Camera Monitoring and Image Storage Policy

PEKİNTAŞ YAPI SAN.VE TİC.LTD.ŞTİ.

-1- Purpose and Scope of Video Camera Monitoring Policy

PEKİNTAŞ YAPI SAN.VE TİC.LTD.ŞTİ., Within the scope of surveillance activity with security camera; It has the purpose of protecting the interests of the company and other persons regarding its security. This monitoring activity is carried out in accordance with the Law on Protection of Personal Data (“KVKK or Law”) and the Law on Private Security Services and related legislation. In this context, the information about the camera monitoring is announced to all employees and visitors and people are enlightened. Notification letters are hung at the entrances of the areas where monitoring is done. Necessary technical and administrative measures are taken by the Company Name to ensure the security of personal data obtained as a result of camera surveillance, in accordance with Article 12 of the Law.

-2- Determining In Which Areas PEKİNTAŞ YAPI SAN.VE TİC.LTD.ŞTİ. Carries Out Camera Monitoring Activities

PEKİNTAŞ YAPI SAN.VE TİC.LTD.ŞTİ. by PEKİNTAŞ YAPI SAN.VE TİC.LTD.ŞTİ. for the purpose of ensuring security and controlling business activities and for other purposes specified in this Policy. Personal data processing is carried out for the follow-up of employees in its buildings and facilities. While obtaining the identity data of the persons who come to the buildings of PEKİNTAŞ YAPI SAN.VE TİC.LTD.ŞTİ. Or as an employee, PEKİNTAŞ YAPI SAN.VE TİC.LTD.ŞTİ. In this context, personal data owners are enlightened by means of texts posted in the presence of the employees or made available to employees in other ways. The data obtained for the purpose of tracking guest entry and exit are processed only for this purpose and the relevant personal data are recorded in the data recording system in a physical environment.

Personal data processing activities are carried out for the purpose of ensuring security by the Company Name and for tracking guest entries and exits in the Company Name buildings and facilities for the purpose and other purposes specified in this Policy. The personal data owners are enlightened within this scope while obtaining the identity data of the persons who come to the Company Name buildings as guests, or through texts posted in the name of the Company or made available to the guests in other ways. The data obtained for the purpose of tracking guest entry and exit are processed for this purpose only and the relevant personal data are recorded in the data recording system in a physical environment.

-3-Purpose of Monitoring and Storage with Video Camera

PEKİNTAŞ YAPI SAN.VE TİC.LTD.ŞTİ. For the purpose of ensuring security and supervision for 7 days 24 hours by the Company Name. Personal data processing activities are carried out to monitor guest entrances and exits with security cameras in its buildings and facilities.

-4- Who Can Access to the Information Obtained as a Result of Monitoring and Who Is This Information Transferred to

Only a limited number of Company Name employees have access to digitally recorded and maintained records. Authorized persons in the Security Unit and the IT department are authorized to access the records. A limited number of people who have access to the records declare that they will protect the confidentiality of the data they access with the Confidentiality Statement. KVKK protection framework agreements have been made with the Security Company regarding the storage and storage of these personal data, which will only be used for limited purposes and will not be shared without permission, except legal obligations.

-5- Ensuring the Security of Data Obtained by Video Camera Monitoring Activity

PEKİNTAŞ YAPI SAN.VE TİC.LTD.ŞTİ. It stores the camera records it obtains in technical units with limited access within the framework of its data security policy and takes measures against possible attacks by using information operating systems. These measures;

Network security and application security are provided.
Closed system network is used for personal data transfers via network.
Security measures are taken within the scope of procurement, development and maintenance of information technology systems.
An authority matrix has been created for the employees.
Access logs are kept regularly.
Employees who have a change of position or leave their jobs are removed from their authority in this area.
Current anti-virus systems are used.
Firewalls are used.
Necessary security measures are taken for entering and exiting physical environments containing personal data.
Personal data are backed up and the security of backed up personal data is also ensured.
User account management and authorization control system is applied and their follow-up is also performed.
Log records are kept without user intervention.
Intrusion detection and prevention systems are used.
-6- Retention Period of Data Obtained by Video Camera Monitoring Activity

Video recordings obtained by camera surveillance activities PEKİNTAŞ YAPI SAN.VE TİC.LTD.ŞTİ. for 30 days due to the importance of the units in which the employees are located. After 30 days, the data is removed within the framework of disposal policies.

-7- Informing Relevant Persons on Monitoring Policy

PEKİNTAŞ YAPI SAN.VE TİC.LTD.ŞTİ.'s monitoring activity with video cameras is notified to its personnel within the framework of the lighting policy and pre-lighting notifications. In addition, information is provided that video cameras are being monitored at the building and facility entrances.