.zahit.com.tr/ in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller."