PRIVACY PROTOCOL FOR THE PROCESSING OF PERSONAL DATA IN COMMERCIAL BUSSINESS RELATIONSHIPS

PARTIES:

1- BIS ÇÖZÜM BİLGİSAYAR VE ENTEGRASYON HİZMETLERİ VE TİC. A.Ş. 

(Hereinafter referred to as “BIS”)

Address: İçerenköy Mah., Üsküdar-İçerenköy Yolu Cad. No:10, Kat:2, VIP Center, Ataşehir, Istanbul

2- [Customer’s Name] (Hereinafter referred to as “Customer”)

Address: [Customer’s Address]

BIS and the Customer, hereinafter collectively referred to as the “Parties,” and individually as a “Party.”

PROVISIONS:

1. This Privacy Protocol for the Processing of Personal Data in Commercial Business Relationships (“Protocol”) is entered into by BIS and the Customer as an additional agreement to the Distance Sales Agreement (“Agreement”) concluded between them.
2. Personal data refers to any kind of data related to an identified or identifiable individual. In the event of any personal data sharing between the Parties pursuant to the Agreement, each Party acknowledges, declares, and undertakes to take all necessary technical and administrative measures to ensure the data security of the shared personal data.
3. In accordance with the Agreement signed between the Parties, both Parties undertake to process the personal data they collect themselves or acquire from the other Party during the performance of the Agreement in compliance with GDPR , while respecting the fundamental rights and freedoms of the relevant individuals and their right to the protection of personal data.
4. The services and products subject to the Agreement between the Parties require the recording of the personal data of the Customer’s employees in the API Buldier  platform established by BIS. The Customer declares and undertakes that, regarding the processing of the Personal Data that it will transfer to BIS and/or BIS’s information systems created to provide its services, it will be responsible for informing the relevant data owners in accordance with GDPR and obtaining the necessary permissions and approvals in the content and format required by the mentioned legislation. Otherwise, the Customer shall be responsible for any administrative fines as well as material and moral damages arising therefrom.
5. BIS may process, store, share with its subcontractors under confidentiality obligations to the extent necessary for the provision of services, or share with third parties in an anonymized form the personal data entered into the system.
6. The Parties shall promptly inform each other in the event that the other Party’s data shared with them is requested by a third party or the relevant individual, except for the business partners agreed upon for the provision of services, in any circumstances, including legal obligations.
7. Each Party is solely responsible for the security of the personal data it collects within its own organization and does not share with the other Party.
8. This Protocol is an integral and inseparable part of the Agreement and enters into force upon the signature of the Agreement. The obligations arising from this Protocol are not limited by any period of time.

On Behalf of BIS; On Bahalf of the Customer:

Name- Surname: Name – Surname:

Date: Date:

Stamp – Signature: Stamp – Signature: