Bizimle Değişir - Personal Data Protection and Privacy

In Brief

Bizimle Değişir is an internal application for Enerjisa Üretim employees. Detailed information on the processing of your personal data and your rights under the KVKK is available in the Information Notice.

Information Notice on the Use and Protection of Personal Data

Pursuant to Law No. 6698 on the Protection of Personal Data (“KVKK”), your personal data obtained by ENERJİSA ENERJİ ÜRETİM A.Ş. (the “Company”) in connection with the use of the “Bizimle Değişir” mobile application and web portal (together, the “Application”), or provided by you through the Application, may be processed, recorded, stored, updated and transferred to third parties by the Company in its capacity as data controller, for the purposes set out below, in accordance with the KVKK and related legislation, lawfully and in good faith.

Detailed information on the purposes for which your personal data are processed and transferred by our Company is provided in the Personal Data Protection and Processing Policy available at www.enerjisauretim.com.tr.

I. Identity of the Data Controller

Title	ENERJİSA ENERJİ ÜRETİM ANONİM ŞİRKETİ
Mersis No	0335006561200012
Address	Barbaros Mahallesi Çiğdem Sokak Ağaoğlu My Office Apt. No: 1/16 Ataşehir/İstanbul, Türkiye
Phone Number	+90 (216) 512 40 00
E-mail	[email protected]
Registered Electronic Mail (KEP)	[email protected]

II. Method of Collecting Personal Data

Your personal data are collected electronically and by automated means for the achievement of the Purposes described below, through the following channels:

Through the Company’s corporate identity verification system when you log in to the Application with your corporate user account;
Through the automatic transfer to the Application of your employee information recorded in the Company’s human resources systems (name, surname, employee ID number, position, title, department, location, manager information, start date, birthday, corporate e-mail address and internal phone extension);
Through the display in the Application of your annual leave balance and leave records via the Company’s leave management system (HRWeb);
Through the information you enter while using the Application (profile photo, experience, skill and project information, social media profile link, likes and comments, celebration and welcome messages, survey responses and questions asked to the Digital Assistant);
Through device and session records generated automatically during the use of the Application (device type, operating system, application version, login records, error logs and the device identifier used to send notifications).

Your collected personal data are stored securely in electronic form for a period appropriate to the purpose of processing.

III. Purposes and Legal Grounds for Processing Your Personal Data

Your personal data may be processed by the Company for the purposes set out below (the “Purposes”) and on the legal grounds set out below, within the framework of the personal data processing conditions set out in Article 5 of the KVKK:

Where expressly provided for by law and necessary for compliance with legal obligations

Identity, contact, personnel and professional information for the purpose of carrying out employee leave and personnel processes;
Identity, contact, personnel and professional information for the purpose of fulfilling legal obligations relating to employees;
Identity, contact, personnel and professional information for the purpose of fulfilling legal and administrative obligations towards authorised persons, institutions and organisations.

Where processing is directly related to and necessary for the establishment or performance of a contract

Identity, contact, personnel and professional information for the purpose of carrying out human resources processes relating to employees;
Identity, contact, personnel and professional information for the purpose of keeping employees’ personnel and employment information up to date;
Identity, contact, personnel and professional information for the purpose of providing employees with access to leave and similar human resources services.

Where processing is necessary for the legitimate interests of the Company, provided that it does not harm the fundamental rights and freedoms of the data subject

Identity, contact, personnel and professional information for the purpose of planning and carrying out the Company’s human resources processes;
Identity, contact, personnel and professional information, visual data and user content for the purpose of improving the employee experience and employee communication;
Identity, contact, personnel and professional information for the purpose of evaluating employees’ skills, projects and areas of interest in the relevant human resources processes;
Identity, contact, personnel and professional information for the purpose of identifying employees’ skills and development areas and carrying out career and development processes;
Identity, contact, personnel and professional information for the purpose of conducting employee surveys (survey results are reported in aggregate; in surveys designated as anonymous, your responses are not reported in a way that links them to your identity);
Identity, contact, personnel and professional information for the purpose of carrying out activities aimed at improving internal communication and employee engagement;
Identity, contact, personnel and professional information for the purpose of managing human resources processes effectively and efficiently;
Identity information and transaction security information for the purpose of carrying out information security processes, ensuring the secure and uninterrupted operation of the Application, and detecting and resolving errors;
Identity information, personnel information and Digital Assistant records for the purpose of answering employees’ questions about human resources processes through the Digital Assistant and improving the quality of the service provided.

IV. Personal Data Processed

Data Categories	Personal Data Processed
Identity Information	Name, surname, birthday (day and month)
Contact Information	Corporate e-mail address, internal phone extension
Personnel Information	Position, title, department/division, location, start date, manager information, employee ID number, leave balance, leave records and information on leave processes, responses given in surveys participated in through the Application
Visual and Audio Records	Profile photo
Professional Information	Skills, competencies, project information, experience information, social media (LinkedIn) profile link
User Content	Celebration and welcome messages sent through the Application, likes and comments on skills
Transaction Security Information	Device type, operating system and application version, login records, error logs, device identifier used to send notifications
Digital Assistant Records	Questions asked to the Digital Assistant and the answers given

V. Parties to Whom Your Personal Data May Be Transferred and Purposes of Transfer

Your collected personal data may be transferred, in line with the Purposes above, to the extent required by business processes, in compliance with the processing conditions required by the legislation and by taking the necessary security measures, to legally authorised public institutions and organisations where expressly provided for by law and for the fulfilment of our legal obligations; and, based on our Company’s legitimate interest, to the extent required by business processes, in compliance with the processing conditions required by the legislation and by taking the necessary security measures, to service providers whose servers are located abroad for the purpose of using the Company’s systems and software, in accordance with the rules on the transfer of personal data set out in Articles 8 and 9 of the KVKK.

VI. Retention Period of Your Personal Data

Your personal data processed within the scope of the Application are retained for the period necessary for the purpose for which they are processed and within the framework of the retention periods stipulated in the relevant legislation and the Company’s personal data retention and destruction processes. Upon termination of your employment relationship, your user account in the Application is closed and, subject to the retention periods stipulated in the relevant legislation, your personal data are deleted, destroyed or anonymised following the expiry of the processing purpose or the retention period.

VII. Your Rights Regarding Your Personal Data

You may at any time submit your requests regarding your personal data processed by us under Article 11 of the KVKK to our addresses set out in Section I, in writing in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller, or by using a registered electronic mail (KEP) address, a secure electronic signature or the e-mail address that you have previously notified to us and that is registered in our systems. Accordingly, you may also submit your requests regarding your personal data processed through the Application via the application methods set out above.

DECLARATION OF HAVING READ THE INFORMATION NOTICE

Regarding the processing of my personal data, I have read and understood the information notice.

This declaration is obtained by ticking the “I have read and understood” option when you first log in to the Application and whenever the notice is updated.

The date and time at which the declaration is given are recorded.

Last updated: 14.10.2026