This policy is the supplier, visitor and website of RMA Holding as Data Controller (https://www.rmaholding.com.tr/en/ ) explains the principles for the processing of personal data, which should be known by natural persons whose personal data they process, such as its users.

I. Definitions
Within the scope of this policy;

RMA Holding: RMA Holding A.Ş., the owner of the site,

Relevant person/natural person: Personal data owner,

Recording medium: Any medium containing personal data that is fully or partially automated or processed non-automatically, provided that it is a part of any data recording system,

Site: The website at https://www.rmaholding.com.tr/en,

Data Processor: The natural or legal person who processes personal data on behalf of the data controller, based on the authority given by the data controller,

Data Controller: The natural or legal person who determines the purposes and means of processing personal data and is responsible for the establishment and management of the data recording system,

Law No. 5651: Law on Regulation of Broadcasts on the Internet and Fighting Against Crimes Committed Through These Broadcasts,

Law No. 6698/KVKK: The Law on the Protection of Personal Data,

means.

II. Obtaining and Processing Your Personal Data
1.Processing of Personal Data of Website Users (Online Visitor) and WIFI Service Users

1.1. Processing of Personal Data of Website Users (Online visitors)

Users using the site in order to make requests and suggestions; information in the form of name, surname, e-mail, message, sector and subject of the form https://www.rmaholding.com.tr/en/contact-us They can send it by filling out the form at the link.

Users accept that they share this personal data on the Site completely of their own will. These personal data will only be processed for the purpose of evaluating the requests and suggestions made by the users.

In addition, “traffic information”, which consists of the IP address of the users visiting the Website, the start and end time of the service provided, the type of service used, the amount of data transferred and subscriber identification information, if any, is processed in accordance with the Law No. 5651.

1.2. Processing of Personal Data of WIFI Service Users

In order to provide this service and to comply with the Law No. 5651 and the relevant Secondary legislation; It processes mobile phone number and traffic information.

2. Processing of Suppliers’ Personal Data:

RMA Holding processes the personal data of a real person supplier, supplier employee and/or supplier official for the purpose of monitoring and executing product, service or goods supply processes.

2.1. Personal data processed in procurement processes

RMA Holding processes the following personal data within the scope of procurement processes:

• Identity information such as name, surname, TR identity number regarding the natural person supplier; financial information such as bank details; contact information such as address, e-mail, mobile phone,
• Identity information such as name, surname, TR Identity number regarding the supplier’s authority, photo; Personal data of special nature such as signature in documents such as power of attorney/circular; contact information such as address, e-mail, mobile phone,
• Identity information such as name, surname, TR identity number regarding the supplier employee; Personal information such as SSI payroll, OHS documents; Special categories of personal data such as medical report, criminal record; education/professional experience and experience information such as educational background, certificates; financial information such as bank details; contact information such as address, e-mail, mobile phone.

2.2. Purpose of Processing Personal Data in Procurement Process

• Fulfilling the obligations arising from the legislation such as the Occupational Health and Safety Law, SSI, Labor Law, Turkish Commercial Code, Tax Procedure Law,
• Following and executing contract processes regarding the supply of goods, products or services,
• Ensuring compliance with corporate company rules.

2.3. Methods of Collection and Processing of Personal Data of the Supplier

This personal data;

• Supplier representative, supplier employee or natural person supplier himself,
• Documents such as a circular/power of attorney,
• Communication channels such as e-mail, telephone, website,
• Contract,
• Reference Control Form

meeting with and