Nature Conservation Center Personal Data Protection Disclosure Text

This disclosure text has been prepared by the Nature Conservation Center in its capacity as the data controller, in accordance with Article 10 of the Law No. 6698 on the Protection of Personal Data ("Law") and the Regulation on the Procedures and Principles for Fulfillment of the Obligation to Inform.

The Nature Conservation Center processes personal data, including health data and special categories of personal data, of employees, job candidates, property owners, interns, supplier employees, supplier representatives, product or service recipients, and visitors, in accordance with the principles of privacy, and within the categories reported to the VERBIS system. The scope of processing by the Nature Conservation Center as a data controller is explained in this disclosure text ("Disclosure Text").

Personal data, including sensitive health data, is collected through automated or non-automated methods as part of a data recording system, from the individual concerned, location-detecting systems, and authorized representatives of the companies where supplier employees work. The personal data is processed in compliance with the basic principles stipulated by the Law, in accordance with the data processing conditions and purposes set out in Articles 5 and 6 of the Law, and may be transferred domestically and internationally for the purposes stated below, by the real and legal persons mentioned in this Disclosure Text.

According to Article 5 of the Law, the Nature Conservation Center may process personal data without explicit consent in the following cases:

• When explicitly stipulated by laws,
• If the individual is unable to provide consent due to physical impossibility or if consent is not legally valid, and the processing of personal data is essential for the protection of the individual's or someone else's life or physical integrity,
• If the processing is directly related to the establishment or performance of a contract with the individual,
• If necessary for fulfilling a legal obligation,
• If personal data has been made public by the individual,
• If processing is necessary for the establishment, exercise, or protection of a right,
• If necessary for the legitimate interests of the Nature Conservation Center, provided it does not harm fundamental rights and freedoms.

Additionally, under Article 6 of the Law, special categories of personal data can be processed without explicit consent in the following cases:

• Data related to race, ethnicity, political opinions, philosophical beliefs, religion, sect, or other beliefs, attire, membership in associations, foundations, or trade unions, health, sexual life, criminal convictions, and security measures, as well as biometric and genetic data.
• Health and sexual life data can only be processed by authorized individuals or institutions for public health, preventive medicine, medical diagnosis, treatment, and care services, under confidentiality obligations.

Personal data is processed for the following purposes:

• Management of employee and internship application processes,
• Fulfillment of obligations arising from labor contracts and regulations,
• Management of employee benefits and rights,
• Conducting training activities,
• Management of access permissions,
• Ensuring legal compliance in activities,
• Conducting finance and accounting activities,
• Ensuring physical security,
• Management of assignment processes,
• Legal affairs management,
• Communication activities,
• Planning of human resources processes,
• Monitoring and auditing business activities,
• Occupational health and safety activities,
• Managing procurement processes,
• Post-sale support services,
• Conducting performance evaluation processes,
• Managing contract processes,
• Management of compensation policies,
• Providing information to authorized persons, institutions, and organizations,
• Creating and monitoring visitor records.

Collected personal data may be transferred in compliance with the basic principles of the Law and under the conditions specified in Articles 8 and 9 of the Law, for the purposes outlined above, to authorized public institutions, real persons or private legal entities, companies or organizations that will form a contractual relationship with the Nature Conservation Center, and their business partners, suppliers, and service providers.

The personal data subject has the right to:

• Learn whether their personal data is processed,
• Request information about the processing of their personal data,
• Learn the purposes of processing and whether the data is being used for these purposes,
• Know the third parties to whom personal data has been transferred, both domestically and abroad,
• Request the correction of incorrect or incomplete data,
• Request the deletion or destruction of personal data when the reasons for processing are no longer applicable,
• Request the notification of data corrections, deletions, or destructions to third parties to whom the data has been transferred,
• Object to decisions made solely based on automated processing of data, and request the prevention of such processing if it results in negative consequences for the individual,
• Request compensation for damages caused by unlawful processing of personal data.

According to Article 11 of the Law, the personal data subject must complete the application form and submit it to the Nature Conservation Center through the specified communication channels to use their rights.

The Nature Conservation Center will conclude the request within 30 days, free of charge, unless a fee is required for the process as determined by the Personal Data Protection Board.

In accordance with the Law, personal data processed for the purposes stated in this Disclosure Text will be deleted, destroyed, or anonymized once the purpose of processing no longer exists and/or the statutory periods for data processing have expired, in compliance with Article 7 of the Law.