Clarification Text on the Processing of Personal Data

In accordance with the Personal Data Protection Law No. 6698 (KVKK) and the Law on Regulation of Electronic Commerce (“ETK”), personal data that has been/will be obtained by Enerjisa Enerji Üretim A.Ş. (“Company”) or that you have shared/will share with the Company, or that you have shared as the authorized representative/employee of your firm within the framework of conducting tender, contract, order, payment, and risk assessment processes may be processed, recorded, stored, updated, and transferred to third parties by the Company, in its capacity as data controller, within the scope of the purposes specified below, in compliance with the law and the principle of honesty.

IDENTITY OF THE DATA CONTROLLER

Title:  ENERJİSA ENERJİ ÜRETİM ANONİM ŞİRKETİ

Mersis No: 0335006561200012

Address: BARBAROS MAHALLESİ ÇİĞDEM SK. AGAOGLU MY OFFICE Apt. NO: 1/16 ATAŞEHİR/İSTANBUL

Telephone Number: (0216) 512 40 00

Registered Electronic Mail (KEP): enerjisauretim@hs01.kep.tr

PROCESSED PERSONAL DATA CATEGORIES

The categories of personal data processed by the Company are specified below:

• E-mail address

• First name and last name 

• Telephone number 

• Financial data, 

• Customer transaction data

METHOD OF COLLECTING PERSONAL DATA 

Your personal data is collected in accordance with KVKK within the framework of fulfilling the Purposes explained below, through filling out supplier information forms, or electronically via e-mail and online forms. Your personal data may also be preserved in both digital and physical environments by being transferred to physical archives and information systems.

PURPOSES AND LEGAL GROUNDS FOR PROCESSING YOUR PERSONAL DATA

Your personal data may be processed by the Company for the purposes (“Purposes”) and legal grounds shown below and within the framework of the personal data processing conditions specified in Article 5 of the KVKK: 

Your personal data is processed for the following purposes, including but not limited to:

• Sending electronic commercial messages (campaigns, promotions, information, offers, etc.),

• Providing and improving our services,

• Conducting customer satisfaction activities.

Based on the legal ground that data processing is mandatory for the legitimate interests of the Company, provided that it does not harm the fundamental rights and freedoms of the data subject;

• Identity and contact data for the purpose of managing access authorizations by the Company

• Transaction security data for the purpose of creating and tracking visitor records by the Company

• Identity, contact data, and customer transaction data for the purpose of managing contract processes by the Company,

• Identity, contact data, and customer transaction data for the purpose of conducting business activities by the Company,

• Identity, contact, financial, and customer transaction data for the purpose of ensuring business continuity and conducting business activities by the Company

• Contact and identity data for the purpose of managing storage and archiving activities by the Company,

• Identity, contact data, and customer transaction data for the purpose of conducting communication activities by the Company,

• Identity and contact data for the purpose of conducting customer satisfaction-oriented activities by the Company,

• Identity, contact, and customer transaction data for the purpose of receiving and evaluating suggestions for the improvement of business processes by the Company

• Contact and identity data for the purpose of tracking and conducting legal affairs

• Identity, contact, financial, and customer transaction data for the purpose of providing information to authorized institutions and organizations

• Transaction security data for the purpose of ensuring the security of data controller operations

• Identity, contact, financial data, and customer transaction data for the purpose of conducting audit / ethics activities, 

• Contact and identity data for the purpose of conducting Occupational Health/Safety activities,

• Your identity (name, surname), contact (mobile phone number, e-mail address), and customer transaction (message content, message delivery date and time) data, in order to conduct commercial communication processes, transferred to the electronic commercial message service provider from whom we receive services in this regard,

• Based on the legal ground that "it is mandatory for the data controller to fulfill its legal obligation", your identity (name, surname), contact (mobile phone, e-mail address), and legal transaction (commercial communication opt-in/opt-out status, source of approval, how approval was obtained, approval date and time, and authorized communication method) data to the Message Management System Inc. (İYS) in order to fulfill our legal obligations; and the same data for the purpose of receiving integration services to record commercial communication records to İYS as part of executing commercial communication processes

Based on the legal ground that it is explicitly provided for by law and mandatory for the data controller to fulfill its legal obligation;

• Identity, contact, financial data, customer transaction data, and transaction security data for the purpose of conducting activities in accordance with the legislation

Based on the legal ground that processing of the personal data of the parties to a contract is necessary, provided that it is directly related to the establishment or performance of a contract;

• Identity, contact, financial data, and customer transaction data for the purpose of managing procurement processes of goods and services

• Identity, contact, financial data, legal transaction data, and customer transaction data for the purpose of managing contract processes

• Identity, contact, and customer transaction data for the purpose of Managing Access Authorizations

• Identity, contact, and customer transaction data for the purpose of managing communication activities

Based on your explicit consent in cases where your explicit consent is present;

• Executing business development activities, evaluating potential collaborations, and organizing meetings / appointments for this purpose

PERSONS OR ORGANIZATIONS TO WHOM YOUR PERSONAL DATA MAY BE TRANSFERRED AND TRANSFERS' PURPOSES

Your collected personal data, in line with the realization of the Purposes above; to the extent required by business processes and in accordance with the processing conditions required by law, with necessary security measures taken, based on the legal ground of our Company's legitimate interest, may be transferred to its affiliates and subsidiaries, business partners, Company shareholders, legally authorized public institutions and organizations within the scope of explicit provision in laws and fulfillment of our legal obligations, and to service provider companies whose servers are located abroad for the purpose of using Company systems and software, in compliance with the rules regarding the transfer of personal data specified in Articles 8 and 9 of the KVKK.

YOUR RIGHTS REGARDING PERSONAL DATA

You can always submit your requests regarding your personal data processed by us within the scope of Article 11 of the KVKK to the following addresses in writing or by using your registered electronic mail (KEP) address, secure electronic signature, or your electronic mail address previously notified to us and registered in our system, in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller:

E-mail: kisiselveri@enerjisauretim.com

KEP: enerjisauretim@hs01.kep.tr

Address: Barbaros Mh. Çiğdem Sk. Ağaoğlu My Office Apt No: 1/16 Ataşehir / İstanbul