GENERAL DISCLOSURE TEXT REGARDING THE PROTECTION AND PROCESSING OF PERSONAL DATA

At WASTE LOG SOFTWARE HARDWARE CONSULTING EDUCATION INDUSTRY AND TRADE INC. (Tax ID: 8001202304) (“WASTE LOG” or “Company”), located at Esentepe Mah. Talat Paşa Cad. No:5 İç Kapı No:1 Şişli / ISTANBUL, we place the utmost importance on the security of your personal data. With this awareness, we ensure that the personal data of individuals with whom we interact are processed and retained in full compliance with Law No. 6698 on the Protection of Personal Data (“Law” or “KVKK”), the secondary regulations enacted pursuant to the Law (such as regulations, communiqués, etc.), and binding decisions of the Personal Data Protection Authority.

In full recognition of our responsibility, in our capacity as the "Data Controller" as defined in the Law, we process your personal data as described below, within the limits prescribed by law, and take all necessary technical and administrative measures to ensure an appropriate level of security to prevent unlawful processing of personal data, prevent unlawful access to personal data, and ensure the retention of personal data.

Through this disclosure text, WASTE LOG aims to inform relevant individuals about the processing of personal data it handles in full compliance with the transparency principle on its website, and hereby provides the data processing notice regarding personal data processing activities within the scope of its main business activities and processes.

1. Information Regarding the Data Controller
   WASTE LOG is one of the leading companies in eco-friendly waste management, aiming to contribute to a more sustainable future by directing society towards recycling and employing various strategies for this purpose.

WASTE LOG promotes the proper management of waste by providing training and consultancy services on waste management, as well as facilitating the recycling process by supplying appropriate waste collection equipment and containers. Furthermore, by continuously monitoring the waste management processes of its clients, the company makes necessary adjustments to increase recycling rates.

2. Purposes of Personal Data Processing
   Your personal data is processed by the Company within the limits set by the Law, in accordance with legal and ethical principles, and for the following purposes:

• To carry out the Company’s commercial activities in compliance with the law and Company policies, and to perform necessary work by business units to this end.
• To identify, plan, and implement the Company’s short, medium, and long-term commercial policies.
• To manage customer relations, corporate communications, and information security processes.
• To ensure the commercial and legal security of real and legal persons with whom the Company has a business relationship.
• To carry out waste collection processes and provide supporting services.
• To conduct marketing analysis and identify service marketing activities.
• To ensure the continuity of business activities and waste collection processes.
• To implement risk management and ensure the security of data controller operations.

3. Methods and Legal Grounds for Collecting Personal Data
   Your personal data is collected by the Company directly from information provided by you orally, in writing, or electronically, through activities related to the Company’s operations, via its website and similar applications and software, either automatically or manually, as part of a data recording system.

The general categories of personal data processed under the legal grounds specified in Article 5/2 of the Law are outlined below. In this context, both the execution of the Company’s business processes and its online activities on the website and applications have been considered. Additional clarification or consent notices regarding each process and operation are provided to relevant individuals as needed.

1. Identity | Name, surname, date and place of birth, Turkish ID number | Processed based on: a) explicit provision in laws, c) necessity for the performance of a contract, ç) legal obligation of the data controller, d) data voluntarily disclosed by the person.
2. Contact | Address, email address, phone number
3. Location | Location data, GPS real-time location data | Processed based on: c) necessity for the performance of a contract, f) processing required for legitimate interests of the data controller.
4. Customer Transactions | Complaint and request data, online activity data | Processed based on: a) explicit provision in laws, c) necessity for the performance of a contract, ç) legal obligation of the data controller.
5. Financial | Bank and IBAN information in the context of the WASTE LOG points system | Processed based on: a) explicit provision in laws, c) necessity for the performance of a contract, ç) legal obligation of the data controller.
6. Transaction Security | IP address, website login/logout data | Processed based on: necessity for the legitimate interests of the Company without harming fundamental rights.
7. Marketing | Waste report history and cookie records | Processed based on: consent of the data subject.

Upon request, further details about the purposes for processing each personal data category can be provided via the Company’s personal data inventory.

4. Transfer of Personal Data and Purpose of Transfer
   Your personal data may be transferred, where necessary, for the execution of the aforementioned purposes and the uninterrupted operation of the Company’s commercial activities and business processes, based on your explicit consent when required under Article 8/1 of the Law, and in accordance with legal grounds specified in Article 8/2(a) of the Law. These include transfers to:

• Public authorities, judicial and administrative bodies authorized by law.
• Private legal entities and individuals permitted by law.
• External auditors or other relevant organizations conducting audits.
• Business partners involved in the execution of the Company’s operations.
• The Company’s employees, business partners, and shareholders for coordination purposes.

You may withdraw your consent regarding domestic transfers at any time and consult the Company’s authorized representatives.

5. Rights of Data Subjects Under the Law
   You have the right to access the following information and make requests under Article 11 of the Law:
   a) To learn whether your personal data has been processed.
   b) If your personal data has been processed, to request information about it.
   c) To learn the purpose of processing your personal data and whether it is used in accordance with the purpose.
   d) To learn the third parties to whom your personal data has been transferred, whether domestically or abroad.
   e) To request the correction of incomplete or incorrect personal data.
   f) To request the deletion or destruction of your personal data, within the framework of the conditions specified in the Law.
   g) To request the notification of any correction, deletion, or destruction of personal data to third parties to whom it has been transferred.
   h) To object to the processing of your personal data based on automatic systems that result in negative outcomes against you.
   i) To request compensation for damages caused by the unlawful processing of your personal data.

You can exercise your rights by submitting a written request to WASTE LOG via the provided channels or by completing the relevant application form.

This site’s intellectual property rights, including but not limited to the title, trade name, brand, logo, designs, and methods, are protected under national and international law and belong to the operator and owner of this site. Any use, reproduction, publication, or distribution of the content without explicit permission is prohibited.

WASTE LOG’s employees are trained and regularly updated on the Personal Data Protection Law, ensuring awareness and confidentiality.

This disclosure text may be updated by WASTE LOG in accordance with legal obligations, and such changes will take effect as soon as the updated text is communicated.

This text was last updated on March 26, 2023.