Page 11 - POLICY FOR THE PROTECTION AND PROCESSING OF PERSONAL DATA OF NUROL GROUP EMPLOYEES

Information on Family : Personal data about family members (spouse, mother, father, children),
Members and Relatives relatives and emergency contact names of the data owner, which are
collected in an effort to protect the legal and other interests of our Company
and the data owner within the framework of the operations carried out by
our Company’s business units.

Private Personal Data : Data specified in Article 6 of the Law (health data, biometric data, religion,
affiliated associations, etc.).

ANNEX 3 - PURPOSES OF PROCESSING PERSONAL DATA
MAIN PURPOSES (PRIMARY) SUB-PURPOSES (SECONDARY)
Planning and/or carrying out of processes related to
recruitment and employee personnel issues
Planning and/or execution of the processes related
to the applications, selection and evaluation of
prospective employees
Planning and/or execution of the internal/external
activities necessary for the placement of
prospective employees and/or students and/or
Planning and/or execution of our Company’s interns
human resources policies and processes Planning and/or execution of activities related to
the obtaining of references and/or intelligence
activities for the recruitment of personnel and/or
the Company’s security processes
Planning and/or execution of operational activities
necessary for disciplinary/ethical processes
Planning and/or execution of activities related to
the creation, inspection and/or tracking of the
personal records of subcontractors’ employees
Planning and/or execution of the necessary
operational activities to ensure that the Company
activities are carried out in line with the Company
procedures and/or the relevant legislation
Planning and/or execution of activities relating to
the procedures of Corporate Law and Partnership
Law
Tracking of legal processes
Planning and/or execution of activities aimed at
Planning and/or execution of activities aimed at
ensuring the legal and technical safety of our
Company and of the relevant persons in a meeting and registering requests from official
business relationship with our Company, institutions and/or organizations for information
and/or documents
Planning and/or execution of activities related to
the fight against the laundering of the proceeds of
crime and the financing of terrorism, and related to
the principle of “know your customer” (KYC) and
the identification of legal and commercial risks
Ensuring the safety of the company’s operations

10