Security

Protocol on Confidentiality Obligation and Personal Data Protection

This “Protocol on Confidentiality Obligation and Personal Data Protection” (hereinafter referred to as “Protocol”) is on one side. “Merkez Mahallesi Birahane Sokak Hel Boll Business Center No 20 A Bomonti Şişli Istanbul Türkiye” located at Copurs Textile Industry and Trade Inc.. and ………………………………………… located at ………………………………………………….. on the other side. (hereinafter referred to as “Supplier”) among; It was signed as an annex and integral part of the Supplier Agreement (hereinafter referred to as the "Agreement") previously concluded between the parties on ………………….

“Copurs Textile Industry and Trade Inc.” and “Supplier” will hereinafter be referred to together as “Parties” and individually as “Party”.

Article 1. Subject of the Protocol:
The subject of this Protocol is;  To take all necessary precautions in line with the applicable legislation regarding all information obtained by any means within the scope of the performance of the Agreement and/or transferred between the Parties, including the data counted as personal data within the scope of the Personal Data Protection Law No. 6698, and to ensure the confidentiality of this data. It is the determination of the rights and obligations of the Parties.

Article 2. Definition of Confidential Information:
Confidential Information within the scope of this Protocol; Copurs Tekstil Sanayi ve Ticaret A.Ş., including the Agreement itself and its annexes, before the Agreement is signed and during the period it remains in force following the signing of the Agreement. will be transferred or given to the Supplier by and/or will be provided or made known by the Supplier in any way before or after the signing of the Contract; product information, all kinds of financial data including collection information, business plans, training plans and documents, know-how, Copurs Tekstil Sanayi ve Ticaret A.Ş. and/or 3rd real or legal persons with whom Copurs Tekstil Sanayi ve Ticaret A.Ş. has commercial relations, partnerships of Copurs Tekstil Sanayi ve Ticaret A.Ş. or subsidiaries of Copurs Tekstil Sanayi ve Ticaret A.Ş. Personal data and all kinds of information and documents belonging to the partnerships, all kinds of discussions, meetings, meetings, etc. with the Supplier regarding the subject of the Contract. It means all written, verbal, electronic information and documents, including but not limited to, and all materials containing them.

Article 3. Confidentiality Obligation:
3.1. The Supplier shall use the Confidential Information it has obtained, both during the period the Agreement remains in force and during any period of the Agreement, with the exception of the publicly available parts of the Confidential Information and cases where judicial or administrative authorities request the Confidential Information within the framework of the law. will not disclose it in any way indefinitely after its termination for any reason.
3.2. The Supplier shall disclose Confidential Information as "confidential", "private", to those who will work only in the execution and realization of the Contract and to its legal representatives, representatives, managers, consultants, all relevant personnel and those with whom it has a service and/or agency relationship. It will be communicated by placing warning notes and phrases about the level of confidentiality. The Supplier will ensure that all relevant personnel, including but not limited to its legal representatives and proxies, managers, consultants, and third parties with whom it has a service and/or agency relationship, comply with their confidentiality obligations, and that this confidentiality obligation is not violated by these persons during or after the period of service. He accepts, declares and undertakes that he is solely responsible towards Copurs Tekstil Sanayi ve Ticaret A.Ş.
3.3. The Supplier will not copy or reproduce the Confidential Information it has obtained, nor will it be used by third parties for any reason, except for the execution and realization of the Agreement and for its own internal use, without the written consent of Copurs Tekstil Sanayi ve Ticaret A.Ş. or to the legal entity, the public or its personnel not related to the work and service subject to the Contract, or engage in behavior that will result in this.
3.4. The obligation to maintain the confidentiality subject to this Protocol shall only apply to what Copurs Tekstil Sanayi ve Ticaret A.Ş. notifies or discloses within the scope of the Agreement or the Supplier's Copurs Tekstil Sanayi ve Ticaret A.Ş. not what he acquired about; It also applies to Confidential Information known before the signing of this Agreement or obtained directly or indirectly from third parties.
3.5. Even if the Confidential Information is disclosed by the Supplier, in whole or in part, to third natural or legal persons in violation of the provisions of this Protocol, the Supplier's confidentiality obligation regarding the undisclosed part will continue in the same way.
3.5. If the Agreement is terminated for any reason, the Supplier shall retain all Confidential Information within 24 (twenty-four) days from the date of termination of the Agreement, without the need for Copurs Tekstil Sanayi ve Ticaret A.Ş.'s request and without obtaining any copies or copies. ) to Copurs Tekstil Sanayi ve Ticaret A.Ş. within hours, and will immediately destroy the information, documents and materials that cannot be returned, by obtaining the written approval of Copurs Tekstil Sanayi ve Ticaret A.Ş.
Article 4. Supplier Obligations Regarding the Protection of Personal Data:

