1. Purpose

ARTIM METAL INDUSTRY AND TRADE INC. (hereinafter referred to as "Artım Metal") is committed to managing the protection and processing of personal data in accordance with Law No. 6698 on the Protection of Personal Data ("PDPL") and related legislation. This policy has been prepared to regulate the collection, processing, storage, and protection of personal data and to safeguard the rights of data subjects.

2. Scope

This policy covers all personal data belonging to real persons, including Artım Metal’s customers, employees, suppliers, business partners, and users visiting our website. The policy applies to all company activities and data processing operations.

3. Collected Personal Data

Artım Metal may collect personal data in the following categories while conducting its activities:

• Identity information (name, surname, T.R. identity number),
• Contact information (email, phone number, address),
• Job application information (resume, education details),
• Data collected via cookies (IP address, browser type),
• Security camera recordings (image data).

4. Purposes of Processing Personal Data

Personal data is processed in compliance with the PDPL for the following purposes:

• Providing and enhancing products and services,
• Managing contract processes,
• Fulfilling legal obligations,
• Conducting human resources and employment processes,
• Ensuring security and operational processes.

5. Measures Taken to Protect Personal Data

Artım Metal implements the following technical and administrative measures to prevent unlawful processing and unauthorized access to personal data:

• Use of encryption and security software for data protection,
• Establishment of access authorization procedures,
• Training employees on personal data protection,
• Regular monitoring of security camera systems,
• Implementation of rapid response procedures in case of data breaches.

6. Transfer of Personal Data

Personal data may only be transferred under the conditions specified in the PDPL and in the following cases:

• To authorized public institutions as required by legal obligations,
• To business partners and suppliers for the execution of business processes,
• To domestic or foreign third parties upon obtaining explicit consent.

7. Rights of Data Subjects

Under the PDPL, data subjects have the following rights:

• To learn whether their personal data is being processed,
• To request information if their data has been processed,
• To inquire about the purpose of processing and its compliance with that purpose,
• To request correction of incomplete or inaccurate data,
• To request deletion or destruction of their data.

You can exercise these rights by submitting a written request to elk.kisiselverilerim@artimmetal.com.

8. Data Retention and Destruction Processes

Personal data is retained for the duration required by the purpose of processing. Upon the expiration of legal retention periods or when the purpose of processing ceases, the data is deleted, destroyed, or anonymized in accordance with the PDPL.

9. Enforcement and Updates of the Policy

This policy takes effect upon its publication on Artım Metal’s website. It may be periodically updated in line with legal regulations or company requirements.