CCTV Disclosure Notice
Sunpet Packaging Sanayi ve Ticaret A.Ş. (hereinafter referred to as “Sunpet Packaging”) carries out the personal data processing activities conducted through security cameras located at the entrances to and within its buildings and facilities in accordance with the Constitution of the Republic of Türkiye, the Turkish Personal Data Protection Law No. 6698 (“KVKK”), and the applicable legislation. Acting as the Data Controller under the KVKK, Sunpet Packaging processes personal data through security camera monitoring and by recording the entry and exit of visitors, contractors, and their vehicles for the purpose of ensuring security.

1. CCTV Monitoring and Recording Activities
Sunpet Packaging processes personal data by means of closed-circuit television (CCTV) systems within its premises for the purpose of ensuring legal, technical and commercial security.

1.1 Legal Basis and Method of Collection
The CCTV monitoring and recording activities are carried out in accordance with Law No. 5188 on Private Security Services and its implementing regulation, based on the legitimate interests of the Company. Personal data is collected electronically through CCTV systems in accordance with Articles 5 and 6 of the KVKK.

1.2 CCTV Monitoring under the KVKK
Security camera monitoring is conducted for the purposes permitted under the applicable legislation and in accordance with the personal data processing conditions set out in the KVKK.

1.3 Notification of CCTV Monitoring
In accordance with Article 10 of the KVKK, data subjects are informed about CCTV monitoring through various notification methods. Information notices are displayed at the entrances of monitored areas to ensure transparency and fulfil the obligation to inform.

1.4 Purpose Limitation
Personal data is processed in accordance with Article 4 of the KVKK, in a manner that is relevant, limited and proportionate to the purposes specified in this Notice. Monitoring areas, the number of cameras and monitoring periods are limited to what is necessary to achieve security purposes. Areas where monitoring would interfere with personal privacy beyond security purposes (such as prayer rooms and restrooms) are not monitored.

1.5 Security of Personal Data
Sunpet Packaging implements the necessary technical and administrative measures pursuant to Article 12 of the KVKK to ensure the security of personal data obtained through CCTV monitoring.

1.6 Retention Period
CCTV recordings are retained for 25 days.

1.7 Transfer of Personal Data
Access to CCTV recordings is limited to authorised personnel. Where required by law, recordings may be transferred to competent public authorities within the framework of Articles 8 and 9 of the KVKK (for example, upon the written request of the Public Prosecutor or a judge during an investigation). Persons authorised to access such recordings are bound by confidentiality obligations.

2. Monitoring of Visitors and Contractors
Personal data relating to the entry and exit of visitors and contractors is processed for security purposes. Visitors are informed through notices available at the premises. The collected data is processed solely for this purpose, collected through physical methods based on the Company's legitimate interests in accordance with Articles 5 and 6 of the KVKK, and recorded in the data recording system. Such data may be transferred to competent public authorities in accordance with Articles 8 and 9 of the KVKK where required by law.

3. Purposes, Categories and Retention Periods
Within the scope of its obligation to inform under Article 10 of the KVKK, Sunpet Packaging informs data subjects about the categories of personal data processed, the purposes of processing and the applicable retention periods.

4. Deletion, Destruction and Anonymization
Where the reasons requiring processing cease to exist, personal data covered by this Notice shall be deleted, destroyed or anonymized by Sunpet Packaging upon its own decision or upon the request of the data subject, in accordance with Article 7 of the KVKK and Article 138 of the Turkish Criminal Code.

5. Rights of the Data Subject
Data subjects have the rights provided under Article 11 of the KVKK, including the right to learn whether personal data is processed, request information, learn processing purposes, learn recipients, request correction, request deletion or destruction where applicable, request notification to third parties, object to automated decision-making, and request compensation for damages resulting from unlawful processing.
Applications regarding the above rights may be submitted to our Company by completing the Application Form available through the Public Disclosure Text published at www.sunpet.com.tr. Applications shall be concluded free of charge as soon as possible and no later than thirty (30) days following receipt. If the process requires an additional cost, a fee may be charged in accordance with the tariff determined by the Personal Data Protection Board.