Privacy Notice (Turkish Personal Data Protection Law, KVKK)

1. Personal data processed

• Identity: name and surname; for sole proprietorships, Turkish ID number / tax number.
• Contact: telephone, e-mail, address, inspection/audit site address.
• Customer transaction: application, quotation, contract, invoice, facility and appliance information, gas distribution company subscriber number.
• Professional experience (for auditor/job applications): education, certificates, work experience, CV.
• Visual records: photographs of facilities/products during inspections and audits (without targeting individuals).
• Transaction security: IP address, date and time, and browser information when a web form is submitted.

2. Purposes of processing

• Receiving and reviewing your application, and preparing the quotation and contract;
• Planning, performing, reporting and certifying inspection, product certification and testing services;
• Fulfilling the requirements of ISO/IEC 17020, 17065 and 17025 and our accreditation and notified body obligations (record keeping, traceability, accreditation audits);
• Making notifications to gas distribution companies and competent public authorities as required by law;
• Invoicing, finance and accounting;
• Evaluating complaints and appeals, and measuring customer satisfaction;
• Evaluating auditor and personnel applications;
• Protecting rights in legal disputes and ensuring information security.

3. Legal grounds and method of collection

Your personal data are collected through the forms on our website, e-mail, telephone, printed application forms and fieldwork, by partly automated and non-automated means. The data are processed under Article 5(2) of the KVKK on the legal grounds that processing is (c) directly related to the conclusion or performance of a contract, (ç) necessary for the data controller to comply with a legal obligation, (e) necessary for the establishment, exercise or protection of a right, and (f) necessary for our legitimate interests, provided that it does not harm your fundamental rights and freedoms. Where none of these grounds applies, your data are processed only with your explicit consent.

4. Transfer

For the purposes above and in accordance with Articles 8 and 9 of the KVKK, your personal data may be transferred, under confidentiality obligations, to the Accreditation Body, to public authorities responsible for notification and market surveillance (e.g. the Ministry of Trade, the Ministry of Industry and Technology), to gas distribution companies, to courts and competent public authorities and institutions, to our financial adviser and to suppliers from whom we obtain information technology and hosting services, and to contracted auditors and external laboratories. Transfers made in the context of audits by an Accreditation Body established abroad are carried out within the framework of the safeguards in Article 9 of the KVKK.

Information you submit through the application, complaint and appeal forms on our website is processed in İNTEGRA96's quality management system (KALE); this system is hosted in a data centre in İstanbul, Türkiye. When you approve documents such as quotations and contracts electronically, your name and surname, the date and time of approval and your IP address are recorded as evidence of approval.

5. Retention period

Your data are retained for the periods laid down in the relevant legislation and accreditation requirements (for inspection, certification and testing records, the record retention periods in our management system; at least 10 years under tax legislation); at the end of that period they are erased, destroyed or anonymised. Applications that do not result in a contract are destroyed 2 years after the application date.

6. Your rights under Article 11 of the KVKK

You have the right to learn whether your personal data are being processed and, if so, to request information about this; to learn the purpose of processing and whether the data are used in line with that purpose; to know the third parties in Türkiye or abroad to whom the data are transferred; to request rectification if the data are incomplete or inaccurate, and erasure or destruction within the framework of Article 7 of the KVKK, and to request that these actions be notified to third parties to whom the data have been transferred; to object to an outcome against you arising from analysis exclusively by automated systems; and to claim compensation if you suffer damage as a result of unlawful processing.

7. Application

In accordance with the Communiqué on the Procedures and Principles for Applications to the Data Controller, you may submit your requests in writing, together with information identifying you, to our address above by hand or through a notary public, or by e-mail to info@integra96.com from the e-mail address registered in our system. Your application will be concluded free of charge within 30 days at the latest, depending on its nature; if the action requires an additional cost, the tariff set by the Personal Data Protection Board may apply.

Effective date: 07.10.2026