ELESTAS ELECTRICITY GENERATION INC.
Clarification Text on the Protection of Personal Data
As **ELESTAŞ ELECTRICITY GENERATION INC.** ("the Company"), we attach the utmost importance to the security of your personal data. With this awareness, we place great emphasis on processing and storing all personal data of individuals associated with the Company, including those benefiting from our products and services, in compliance with the Law No. 6698 on the Protection of Personal Data ("PDPL") and the relevant legislation. With full understanding of this responsibility, as the "data controller" as defined in the PDPL, we process personal data as described below, within the boundaries set by the law.
a) Data Controller and Its Representative In accordance with thePDPL, your personal data may be processed by our Company, as the data controller, within the scope outlined below.
b) Purpose of Processing Personal Data, and the Recipients and Purposes of Data Transfers Your collected personal data may be processed by our Company in accordance with the law and the purpose of the PDPL, for the following purposes: ensuring the proper planning, execution, and management of our Company's commercial partnerships, management and communication activities, and strategies; conducting necessary work by our business units to allow personal data owners to benefit from our products and services in the best way possible and customizing them according to their requests, needs, and desires; ensuring the highest level of data security; improving the services offered on our website and resolving any errors on the site; communicating with personal data owners who submit requests or complaints, and managing the requests and complaints; event management; providing information to authorized institutions as required by legislation; creating and tracking visitor records; ensuring the legal and commercial security of our Company, group companies, and individuals who have business relations with our Company (administrative operations related to communications carried out by our Company, ensuring physical security and supervision of our locations, evaluation processes for business partners/customers/suppliers/authorities/employees, reputation research processes, legal compliance processes, audits, financial operations, etc.); determining and implementing our Company’s commercial and business strategies; and managing the execution of our Company’s human resources policies. These data may be processed in line with the conditions and purposes specified in Articles 5 and 6 of the PDPL, and transferred to our business partners, suppliers, group companies, Company authorities, shareholders, legally authorized public institutions, and private individuals, as specified in Articles 8 and 9 of the PDPL, for the purposes stated above. If the data processing activity does not meet any of the conditions stipulated under the Law, the Company will obtain your explicit consent regarding the relevant processing activity.
c) Method of Collecting Personal Data and Legal Basis Your personal data is collected by our Company through various channels, such as agents, our website, and physical channels, using technical and procedural methods implemented through these channels. This collection is based on the legal grounds that arise and are implemented in accordance with relevant legislation, contracts, requests, commercial customs, and principles of good faith, for the purpose of providing commercial services to you and carrying out our commercial activities within this framework. The personal data is collected for the purposes of fulfilling the obligations arising from the business relationship we have established with you, establishing, exercising, and protecting the rights we mutually hold, and ensuring the legitimate interests of our Company while respecting the fundamental rights and freedoms of the personal data owners with whom we are in contact.
d) Rights of the Personal Data Owner As personal data owners, if you submit requests regarding your rights, our Company will respond to your request as soon as possible, and no later than thirty days, depending on the nature of the request. However, if the process requires an additional cost, our Company will charge a fee in accordance with the rates determined by the Personal Data Protection Board. In this context, personal data owners can request the following from our Company:
- Learning whether personal data is being processed
- Requesting information about the personal data if it has been processed
- Learning the purpose of processing personal data and whether it is being used in accordance with that purpose
- Knowing the third parties to whom personal data has been transferred, either domestically or internationally
- Requesting the correction of personal data if it has been processed incompletely or inaccurately, and requesting that the correction be communicated to third parties to whom the personal data has been transferred
- Requesting the deletion or destruction of personal data when the reasons for processing no longer exist, despite the data being processed in accordance with the PDPL and relevant legislation, and requesting that this action be communicated to third parties to whom the personal data has been transferred. Objecting to the result arising against the person, which is solely based on the analysis of processed data through automated systems.
- In the event of damage caused by the unlawful processing of personal data, the data subject has the right to request the compensation of the damage.
To exercise the rights mentioned above, you may submit your request in writing to our Company, along with the necessary information to identify your identity and explanations regarding the right you wish to exercise, in accordance with the PDPL and the Communique on Procedures and Principles for Applications to the Data Controller. You can fill out and sign the application form, which is accessible through the link below:
- By making a personal application,
- Through a notary,
- The request must be signed with a "secure electronic signature" defined in the Electronic Signature Law No. 5070 and sent to our Company's registered electronic mail address, elestas@hs01.kep.tr.
Click here for the application form.