4.1. Supplier, Copurs Tekstil Sanayi ve Ticaret A.Ş. Any data disclosed to the Supplier and/or obtained and/or learned by the Supplier and defined as personal data and special personal data (hereinafter referred to as "Personal Data") within the scope of the Personal Data Protection Law No. 6698 and other relevant legal regulations. only Copurs Tekstil Sanayi ve Ticaret A.Ş. It is obliged to process and use it within the scope of the performance of the commercial relationship between it and. The Supplier may not transfer Personal Data to third parties or institutions in any way, except for cases that are permitted in writing within the scope of a commercial relationship and meet the transfer conditions and cases that are included as exceptions in the legislation, or in any other contractual relationship for any other purpose or in any other commercial or non-commercial manner. cannot be used in any activity. Copurs Textile Industry and Trade Inc. The Supplier is personally responsible for ensuring the confidentiality of the Personal Data disclosed to the Supplier and/or obtained and/or learned by the Supplier. The Supplier cannot use or distribute the Personal Data obtained as a result of the work carried out and all documents, tools and equipment and all other elements related to this data, for purposes other than its intended purpose, in another contractual relationship or in any other business, or transfer it to third parties or institutions or abroad, and any other It cannot function in any way.

4.2. Supplier; To properly collect all Personal Data transferred to Copurs Tekstil Sanayi ve Ticaret A.Ş. within the scope of the execution of the Agreement from data owners or third parties, to fully fulfill the disclosure obligation stipulated in the legislation, to ensure that the Personal Data is transferred to Copurs Tekstil Sanayi ve Ticaret A.Ş. Ş., to manage business processes in accordance with the purpose of processing this Personal Data, and to fulfill all other legal obligations properly and on time.

4.3. The Supplier shall comply with the decision of the Personal Data Protection Board in order to prevent the unlawful processing of Personal Data, to prevent unlawful access to Personal Data and to ensure the preservation of Personal Data, except for the exceptions listed in the Personal Data Protection Law No. 6698. decisions, secondary regulations to be issued based on the Personal Data Protection Law No. 6698, judicial decisions and other legal regulations. Regarding data security, the supplier is Copurs Tekstil Sanayi ve Ticaret A.Ş. It is obliged to properly carry out the practices prescribed by. The guidance given by Copurs Tekstil Sanayi ve Ticaret A.Ş. to the Supplier on this matter does not eliminate the Supplier's obligations, legal and criminal responsibilities regulated in the relevant legislation and this Protocol.

4.4. The Supplier is obliged to carry out the necessary inspections or have them carried out within the scope of the said Law in order to ensure the implementation of the provisions of the Personal Data Protection Law No. 6698. By signing this Protocol, the Supplier acknowledges that the authorized persons assigned by Copurs Tekstil Sanayi ve Ticaret A.Ş. for auditing have the authority to obtain all kinds of information and documents from the Supplier regarding the actions undertaken by the Supplier, and that the information processing systems are used to carry out these audits. and the records and books of Copurs Tekstil Sanayi ve Ticaret A.Ş. accepts and undertakes that it will be kept open to inspection. The inspections to be carried out by Copurs Tekstil Sanayi ve Ticaret A.Ş. on the Supplier do not eliminate the Supplier's obligations, legal and criminal responsibilities regulated in the relevant legislation and this Protocol.

