PERSONAL DATA OWNER APPLICATION FORM

MESAY OTOMOTİV acts in accordance with the following principles in all its activities regarding the collection and processing of Personal Data:

• Compliance with the law and honesty rules; Personal Data will be collected and processed in accordance with the law and honesty rules.
• Accuracy and, where necessary, timeliness; MESAY OTOMOTİV will take reasonable precautions to keep Personal Data complete, accurate and up-to-date if necessary for the purpose of collecting and processing Personal Data, and will update Personal Data if Relevant Persons provide information about changes in Personal Data. will take reasonable measures to update, correct or delete incomplete or inaccurate data.
• Processing for specificity, clarity and legitimate purposes; MESAY OTOMOTİV undertakes to collect and process Personal Data to the extent necessary and in connection with the business purpose in its collection. Except as permitted or required by law, Personal Data will not be collected and/or processed in advance for the purposes expected to arise in the future. Except where the processing of Personal Data is legally required or possible, it will only be processed for the legitimate purposes clearly stated before the data is collected and in accordance with the consent to be obtained or, where necessary, Explicit Consent.

Before any data collection activity by the Company, in cases where the Explicit Consent of the Related Person is required in accordance with the data collection method and this Policy, the consent form or online environments where the consent is obtained will be used.

In cases where Personal Data is processed by third parties that Process Data on behalf of the Company, the third parties must undertake in writing, contractually or otherwise, that they will act in accordance with the obligations contained in this Policy.

• Preserving for the period required by the relevant legislation or for the purpose for which they are processed; Personal Data are stored for the maximum retention period in accordance with the purposes of processing; this period may be kept longer in order to comply with the obligations set forth in the legislation or to protect legitimate business interests. Personal Data that is not needed after the legal, administrative or commercial periods expire will be deleted, anonymized or destroyed in accordance with the legislation and the MESAY OTOMOTİV Personal Data Storage and Disposal Policy ("Destruction Policy").

MESAY OTOMOTİV is responsible for the destruction of all data in accordance with the legislation, in the event that the purpose of collection of this data disappears and the legal retention periods expire regarding the Personal Data in physical and electronic data recording systems.

All transactions regarding the deletion, destruction and anonymization of Personal Data will be recorded and these records will be kept for at least three (3) years, excluding other legal obligations.