Personal Data Protection and Processing Policy

Kuasar Marin Engineering Joint Stock Company

Effective Date: 5 May 2025

1. Introduction

1.1 Purpose of the Policy

Within the scope of the Law on the Protection of Personal Data No. 6698 (“Law”), Kuasar Marin Engineering Joint Stock Company (“Company”) considers the protection and lawful processing of personal data as a primary priority. We adhere to this principle in all our activities.

In accordance with Article 10 of the Law, this Personal Data Protection and Processing Policy (“Policy”) has been prepared to inform the public and to explain the administrative and technical measures implemented by our Company regarding the processing and protection of personal data.

1.2 Scope

This Policy sets forth the principles of personal data processing by the Company. It covers all personal data processing activities carried out by the Company and all data subjects, excluding Company employees. This includes customers, potential customers, employee candidates, visitors, and third parties.

1.3 Definitions

• Personal Data: Any information relating to an identified or identifiable natural person.
• Special Categories of Personal Data: Data subject to special protection under the Law, such as race, ethnic origin, political opinion, religion, health data, biometric and genetic data.
• Data Controller: The person or entity that determines the purposes and means of processing personal data.
• Data Processor: The person or entity that processes personal data on behalf of the data controller, based on its authorization.1.4 Effective Date
  

This Policy entered into force on 18.06.2022. Any updates will be published on the Company’s website (www.kuasarmarin.com).

2. Information on Personal Data Processing

2.1 Purposes of Processing

Your personal data may be processed by the Company for the following purposes, in accordance with Articles 5 and 6 of the Law:

• To provide products and services, conduct sales processes, and manage customer relations,
• To plan and execute human resources processes (recruitment, training, performance management, etc.),
• To carry out commercial activities, supply chain, and operational processes,
• To plan and implement marketing, advertising, and promotional activities,
• To ensure the legal, technical, and commercial security of the Company.
  

2.2 Categories of Personal Data

The categories of personal data processed by our Company include:

• Identity information (e.g., ID card, passport)
• Contact information (phone, address, e-mail)
• Location information
• Customer and transaction data
• Financial information
• Physical security data (e.g., camera recordings)
• Employee candidate information
• Marketing and reputation management information
• Request/complaint management data
• Special categories of personal data (as defined by the Law)

3. Principles of Personal Data Processing

The Company processes personal data in accordance with Article 4 of the Law and the following principles:

• Lawful and fair processing,
• Accurate and, where necessary, up-to-date,
• Specific, explicit, and legitimate purposes,
• Relevant, limited, and proportionate to the purpose,
• Retained only for the period stipulated in the legislation or required for the purpose of processing.

4. Transfer of Personal Data

In compliance with Articles 8 and 9 of the Law, personal data may be transferred to our business partners, shareholders, legally authorized public institutions, and private entities, provided that necessary security measures are taken.

Transfers abroad may only occur to countries declared to have adequate protection by the Personal Data Protection Board or, where adequate protection is not available, to countries where the relevant data controllers provide a written commitment of adequate protection and the Board has granted permission.

5. Rights of Data Subjects

Pursuant to Article 11 of the Law, as a data subject you have the following rights:

1. To learn whether your personal data are processed,
2. To request information if processed,
3. To learn the purpose of processing and whether they are used appropriately,
4. To know the third parties to whom data are transferred domestically or abroad,
5. To request correction if incomplete or inaccurate,
6. To request deletion or destruction if the reasons requiring processing no longer exist,
7. To request notification of corrections or deletions to third parties,
8. To object to results arising against you from exclusively automated processing,
9. To request compensation if you suffer damages due to unlawful processing.
   

Applications regarding these rights may be submitted to the Company by completing the “Data Subject Application Form” available at www.kuasarmarin.com.

6. Retention and Deletion of Personal Data

Personal data are retained only for as long as required by legislation or for the purpose of processing. Once the retention period has expired or the purpose of processing no longer exists, the data are deleted, destroyed, or anonymized.

7. Contact

Kuasar Marin Engineering Joint Stock Company

Istanbul Technology Development Zone, Sanayi Mah. Teknopark Bulvarı,
No:1/7C-201, 34906 Pendik / Istanbul, Turkey

Tel: +90 216 493 22 52
E-mail: kvkk@kuasarmarin.com
KEP: kuasarmarin@hs01.kep.tr

‍

‍

‍