Protection of Personal Data

In order to protect the fundamental rights and freedoms of individuals, especially the right to privacy, in the processing of personal data and to determine the obligations of real and legal persons who process personal data, we, as Ve-Ge Hassas Kağıt ve Adhesive Tape San. ve Tic. A.Ş. (hereinafter referred to as “VE-GE” or “Company”), would like to inform you in our capacity as the Data Controller, in accordance with Article 7 of the Law titled “Data Controller’s Obligation to Inform”, regarding the Law No. 2016 on the Protection of Personal Data published in the Official Gazette dated April 29677, 6698 and numbered 10.

VE-GE shows utmost sensitivity to the security of personal data. With this awareness, we process the personal data of personal data owners as explained below and within the limits imposed by the legislation.

1- About the Data Controller

In accordance with the Personal Data Protection Law, as VE-GE, in its capacity as Data Controller, we may process, record, store, classify, update your personal data in accordance with the law and rules of integrity, for the purposes explained below, and disclose/transfer them to third parties or abroad in cases permitted by the legislation and/or limited to the purpose for which they are processed.

2- Collection, Processing and Purposes of Processing of Personal Data

Your personal data may vary depending on the services provided by our Company and the commercial activities of our Company; however, it may be collected verbally, in writing or electronically through automatic or non-automatic methods, through all contracts/information forms and other documents related to the transactions prepared with your approval and/or signature, through our Company units and departments, website, social media channels, mobile applications and similar means.

Your personal data collected is processed in accordance with the basic principles set forth by the Personal Data Protection Law.
Within the scope of the Personal Data Processing conditions and purposes specified in Articles 5 and 6 of the Personal Data Protection Law, VE-GE may process your personal data for the following purposes:

• Planning and executing the company's human resources policies and processes
• Our business units carry out the necessary work to enable the relevant people to benefit from the products and services offered by the company and carry out the relevant business processes.
• Planning and execution of activities required to recommend and introduce the products and services offered by the company to the relevant people by customizing them according to their tastes, usage habits and needs.
• Carrying out the necessary work by our relevant business units and carrying out the related business processes in order to carry out the commercial activities carried out by the company.
• Planning and execution of the company's commercial and/or business strategies
• Ensuring the legal, technical and commercial-occupational security of the Company and the relevant persons who have business relations with the Company.

Detailed information on the purposes for which your personal data is processed by VE-GE is included in the Personal Data Processing and Protection Policy.

3- To Whom and for What Purposes Can Processed Personal Data Be Transferred?

Your personal data collected by VE-GE may be transferred to third parties and institutions within the scope of the Personal Data Processing conditions specified in Articles 6698 and 5 of the Personal Data Protection Law No. 6 and limited to the purposes specified in this document, in accordance with Articles 8 and 9 of the Personal Data Protection Law.

You can find detailed information about the transfer of your personal data by the Company in the Personal Data Processing and Protection Policy.

Data Transfer Abroad: Your personal data may be transferred by VE-GE only to persons and organizations resident in foreign countries with sufficient protection, as determined by the Personal Data Protection Board ("Board"), in accordance with the principles set forth in Article 4(2) of the Personal Data Protection Law, by obtaining explicit consent or, in the event of the existence of the situations set forth in Articles 5(2) and 6(3), without obtaining explicit consent and in accordance with the rules in Article 9 of the law, only to persons and organizations resident in these countries, and for countries where it is determined and declared that there is no sufficient protection, limited to the cases where the data controllers in Turkey and the relevant foreign country undertake in writing to provide adequate protection and the permission of the Board can be obtained for the relevant transfer.

4 - What is the Method and Legal Reason for Collecting Your Personal Data?

Your personal data is obtained in all kinds of verbal, written or electronic media, in order to provide our services in line with the purposes stated above and to enable VE-GE to fulfill its contractual and legal responsibilities completely and accurately.

Your personal data collected through these methods may also be processed and transferred for the purposes specified in articles (5) and (6) of this text, within the scope of the Personal Data Processing conditions and purposes specified in articles 2 and 3 of the PDP Law, in accordance with the basic principles stipulated by the PDP Law.

5- What are your rights as a data owner, as listed in Article 11 of the Personal Data Protection Law?

The rights of real persons whose personal data is processed, pursuant to Article 11 of the Personal Data Protection Law, are as follows:

• To learn whether personal data is processed,
• Request information if personal data is processed,
• Learning the purpose of processing personal data and whether they are used in accordance with their purpose,
• Knowing the third parties to whom personal data is transferred at home or abroad,
• Requesting correction of personal data in case of incomplete or incorrect processing and requesting notification of the transaction made within this scope to the third parties to whom the personal data has been transferred,
• Requesting the deletion or destruction of personal data in case the reasons requiring processing are eliminated, even though it has been processed in accordance with the provisions of the Personal Data Protection Law and other relevant laws, and requesting that the action taken within this scope be notified to third parties to whom personal data has been transferred,
• Object to the occurrence of a result against the person himself by analyzing the processed data exclusively through automated systems,
• To demand the compensation of the damage in case of damage due to the processing of personal data illegally.

Your request regarding your applications regarding your rights listed above, including the necessary information to identify you and your explanations regarding the right you wish to exercise among those specified in Article 11 of the Personal Data Protection Law; www.ve-ge.com.tr  You can fill out the Data Owner Application Form on the internet address and deliver a signed copy of the form to the address 'Ve-Ge Hassas Kağıt ve Adhesive Tape San. ve Tic. Anonim Şirketi, Halkalı Cad. No:229 34295 Sefaköy – İSTANBUL' in person, together with documents proving your identity, through a notary or other methods specified in the Personal Data Protection Law, or you can fill out the relevant form. vegekagitbant@hs01.kep.tr You can send it to the address with a secure electronic signature.

Our company will finalize the request free of charge as soon as possible and within thirty (30) days at the latest, depending on the nature of the request. However, if the transaction requires an additional cost, we will charge the fee in the tariff determined by the Personal Data Protection Board.

Applications must be made in Turkish. Applications must include name, surname, signature if the application is in writing, Turkish Republic identity number for citizens of the Republic of Turkey, nationality for foreigners, passport number/identity number, place of residence or workplace address for notification, e-mail address for notification, telephone or fax number if any, and the subject of the request.

In the application containing explanations regarding the right that the personal data owner has and requests to exercise in order to exercise the above-mentioned rights; the subject requested must be clear and understandable, the subject requested must be related to the person or if he/she is acting on behalf of someone else, he/she must be specifically authorized in this matter and document his/her authority, the application must include his/her identity and address information and documents proving his/her identity must be attached to the application.

We notify you as the “Data Controller” within the scope of the Personal Data Protection Law.

Sincerely,

Ve-Ge Precision Paper and Adhesive Tape Industry and Trade Inc.

Address: Halkalı St. No:229 34295 Sefaköy – ISTANBUL

Phone: + 90 212 698 90 70

Fax: + 90 212 698 90 76

E-mail: vege@vege.com.tr

Mersis Number: 0924002906800011