Kişisel Verilerin Korunması Kanunu

NFA Aluminum Personal Data Protection and Processing Policy

• Purpose and Scope

This policy aims to establish the procedures and principles for the protection of personal data processed by NFA Aluminum ("Company") and the lawful processing, recording, storing, updating, transferring to third parties, and destruction of such data. This policy has been prepared in compliance with the Law on the Protection of Personal Data No. 6698 ('LPPD') and related regulations.

• Conditions for Processing Personal Data

The Company can process personal data by obtaining the explicit consent of the relevant individuals or in the presence of other conditions for processing specified in Articles 5 and 6 of the LPPD.

• Collection, Processing of Personal Data and Purposes of Processing

The Company collects personal data from relevant persons such as customers, potential customers, employees, and job applicants as required by its activities and processes this data for purposes such as providing our services, promoting our products, marketing activities, and conducting human resources processes.

• Transfer of Personal Data

Personal data may be transferred to third parties in Turkey and abroad, related to the purposes of processing and with adequate security measures, in cases envisaged by the LPPD and related legislation.

• Rights of the Personal Data Subject

Personal data subjects have the following rights under Article 11 of the LPPD:

• To learn whether their personal data is processed,
• To request information if their personal data has been processed,
• To learn the purpose of processing personal data and whether they are used appropriately for their purpose,
• To know the third parties in the country or abroad to whom personal data has been transferred,
• To request correction if personal data is processed incompletely or inaccurately,
• To request the deletion or destruction of personal data in case the reasons necessitating their processing cease to exist despite being processed in accordance with the LPPD and other applicable laws,
• To request notification of the operations made to third parties to whom personal data has been transferred,
• To object to an unfavorable outcome by analyzing the processed data exclusively through automated systems,
• To claim compensation for the damages in case of loss due to unlawful processing of personal data.
   
• Security and Confidentiality

The Company takes the necessary technical and administrative measures to ensure the security of personal data.

• Enforcement and Update of the Policy

This policy comes into force on the date of its publication. The Company may update the policy as necessary.