Mymach corporate information page

Mymach Inc. Profile

Trade Name: Mymach Makina Sanayi Teknoloji ve Ticaret Anonim Şirketi

Central Address: Mimar Sinan Mahallesi 1421.Sokak No:51  Konak/İZMİR

Trade Registry Information:

• Registered Chamber of Commerce: İzmir Chamber of Commerce

• Trade Registry Number: 2315779

Tax Information:

• Tax Office: Kordon Tax Office

• Tax Identification Number: 6271612221

Contact Information:

• Phone: 0232 216 15 87

• E-mail: info@mymach.com.tr

• Website: www.mymach.com.tr

Personal data protection and information text

1. Identity of the Data Controller

• Trade Name: Mymach Makine Sanayi Teknoloji ve Ticaret Anonim Şirketi

• Central Address: Mimar Sinan Mahallesi 1421.Sokak No:51  Konak/İZMİR

• Phone: +90 0232 216 15 87

• E-mail: info@mymach.com.tr

• Website: www.mymach.com.tr

2. The Purpose of Processing Personal Data

As Mymach Machinery Industry Technology and Trade Inc., we process your personal data for the following purposes:

• Membership Registration and Account Management: Your first name, last name, email address, and password information are processed on our website for the purpose of creating a membership, managing your membership account, and enabling secure shopping through your account.

• Execution of Product/Service Sales Processes: The collection, processing, completion of payment transactions, packaging, shipping, and delivery of the product and service orders you place through our e-commerce site require the processing of your first name, last name, email address, phone number, company name (if applicable), tax identification number (if applicable), and delivery and billing address information (address, city, district, postal code, country).

• Management of Delivery and Communication Processes: To ensure the smooth delivery of the products and services you have purchased, to inform you about the status of your order (via email or SMS), and to contact you regarding order details or potential issues (such as a phone call), your delivery and billing address information along with your contact details (email, phone number) are processed.

• Customer Service and Support: Your questions, requests, suggestions, and complaints that you communicate to us through our website or other communication channels are processed in order to respond to you and provide effective customer support. This includes processing your personal data such as identity (first name, last name), contact (email, phone), request/complaint content, and other relevant personal data as necessary based on the situation.

• Event Management and Participation: Your information such as name, surname, email address, and phone number is processed to ensure your participation in paid or free events published on our website, manage event registration processes, and provide information before and after the event. Additional information (profession, company name, etc.) may be requested depending on the nature of the event.

• E-Newsletter Subscription and Marketing Activities: Upon your request, your email address is processed to inform you about our company's products and services, current campaigns, announcements, and industry developments. For this purpose, personal data processing is carried out only with your explicit consent.

• Human Resources Processes and Evaluation of Job Applications: To receive and evaluate job applications made through the "Open Positions" or "Career" module on our website, to carry out placement processes for suitable positions within the framework of our Company's Human Resources Policies, to conduct reference checks, and to communicate with you, your identity (name, surname, date of birth, T.C. Identity No), contact information (address, phone, email), education, professional experience, competencies, reference information, photo, and other personal data you share in the application are processed.

• Ensuring Website Functionality and Security: To ensure our website operates smoothly, prevent malicious activities and cyber attacks, and maintain security within the framework of our Information Security Policy, technical data (IP address, device information, browser information), navigation data, and data collected through cookies are processed. Detailed information about these cookies can be found in our Cookie Policy.

• Fulfillment of Legal Obligations: Your personal data is processed in order to fulfill our storage, reporting, and information obligations as determined by the relevant legal regulations (Tax Procedure Law, Turkish Commercial Code, Law on the Protection of Consumers, Labor Law, etc.).

• Dispute Resolution and Risk Management: Your personal data is processed for the purpose of resolving potential legal disputes, managing potential risks within the framework of our Company's Risk Management Policy and Operational Policies, and protecting and defending the rights of our Company.

3. Method of Collection and Legal Basis of Personal Data

Your personal data is collected in accordance with the principles set forth in the KVKK, for the purposes mentioned above, either fully or partially through automated means (such as forms filled out on the website, cookies, email, phone, etc.) and/or non-automated means (through physical documents).

The legal grounds on which we rely for the processing of your personal data are as follows:

• Establishment and Performance of the Contract: The establishment and performance of the membership contract and the distance sales contract (for example, fulfillment of the order, provision of membership services).

• Explicit Provision in Laws: There must be a clear regulation regarding data processing in the relevant laws (for example, the Tax Procedure Law, the Law on the Protection of Consumers).

• The Data Controller's Legitimate Interest: The processing of data is necessary for our legitimate interests, such as protecting our legal rights, ensuring cybersecurity, analyzing website performance, and improving our services, provided that it does not harm your fundamental rights and freedoms.

