Protection of Personel Data

ROKETSAN ROKET SANAYİ VE TİC. A.Ş. Information on Policy of Protection and Processing of Personal Data

1. Purpose

This notification is being made in accordance with our legal obligation within the framework of Article 10 of the Law on the Protection of Personal Data No. 6698 (“Law”) and contains your rights under the Law regarding the use, processing, preservation, deletion, when necessary, destruction or anonymization of your personal data that you share with Roketsan Roket Sanayi ve Tic. A.Ş. (“Roketsan A.Ş.”).

Roketsan A.Ş. is committed to treating information pertaining to its customers, visitors, employees, and other third parties as confidential. Your personal data is processed by Roketsan A.Ş based on the legal reasons specified below as set forth in Article 5 of the Law for the purposes as follows below in the text;

a) Explicit consent,

b) Expressly provided for by the laws,

c) If mandatory for the data controller to fulfill its legal obligations,

d) Processing of data is necessary for the legitimate interests pursued by the data controller, provided that this processing shall not violate the fundamental rights and freedoms of the data subject.

In this context, objectives of Roketsan A.Ş. under the Policy on Protection and Processing of Personal Data are as follows:

1. To lay down confidentiality and security guidelines related to data being processed by the Company and the inventory of personal data that it keeps;
2. To ensure compliance with laws and regulations regarding the protection of personal data in accordance with Law numbered 6698 on Protection of Personal Data;
3. To comply with laws and regulations in terms of the protection of personal data, in accordance with the Law on the Protection of Personal Data No. 6698,
4. To set the principles on protection of personal data for internal and external stakeholders that concern the company’s operations.

2. Personal Data Collected by Us

All kinds of your personal data collected by Roketsan A.Ş. that differ depending on the type, nature, history of the relationship established, the method of obtaining the data and processed in accordance with the principles of the law and other legislation and Roketsan AŞ's personal data processing and protection policy include in general, but are not limited to, followings:

• Identity Details: Name, surname, TR ID number, passport number, place of birth, date of birth, gender, marital status, spouse/child information, citizenship status, nationality
• Visual Records: Photo
• Contact Information: Along with contact information such as address, e-mail, registered e-mail address, mobile phone, fixed telephone and fax number, communication records within the scope of telephone calls, video calls and e-mail correspondence, other audible and visual data
• Data on Commercial Life: Various demographic information that identify the data owner, such as information about real persons in documents of legal entities such as tax plate, trade newspaper, certificate of authorization, trade registry documents, certificates of qualification, circular of signature and activity certificate, information about the person in tax liability status,
• Information on Education, Business and Professional Life: Occupation, title, business information, educational background, background information,
• Service Assessment: Your answers and comments that you share for service evaluation purposes.
• Information Shared over the Virtual Environment: All kinds of data, including navigation information, IP address, browser information and location data that you transmit with your own consent, obtained during the use of Roketsan A.Ş's website.
• Camera and Entrance-Exit Records: Data such as camera footage taken for the purpose of ensuring physical security, advertising, marketing and photographing within the Roketsan A.Ş. and Teknofest fairgrounds,

Your personal data listed above and your sensitive personal data may be processed within the scope of the personal data processing conditions specified in Articles 5 and 6 of the Law and for the purposes listed below.

3. Purposes of Processing Personal Data

Roketsan A.Ş processes personal data within the scope of the personal data processing conditions specified in Articles 5 and 6 of the PPD Law and the personal data processing conditions specified in other legal regulations. In accordance with the relevant Law and other legislation, your personal and private data will be kept in physical and electronic archives within Roketsan A.Ş. and service providers, in compliance with the provisions of the legislation, for following purposes:

• To perform the services we provide/will provide in accordance with the requirements of the legislation, contract and technology, Developing the products and services we offer, guiding our supply processes, realizing our commercial activities,
• Execution of information security processes and risk management, quality improvement activities,
• To be able to fulfill our obligations regarding storage of information, reporting and notification stipulated by the judicial and administrative authorities, including the Ministry of National Defense and the Undersecretariat of Defense Industry, and to share information in line with the requests of the relevant institutions.
• Use in advertising and promotional activities,
• Use for analyzing and developing our current and potential human resources and customer portfolio,
• Managing emergency processes,
• Fulfillment of the requirements determined by laws and regulations (tax legislation, social security legislation, law of obligations legislation, commercial law legislation, occupational health and safety law, electronic communication legislation etc. all relevant legislation),
• Execution of activities that should be done within the framework of occupational health and safety,
• For preparation of reports and analyzes to the senior management,
• Performing functions such as software, enterprise resource planning, reporting, marketing,
• Confirmation of your relationship with the institutions contracted with our company by the relevant departments of Roketsan A.Ş.
• Answering all your questions and complaints about our services by the Company Management, Support and Sales departments,
• Taking all necessary technical and administrative measures within the scope of data security of our company's systems and applications by the relevant departments of Roketsan A.Ş.
• Designing and transmitting special content, tangible and intangible benefits in Marketing, Media and Communication, Web and mobile channels

