KIĞILI CLOTHING TRADE INC.

JOB APPLICANT / INTERN APPLICANT

INFORMATION TEXT

Update Date: September 2025

Dear Employee and Intern Candidate;

We would like to inform you that we take utmost care to ensure the lawful processing and security of the personal data you have shared with us through your job application, in accordance with the Law No. 6698 on the Protection of Personal Data and all related legislation. Therefore, we wish to inform you about our company's corporate identity, the purposes for which your personal data is processed, to whom and for what purposes your processed personal data may be transferred, the method and legal basis for collecting your personal data, and your rights under Article 11 of the Law.

A) Identity of the Data Controller and, if applicable, their Representative

Company Name : Kiğılı Giyim Ticaret Anonim Şirketi

Company Headquarters : Aeropark Yenişehir Mah. Osmanlı Blv. No: 11/B 34912, Kurtköy, Pendik/Istanbul

VKN : 5620035661

B) The Purpose for Which Personal Data Will Be Processed

We need your job application to be evaluated by us.

Your personal data contained in the job application forms and resumes (CVs) you have submitted through this channel is processed for the following purposes: evaluating your suitability for the job position you applied for, conducting employee and intern candidate selection processes, assessing your suitability for the position you applied for, considering your resume for other positions if your application is unsuccessful and with your explicit consent, preparing your employment contract and personnel file if your application is successful, ensuring information security and notifying you about the outcome of your job application process, conducting interviews in physical and online environments, and preparing your employment contract if the interviews are successful.

C) To Whom and for What Purpose the Processed Personal Data May Be Transferred

Your personal data, which we process for the purpose of evaluating your job applications to work in our stores under the "Kiğılı" and "Abdullah Kiğılı" brands, at our company headquarters or affiliated units and warehouses, will only be transferred to authorized institutions and organizations if requested by them within the scope of a judicial or administrative prosecution and investigation, to the relevant educational institution for the purpose of notifying internship candidates, and to our consulting law firm for the completion of legal procedures in case of termination of your employment contract. Apart from this, personal data relating to our job candidates will not be transferred to any third party or institution.

Please note that if your resumes are sent to our company via applications with foreign databases and/or overseas headquarters, or via email addresses powered by Microsoft infrastructure, the said data will be transferred abroad by these companies in our capacity as "data processors".

C) Method and Legal Basis for Personal Data Collection

The phone number and/or email address of the person(s) you have introduced as a reference; your name, surname, phone number, company/title information; your email address; and, if you wish to provide it at this stage, your gender, age (and your full date of birth if you wish to provide it), marital status (if you wish to provide it for the purpose of arranging suitable positions and working hours), whether you possess a driver's license (if required by the position you are applying for), your education level and educational history, and your professional experience are collected through the CVs you have submitted to us. Your personal data contained in the information in your CV

  • If it is explicitly provided for in the laws.

  • The processing of personal data belonging to the parties to a contract is necessary provided that it is directly related to the establishment or performance of the contract.

  • It is necessary for the data controller to fulfill its legal obligations.

  • It must have been made public by the person concerned themselves.

  • Data processing is necessary for the establishment, exercise, or protection of a right.

  • Data processing is necessary for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject.

D) Rights Listed in Article 11 of Law No. 6698 on the Protection of Personal Data

According to Article 11 of the Personal Data Protection Law (KVKK), the data subject;

  • To find out whether your personal data is being processed,

  • The right to request information regarding the processing of personal data.

  • To learn the purpose of processing personal data and whether it is being used appropriately for that purpose .

  • Knowing the third parties to whom personal data is transferred, whether domestically or internationally.

  • Requesting the correction of personal data if it has been processed incompletely or inaccurately.

  • Requesting the deletion or destruction of personal data within the framework of the conditions stipulated in Article 7 of the law.

  • Requests for the correction, deletion, or destruction of personal data and the notification of the actions taken in accordance with these requests to third parties to whom the personal data has been transferred.

  • The right to object to an outcome that is detrimental to oneself, resulting from the analysis of processed data exclusively through automated systems.

  • The right to claim compensation for damages incurred as a result of the unlawful processing of personal data.

    They can exercise their rights.

    Claims within the scope of the exercise of these rights include:

  • You may submit your applications and requests regarding your personal data through the Data Subject Application Form ;

  • By sending a signed copy of your ID along with a photocopy to Aeropark, Yenişehir Mahallesi, Osmanlı Bulvarı No:11, B Blok, 34912 Pendik/İstanbul,

  • By applying in person to Kiğılı Giyim Ticaret Anonim Şirketi at the following address: Aeropark, Yenişehir Mahallesi, Osmanlı Bulvarı No:11, B Blok, 34912 Pendik/İstanbul, along with a valid identification document,

  • By signing with a mobile signature or secure electronic signature and sending it to kvkk@kigili.com.tr ,

  • By sending a registered electronic mail (KEP) email to 0562003566100015@hs02.kep.tr using a secure electronic signature or mobile signature ,

    By sending an email to kvkk@kigili.com.tr via the email address registered in the Kiğılı Giyim Ticaret Anonim Şirketi system .

This can be forwarded to Kiğılı Giyim Ticaret Anonim Şirketi.

According to the Communiqué on the Procedures and Principles for Applications to the Data Controller, the Data Subject must include the following information in their application: name, surname, signature (if the application is in writing), Turkish Republic Identity Number (or passport number if the applicant is a foreigner), residential or business address for notification purposes, email address (if any), telephone number, fax number, and information regarding the subject of the request.

The relevant person must clearly and understandably state the request in their application, which should include explanations regarding the right they wish to exercise as mentioned above. All relevant information and documents must be attached to the application.

While the subject of the request must relate to the applicant personally, if acting on behalf of someone else, the applicant must be specifically authorized to do so and this authorization must be documented (power of attorney). Furthermore, the application must include identity and address information, and supporting documents verifying identity must be attached.

Requests made by unauthorized third parties on behalf of another person will not be considered.

Your requests regarding your personal data will be evaluated and answered within a maximum of 30 days from the date we receive them. If your application is rejected, the reasoned reasons for rejection will be communicated to you via email or postal service to the address you provided in your application, or, if possible, through the same method you used to submit your request.