Information Text Regarding the Processing of Personal Data

Data Controller

KRGL Tekstil Sanayi ve Ticaret Limited Şirketi (“HOX'S” or “Company”)

As HOX'S, Personal Data Protection Law No. 6698 (“KVKK”) and relevant legislation and the processing, storage and processing of your personal data within the framework of our activities arising from legal regulations. In order to enlighten the data owners regarding the transfer of this Personal Data, we have prepared this Information Text on the Processing of Personal Data. We have prepared (“Information Text”).

In addition, you can visit our website, mobile site and/or mobile application. About the cookies and SDKs (Software Development Kit) used if you detailed information Cookie It is included in the Policy . Personal data processed through them The data is explained in this Information Text.

The Information Text will be valid as of the date it is published by HOX'S. HOX'S, Can make changes to the Information Text at any time if necessary. Changes to be made, Lighting Text of the text at https://www.hoxs.com/pages/kvkk It becomes valid immediately upon its publication.

Storage of Personal Data, Your Rights and Application

Storage and Disposal

Our company has a Storage and Destruction Policy for storing and deleting personal data. has created. Storage and destruction of your personal data are carried out within the scope of this policy. Accordingly, if a period of time is specified for the storage of data in the KVKK or relevant laws and other relevant legislation, the said The data in question must be stored for at least this period.

In case of a possible court request or an administrative authority authorized by law, the relevant data Possibilities such as late receipt of your request or the occurrence of a dispute in which we may be a party. By adding a period of 6 months to 1 year to the periods stipulated in the legislation for the storage of your data, The storage period of the data is determined and at the end of the determined period, the data in question is deleted and destroyed. or anonymized.

If there is no period specified in the legislation for the retention period of the data we process the termination of our legal relationship, taking into account possible disputes as a requirement of the relationship between us. Once the 10-year statute of limitations period has passed, your data will be deleted without your request. is destroyed or made anonymous.

All of the processing conditions for personal data have been eliminated or as declared by us. or if the storage period specified within the scope of the legislation has expired, your data will be processed on the first periodic destruction date or at the latest within 6 months. It is ex officio deleted, destroyed or made anonymous within the month. Deletion of your data for a valid reason If you make a request, your data will be processed within 30 days at the latest, as far as legally possible. is deleted. Deletion or destruction of your data, the retention period of which is specified in the legislation, before the stipulated periods. If you request it to be done, your request will not be fulfilled.

Your rights

Regarding your personal data within the scope of KVKK and relevant legislation...

• Learning whether your personal data is being processed or not

• Requesting information if your personal data has been processed

• Learning the purpose of processing personal data and whether they are used for their intended purpose

• Knowing the third parties to whom your personal data is transferred domestically or abroad

• Request correction of your personal data if it is incomplete or incorrectly processed

• Requesting the deletion or destruction of your personal data within the framework of the conditions stipulated in the KVKK legislation

• Request the correction of incomplete or inaccurate data and the deletion or destruction of your personal data. When you do so, request that this situation be notified to third parties to whom we transfer your personal data.

• By analyzing the processed data exclusively through automatic systems, the person himself objecting to an unfavorable outcome

• If you suffer damage due to illegal processing of personal data, we will ensure that this damage is remedied. do not demand

...you have the rights.

Application

If you wish, you can submit your applications and requests regarding your personal data to the Relevant Person Application By filling out the form...

• Esenyalı Mah. with wet signature and ID photocopy. Yanyol Cad. Varyap Plaza, No: 61/40 34903 By sending to Pendik/Istanbul address

• Applying in person to KRGL with a valid ID document

• By using a registered electronic mail (KEP) address and secure electronic signature or mobile signature. By sending it to our registered e-mail address krgl.tekstil@hs01.kep.tr

• The e-mail address previously reported to HOX'S by the Relevant Person and registered in our system by sending it to our address kvkk@hoxs.com

...you can forward it to HOX'S.

In accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller, the Relevant Person, Name, surname, signature if the application is written, TR ID number, (if the applicant is a foreigner) passport number in case), residence or workplace address subject to notification, e-mail address subject to notification, if any It is mandatory to include address, telephone number and fax number and information regarding the subject of the request.

The data owner has the right to do and use the above-mentioned rights. clearly and understandably the matter requested in the application, which includes explanations regarding the right requested should be specified. Information and documents regarding the application must be attached to the application.

The Relevant Person shall make and request to exercise the above-mentioned rights. In the application, which includes explanations regarding the right, the requested issue must be stated clearly and understandably. To apply Relevant information and documents must be added to the application.

Although the subject of the request must be related to the applicant personally, the request may be made on behalf of someone else. If action is taken, the applicant must be specifically authorized in this regard and this authority must be documented (special power of attorney) is required. In addition, the application must contain identity and address information and an identity verification document must be attached to the application. documents must be attached.

Requests made by unauthorized third parties on behalf of someone else will not be taken into consideration.

Your claims regarding your personal data are evaluated and delivered to the relevant department. It will be answered within 30 days at the latest from the date. If your application is evaluated negatively, reasoned rejection If possible, send the request by e-mail or postal mail to the address you specified in the application. It is communicated to you through the method in which it was made.