PERSONAL DATA PROTECTION COMMITMENT

INSPECT Global aims to process and protect personal data by contemporary standards. We act as a data controller and take necessary precautions regarding the protection of personal data.

Our general principles in processing personal data are as follows:

1. Compliance with national and international law, honesty, and ethical rules,
2. Being accurate and constantly up-to-date,
3. Processing for specific, explicit, and legitimate purposes,
4. Being relevant, limited, and proportionate to the purpose for which they are processed,
5. Retention for the period stipulated in the relevant laws, IAF rules, and/or accreditation rules, or for the period necessary for the purpose for which they are processed.

Your personal data may be collected verbally, in writing, or electronically by our company's branches, via electronic and mobile applications and similar means, automatically or non-automatically, varying depending on the service provided by our company.

INSPECT Global will not share the collected information with anyone other than legal authorities, accreditation bodies, and information owners. Video recordings taken during remote audits will be deleted after the audit according to IAF rules. Photographs taken during audits will be kept in client files and will not be shared with anyone other than those specified above.

As personal data owners, if you submit your requests regarding your rights to our company using the methods set out below in this Clarification Text, our company will conclude the request free of charge within thirty days at the latest, depending on the nature of the request.

In this context, personal data owners have the right to;

• Learn whether personal data is processed or not,
• Request information if personal data has been processed,
• Learn the purpose of processing personal data and whether they are used in accordance with their purpose,
• Request the deletion or destruction of personal data and request that the procedure carried out within this scope be notified to third parties to whom personal data has been transferred,
• Object to the occurrence of a result against the person himself/herself by analyzing the processed data exclusively through automated systems.