Information Text About KVK for Customer - Supplier - Business Partner

Considering the security of your personal data as Beşler Yem ve Un Sanayi Ticaret A.Ş. (Beşler Yem ve Un A.Ş.), all personal data belonging to all persons related to Beşler Yem ve Un A.Ş. We attach great importance to its processing and storage in accordance with the Constitution and the Law on the Protection of Personal Data No. 6698 (“KVKK”). Within the scope of this responsibility, Beşler Yem ve Un A.Ş. As “Data Controller”, we process your personal data as explained below and within the limits determined by the legal legislation.

1- Personal and Special Personal Data We Process

Beşler Yem ve Un A.Ş. as, we process the personal data and special categories of personal data shown in the separate tables below regarding our customers, suppliers and business partners.

PERSON RECEIVING THE PRODUCT OR SERVICE
Your Identity Information: Identity card/ID card/driver's license/passport and

Personal information: in the photocopy of the submitted document
Your Contact Information: Address, phone, e-mail address information
Customer Transaction: Request information, order information, invoice, promissory note, check information, credit / debit card information (for payments made through POS or Mail Order), tax account number information
Financial Information: IBAN and bank account number information

SUPPLIER, SUPPLIER EMPLOYEE OR SUPPLIER AUTHORITY
Your Identity Information: Identity card/ID card/driver's license/passport and

Personal information: in the photocopy of the submitted document
Your Contact Information: Address, phone, e-mail address information
Financial Information: IBAN and bank account number information
Professional Experience: Certificates, production/sales legal permits
Legal Transaction: Authorization and representation documents, power of attorney, signature circular

BUSINESS PARTNER/SUBCONTRACTOR
Your Identity Information: Identity card/ID card/driver's license/passport and

Personal information: in the photocopy of the submitted document
Your Contact Information: Address, phone, e-mail address information
Financial Information: IBAN and bank account number information
Professional Experience: Completion, Reference
Tax number: -----
Asset Information: Information on economic and financial adequacy
Bank letter of guarantee

2- Conditions for Processing Personal Data (Conditions of Legal Compliance)

The conditions for processing personal data are listed in Article 5 of the Law, and accordingly, it is possible to process personal data if at least one of the following conditions is present.
• Existence of the explicit consent of the person concerned,
• It is clearly stipulated in the laws,
• It is compulsory for the protection of the life or physical integrity of the person or another person, who is unable to express his consent due to actual impossibility or whose consent is not legally valid,
• It is necessary to process the personal data of the parties to the contract, provided that it is directly related to the establishment or performance of a contract,
• It is mandatory for the data controller to fulfill its legal obligation,
• The person concerned has been made public by himself,
• Data processing is mandatory for the establishment, exercise or protection of a right,
• Data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject.

3- Purposes of Processing Personal Data by Our Company
Personal data related to Data Subjects, Beşler Yem ve Un A.Ş. It is processed under the conditions specified in Articles 5 and 6 of the KVKK in order to ensure that the activities performed by the Company are carried out in accordance with the relevant legislation and procedures. The purposes of processing personal data regarding our customers, suppliers and business partners by our company are given in the table below.

Data Subject Personal Data Processing Purpose

PERSON RECEIVING PRODUCT OR SERVICE:

Execution of contract processes
Conducting communication activities
Execution of activities in accordance with the legislation
Execution of marketing activities
Execution of request / complaint processes
Execution of customer relationship management processes (customer satisfaction surveys, call center records, etc.)
Follow-up and execution of legal affairs

SUPPLIER, SUPPLIER EMPLOYER OR SUPPLIER AUTHORITY:

Establishment and execution of the supply contract
Conducting communication activities
Execution of activities in accordance with the legislation
Execution of goods / services purchasing processes
Recording of goods receipt transactions
Execution of finance and accounting works
Execution of supply chain management processes
Follow-up and management of legal affairs

BUSINESS PARTNER / SUBCONTRACTOR:

Execution of contract processes
Conducting communication activities
Execution of activities in accordance with the legislation
Execution of finance and accounting works
Execution and supervision of business activities
Execution of occupational health and safety activities
Carrying out activities to take and evaluate measures and suggestions for the improvement of business processes
Execution of emergency management processes

4- To whom and for what purpose the processed personal data can be transferred

Your collected personal data; In case of existence of the personal data processing conditions (reasons for compliance with the law) specified in article 2 of this clarification text, it can be transferred to the specified institutions and persons for the purposes stated below:
• Business Partners for the purpose of carrying out the business activities of the company,
• To the relevant banks for the execution of the payment processes,
• To the relevant occupational health and safety institutions and experts in order to fulfill the obligations arising from the Occupational Health and Safety Law No. 6331,
• Law offices and lawyers from whom we receive consultancy services,
• To the accountants, financial advisors, auditors and independent audit firms we work with in order to fulfill our obligations arising from the Tax Procedure Law No. 213 and other legislation,
• If the Data Subject does not fulfill his contractual obligations, to the authorized and authorized enforcement offices and enforcement courts in order to carry out the follow-up procedures,
• In case of disagreement between the parties regarding the performance of the contract, notaries, authorized and competent judicial authorities,
• Legally authorized public institutions and organizations.

