INFORMATION TEXT ON THE PROTECTION AND PROCESSING OF PERSONAL DATA

In accordance with the Law on the Protection of Personal Data No. 6698 and the Law on the Regulation of Electronic Commerce (“ETK”), the personal data you have shared with Enerjisa Enerji Üretim A.Ş. (“Company”) may be processed, recorded, stored, updated and transferred to 3rd parties by the Company as the data controller, in accordance with the law and the principle of honesty, within the scope of the purposes specified below.

CATEGORIES OF PROCESSED PERSONAL DATA

The categories of personal data processed by the Company are specified below:

• E-mail address
• Name and surname
• Telephone number
• Company information

METHOD OF COLLECTION OF PERSONAL DATA

Your personal data is collected electronically via e-mail and online forms in accordance with the KVKK within the framework of the fulfillment of the Purposes explained below.

PURPOSES AND LEGAL REASONS FOR PROCESSING YOUR PERSONAL DATA

The Company may process your personal data for the purposes (“Purposes”) and legal reasons set forth below, and within the framework of the personal data processing conditions specified in Article 5 of the KVKK:

Your personal data is processed for the following purposes, including:

• Sending electronic commercial messages (campaigns, promotions, information, offers, etc.),
• Providing and improving our services,
• Conducting customer satisfaction studies.

Approval within the Scope of Law No. 6563 on the Regulation of Electronic Commerce;

If you give the Company permission/explicit consent for commercial communication through any channel, we process your identity (name, surname), contact (mobile phone number, e-mail address) and transaction security (user ID, log records) and legal transaction (commercial communication permission information) information based on the legal reason of “explicit consent” for the purposes of general or special personalized campaigns, advantages, product and service promotions, survey studies regarding our services, presentation of customer satisfaction applications, promotions, advertisements, information, commercial communication activities conducted by the Company through the channels you choose (SMS, e-mail) within the scope of marketing activities, and for the transmission of our invitations regarding campaigns, competitions, draws, invitations and other events.

Based on the legal reason that data processing is mandatory for the legitimate interests of the Company, provided that it does not harm the fundamental rights and freedoms of the relevant person;

• Identity and communication data for the purpose of executing access authorizations by the Company
• Transaction security data for the purpose of creating and monitoring visitor records by the Company
• Identity, communication data and customer transaction data for the purpose of executing contract processes by the Company
• Identity, communication data and customer transaction data for the purpose of executing business activities by the Company
• Identity, communication data and customer transaction data for the purpose of executing communication activities by the Company
• Identity and communication data for the purpose of executing customer satisfaction activities by the Company
• In order to carry out commercial communication processes, we will provide your identity (name, surname), communication (mobile phone number, e-mail address) and customer transaction (message content, message sending date and time) data to the electronic commercial message service provider from whom we receive service in this regard,

In order to fulfill our legal obligations, we will provide your identity (name, surname), communication (mobile phone, e-mail address) and legal transaction (commercial communication approval/rejection information, source of approval, how approval was obtained, approval date and time, approved communication method) data to the İleti Yönetim Sistem A.Ş. (İYS), Based on the legal reason that “it is mandatory for the data controller to fulfill its legal obligations”; the same data, for the purpose of receiving integration service regarding recording commercial communication records to the IYS within the scope of carrying out commercial communication processes

Based on the legal reason that it is clearly foreseen by the laws and mandatory for the data controller to fulfill its legal obligations;

• Identity, communication and transaction security data for the purpose of carrying out activities in accordance with the legislation

PERSONS OR ORGANIZATIONS TO WHICH YOUR PERSONAL DATA MAY BE TRANSFERRED AND THE PURPOSES OF TRANSFER

Your collected personal data will be transferred in line with the fulfillment of the above Purposes; to the extent required by business processes and in accordance with the processing conditions required by legislation, by taking the necessary security measures, to legally authorized public institutions and organizations within the scope of being clearly foreseen by law and fulfilling our legal obligations, to the Company’s business partners based on the legitimate interest of our Company, and to Microsoft Inc. and Pipedrive Inc., whose servers are located abroad, for the use of the Company’s systems and software, to the extent required by business processes and in accordance with the processing conditions required by legislation, by taking the necessary security measures, in accordance with Article 8 and 9 of the KVKK.

YOUR RIGHTS REGARDING PERSONAL DATA

Data owners have the following rights under the Law:

• To learn whether their personal data has been processed,
• To request information if their personal data has been processed,
• To learn the purpose of processing personal data and whether they are used in accordance with their purpose,
• To know the third parties to whom personal data is transferred domestically or abroad,
• To request correction of personal data if it is processed incompletely or incorrectly and to notify third parties to whom personal data is transferred of the transaction made in this context,
• To request deletion or destruction of personal data if the reasons requiring processing are eliminated despite the fact that it has been processed in accordance with the Law and other relevant legislation, and to notify third parties to whom personal data is transferred of the transaction made in this context,
• To object to the analysis of processed data exclusively through automated systems and the emergence of a result to the detriment of the person,
• To request compensation in case of damages due to unlawful processing of personal data.

You can submit your applications regarding these rights through the Data Owner Application Form located at www.enerjisauretim.com.tr, in a physical environment, by mail or notary to the address “Barbaros Mh. Çiğdem Sk. Ağaoğlu My Office Apt No: 1/16 Ataşehir / İstanbul” or via e-mail to our Company’s address [email protected]. Your request will be finalized within 30 (thirty) days at the latest, depending on its nature. However, if the transaction requires an additional cost, we will charge the fee determined by the Personal Data Protection Board.

For more detailed information on the subjects included in this text, please visit www.www.enerjisauretim.com.tr

Last Update: