Membership Agreement

Definitions

In this clarification text;

Personal Data: Concerning all kinds of information of an identifiable or identifiable natural person,

Personal Data Protection Law (“KVKK”): Personal Data Protection Law No. 6698, which was published in the Official Gazette on April 7, 2016 and became secret,

Data Processor: A natural or personal person who produces Personal Data on his or her own behalf, based on the authority given by the data controller,

Data Controller: Can use the purposes and tools of processing Personal Data, and can use the real or personal person responsible for the creation of the data recording system.

Relevant Person: Refers to the real person whose personal data is processed.

As NORM DİJİTAL HİZMETLER TİCARET ANONİM ŞİRKETİ and VINTER AI RECRUITMENT LTD (“Our Companies”) , protecting private lives, operating and protecting information security in order to protect fundamental rights and freedoms are among our ethical values and regime. Accordingly, our explanations below are presented for your information within the scope of fulfilling our duty of clarification arising from Article 10 of the Personal Data Protection Law (“KVKK”).

Data Controller

“Data Controller” in terms of your personal data; It is registered at the Izmir Trade Registry with the registration number 227198, can enter Mersis at 0631152363600001, the company headquarters is 'Adatepe Mahallesi Doğuş Caddesi No:207 / AG İç Kapı No:1 Buca' NORM DİJİTAL HİZMETLER TİCARET ANONİM ŞİRKETİ.

Parties Whose Data is Collected

We process separately the parties of our custodians who have a business relationship with our company within the scope of the Personal Data Protection Law. These;

• Our employees and employee candidates,
• Family members and relatives of our employees and employee candidates,
• Our customers,
• Our suppliers,
• Our consultants,
• Our business partners,
• Our shareholders,
• Our company members,
• Our company representatives,
• Person(s) and employees who separate contractual relations
• Person(s) who are the addressees of legal proceedings,
• Survey meetings,
• Our visitors.

Data Collected and Processed by Our Company from the Parties

We process the following data from the company parties within the scope of Articles 5 and 6 of the Personal Data Protection Law. These;

• Family and social life information,
• Education and training information,
• Employment information,
• Information regarding request/complaint management,
• Information regarding legal affairs,
• Information regarding ethical values and legal compliance,
• Financial information,
• Audit information,
• Electronic media usage information,
• Information regarding the goods and services provided and supplied,
• Business activities information,
• Information regarding trade and other licenses and permits,
• International venue security information,
• Visual and business information (photo, camera, audio recording),
• Telecommunications noted,
• The use of e-mail and information systems services is registered,
• They logged in,
• Health reports and health information,
• Biometric data,
• Criminal record information..

Our Company's Data Processing Purposes

Within the scope of Articles 5 and 6 of the Personal Data Protection Law, we process data in order to achieve our Company purposes stated below, limited to the relevant purposes. These;

• Carrying out our company's commercial activities,
• Ability to carry out business processes related to commercial activities,
• Management and execution of relationships with business partners and/or suppliers,
• Technical management of our company's websites,
• Customer management and tracking of complaints,
• Product surveys and follow-up of the questions you send to our Company,
• Carrying out the necessary work by our business units to benefit you from the products and services offered by our company,
• Planning and execution of sales, marketing and after-sales processes of products and/or services,
• Providing information about the contents of products and services,
• Sending commercial electronic messages with separate approval in accordance with legal regulations,
• Conducting competitions, events and other organizations,
• Conducting legal and commercial relations with our Company and people who have business relations with our Company and ensuring the security of these relations,
• Administrative operations regarding communication carried out by our company,
• Employee administration and management,
• Ensuring physical security and control of company locations,
• Planning logistics activities,
• Conducting reputation research processes,
• Compliance with ethical values and law and execution of legal affairs and procedures,
• Following up contract processes and/or legal requests,
• Planning and executing Human Resources and personnel recruitment processes and monitoring and carrying out education and training activities,
• Planning and/or execution of occupational health and/or safety processes,
• Ensuring that our Company can benefit from incentives by carrying out research and development activities,
• Planning and execution of corporate communication and corporate management activities,
• Execution of information security management services,
• Monitoring and auditing finance and/or accounting affairs and carrying out activities aimed at detecting customers' financial risks,
• Determining and implementing our company's commercial and business strategies,
• Creating and tracking visitor records,
• For other purpose or purposes to be notified to the relevant person during the collection of information,
• To ensure the fulfillment of legal obligations as required or required by the relevant legislation

Transfer of Data Processed by Our Company Within Its Purposes

Within the framework of the personal data processing conditions and purposes specified in Articles 8 and 9 of the Personal Data Protection Law, your personal data processed by our Company may be transferred to our subsidiaries, shareholders, business partners (only anonymously) within the scope of the purposes detailed above, legally authorized public institutions and private persons. It can be shared with other people.

