Dear Members and Legal Entities,
As CPC Certification Body, we would like to inform you about the “Law No. 6698 on the Protection of Personal Data”, which regulates the obligations of natural and legal persons who process personal data and the procedures and principles to be followed in order to protect fundamental rights and freedoms, especially the privacy of private life, in the processing of personal data, taking into account the security of our valued members and all related natural and legal persons. Detailed information about the ways of collecting personal data, the purposes of processing, legal reasons and your rights are given in the text below.
CPC Certification Body,

DISCLOSURE AND CONSENT TEXT FOR THE PROCESSING OF PERSONAL DATA WITHIN THE SCOPE OF THE LAW ON THE PROTECTION OF PERSONAL DATA
The purpose of this clarification text; Within the scope of the Personal Data Protection Law No. 6698 (“KVKK” or “Law”) - in accordance with Article 10 of the law - is to inform you, as members of the association and all related real and legal persons, in the most transparent way about the collection, processing, processing method and purpose of your personal data, legal reason, to whom and for what purpose it can be transferred and your rights under the relevant law. Pursuant to the Law No. 6698 on the Protection of Personal Data (Law No. 6698), your personal data may be processed by CPC Certification Organization as the data controller in the manner described below and within the limits prescribed by the legislation:

1. Collection, Processing, Collection Method, Purpose of Processing and Legal Reason of Personal Data
All kinds of your personal data that CPC Certification Organization has acquired within the framework of its activities and transactions carried out in line with its purpose; In accordance with the KVKK and within the limits set out in the KVKK, it will be able to obtain, record, store, preserve, update, modify, rearrange, disclose, transfer, transfer, transfer, share, classify, anonymize, anonymize and process in other ways listed in the law, either verbally, in writing or electronically, by automatic or non-automatic methods, as well as by website, social media channels, mobile applications and similar means, in accordance with the KVKK and within the limits set out in the KVKK. Your personal data collected will be processed within the scope of the personal data processing conditions and purposes specified in Articles 5 and 6 of the KVKK for the purposes of ensuring the legal security of persons who are in a relationship with CPC Certification Body, carrying out the necessary work to benefit you from the services offered by CPC Certification Body, customizing the services offered by CPC Certification Body according to your likes, usage habits and needs, determining and implementing the activities and services of CPC Certification Body and carrying out the service policies of CPC Certification Body. Your personal data is collected by CPC Certification Body in written, verbal or electronic media by automatic or non-automatic means in order to provide different services to its members through different channels, to announce the organizations and events organized by CPC Certification Body and to carry out activities within this scope. Your personal data collected for this legal reason may also be processed and transferred for the purposes specified in this text within the scope of the personal data processing conditions and purposes specified in Articles 5 and 6 of the KVKK.

2. To whom and for what purpose the processed personal data can be transferred
Your personal data collected, in line with the objectives of CPC Certification Organization in the Internal Regulation, planning and execution of the working subjects and forms and activity processes specified in the same internal regulation, carrying out the necessary work by our relevant units for the realization of these activities and carrying out the related working processes, carrying out the necessary activities and preparations by our business units and carrying out the relevant business processes in order to benefit our members from our work, planning and execution of the necessary activities on the above-mentioned issues; for the purposes of planning and execution of the necessary activities on the above-mentioned issues; 3. person, natural person and/or legal entities (domestically and abroad), legally authorized public institutions and private persons and our members within the framework of the personal data processing conditions and purposes specified in Articles 8 and 9 of Law No. 6698.

3. Rights of the Personal Data Owner within the Framework of Article 11 of the Personal Data Protection Law
As personal data owners, if you submit your requests regarding your rights in writing to CPC Certification Body, CPC Certification Body will finalize the request free of charge as soon as possible and within thirty days at the latest, depending on the nature of the request. However, if the transaction requires an additional cost, the fee in the tariff determined by the Personal Data Protection Board may be charged by the CPC Certification Body. In this context, as the personal data owner, by applying to the CPC Certification Body a) To learn whether your personal data is being processed, b) Requesting information if your personal data has been processed, c) To learn the purpose of processing your personal data and whether it is used in accordance with its purpose, ç) To know the third parties to whom your personal data is transferred domestically or abroad, d) To request correction if your personal data is incomplete or incorrectly processed, e) Although your personal data has been processed in accordance with the provisions of KVKK and other relevant laws, to request the deletion or destruction of your personal data in case the reasons requiring its processing disappear, f) To request notification of the transactions made in accordance with subparagraphs (d) and (e) above to third parties to whom your personal data are transferred, g) Object to the occurrence of a result against you due to the analysis of your personal data exclusively by automated systems and ğ) In case you suffer damage due to unlawful processing of your personal data, you have the right to demand the compensation of the damage. In accordance with paragraph 1 of Article 13 of the KVKK, you can submit your request to exercise your rights mentioned above to CPC Certification Organization in writing or by other methods determined by the Personal Data Protection Board. You can send it to the address of CPC Certification Body in person with documents identifying your identity, through a notary public or by registered letter with return receipt. On the other hand; With the subparagraph 3 of the provisional first article of the Law No. 6698 on the Protection of Personal Data; We kindly inform you that it is stipulated that the consents obtained in accordance with the law before the publication date of this Law will be deemed to be in accordance with this Law, unless a contrary declaration of will is made within one year.

4. Circumstances that do not require consent
Pursuant to paragraph 2 of Article 5 of the Law No. 6698 on the Protection of Personal Data Pursuant to paragraph 2 of Article 5 of the Personal Data Protection Law No. 6698, provided that it is expressly stipulated in the laws, it is directly related to the establishment or performance of a contract, it is necessary to process the personal data of the parties to the contract, it is mandatory for CPC Certification Body to fulfill its legal obligation as the data controller, and it has been made public by the person concerned, CPC Certification Organization has the right to process personal data without obtaining explicit consent in cases where data processing is mandatory for the establishment, exercise or protection of a right, and data processing is mandatory for the legitimate interests of CPC Certification Organization, which is the data controller, provided that it does not harm the fundamental rights and freedoms of the person concerned.