Protection of Personal Data

Without prejudice to the obligations arising from the Personal Data Protection Law (KVKK) and related legislation, the personal data they transfer to each other and/or obtain from each other in other ways within the scope of these General Provisions and the contract between them (identity, contact, title, without being limited to the ones listed here). personal data such as professional experience and special quality personal data such as health data, genetic data) shall not be used, processed, archived and disclosed to third parties or organizations in the country or abroad for purposes other than the purposes regulated under these General Provisions and the Agreement and for the purpose of fulfilling their legal obligations. They accept, declare and undertake that they will not transfer it. In terms of data transferred by BH and/or otherwise obtained on behalf of BH and/or transferred to BH, the CUSTOMER:

a. Including duly informing the relevant persons and obtaining explicit consent when necessary; It will process and transfer personal data to BiH in accordance with the procedures and principles in the KVKK and related legislation and the Board decisions, and will properly train and inform the people it employs in this direction.

b. Within the scope of informing that he will take the necessary administrative and technical measures to ensure the security of personal data and obtaining express consent when necessary, there is a contractual relationship between him and BH within the scope of these General Provisions, and within this scope and within the scope of the performance of these General Provisions/Contract, and for this purpose, the personal data BH will enlighten on the issues that it may transfer to and obtain their explicit consent when necessary,

c. In case the personal data is incomplete or incorrectly processed, it will correct the records of the personal data upon the request of the person concerned and/or the instruction of BH and/or the Board,

d. Within the scope of deletion/destruction/anonymization of personal data, he/she will act in accordance with KVKK/related legislation provisions/Board decisions, in case the processing conditions disappear and/or upon the request of BH, in accordance with the destruction policy determined by him, the first following the date of the obligation arises. will delete/destroy/anonymize data in periodic destruction,

e. Not to transfer personal data to unauthorized third parties at home or abroad,

f. In case of any attack/threat against data security from third parties, it will immediately inform BH in writing and comply with the guidance, instructions and orders given by BH in addition to its legal obligations,

g. The person concerned will submit his/her application within the scope of Article 11 of the KVKK to BiH within two working days at the latest,

h. He will immediately conclude the requests of the related persons conveyed to him by BH in accordance with the provisions of the KVKK and the related legislation and the Board decisions and, if necessary, transmit all information, documents, documents to BH,

i. The Board shall notify immediately (at the latest the next day) any inspection, audit etc. that may be carried out by the relevant public authorities,

j. Damages/legal-administrative-penalty sanctions to be incurred by BH due to breach of KVKK and related legislation, Board decisions or due to reasons arising from the CUSTOMER, the CUSTOMER employee, the persons with whom the CUSTOMER has business relations or third parties transferred by the CUSTOMER and that BiH has a right of recourse for any damages it may have to pay and that BiH will pay promptly, in cash and in full within seven (7) working days if BiH requests it.

It declares, accepts and undertakes unconditionally and without reservation.