This Gizlilik Politikası outlines the terms and conditions under which the information we obtain about you and the services you request through our website, including any emails you send to us, is used and protected. By visiting this website and requesting to benefit from the services we provide through it, you agree to the conditions stated in this Gizlilik Politikası.

I. Purpose of the Personal Data Protection and Processing Policy

As Gamateks Tekstil San. ve Tic. A.Ş., we have always treated the data received from employee candidates, customers, or potential clients with confidentiality, never sharing it with third parties. Protecting personal data is a fundamental policy of our company. Even before any legal regulations, our company and its affiliates prioritized the confidentiality of personal data and adopted it as a working principle, instructing employees accordingly. We fully commit to complying with all responsibilities imposed by the Personal Data Protection Law (KVKK). These principles also apply to our subsidiaries.

II. Scope and Amendment of the Personal Data Protection and Processing Policy

This Policy has been prepared by our Company in accordance with Law No. 6698 on the Protection of Personal Data (KVKK). The Law is now fully in effect. The data collected based on your consent or lawful grounds defined in the Law will be used to improve the quality of services we offer and enhance our service and quality policies. Some of this data may be anonymized and used for statistical purposes, falling outside the scope of the Law.

This Policy applies to data collected from customers, potential customers, employee candidates, employees, and the customers/employees of our business partners. Our company reserves the right to amend this Policy and our Regulation in line with the Law and enhanced data protection measures.

III. Key Principles in Processing Personal Data

• Lawfulness and Fairness: Gamateks ensures that all collected or obtained data complies with legal and ethical standards. We provide necessary notifications and warnings to third parties (agents, partners, intermediaries) regarding data protection.
• Accuracy and Currency: We prioritize keeping all data accurate and up-to-date.
• Purpose Limitation: Data is processed only for specific, explicit, and legitimate purposes within the scope of the individual’s consent.
• Data Minimization: Data is used only to the extent necessary for the intended purpose.
• Retention Period: Personal data is retained as long as legally required, after which it is deleted, destroyed, or anonymized.

These principles apply regardless of the legal basis for processing.

Your Rights under Article 11 of the KVKK

Individuals whose data is processed may apply to Gamateks Tekstil San. ve Tic. A.Ş. to:

• Learn if their data is processed,
• Request information on such processing,
• Learn the purpose and appropriateness of processing,
• Learn third parties to whom data has been transferred,
• Request correction of inaccurate or incomplete data,
• Request deletion or destruction under the conditions set out in the Law,
• Request notification of actions to third parties,
• Object to outcomes against them resulting from automated analysis,
• Request compensation if they suffer damages due to unlawful processing.

Gamateks respects all these rights.

Data Minimization Principle

Only data necessary for the intended purpose is processed. Excess data is deleted or anonymized. Health data is only processed where legally required or for better service/protection and is stored with utmost care.

Deletion of Personal Data

Once the legal retention period expires, or the need ceases due to completed legal processes or other considerations, data is deleted, destroyed, or anonymized by Gamateks, either automatically or upon request.

Data Accuracy and Updates

As a rule, data is processed based on the declarations of the individual. While we are not obligated to verify these declarations, we update data based on official documents or legitimate requests.

Confidentiality and Data Security

Personal data is confidential. Access within the company is limited to authorized personnel. All necessary technical and administrative safeguards are in place to prevent unauthorized access. Software is kept compliant with standards, third-party providers are carefully selected, and internal data protection policies are enforced.

IV. Purposes of Data Processing

Gamateks processes personal data for legal obligations, security, contract execution, and improved service delivery.

V. Customer, Potential Customer, and Business Partner Data

Contractual Relationships:

If a contractual relationship is established, personal data may be used without additional consent, solely for contract purposes.

Business Partners:

We act lawfully when sharing data with business partners, limit data sharing to what is necessary, and require confidentiality and security commitments.

Marketing Communications:

Commercial messages are only sent to individuals who have provided explicit consent under the Electronic Commerce Law.

Legal Obligations:

Data may be processed without consent if expressly required by law or for legal compliance.

Sensitive Personal Data:

Sensitive data (e.g., health, biometrics) is processed only with consent or legal necessity, with enhanced safeguards.

Automated Processing:

Data processed by automated systems is not used to produce negative outcomes without explicit consent.

User Data and Cookies

Users are informed about personal data collection via a privacy notice and CookieYes cookie panel.

Cookies are stored for ~26 months. You can block or delete cookies from your browser settings.

Security Data in Operational Areas

In accordance with KVKK Article 5/2-f, camera footage collected during visits to Gamateks premises is processed for security and quality assurance purposes. Data is not shared unless requested by authorized public institutions and is destroyed when the purpose ends.

VI. Employee Data

Employee data is processed without consent for contractual, legal, and operational reasons (e.g., benefits, insurance). Devices and communication tools provided by the company are for business use only and are subject to monitoring.

VII. Data Transfers (Domestic and International)

Data may be shared with partners, suppliers, and subsidiaries as needed for service execution, with explicit consent and in accordance with KVKK conditions.

VIII. Rights of the Data Subject

Gamateks acknowledges the data subject’s right to consent and manage their personal data. Requests can be made using the application form at www.gamateks.com/kvkk-basvuru-formu.pdf with a copy of ID and sent via registered mail.

IX. Principle of Confidentiality

All personal data at Gamateks is confidential. It cannot be used, copied, reproduced, or transferred to third parties outside of legal or contractual obligations.

X. Transaction Security

All technical and administrative measures are taken to protect collected personal data and prevent unauthorized access. Security practices are continuously updated.

XI. Audits

Gamateks Tekstil San. ve Tic. A.Ş. conducts regular internal and external audits on data protection practices.

XII. Violation Notifications

Upon any reported data breach, Gamateks takes immediate action, minimizes damage, notifies the data subject, and reports to the Personal Data Protection Authority (KVKK). Violations can be reported through procedures outlined at www.gamateks.com.

Contact Information for KVKK Applications

Please complete the form at www.gamateks.com/kvkk-basvuru-formu.pdf and mail it with a copy of your ID to the address below:

Gamateks Tekstil Sanayi ve Ticaret A.Ş.

Address: Karakurt Yolu Üzeri, 1891 Sokak No: 52, Denizli, Turkey

Phone: +90 258 211 56 50 Fax: +90 258 211 56 36

Registered Email (KEP): gamatekstekstil@hs02.kep.tr

Web: www.gamateks.com Email: info@gamateks.com.tr