5- Method and Legal Reason for Personal Data Collection

Your personal data, Beşler Yem ve Un A.Ş. Although it may vary depending on your relationship with; It can be collected verbally, in writing or electronically, through automatic or non-automatic methods, through the Company's units and offices, website, social media channels, mobile applications and similar means. Your personal data collected in this way can also be processed and transferred for the purposes specified in Articles (2) and (3) of this text within the scope of the personal data processing conditions and purposes specified in Articles 5 and 6 of the KVKK.
Beşler Yem ve Un A.Ş. In the personal data it collects while carrying out its operational processes for its customers, suppliers and business partners, it is subject to the Law on Protection of Personal Data No. 6698, Beşler Yem ve Un A.Ş. Acts in accordance with the Personal Data Processing and Protection Policy.
Beşler Yem ve Un A.Ş. retains your personal data only in accordance with the relevant legislation and/or internal policies or for the period necessary for the purpose for which they are processed. In this context, first of all, the period stipulated for the storage of personal data in the relevant legislation is complied with, and in cases where such a period is not foreseen, personal data is stored for the period required for the purpose of processing in line with the guidelines in the internal policies. Personal data is deleted, destroyed or anonymized if the expiry of the period or the disappearance of the reasons that require it to be processed.

6- Your Rights Enumerated in Article 11 of KVKK as a Relevant Person
As personal data owners, you can submit your requests regarding your rights to Beşler Yem ve Un A.Ş. If you forward it to , the Company will conclude the request free of charge within thirty days at the latest, depending on the nature of the request. However, if a fee is stipulated by the Personal Data Protection Board, the fee in the tariff determined by the Company will be charged. In this context, personal data owners;
• Learning whether personal data is processed or not,
• If personal data has been processed, requesting information about it,
• To learn the purpose of processing personal data and whether they are used in accordance with the purpose,
• Knowing the third parties to whom personal data is transferred in the country or abroad,
• Requesting correction of personal data in case of incomplete or incorrect processing and requesting notification of the transaction made within this scope to the third parties to whom the personal data has been transferred,
• Requesting the deletion or destruction of personal data in the event that the reasons requiring its processing have disappeared, although it has been processed in accordance with the provisions of the KVKK and other relevant laws, and requesting the notification of the transaction made within this scope to the third parties to whom the personal data has been transferred,
• Objecting to the emergence of a result against the person himself by analyzing the processed data exclusively through automated systems,
• It has the right to demand the compensation of the damage in case of loss due to unlawful processing of personal data.
In order for the application to be accepted as a valid application, in accordance with the Communiqué on Application Procedures to the Data Controller, the relevant person must;

a- Name, surname and signature if the application is in writing,
b- For citizens of the Republic of Turkey, T.R. identification number, nationality for foreigners, passport number or identification number, if any,
c- Domicile or workplace address for notification,
d- If available, the e-mail address, telephone and fax number for notification,
e- The subject of the request,

information is required. Otherwise, the application will not be considered as a valid application. In the applications to be made without filling out the application form, the issues listed here must be conveyed completely.

In line with these rights, applications can be made by filling out the application form on the website of Beşler Yem ve Un A.Ş. Beşler Yem ve Un A.Ş. It must be delivered to . Beşler Feed and Flour A.Ş. may request additional verifications (such as sending a message to your registered phone, calling) in order to determine whether the application belongs to you and thus to protect your rights. In case the application is made by third parties on behalf of personal data owners, a special power of attorney issued by the data owner to the person who will apply is required.

Your request, which includes the necessary information identifying your identity to exercise your above-mentioned rights, and your explanations regarding your right that you request to exercise from the rights specified in Article 11 of the KVKK; Fill in the application form and send a signed copy of the form to Organize Sanayi Bolgesi 1.Cad. 4.Sok No:5, 25700 Aziziye/Erzurum, you can personally send the documents identifying your identity, send it via a notary public or other methods specified in the KVKK, or send the relevant form to suhut.tosun@beslerunyem.com.tr or besler.gida@hs03.kep.tr You can send it to .kep.tr with a secure electronic signature.

In the event that your application is not answered within 30 calendar days, which is deemed appropriate under the law, or in cases where your application is rejected and you find the response to your application insufficient, Beşler Yem ve Un A.Ş. You can file a complaint with the Personal Data Protection Board within 30 days from the date you learn the reply of, and in any case within 60 calendar days following the application date.