Information Text Regarding the Processing and Protection of Personal Data within the Scope of Membership Application Form

---

This privacy notice has been prepared by the Composite Manufacturers Association in accordance with the Law No. 6698 on the Protection of Personal Data, solely for individuals who have completed the application form. This notice does not apply to legal entities.

As the Composite Manufacturers Association, we take utmost care to ensure the confidentiality and security of the personal data of all individuals with whom we come into contact, in accordance with the Constitution of the Republic of Turkey, Law No. 6698 on the Protection of Personal Data, and other relevant legislation. Your personal data is processed by us, in our capacity as "data controller" pursuant to the provisions of Law No. 6698 on the Protection of Personal Data and related legislation, within the framework outlined below.

1. Who is responsible for the security and processing of your personal data?

As the Composite Manufacturers Association, we are responsible for the security of all personal data you provide to us, in our capacity as "data controller" in accordance with the Law No. 6698 on the Protection of Personal Data. The Composite Manufacturers Association was established in accordance with the Law No. 5253 on Associations and is located within the borders of the Republic of Turkey.

Composite Manufacturers Association

Yenişehir, Ankara Cd. No:360 Office Plaza 405 Floor:3 Apartment:68, 34912 Pendik/Istanbul

+90 (216) 685 12 68

info@kompozit.org.tr

www.kompozit.org.tr/tr/bize-ulasin www.kompozit.org.tr

2. For what purposes are your personal data processed?

Your personal data;

• In order to fulfill the obligations imposed upon us by the legislation, primarily the Associations Law No. 5253,
• In order for the association's activities to be carried out,
• Ensuring data security,
• Monitoring and disseminating information about developments related to the sector, members, and the association.

It is committed based on at least one of its purposes.

3. To Whom and for What Purposes May Your Personal Data Be Transferred?

Persons required for the conduct of the activities

Your personal data may be shared with auxiliary service providers, banks, and third parties who perform technical, logistical, and similar operations on our behalf, only for the purpose of carrying out the association's activities and to the extent that this is appropriate to the nature of the activity. These third parties are limited to those who are essential to have access to the relevant information for the conduct of the association's activities.

Individuals legally required to be shared

In accordance with the Associations Law No. 5253, to which we are subject, we are obligated to transfer certain personal data to public institutions and organizations. Within the scope of this obligation, your personal data may be transferred – limited only to the relevant individual or institution – in cases where it is explicitly provided for in the laws, where there is a lawful judicial or administrative order, and/or where it is necessary for the fulfillment of our legal obligations.

Consulting and support service providers

Your personal data may be transferred to third parties from whom we receive support in areas such as storage, archiving, IT support, security, and call centers; to auxiliary service providers with whom we cooperate and/or receive services; to banks and financial institutions; to law firms and consulting firms from whom we receive support in legal, tax, and similar areas; and to other related parties and authorized institutions and organizations where the transfer is necessary for the purposes specified, provided that it is explicitly provided by law, is directly related to the establishment or performance of the contract, is necessary for the fulfillment of our legal obligations, or is necessary for the protection of your or our association's legitimate interests, provided that it does not harm your fundamental rights and freedoms, and only if the transfer of data is necessary for the fulfillment of these purposes.

When we share your information, we will always share it securely, and we will require that such third parties not use your personal information for their own business purposes unless you have explicitly given them permission to do so.

4. How and on what legal grounds are your personal data collected?

Your personal data, www.kompozit.org.tr Personal data is collected through the membership application form located at [address]. The information contained in the application form is necessary for evaluating your registration application, carrying out the association's activities, and fulfilling our obligations arising from legislation. In this context, the collection of your personal data is based on at least one of the following legal grounds, appropriate to the nature of the data:

• If it is explicitly provided for in the laws, (Law No. 6698, Article 5/2-a)
• The processing of personal data of the parties to a contract is necessary provided that it is directly related to the establishment or performance of the contract., (Law No. 6698, Article 5/2-c)
• It is necessary for the data controller to fulfill its legal obligations., (Law No. 6698, Article 5/2-c)
• Data processing is necessary for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject. (Law No. 6698, Article 5/2-f)

5. What Rights Do You Have Regarding Your Personal Data?

In accordance with the Law No. 6698 on the Protection of Personal Data, every natural person may apply to the data controller regarding the following:;

a) To find out whether personal data is being processed,

b) Requesting information regarding the processing of personal data,

c) To learn the purpose of processing personal data and whether it is being used appropriately for that purpose.,

c) Knowing the third parties to whom personal data is transferred, whether domestically or internationally.,

d) Requesting the correction of personal data if it has been processed incompletely or incorrectly.,

e) Requesting the deletion or destruction of personal data when the reasons requiring its processing cease to exist.,

f) Requesting that the actions taken pursuant to clauses (d) and (e) be notified to third parties to whom personal data has been transferred,

g) The right to object to a result that is detrimental to the individual, arising solely from the analysis of processed data by automated systems.,

g) The right to claim compensation for damages incurred as a result of the unlawful processing of personal data.,

They have rights.

To exercise your rights

You can submit your request by filling out our application form located at [address] and delivering it in person with your wet signature to Ankara Caddesi, 360 Office Plaza 405 Kat:3 Daire:68 Yenişehir, Pendik / İSTANBUL, or kompozitsanayicileridernegi@hs01.kep.tr You can send it to the registered email address with a secure electronic signature.

Additionally, if you have previously provided us with an email address and it has been registered in the Composite Manufacturers Association system, you can use that registered email address. info@kompozit.org.tr You can also send the application form to [email address]. However, applications made in this way can only include information that can be associated with the email address previously registered in the Composite Manufacturers Association systems.

Your request must clearly state the right/request you wish to exercise, along with your identification information, and include all relevant information and documents, along with necessary explanations.

Requests that meet the required criteria will be processed within 30 (thirty) days, depending on the nature of the request, and the result will be communicated to you in writing or electronically, in accordance with the feedback method you selected in your request.

Composite Manufacturers Association

---

---