KOZMO KIMYA INDUSTRY AND FOREIGN TRADE LTD. CO.

EMPLOYEE CLARIFICATION TEXT AND EXPLICIT CONSENT STATEMENT

This clarification text has been prepared by KOZMO KIMYA (“KOZMO KIMYA”) as the data controller within the scope of Article 10 of the Law on the Protection of Personal Data No. 6698 (“Law”) and the Communiqué on the Principles and Procedures to be Followed in the Fulfillment of the Obligation to Inform.

MERSIS Number:
Address:
Phone: Fax: E-mail:

KOZMO KIMYA processes the following personal data of its employees: name, surname, mother and father’s name, date of birth, place of birth, marital status, ID card, driver’s license, Turkish ID number, passport number, temporary Turkish ID number, gender, email address, contact address, registered electronic mail address (KEP), mobile/phone number, location, payroll information, disciplinary investigation, records of employment entry and exit, CV information, performance evaluation reports, military service status, reference information, legal procedures, visual and audio records, camera recordings, risk management, bank account number, IBAN number, diploma information, attended courses, in-service training information, certificates, transcript information, photograph, criminal conviction and security measures, number of children, family register, spouse’s employment information, children’s education and age information, department, working style, profession, information on the last company worked at, professional card information, personal health data, disability information, blood type, devices and prostheses used, laboratory and imaging results, test results, examination data, prescription information, birth and death certificates of family members or relatives, facial recognition system data, IP address information, website login/logout information, password and credential information, signature, application form data, incident management information, automatic participation pension scheme (BES), social security institution data, audit and inspection information, request/complaint management data, vehicle information, compliance information.

These are processed for the following purposes: emergency management, information security, management of employee benefits and perks, audit/ethics operations, training activities, access rights, finance and accounting operations, assignment processes, internal audit/investigation/intelligence operations, communication activities, occupational health and safety operations, collection and evaluation of suggestions to improve business processes, ensuring business continuity, logistics operations, procurement/sales/production and operational processes, performance evaluation, archiving and storage, salary policy management, contract processes, fulfilling obligations arising from employment contracts and legislation, legal compliance, ensuring physical space security, legal affairs management, planning of HR processes, execution/supervision of business activities, tracking of requests/complaints, ensuring the safety of assets and resources, providing information to authorized individuals and institutions, management activities, employee satisfaction and loyalty, event and organization management, risk management, operational security of the data controller, and talent/career development activities.

The aforementioned personal data is collected verbally, in writing, or electronically based on the legal grounds specified in Article 5 of the Law — namely, “necessity for the establishment and performance of the contract” and “legitimate interests of the data controller” — for purposes such as creation of a personnel file, building entry/exit tracking, audits and inspections, compliance with legislation and procedures, legal representation by attorneys in courts or disputes, occupational health and safety practices, salary and advance payments, employee attendance tracking systems, company vehicle tracking, business and operational processes, product development, and quality management. Additionally, based on “explicit consent,” data is processed for purposes such as implementing facial recognition systems, organizing and conducting events, employee communication activities, employee satisfaction surveys, and human resources processes (development and career planning). These data are processed fully or partially by automated means and are protected through all necessary technical and administrative measures. In case of withdrawal of explicit consent, data processing activities are halted.

For the purposes mentioned above, data may be shared with natural persons or private legal entities, shareholders, business partners, suppliers, and authorized public institutions and organizations.

---

CLARIFICATION STATEMENT

I hereby declare that I have been duly informed about all matters stated above, that I have read and understood KOZMO KIMYA’s Personal Data Protection and Processing Policy, and that I am aware of my rights under Article 11 of the Law No. 6698.

Data Subject Full Name: ……………………………….. Turkish ID No: ……………………………..

Date: …./….. /……….. Signature:

---

EXPLICIT CONSENT STATEMENT

I hereby give my explicit consent to the processing of my personal data, including data collected through the facial recognition system, in a manner that is relevant, limited, and proportionate to the purpose of processing, based on the necessity for the establishment and performance of the contract, obtaining of explicit consent, and legitimate interests of the data controller, whether collected verbally, in writing, or electronically.

☐ I Accept with My Explicit Consent ☐ I Do Not Accept

Data Subject Full Name: ……………………………….. Turkish ID No: ……………………………..

Date: …./….. /……….. Signature: