Visitor Request Form

Visitor Clarification Text

As Turkish Petroleum Off-Shore Technology Center A.Ş. (the “Institution”), we would like to provide information regarding the processing and protection of your personal data. In accordance with Law No. 6698 on the Protection of Personal Data (the “Law”), your personal data may be processed by Turkish Petroleum Off-Shore Technology Center A.Ş., in its capacity as data controller, within the scope explained below.

Methods of Collecting Personal Data

Your personal data may be collected by automatic or non-automatic methods, through the affiliated units of our Institution, our website, your identity documents, your vehicle and licence plate information, by means of camera recordings, and verbally, in writing or electronically.

For as long as your relationship with our Institution continues, your personal data may be processed, limited to the statutory periods specified in the relevant legislation, and may be stored in both digital and physical media.

Within the scope of visit activities carried out at our Institution, your personal data processed are handled on the basis of the following conditions for processing personal data set out in Article 5 of the Law titled “Conditions for processing personal data”:

• (ç) It is mandatory for the data controller to fulfil its legal obligations;

• (f) Provided that it does not harm the fundamental rights and freedoms of the data subject, data processing is mandatory for the legitimate interests of the data controller;

Purposes for Which Personal Data Will Be Processed

• Keeping records of our visitors’ entry to our facilities and verifying their identity;

• Ensuring the protection of the life and property safety, and the legal, commercial, and occupational health and safety of third-party natural and/or legal persons whose business is conducted at our Institution and who are present at our facilities;

• Storing camera footage, carrying out facility operations, and ensuring security and inspections in the event that you are present at our Institution’s headquarters and units;

• Enabling the fulfilment of inspection and/or regulatory duties of competent public institutions and organisations and entities conducting audit activities;

• Fulfilling requests for information and documents made by judicial authorities and/or administrative bodies;

• Carrying out risk management and quality improvement activities;

• Taking all necessary technical and administrative measures for systems and applications within the scope of data security.

Persons to Whom Personal Data May Be Transferred and Purposes of Transfer

In accordance with Article 12 of the Law, our Institution takes all necessary technical and administrative measures to ensure the security of personal data.

In line with the fulfilment of our purposes for processing personal data, your personal data collected may be transferred, where explicitly stipulated by laws and for the purpose of fulfilling our legal obligations, to legally authorised public institutions and legally authorised private persons, within the framework of the conditions for processing personal data stipulated in Articles 8 and 9 of the Law.

Rights of the Personal Data Subject under Article 11 of the Law

As a personal data subject, you may make requests regarding the following matters pursuant to Article 11 of the Law:

• To learn whether your personal data are being processed;

• If your personal data have been processed, to request information regarding this;

• To learn the purpose of processing your personal data and whether they are used in accordance with that purpose;

• To know the third parties to whom your personal data are transferred, domestically or abroad;

• If your personal data are processed incompletely or inaccurately, to request their correction;

• To request the deletion or destruction of your personal data under the conditions stipulated in the relevant legislation;

• To request that the transactions carried out regarding the correction, deletion or destruction of your personal data be notified to third parties to whom your personal data have been transferred;

• To object to the occurrence of a result to your detriment by means of analysis of your processed personal data exclusively through automated systems;

• If you suffer damage due to unlawful processing of your personal data, to request compensation for such damage.

As a data subject, pursuant to Article 13(1) of the Law, you may exercise your above-mentioned rights by submitting your application in writing to “Finanskent Mah. Finans Cad. No: 4 İç Kapı No: 11 Ümraniye/İSTANBUL” or electronically to kvkk@tp-otc.com.

Our Institution will conclude your application requests in accordance with Article 13 of the Law. In the event that your request is rejected, the reason(s) for rejection will be notified to you in writing or electronically, together with the grounds.