CLARIFICATION TEXT FOR WEBSITE VISITORS

This Clarification Text has been prepared by Enerjisa Enerji Üretim Şirketi (“Company”) as the data controller within the scope of Article 10 of the Law on the Protection of Personal Data No. 6698 (“Law”) and the Communiqué on the Procedures and Principles to be Followed in Fulfilling the Obligation to Inform.

Detailed information regarding the purposes for which your personal data is processed and transferred by our Company can be found in the “Personal Data Protection and Processing Policy” available on our website.

METHOD OF COLLECTING PERSONAL DATA

Your personal data may be collected electronically by automated means during your visit to our website.

PURPOSES AND LEGAL GROUNDS FOR PROCESSING YOUR PERSONAL DATA

Your personal data may be processed by the Company for the purposes listed below (“Purposes”) and under the personal data processing conditions specified in Article 5 of the Law. Cookies are used on the Website for different purposes. Depending on the type of cookie used, the purposes of data processing and the legal basis for processing under the Law may vary. The principles we follow while processing personal data collected through our website are set out in this Privacy Policy.

As a result of visiting our website, your IP address information and website access logs may be processed for the following purposes: ensuring compliance with legal regulations, conducting information security processes, managing access authorizations, ensuring the security of data controller operations, providing information to authorized individuals, institutions and organizations, conducting audit/ethical activities, conducting internal audits/investigations/intelligence activities, and managing/monitoring business operations.

RECIPIENTS TO WHOM YOUR PERSONAL DATA MAY BE TRANSFERRED AND PURPOSES OF TRANSFER

Your collected personal data may be transferred, for the fulfillment of the above-mentioned Purposes, to the extent required by business processes and in accordance with the processing conditions stipulated by applicable legislation, and with the necessary security measures in place, to the following parties:

  • Legally authorized public institutions and organizations, where explicitly required by law and for the fulfillment of our legal obligations,
  • The Company’s business partners, based on the legal ground of the Company’s legitimate interests,
  • Service providers with servers located abroad, for the purpose of using the Company’s systems and software,

in compliance with the personal data transfer rules set forth in Articles 8 and 9 of the Law on the Protection of Personal Data.

YOUR RIGHTS REGARDING YOUR PERSONAL DATA

Under the Law, data subjects have the following rights:

  • To learn whether their personal data is being processed,
  • To learn whether their personal data is being processed,
  • To learn the purpose of the processing of their personal data and whether it is used in accordance with that purpose,
  • To request the correction of personal data if it is incomplete or incorrectly processed, and to request that the related transactions be notified to third parties to whom the personal data has been transferred,
  • To request the deletion or destruction of personal data in case the reasons requiring its processing no longer exist, even though it has been processed in accordance with the Law and other relevant legislation, and to request that the related transactions be notified to third parties to whom the personal data has been transferred,
  • To object to the occurrence of a result against the person by analyzing the processed data exclusively through automated systems,
  • To demand compensation in case of damage due to the unlawful processing of personal data.

You may submit your requests regarding these rights via the Data Subject Application Form available at www.enerjisauretim.com.tr, either physically by mail or notary to the address “Barbaros Mh. Çiğdem Sk. Ağaoğlu My Office Apt No: 1/16 Ataşehir / Istanbul”, or by e-mail to our Company at [email protected]. Your request will be finalized within 30 (thirty) days at the latest, depending on its nature. However, if the process requires an additional cost, a fee may be charged according to the tariff determined by the Personal Data Protection Board.

For more detailed information on the matters set out in this notice, please refer to the Personal Data Protection and Processing Policy published at www.enerjisauretim.com.tr.