• Explicit Consent: In situations that do not rely on the legal reasons mentioned above, your explicit consent must be obtained (for example, for e-newsletter subscriptions for marketing and advertising activities, storing job application information beyond the legal retention period).

Data Processing Infrastructure (Odoo Emphasis):

Our company uses the Odoo software infrastructure and services for the storage, processing, and management of personal data obtained through our website and e-commerce processes. Under the services provided by Odoo, your data is processed in accordance with Odoo's data processing standards and privacy policy. You can find detailed information about Odoo's data security and privacy principles at https://www.odoo.com/page/privacy.

4. To Whom and For What Purpose Personal Data May Be Transferred

Your personal data collected by Mymach Makina Sanayi Teknoloji ve Ticaret Anonim Şirketi may be transferred in accordance with the processing purposes specified above and within the framework of the personal data processing conditions and purposes stated in Articles 8 and 9 of the KVKK, to the following categories of persons and for the following purposes:

• To Relevant Departments and Units Within the Company: The management of order processes, the provision of customer services, the execution of human resources processes, the maintenance of financial records, and the management of internal audits and operational processes under the Information Security Policy and Operational Policies are communicated to our relevant departments (for example; Sales, Marketing, Customer Services, Human Resources, Accounting, IT departments) for the purpose of ensuring and coordinating internal workflows within the Company.

• To Business Partners and Suppliers: In order to fulfill Company activities such as the delivery of the products and services you have purchased (Shipping/Courier companies), the execution of payment transactions (Payment Institutions/Banks), the provision of technical support (IT service providers), and the provision of email and SMS sending services, your information is shared with our business partners and suppliers on a limited basis.

• To Authorized Public Institutions and Organizations: In cases where it is necessary to fulfill our obligations arising from laws, or when information is requested due to court decisions or legal regulations, it is shared with authorized public institutions and organizations (for example; courts, public prosecutors, ministries, tax offices, Banking Regulation and Supervision Agency, Ministry of Interior of the Republic of Turkey, Information Technologies and Communications Authority, Personal Data Protection Authority). These transfers are carried out within the framework of our Risk Management Policy and Legal Compliance Policies.

• To Independent Audit and Legal Consulting Firms: Our company shares information with independent audit firms and our legal consultants under a confidentiality commitment for the purpose of conducting legal audits, managing legal processes, and obtaining consulting services.

• Odoo Software and Service Provider: Within the framework of the Odoo software infrastructure and services used for the storage, processing, and management of personal data obtained in website and e-commerce processes, your data is stored and processed on Odoo's servers or processing systems. This transfer is carried out in accordance with our Company's Operational Policies and Information Security Policy, with the necessary technical and administrative measures taken.

Inter-Brand Data Sharing Note:

For detailed information about all brands operating under the umbrella of Mymach Makine Sanayi Teknoloji ve Ticaret A.Ş.. www.mymach.com.tr You can access the "Our Brands" page at the address (or the link you will specify). These brands operate under the same legal entity, and your personal data may be shared among our Company's relevant business units and brands for the purposes of processing mentioned above, in order to carry out internal operational and administrative processes. In this context, all responsibility for the protection of your data lies with our Company as the data controller. This situation remains valid until the relevant brands acquire separate legal entities. In the event that a brand acquires a separate legal entity and the transfer of personal data comes into question, the necessary legal processes (such as obtaining the explicit consent of the relevant individuals) will be implemented.

5. Retention Period of Personal Data

Your personal data will be deleted, destroyed, or anonymized by our Company in accordance with the provisions of the Regulation on the Deletion, Destruction, or Anonymization of Personal Data when the purpose requiring their processing ceases to exist and/or the retention periods specified by the relevant legislation expire.

Our company retains personal data for the duration required by our processing purposes, unless a longer period is provided for in the relevant legislation or there is a legal obligation. Below are example retention periods for some categories of personal data:

• Membership Information: Your membership information is retained for as long as your membership is active and for the relevant legal limitation periods following the termination of your membership (for example, within the dispute periods arising from the Consumer Protection Law and the Turkish Code of Obligations).

• Order and Invoice Information: In accordance with our legal obligations arising from legislation (for example, the Tax Procedure Law, Turkish Commercial Code), it is retained for a period of 10 years from the completion of the order.

• Contact Form / Request Information: Your request or complaint will be stored for the duration of the relevant legal statute of limitations or as long as required by the legitimate interests of our Company, after it has been evaluated and resolved.

• Newsletter Subscription Information: It is stored until you withdraw your explicit consent or unsubscribe from the newsletter.

