PRIVATE LABEL Corporate PRIVATE LABEL You can create your own brand via benefitting of VISCOL’s years of experience and develop it in the lubricant sector. In addition to our PETROVISCOL brand, we can also produce for you with your own brand. Our company provides reliable and quality contract manufacturing services with strict confidentiality principle and with a wide range of products, from the smallest packaging to bulk shipments. Services We Offer: – Creating product formulation according to application – Packaging selection – Label design in accordance with regulations – Preparation of TDS and MSDS’s – Obtaining the necessary permits and documents – Post-sales technical support VİSCOL PETROKİMYA SANAYİ VE TİCARET A.Ş PRIVACY AND PERSONAL DATA PROTECTION AND PROCESSING POLICY INTRODUCTION 1.1. General Ensuring the privacy and security of personal data in compliance with the relevant legal regulations are among the utmost priorities of VISCOL PETROKİMYA SANAYİ VE TİCARET A.Ş. (Further – Company) In this context, this Privacy and Personal Data Protection and Processing Policy regarding  processing and protection of personal data (‘Policy’) together with other written policies within the Company targets legal processing, storing and protecting the personal data of our employees, customers, employee candidates, visitors, guests and other third parties (“Related Persons”),  whose personal data is processed. Our Company ensures compatibility of its Policy with Turkish Personal Data Protection Law No. 6698 (‘Data Protection Law’). While preparing this policy, our Company considered the provisions of the Constitution of the Republic of Turkey, the regulations in ‘Data Protection Law’, the relevant legal norms regarding privacy,  protection and processing of personal data, as well as the decisions taken by the Personal Data Protection Board/Committee as main guidance. The explanations and instructions regarding the following basic principles adopted by our company are as follows: Processing personal data in accordance with the law and honesty rules, Keeping personal data accurate and up-to-date when necessary, Processing personal data for specific, explicit and legitimate purposes, The personal data are linked, limited and measured for the purpose for which they are processed, Keeping personal data for as long as required by the relevant legislation or for the purpose for which they are processed, Keeping the relevant persons informed, Establishing the necessary processes for the relevant persons to exercise their rights, Taking necessary measures in the processing and preservation of personal data, Due to the requirements of the processing purpose, transferring personal data to third parties, Showing the necessary sensitivity in the processing and protection of personal data of private nature, Deletion, destruction or anonymization of personal data whose purpose of processing is lost. 1.2. Purpose and Scope of the Policy The main purpose of the Policy is to ensure full compliance with the Personal Data Protection Law (in Turkish – KVKK) in processing activities to be carried out by the Company. In addition, the prepared Policy and other written policies aim to make our principle of compliance with Personal Data Protection Law (KVKK) and other relevant legal regulations regarding personal data security sustainable. The scope of the Policy relates to all personal data processed automatically or non-automatically, provided that it is a part of any data recording system. 1.3. Implementation of the Policy and Related Legislation The policy has been embodied and arranged within the framework of the principles set forth by the relevant legislation. In case of inconsistency between the current legislation and the Policy, then applicable law shall apply. 1.4. Enforcement of the Policy The policy enters into force after being approved by the board of directors, published on the website (http://viscol.com.tr/) and distributed to all Company employees via e-mail addresses. DEFINITIONS AND ABBREVIATIONS Explicit Consent – Consent about a specific subject, based on information and expressed with free will Anonymization/Anonymization Making personal data incapable of being associated with an identified or identifiable real person in any way, even by pairing it with other data Employee – Company Employees Employee Candidate – Real persons who have applied for a job at the Company by any means or have submitted their CV and related information to the Company for review. Related/Relevant Person – Real person whose personal data is processed Personal Data – Any information relating to an identified or identifiable person. Processing of Personal Data – Obtaining, recording, storing, preserving, changing, rearranging, disclosing, transferring, taking over, making available, preventing its use, classifying personal data by fully or partially automatic or non-automatic means, all kinds of operations performed on the data provided that it is a part of any data recording system. Committee –  Personal Data Protection Committee within the Company Board  –  Personal Data Protection Board Institution – Personal Data Protection Institution Turkish Personal Data Protection Law No. 6698 (‘Data Protection Law’) – Data Protection Law (in Turkish – KVKK No. 6698) Personal Data of Private Nature – Data on race, ethnicity, political opinion, philosophical belief, religion, sect or other beliefs, clothing, membership in associations, foundations or trade unions, health, sexual life, criminal convictions and security measures, and biometric and genetic data Periodic Destruction Process – The deletion, destruction or anonymization process, which will be carried out ex offic