4.5. The Supplier shall provide all kinds of information and documents requested by the Personal Data Protection Board in a timely and accurate manner in the audits to be carried out within the scope of the powers granted to the Personal Data Protection Board within the scope of Article 22 of the Personal Data Protection Law No. 6698 and to provide all kinds of electronic, magnetic and and all systems and passwords required to access these records and make the records readable.

4.6. Supplier, Copurs Tekstil Sanayi ve Ticaret A.Ş. In case the Personal Data disclosed by and/or obtained and/or learned by the Supplier falls into the hands of an unauthorized person in any way, is obtained by others through illegal means, or is disclosed in any way, this situation will be reported to Copurs Tekstil Sanayi ve Ticaret A.Ş. as soon as possible. .Ş. in a secure way, without informing the Personal Data Protection Board and Copurs Tekstil Sanayi ve Ticaret A.Ş. of those whose personal data have been violated, in accordance with the Personal Data Protection Law and secondary regulations, and without informing Copurs Tekstil Sanayi ve Ticaret A.Ş. accepts and undertakes not to provide any information without obtaining the written permission of .Ş. and not to act outside the instructions of Copurs Tekstil Sanayi ve Ticaret A.Ş.

Article 5. Liability for Breach of Obligations:

Any non-compliance of the Supplier with the provisions and legislation contained in this Protocol will be deemed as a fundamental violation of the Agreement, and in such a case, Copurs Tekstil Sanayi ve Ticaret A.Ş. will be entitled to notify the Agreement through a notary public without incurring any liability for compensation against itself. may terminate it immediately. The Supplier shall be liable to Copurs Tekstil Sanayi ve Ticaret A.Ş., its partners, personnel, customers, suppliers, representatives, etc. due to its violation of the provisions of this Protocol or the legislation. requests, investigations, lawsuits, etc. that may be incurred. Copurs Tekstil Sanayi ve Ticaret A.Ş., its partners, personnel, customers, suppliers, suppliers, representatives, etc., by providing all the necessary information and documents in these processes. It accepts and undertakes to be exempt from all legal and criminal liability and to compensate any damages immediately, in cash and in full. In such a case, Copurs Tekstil Sanayi ve Ticaret A.Ş. may not pay compensation, administrative fines, etc. to any third party or institution. It may recourse to the Supplier all the amounts it will have to pay and its ancillaries such as interest, litigation expenses and attorney fees. Copurs Tekstil Sanayi ve Ticaret A.Ş.'s right of recourse does not prejudice its right of recourse if it starts negotiations or takes legal action to cancel any demand or decision that imposes a payment obligation or other sanctions against it; The Supplier shall fulfill the recourse request of Copurs Tekstil Sanayi ve Ticaret A.Ş. within 2 (two) days at the latest from the date of request, together with the commercial advance interest to be charged from the date of payment made to the relevant person, institution or organization. As a result of the negotiations initiated or the legal action taken, Copurs Tekstil Sanayi ve Ticaret A.Ş. The sanctions canceled by the company are returned to the Supplier after deducting the litigation expenses, attorney fees, fees and other expenses that Copurs Tekstil Sanayi ve Ticaret A.Ş. will have to pay in this process. Copurs Tekstil Sanayi ve Ticaret A.Ş.'s rights set out in the Agreement (request for penal clauses, etc.) are reserved.

Article 6. Authority:
Istanbul Courts and Enforcement Offices are authorized to resolve disputes arising from this Protocol.

This Protocol, consisting of 6 (six) articles and 3 (three) pages, was signed in 2 (two) copies on ……………………….. and entered into force. This Protocol will remain in force indefinitely after the Agreement concluded between the Parties is terminated.