ADDITIONAL PROTOCOL ON THE PROTECTION OF PERSONAL DATA OF THE SUPPLIER / PARTNER

Additional Protocol ("Additional Protocol") for the Protection of Personal Data contains the Company's commitments regarding personal data transmitted by VENES to the Company within the scope of the .............. Agreement (“Agreement”) signed by and between VENES ELEKTRİK VE KABLO SİSTEMLERİ SAN. VE TİC. LTD. Sti. (“VENES”), and .................... resident at ................ (“Company”) (hereinafter referred to as individual "Parties" and together as "Parties” ) pursuant to Law No. 6698 on Protection of Personal Data and related legislation (“Personal Data Legislation”). This Additional Protocol is an annex and an integral part of the Agreement.

1. The Company accepts, declares and undertakes that it will not use, process, disclose or transfer Personal Data to any third party or organization abroad, for purposes other than those whose scope is set forth in the Agreement.

2. The Company accepts, declares and undertakes that it will comply with the procedures and principles contained in the Personal Data Legislation regarding the Personal Data and its processing, related regulatory procedures, the provisions regarding the protection of personal data contained in the relevant legislation and the decisions of the Personal Data Protection Board.

3. In the event that the reason for processing Personal Data disappears, provided that the obligations determined for retention in laws are reserved, the company accepts, declares and undertakes that it will deliver any media on which the Personal Data transferred to it are saved, to VENES by signature and that it will irreversibly delete or destroy or anonymize the documents such as documents, files, CDs, floppy disks, hard-disks, electronic media, and servers. The Company accepts, declares and undertakes that if VENES submits any request for the Personal Data to be deleted, destroyed, anonymized, altered and similar requests are submitted to in accordance with the Personal Data Legislation, it will immediately fulfill the relevant requests.

4. The Company accepts, declares and undertakes that it will take all necessary technical and administrative measures to prevent the illegal access to the Personal Data shared with it by VENES or acquired on behalf of VENES by its employees or third parties and the use of related data for purposes other than transfer, and will perform compliance audits.

5. In the event that VENES transfers special personal data to the Company or if the Company obtains special personal data on behalf of VENES, the Company accepts, declares and undertakes that it will take additional security measures specific to personal data, in accordance with Article 6 of the Personal Data Protection Law, relevant legislative provisions and decisions of the Personal Data Protection Board.

6. The Company is responsible for ensuring the security of its employees and any personal data that they receive, if any, on their behalf or on behalf of VENES. The company accepts, declares and undertakes that it is responsible for the losses that may arise as a result of their activities of its employees or, if any, the subcontractor and that it will indemnify any damage arising at VENES immediately, in cash and in full upon the request of VENES.

7. The Company accepts, declares and undertakes that the data subject requests that are directly or indirectly transmitted to it and which concern VENES will be forwarded to VENES immediately and will act in accordance with the Personal Data Legislation in this context.

8. In the event that the Company violates this Additional Protocol or Personal Data Legislation, or for reasons arising from the Company's business partners or third parties to whom personal data is transferred by the Company, VENES’ right is reserved to recourse to the Company for the compensations that VENES may suffer due to direct or indirect damages and legal, administrative and criminal sanctions that may be suffered. For these reasons, if VENES requests, the Company accepts, declares and undertakes that it will pay the direct and indirect losses incurred by VENES immediately, in cash and completely to VENES.