Method and Legal Reason for Processing Data by Our Company

Personal data is collected and processed by our Company in connection with the legitimate purposes clearly stated above, in accordance with the law and the rules of honesty, by verbally, written and/or electronically, by providing verbal, written and/or electronic information to personal data owners in a clear and understandable manner and, when necessary, by obtaining their explicit consent. It is used, recorded, stored and processed within the framework of the principle of proportionality, provided that it is limited. Your personal data is processed automatically from you personally, through our Company's website, within the scope of our contractual relationship. With this; Audio and visual records of our employees or employee candidates regarding the planning and execution of Human Resources and personnel recruitment processes and the monitoring and realization of training and education activities are automatically processed through the mobile application if contacted through our Company's "Vinter" mobile application. Your collected personal data is processed by the Company in line with the purpose stated in this disclosure document, within the personal data processing conditions specified in Articles 5 and 6 of the KVKK, in order to plan and execute the Company's human resources policies and processes; It may be transferred to our suppliers, legally authorized public institutions and legally authorized private persons within the scope of the personal data processing conditions and purposes specified in Articles 8 and 9 of the Law.

For the purposes mentioned above, interviews are carried out through servers abroad. While the relevant processing and transfer activities are carried out, reasonable administrative and technical measures are taken to ensure the security and privacy of your personal data.

Storage Period of Data Processed by Our Company

Your personal data is stored for the retention periods specified in the relevant legal legislation, or if no period is specified in the relevant legal legislation, in accordance with our Company's practices and commercial life practices, or for the period required by the above-mentioned processing purposes, and is subsequently deleted and destroyed in accordance with Article 7 of the Personal Data Protection Law. or is made anonymous.

Security of Your Data Processed by Our Company

In order to prevent your personal data from being exposed to unauthorized access, lost or damaged in the environments where they are processed and stored, the technical and administrative measures of the Information Security Management System (ISO 27001 Standard and good practice booklet 27018) encouraged by our management, the Personal Data Protection Management System (Bureau Veritas - Data The requirements of the Protection Technical Standard, BS 10012 Data Protection Personal Information Management System Standard) as well as the requirements of the Personal Data Security Guide published by the KVKK board are constantly operated and developed within the scope of continuous improvement.

Rights of the Relevant Person whose Data is Processed

In accordance with Article 11 of the Personal Data Protection Law, everyone can contact the data controller and obtain;

1. Learning whether personal data is being processed or not,
2. Requesting information if personal data has been processed,
3. Learning the purpose of processing personal data and whether they are used for their intended purpose,
4. Knowing the third parties to whom personal data is transferred at home or abroad,
5. Requesting correction of personal data if it is incomplete or incorrectly processed,
6. Requesting the deletion or destruction of personal data within the framework of the conditions stipulated in Article 7 of the Personal Data Protection Law,
7. Requesting that transactions made in accordance with clauses (d) and (e) be notified to third parties to whom personal data is transferred
8. Objecting to the emergence of a result that is unfavorable to the individual by analyzing the processed data exclusively through automatic systems,
9. In case of damage due to unlawful processing of personal data, they have the right to demand compensation for the damage.

Application Methods Within the Framework of the Rights of the Interested Person

In accordance with the 1st paragraph of Article 13 of the Personal Data Protection Law, you can make your request to exercise your above-mentioned rights with the following methods and information, in accordance with the "Communiqué on the Procedures and Principles of Application to the Data Controller" published on 10 March 2018, No. 30356.

Required information in the application content;

1. Name and Surname of the applicant
2. If the applicant is a citizen of the Republic of Turkey, TR ID Number, if not, Passport number and Nationality or ID number, if available.
3. Residence or workplace address of the applicant as basis for notification
4. The applicant's notification e-mail address, telephone or fax number
5. Subject of the applicant's request
6. Information and documents regarding the applicant's request

Application Methods;

1. The applicant can personally fill out the "Application Form" to the addresses of NORM DİJİTAL HİZMETLER TİCARET ANONİM ŞİRKETİ and VINTER AI RECRUITMENT LTD and deliver it to the information office with a handwritten report in a sealed envelope and with a note of "Information Request in Pursuance of the Personal Data Protection Law" on the envelope.
2. The applicant can send notifications to the addresses of NORM DİJİTAL HİZMETLER TİCARET ANONİM ŞİRKETİ and VINTER AI RECRUITMENT LTD through a notary public, but the note "Information Request in Pursuance of the Personal Data Protection Law" must be added on the notification envelope.
3. With the "Secure Electronic Signature" defined in the Electronic Signature Law No. 5070, the applicant can personally apply to our company's Registered Electronic Mail address [email protected] with the note "Information Request in Pursuance of the Personal Data Protection Law" in the subject line.

Address:

NORM DİJİTAL HİZMETLER TİCARET ANONİM ŞİRKETİ: Adatepe Mah. Doğuş Cad. No:207 AG İç Kapı No: 1 BUCA/İZMİR

VINTER AI RECRUITMENT LTD: 74a High Street, Wanstead, London, Greater London, United Kingdom