SPS LABEL PRINTING AND PACKAGING INDUSTRY AND TRADE LIMITED COMPANY
CLARIFICATION TEXT ON THE PROTECTION OF PERSONAL DATA

As SPS Etiket Baskı ve Ambalaj Sanayi ve Ticaret Limited Şirketi (“Company”), we place utmost importance on the security of your personal data. With this awareness, we highly value the processing and safeguarding of all types of personal data belonging to individuals who benefit from our products and services, as well as all real persons associated with the Company, in compliance with the Personal Data Protection Law No. 6698 (“PDPL”) and related legislation. In full acknowledgment of this responsibility, and in our capacity as a “data controller” as defined by the PDPL, we process personal data as outlined below and within the legal boundaries set forth by the legislation.

1. Data Controller and Representative

Pursuant to the PDPL, your personal data may be processed by our Company as the data controller within the scope detailed below.

2. Purposes for Processing Personal Data and Potential Recipients

The personal data collected will be processed for the purposes outlined in Articles 5 and 6 of the PDPL, such as ensuring the proper planning, execution, and management of our Company’s commercial collaborations, administrative and communication activities, and strategies; conducting necessary operations to allow data subjects to make the best use of our products and services, tailoring them to their demands and preferences; ensuring the highest level of data security; improving the services provided on our website and addressing errors; communicating with data subjects who submit requests and complaints and managing these processes; organizing events; fulfilling legal obligations to authorized entities; and maintaining visitor records.

Your personal data may be shared within the scope of Articles 8 and 9 of the PDPL with our business partners, suppliers, group companies, Company executives, shareholders, authorized public institutions, and private individuals. If the relevant processing activity does not meet any of the conditions specified in the law, your explicit consent will be obtained for such processing activities.

3. Methods and Legal Grounds for Collecting Personal Data

Your personal data may be collected by our Company through various channels such as agencies, our website, and physical environments using technical and procedural methods. This data is processed within the legal framework arising from applicable legislation, contracts, requests, commercial practices, and the principles of good faith. Processing purposes include enabling the fulfillment of the legal obligations of our Company, performing the requirements of the business relationship established with you, protecting mutual rights, and safeguarding the legitimate interests of our Company while respecting the fundamental rights and freedoms of data subjects.

4. Rights of the Data Subject

As data subjects, if you submit your requests regarding your rights to our Company, we will evaluate and conclude your request as soon as possible and at the latest within thirty days, depending on the nature of the request. If the process incurs an additional cost, the fee determined by the Personal Data Protection Board will be charged. In this context, data subjects have the following rights:

• To learn whether personal data is being processed,
• To request information if personal data has been processed,
• To learn the purpose of processing personal data and whether it is used in accordance with the intended purpose,
• To know the third parties to whom personal data has been transferred domestically or abroad,
• To request the correction of incomplete or inaccurate data and to request notification of this to third parties to whom the data has been transferred,
• To request the deletion or destruction of personal data if the reasons for processing no longer exist, even if the data has been processed in accordance with the PDPL and relevant legislation, and to request notification of this to third parties to whom the data has been transferred,
• To object to the occurrence of a result to the detriment of the person by analyzing processed data exclusively through automated systems,
• To request compensation for damages incurred as a result of unlawful processing of personal data.

To exercise the above-mentioned rights, you may submit your request along with necessary information identifying your identity and your explanations regarding your rights, in accordance with the “Communiqué on the Procedures and Principles of Application to the Data Controller,” to our Company in writing or by using the following methods:

• By personally delivering your application,
• Through a notary,
• By sending it via email with a “secure electronic signature” defined under the Electronic Signature Law No. 5070 to our registered electronic mail (KEP) address [email protected].

Click here for the application form.