Our Personal Data Protection Approach

Garanti Rafineri ve Maden Isletmeleri A.S. regards the protection of personal data not only as a legal obligation, but also as one of the fundamental elements of a trustworthy, transparent and sustainable business approach. Our company places great importance on ensuring the secure processing and protection of personal data belonging to employees, customers, suppliers, business partners and all other stakeholders.

Our personal data protection approach is based on processing personal data in accordance with the law and the principles of good faith, using it for specific and legitimate purposes, retaining it only for as long as necessary, and protecting it through appropriate security measures.

As part of our company’s personal data processing activities, we consider the following to be among our key corporate priorities;

• Processing personal data in accordance with the provisions of the applicable legislation;

• Protecting data confidentiality and security;

• Preventing unauthorized access;

• Maintaining data integrity;

• Implementing technical and administrative security measures; and

• Regularly reviewing and improving our data processing processes.

Garanti Refinery aims to continuously improve its personal data protection processes in line with technological developments, the applicable legal requirements and good practice principles. From our company’s perspective, protecting personal data is not only an element of information security, but also an important part of stakeholder trust and its commitment to corporate responsibility.