This Information Text has been prepared by YPS Otomotiv Sanayi Ve Ticaret Anonim Şirketi (“YPS” or “Company”) as the data controller, in accordance with Article 10 of the Personal Data Protection Law No. 6698 (“PDP Law”) and the Communiqué on the Procedures and Principles to be Complied with in Fulfilling the Information Obligation. Your Personal Data; may be processed by YPS as the data controller within the scope explained below.

Relevant Person: Employee Candidate

• Identity Information: Name and surname, date of birth, TR ID No, signature, driver's license, photo.
• Contact Information: Home phone number, mobile number; e-mail, home address, references.
• Education and Work Information: CV/Resume, military service status, certificates, foreign language.
• Professional Experience Information: CV, previous place of employment, position, address, entry-exit date, reason for leaving, employee candidate reference information name, surname, place of duty, position, address and phone, Vocational Training Certificate.
• Social Life and Habits*: Skills, smoking, hobbies.
• Special Personal Data**: Health data*, chronic and/or contagious disease, disability status.

The information in the data upper category marked with * is processed and transferred in case of explicit consent of the candidate employees, in order to fulfill the legal obligations of our company, to plan human resources processes, to collect necessary data within the scope of occupational health and safety, since health data can only be processed within the scope of explicit consent.

Your personal data specified above may be processed within the scope of the personal data processing conditions specified in Articles 4, 5 and 6 of the Law, in direct proportion to the purposes listed below, primarily the purposes of Conducting Human Resources Processes, establishing and performing the Employment Contract, and fulfilling the obligations stipulated in the law, which are the subject of your disclosure of this data to YPS:

• Conducting the Selection and Placement Processes of Candidate Employees / Interns / Students
• Conducting the Application Processes of Candidate Employees

The collected candidate employee personal data; In line with the realization of the above-mentioned purposes and limited to the fulfillment of these purposes; it may be transferred to YPS Group Companies, our business/solution partners, our shareholders, our suppliers, legally authorized public/private institutions and private persons or organizations and third parties, limited to the personal data processing conditions specified in Articles 8 and 9 of the Law and the above-mentioned purposes, and may be processed domestically or abroad.

YPS collects personal data directly from the candidate and the resume they share, job application forms, public institution forms that must be notified by law, www.yps.com.tr, e-mail, mail, fax and other communication channels, and the data learned in auditory, electronic or written form, in accordance with the following legal reasons specified in Articles 5 and 6 of the Law:

• Your explicit consent when necessary (e.g. in cases where your health data is processed as special personal data),
• The process in which we process your personal data is clearly stipulated in the laws (e.g. keeping the employee's personal information as required by the Labor Law),
• The necessity of processing your personal data provided that it is directly related to our establishment of a contractual relationship with you or our performance obligation arising from this contract (e.g. processing your TR ID No., name-surname, contact information etc. for the purpose of establishing an employment contract with the candidate)
• Situations that are mandatory in order to fulfill our legal obligations (e.g., requesting you to update your contact information as part of our obligation to keep your data up to date under the law),
• Sharing your personal data (e.g., sharing your CV/resume so that we can assess your suitability for the position you have applied for),
• • Being obliged to process your data, provided that it does not harm your fundamental rights and freedoms (e.g., processing candidates' interview notes).

• In this context, personal data owners; (i) To learn whether personal data has been processed, (ii) To request information regarding the processing of personal data, (iii) To learn the purpose of processing personal data and whether they are used in accordance with their purpose, (iv) To know the third parties to whom personal data is transferred domestically or abroad, (v) To request correction of personal data if it is processed incompletely or incorrectly, (vi) To request deletion or destruction of personal data within the framework of the conditions stipulated in Article 7 of the PDP Law, (vii) To request notification of the transactions made pursuant to subparagraphs (d) and (e) to third parties to whom personal data is transferred, (viii) To object to the emergence of a result against the person by exclusively analyzing the processed data through automated systems, (ix) To request compensation for the damages incurred due to the unlawful processing of personal data.

• As personal data owners, in order to state your requests regarding your rights and to exercise your rights over your personal data; You can fill out the “Application Form for Data Processed Persons” that you can access from the YPS Website and perform the necessary changes, updates and/or deletions and related requests via the YPS official e-mail address yps@yps.com.tr.

• If you submit your requests to us using the specified methods, the Company will finalize the request free of charge as soon as possible and within thirty days at the latest, depending on the nature of your request. However, if the transaction requires an additional cost, the Company will charge the fee in the tariff determined by the Personal Data Protection Board.

• I hereby accept, declare and undertake that I have read the above disclosure text regarding the Processing of Personal Data, that I have been informed by YPS Otomotiv Sanayi Ve Ticaret Anonim Şirketi as the Data Controller, and that I will notify the Company of any changes in my personal data processed by the Company as soon as possible.