Your personal and private data will be kept in physical and electronic archives within Roketsan A.Ş and its service providers in compliance with the provisions of the Law and other legislation for the purpose of measuring, increasing and investigating the performance and the satisfaction by the relevant departments of Roketsan A.Ş. in accordance with the provisions of the legislation.

4. Methods for Collecting Personal Data

Your personal data is collected and processed in all kinds of verbal, written, visual or electronic media for the above-mentioned purposes and in order for Roketsan A.Ş. to fully and properly fulfill its contractual and legal obligations.

Your personal data can be collected in a verbal, written, or electronic medium through cookies, etc. that our system uses for recognizing you during visits to websites.

5. Data Transfer

Individuals to whom data can be transferred within Roketsan A.Ş. and the purpose and definition of data transfer are explained below:

6. Personal Rights

Every person has the right to apply to the data controller pursuant to the 11th Article of the Law No. 6698 on the Protection of Personal Data with respect to following matters:

a) to learn whether his/her personal data are processed or not,

b) to demand for information as to if his/her personal data have been processed,

c) to learn the purpose of the processing of his/her personal data and whether these personal data are used in compliance with the purpose,

d) to know the third parties to whom his personal data are transferred in country or abroad,

e) to request the rectification of the incomplete or inaccurate data, if any,

f) without prejudice to the provisions of other laws related to the deletion, destruction or anonymization of personal data, personal data shall be deleted, destroyed, or anonymized by the data controller at his or her sole discretion or upon the request of the person concerned if it has been processed in accordance with the provisions of the Law on Protection of Personal Data and other applicable laws, but reasons for its processing have ceased to exist. to request that his or her personal data be deleted or destroyed in accordance with such requirements,

g) to request reporting of the operations carried out pursuant to sub-paragraphs (e) and (f) to third parties to whom his/her personal data have been transferred,

h) to object to the occurrence of a result against the person himself/herself by analyzing the data processed solely through automated systems,

i) to claim compensation for the damage arising from the unlawful processing of his/her personal data.

7. Application to Data Controller

a) You may send your requests related to the implementation of Law to ROKETSAN A.Ş.’s following address in written:

ROKETSAN Roket Sanayi ve Tic. A.Ş.
Kemalpaşa Mah. Şehit Yüzbaşı Adem Kutlu Sok. No:21 Elmadağ, Ankara / TÜRKİYE

b) A person who has submitted an application may be requested to provide further information in order to ensure data security and to enable our Company to determine if the applicant is the owner of the personal data in question. Our Company may ask the owner of personal data to reply to questions regarding his or her application in order to ensure that the application filed by the owner of personal data is processed in a manner commensurate with the request.

c) If the application of the data owner is likely to obstruct the rights and freedoms of other persons or requires disproportionate effort, or the information is already in public domain, Roketsan A.Ş. may reject the request along with a justification.

d) The owner of personal data who is submitting an application will need to provide the following information in order to ensure that the application is processed by our Company and the results are notified to you. The data owner submitting an application is expected to inform us about his or her request by means of a written application which shall contain the following information and bear a wet-ink signature:

First and Last Names

Turkish Citizenship Number

Address

Mobile Phone Number

Email Address

Subject Matter of Request

Preferred Communication Address

Date of Application

Signature

e) Your request may be accepted or rejected along with a justification and the reply will be notified electronically or in written. If your request specified in the application is accepted, necessary action will be taken.

IMPORTANT NOTE: The process of application by a data owner only comprises applications containing requests related to the application of Law; applications for employment and/or internship or communication of enquiries and requests pertaining to such applications are excluded.

Please be informed.

ROKETSAN Roket Sanayi ve Tic. A.Ş.