KIĞILI CLOTHING TRADE INC.

WORKER  /INTERN

INFORMATION TEXT

Update Date: September 2025

Dear Employee/Intern;

We would like to inform you that we take utmost care to ensure the lawful processing and security of the personal data you have shared with us through your job application, in accordance with the Law No. 6698 on the Protection of Personal Data and all related legislation. Therefore, we wish to inform you about our company's corporate identity, the purposes for which your personal data is processed, to whom and for what purposes your processed personal data may be transferred, the method and legal basis for collecting your personal data, and your rights under Article 11 of the Law.

A) Identity of the Data Controller and, if applicable, their Representative

Company Name             Kiğılı Clothing Trading Inc.

Company Headquarters            Aeropark Yenişehir Mah. Osmanlı Blv. No: 11/B 34912, Kurtköy, Pendik/Istanbul

VKN                             : 5620035661

B) Purposes of Processing Your Personal Data

Your personal data and sensitive personal data (hereinafter collectively referred to as "personal data") collected by the Company are processed within the framework of the Company's human resources policies for the purposes of carrying out payroll and personnel-related tasks, proving and maintaining employment relationships, fulfilling obligations under the Labor Law, Social Security Law and legislation regulating working life, ensuring occupational safety, and also ensuring the fulfillment of legal and commercial obligations of the Company and persons with whom the Company has a business relationship, fulfilling legal or technical and administrative obligations with business partners and suppliers; determining and implementing the Company's business strategies, consolidating Human Resources Management and increasing efficiency, and developing and improving the recruitment, training, professional development, and performance principles applied by the Company.

C) Transfer of Processed Personal Data

Your collected personal data is transferred to our business partners, shareholders, business partners and suppliers, legally authorized public institutions and private legal entities, third parties such as education, travel, and accommodation companies for social and cultural purposes or training, and to the companies organizing campaigns with which the Company has agreements and which provide special opportunities to its employees, and other natural and/or legal entities with whom the Company necessarily works to fulfill the campaign, if the employee wishes to participate in such campaigns, and to judicial and administrative authorities and legal advisors upon request, limited to the purposes stated above. At the same time, your personal data may be transferred abroad only to the extent necessary for the business and in accordance with the transfer conditions in Article 9 of the KVKK (Personal Data Protection Law) during business and transactions with our business partners, group companies, and stores located abroad.

C) Method and Legal Basis for Personal Data Collection

Your personal data, which begins to be collected along with your CV during your job application, is collected and processed for the purposes of creating your personnel file, managing your company salary account and benefits, initiating your entry and exit from the workplace, delivering equipment and tools assigned to you for use in your work processes, and evaluating your requests and suggestions submitted to the employer.

The data processing conditions specified in Articles 5 and 6 of Law No. 6698 are as follows:

  • The explicit consent of the relevant person is required.

  • If it is explicitly provided for in the laws,

  • The processing of personal data of the parties to a contract is necessary provided that it is directly related to the establishment or performance of the contract,

  • It is necessary for the data controller to fulfill its legal obligations.

  • The data must have been made public by the data owner themselves.

  • Data processing is necessary for the establishment, exercise or protection of a right,

  • Data processing is necessary for the legitimate interests of the data controller, provided that it does not prejudice the fundamental rights and freedoms of the data subject.

It is processed based on legal grounds.

Your special categories of personal data will be processed in accordance with the measures outlined in the "Adequate Measures to be Taken by Data Controllers in the Processing of Special Categories of Personal Data" published by the Personal Data Protection Authority, and the "Decision No. 2018/10 of the Personal Data Protection Board dated 31/01/2018".

  • With the explicit consent of the relevant person,

  • If it is explicitly provided for in the laws,

  • It must relate to personal data that the data subject has made public and be in accordance with their intention to make it public.

  • It must be necessary for the establishment, exercise or protection of a right.

  • It is necessary for fulfilling legal obligations in the areas of employment, occupational health and safety, social security, social services and social assistance.

It is committed based on legal grounds.

G. Rights of the Data Subject

According to Article 11 of the Personal Data Protection Law (KVKK), the data subject;

  • To find out whether your personal data is being processed,

  • The right to request information regarding the processing of personal data.

  • To learn the purpose of processing personal data and whether it is being used appropriately for that purpose .

  • Knowing the third parties to whom personal data is transferred, whether domestically or internationally.

  • Requesting the correction of personal data if it has been processed incompletely or inaccurately.

  • Requesting the deletion or destruction of personal data within the framework of the conditions stipulated in Article 7 of the law,

  • Requests for the correction, deletion, or destruction of personal data and the notification of the actions taken in accordance with these requests to third parties to whom the personal data has been transferred.

  • The right to object to an outcome that is detrimental to oneself, resulting from the analysis of processed data exclusively through automated systems.

  • The right to claim compensation for damages incurred as a result of the unlawful processing of personal data.

  • You may submit your applications and requests regarding your personal data through the Data Subject Application Form ;

They can exercise their rights.

Claims within the scope of the exercise of these rights include:

  • By sending a signed copy of your ID along with a photocopy to Aeropark, Yenişehir Mahallesi, Osmanlı Bulvarı No:11, B Blok, 34912 Pendik/İstanbul,

  • By applying in person to Kiğılı Giyim Ticaret Anonim Şirketi at the following address: Aeropark, Yenişehir Mahallesi, Osmanlı Bulvarı No:11, B Blok, 34912 Pendik/İstanbul, along with a valid identification document,

  • By signing with a mobile signature or secure electronic signature and sending it to kvkk@kigili.com.tr ,

  • By sending a registered electronic mail (KEP) email to 0562003566100015@hs02.kep.tr using a secure electronic signature or mobile signature ,

By sending an email to kvkk@kigili.com.tr via the email address registered in the Kiğılı Giyim Ticaret Anonim Şirketi system .

This can be forwarded to Kiğılı Giyim Ticaret Anonim Şirketi.

According to the Communiqué on the Procedures and Principles for Applications to the Data Controller, the Data Subject must include the following information in their application: name, surname, signature (if the application is in writing), Turkish Republic Identity Number (or passport number if the applicant is a foreigner), residential or business address for notification purposes, email address (if any), telephone number, fax number, and information regarding the subject of the request.

The relevant person must clearly and understandably state the request in their application, which should include explanations regarding the right they wish to exercise as mentioned above. All relevant information and documents must be attached to the application.

While the subject of the request must relate to the applicant personally, if acting on behalf of someone else, the applicant must be specifically authorized to do so and this authorization must be documented (power of attorney). Furthermore, the application must include identity and address information, and supporting documents verifying identity must be attached.

Requests made by unauthorized third parties on behalf of another person will not be considered.

Your requests regarding your personal data will be evaluated and answered within a maximum of 30 days from the date we receive them. If your application is rejected, the reasoned reasons for rejection will be communicated to you via email or postal service to the address you provided in your application, or, if possible, through the same method you used to submit your request.