• Job Application Information (Resume, etc.): In accordance with our Human Resources Policies and relevant legislation, the application will be kept for a certain period of time (for example, 2 years) after the conclusion of the application process to be evaluated for future positions that may arise. Your explicit consent may be obtained for a longer retention period.

• Cookies: Depending on the type of cookies used, they are generally deleted when the session ends (session cookies) or after a certain period (for persistent cookies, for example, 1 year). Detailed information can be found in our Cookie Policy.

• Security Camera Recordings (If Any): In accordance with relevant legislation and our Company's Security Policies, they are stored for a certain period (for example, 15-30 days). (If there is camera recording at your physical workplace and it can be associated with the website, this can be added; otherwise, it can be removed.)

Personal data whose retention period has expired will be deleted, destroyed, or anonymized by our Company in accordance with the provisions of the Law and relevant Regulations.

6. Rights of the Data Subject and Application Method

According to Article 11 of the KVKK, as personal data owners, you have the following rights:

• Learning Whether Personal Data is Processed: Learning whether your personal data is processed.

• Requesting Information if Personal Data has been Processed: If your personal data has been processed, you have the right to request information about it.

• Learning the Purpose of Processing Personal Data and Whether It Is Used Appropriately: Learning the purpose of processing your personal data and whether it is used in accordance with that purpose.

• Knowing Third Parties to Whom Personal Data is Transferred Within or Outside the Country: Knowing the third parties to whom your personal data is transferred within or outside the country.

• Request for Correction of Incomplete or Incorrect Personal Data: In the event that your personal data has been processed incompletely or incorrectly, you have the right to request its correction and to request that the correction made be communicated to third parties to whom the personal data has been disclosed.

• Request for Deletion or Destruction of Personal Data: Requesting the deletion or destruction of your personal data within the framework of the conditions stipulated in Article 7 of the KVKK, and requesting that the operation carried out in this context be notified to third parties to whom the personal data has been transferred.

• Objecting to the Emergence of a Negative Result Through the Exclusive Analysis of Processed Data by Automated Systems: Objecting to the emergence of a negative result through the exclusive analysis of processed data by automated systems.

• Requesting Compensation for Damage in Case of Harm Due to Illegal Processing of Personal Data: In the event that your personal data is processed unlawfully, you have the right to request compensation for the damage incurred.

Application Method Within Your Rights:

If you wish to exercise your rights as stated in Article 11 of the KVKK, you can submit your request to our Company in writing or through other methods determined by the Personal Data Protection Board. We kindly ask you to use the following methods to ensure that identity verification can be carried out accurately and securely:

1. Written Application: You can send it in person or through a notary with a wet-signed petition to our company's address at Mimar Sinan Mahallesi 1421. Sokak No:51 Konak/İZMİR

2. Registered Email (KEP) Application: From your registered electronic mail (KEP) address mymach@hs01.kep.trYou can send it to the address with a secure electronic signature or mobile signature.

3. Secure Electronic Signature with Email: From your email address (info@mymach.com.trYou can apply with a secure electronic signature or mobile signature.

Your application;

• Your name, surname, and if the application is written, your signature,

• Your T.C. Identity Number (if you are a foreigner, your nationality, passport number, or identity number),

• Your primary residence or business address for notifications,

• Your email address for notification purposes, phone number, and fax number,

• Your request must be clearly stated.

7. Updating the Disclosure Text

This Clarification Text may be updated in accordance with changes that may occur in the applicable legislation and new regulations to be determined by the Personal Data Protection Authority. Updates will take effect on the date they are published on our Company's website.

Cookie Policy

www.mymach.com.tr As a result, we use cookies to enhance your experience during your visits to our website, measure the performance of our website, and provide you with better service. Cookies are small text pieces sent to your computer or device by our servers when you access our services. These files are stored in your browser and are later sent back to our servers so that we can provide contextual content.

Consent Management Techniques

On our website, there is a technical infrastructure that blocks third-party services (e.g., Google Analytics, Facebook, etc.) that track users when user consent is not given. Cookies are kept in passive mode until you press the "Accept" button.

How can you manage your cookie preferences?

You can choose to have your computer alert you whenever a cookie is sent or you can choose to disable all cookies. Please note that if you disable cookies, some features of our website may not function properly. You can manage your preferences using your browser settings (Chrome, Safari, Firefox, etc.).

Contact Information

You can contact the data controller for any questions regarding the protection of your personal data and for legal requests:

• Trade Name: Mymach Makina Sanayi Teknoloji ve Ticaret Anonim Şirketi

• Central Address: Mimar Sinan Mahallesi 1421. Sokak No:51 Konak/İZMİR

• E-mail: info@mymach.com.tr

• Trade Registry No: 2315779