Application Form of the Data Subject under the Personal Data Protection Law No. 6698

General Information
The Personal Data Protection Law No. 6698 ("PDPL") grants data subjects the right to learn whether their personal data is being processed, request information if their personal data is processed, learn the purpose of processing their personal data and whether it is used in accordance with that purpose, learn the third parties to whom their personal data has been transferred, request the correction of their personal data if it is inaccurate or incomplete, and request the notification of the correction to the third parties to whom the data has been transferred, request the deletion, destruction, or anonymization of their personal data if the reasons for processing no longer exist, and request the notification of this to the third parties to whom the data has been transferred.
Furthermore, data subjects have the right to object to the result created by the exclusive analysis of their personal data through automated systems and to request compensation for damages in case of unlawful processing of their personal data under the law.

According to the first paragraph of Article 13 of the PDPL, the data controller, Nil Unlu Mamuller Gıda Pastacılık San. ve Tic. A.Ş. (hereinafter referred to as the “Company”), requests that applications regarding these rights be made in writing through this Data Subject Application Form or other methods specified by the Personal Data Protection Board (“Board”).

Application Method
In this context, written applications to our company may be submitted as follows:

• In person (by the applicant personally coming and presenting a document proving their identity),
• Through a Notary,
• By signing with a "secure electronic signature" as defined in the Electronic Signature Law No. 5070, and sending it to our registered electronic mail address.

The details regarding written application methods and the information notes to be provided in submissions are presented in the table below:

Cases Outside the Scope of the Application Right
According to Article 28 of the PDPL, the following cases are excluded from the scope of the law, and the data subjects will not be able to exercise their application rights:

• Personal data processed for research, planning, and statistical purposes through anonymization for official statistics.
• Personal data processed for artistic, historical, literary, or scientific purposes, or within the scope of freedom of expression, as long as it does not violate national defense, national security, public safety, public order, economic security, privacy, or personal rights.
• Personal data processed by public institutions and organizations authorized by law in the context of preventive, protective, and intelligence activities related to national defense, national security, public safety, public order, or economic security.
• Personal data processed by judicial authorities or enforcement agencies in relation to investigations, prosecutions, trials, or enforcement procedures.
• In accordance with the second paragraph of Article 28, the right to request compensation for damages is excluded in the following cases:
  • Personal data processing is necessary for the prevention of crimes or criminal investigations.
  • Personal data processed by the data subject and made public by them.
  • Processing personal data for audit or regulatory duties by authorized public institutions and organizations or public professional organizations, or for disciplinary investigations or prosecutions.
  • Personal data processing required for the protection of the State’s economic and financial interests regarding budget, tax, and financial matters.

Your Identity and Contact Information
Please complete the following fields to allow us to contact you and verify your identity.

• Full Name:
• Turkish ID Number:
• Address:
• E-mail Address:
• Relationship with Our Company:
  • Customer
  • Business Partner / Solution Partner / Consultant
  • Employee
  • Job Applicant
  • Property Owner
  • Former Employee
  • Visitor
  • Third Party / Company Employee
  • Other ………..

Subject of the Request
Please select the subject of your request related to your personal data from the options below:

• Content of the personal data that is thought to be incorrect or incomplete.
• Documents showing the correct and complementary information about your personal data.) | | | 6 | I believe that the reasons for processing my personal data no longer exist, and therefore I request that my personal data be deleted or anonymized. (If this request is made, an explanatory document on why the reasons for processing are no longer valid should be submitted.) | | | 7 | If my personal data is incomplete or incorrect, I request that this be communicated to the third parties to whom the data has been transferred. (If this request is made, the following information and documents should be submitted to the Company:
• Content of the personal data that is thought to be incorrect or incomplete.
• Documents showing the correct and complementary information about your personal data.) | | | 8 | If the reasons for processing my personal data have ceased to exist, I request that this be communicated to the third parties to whom the data has been transferred. (If this request is made, an explanatory document on why the reasons for processing are no longer valid should be submitted.) | | | 9 | I object to the result that has arisen against me by the exclusive analysis of my personal data through automated systems. (If this request is made, the result against you should be explained.) | | | 10 | Other Reasons
  Please specify the details of your request under the Personal Data Protection Law No. 6698. Relevant information and documents should be attached to the application. | |

Our Company’s Procedure for Responding to Applications
In accordance with Article 13 of the PDPL, our company will respond to the requests of the data subject in the shortest time possible, and no later than 30 (thirty) days, free of charge. However, if the processing requires an additional cost, the fee specified by the Board will be charged to the data subject.

To ensure the security of your personal data, the Company may request information from the applicant to verify their identity and authority.

The application may be rejected in the following cases:

1. If it restricts the rights and freedoms of others.
2. If it requires disproportionate effort.
3. If the information is public.
4. If it compromises the privacy of others.
5. If it falls under an exemption in the PDPL.

Please indicate how you prefer to be informed about the response to your application:

• I want it sent to my address.
• I want to collect it in person.
• I want it sent to my e-mail address.

I kindly request that my application be evaluated and that I be informed in accordance with Article 13 of the PDPL.

I declare and undertake that the information and documents I have provided in this application are true and up-to-date, and that I am informed that the Company may request additional information in order to finalize my application, and that I may be required to pay the fee set by the Board if the process incurs a cost.

Applicant’s Name and Surname:
Application Date:
Signature:
Contact Information: