ENERGROM ENERGY CONSTRUCTION TRADE AND INDUSTRY INC.
IN ACCORDANCE WITH THE LAW ON THE PROTECTION OF PERSONAL DATA NO. 6698
INFORMATION TEXT
Energrom Energy Construction Trade and Industry Inc. (the “Company”) takes all necessary technical and legal measures to ensure the processing of your personal data in accordance with the Law on the Protection of Personal Data No. 6698 (the “KVKK”). Individuals can find detailed information regarding the processing of their personal data, the transfer of their data to third parties, the legal grounds for data collection, and their rights under the KVKK in the information text below.
A. Processed Personal Data, Purpose of Data Processing, Collection Method, and Legal Basis for Processing
Your personal data is collected through non-automatic means, such as petitions, forms, verbal notifications, information from authorized institutions and organizations, contracts, invoices, etc., or digitally through automatic and semi-automatic means from areas such as email, phone, and websites.
The legal grounds on which our company relies during the data processing are as follows:
· The existence of explicit consent (“m.5/1, m.6/2”).
· Clearly prescribed by law (“m.5/2-a”).
· Being in a situation where the individual is unable to express their consent due to actual impossibility or where legal validity is not granted to their consent, and where processing is necessary for the protection of the life or bodily integrity of the individual or another person (“m.5/2-b”).
· Being directly related to the establishment or performance of a contract, provided that it is necessary to process personal data of the parties to the contract (“m.5/2-c”).
· Being mandatory for the data controller to fulfill a legal obligation (“m.5/2-d”).
· Having been made public by the relevant person themselves (“m.5/2-e”).
· Being necessary for the establishment, use, or protection of a right (“m.5/2-f”).
|
Purpose of Data Processing |
Processed Personal Data |
Data Processing Conditions |
|
Conducting purchasing, bidding, and analysis processes |
Name, Surname, TCKN (Turkish ID Number), Phone, Tax Office, Bid Amount, Tax Number |
m.5/2-c m.5/2-e, m.5/2-f |
|
Conducting financial processes |
Name, Surname, Turkish ID Number, Bank Account Number, Tax Office and Number, Payment Amount, Signature, Phone, Email |
m.5/2-c m.5/2-ç, m.5/2-e |
|
Conducting the procurement and contracting processes of goods/services, purchasing |
Name, Surname, TCKN, Email, Phone, VKN (Tax Number), Tax Office, Bank Account Number, Signature, Address |
m.5/2-c, m.5/2-e, m.5/2-f |
|
Conducting invoice processes |
Name Surname, TCKN, Tax Office, Bank Account Number, Payment Amount, Address |
m.5/2-c, m.5/2-e, m.5/2-f |
|
Creating a potential customer portfolio |
Name, Surname, Company Name, Phone Number, Email |
m.5/2-f |
|
Conducting sales and contract processes, fulfilling obligations |
Name, Surname, TCKN, Email, Phone, VKN, Tax Office, Bank Account Number, Signature, Address |
m.5/2-c, m.5/2-e |
|
Creating a supplier/customer list |
Name, Surname, Company Name, Phone Number, Email |
m.5/2-f |
|
Managing communication processes |
Name Surname, Title, Phone, Company Name |
m.5/2-f |
|
Management of requests and complaints |
Requests, Complaints |
m.5/2-f |
B. Transfer of Personal Data
Your processed personal data may be transferred in accordance with the purposes above and the conditions specified by the Law on the Protection of Personal Data (KVKK):
· To legally authorized public institutions and organizations, limited to the requests and legal regulations of these entities, such as the Social Security Institution (SGK), courts, enforcement offices, and tax offices.
· To banks, suppliers, and business partners in order to exercise contractual rights and fulfill obligations, as well as to conduct transactions specific to our sector.
· To independent audit firms, expert consultants, and regulatory and supervisory authorities for the purpose of fulfilling contractual and legal obligations.
· To suppliers, audit firms, and information security firms to establish necessary quality, confidentiality, and standards.
· To real and legal persons and public institutions and organizations with whom we cooperate in order to carry out the company's activities.
· To business partners and suppliers for the purpose of conducting advertising, promotion, and public relations activities, shared openly with everyone.
· To third persons and institutions requesting references based on a valid legal reason, limited to the subject of the request.
· To software companies established domestically and abroad for the maintenance and repair of the operating systems, software, and cloud services we use within the company.
· To suppliers located domestically and/or abroad to enhance the company's visibility and brand value, improve internet infrastructure, and maintain currency.
· To institutions/organizations established domestically and abroad that provide services in the fields of security, technology, and cloud services, for digital data.
· Due to the location of the companies and servers that provide services in the context of the applications, software, and systems we use, data may be transferred abroad.
· To our shareholders located abroad within the framework of company reporting and information processes.
Data may also be transferred based on your explicit consent.
C. Rights of the Relevant Person
Everyone has the following rights under Article 11 of KVKK:
1. Learning whether personal data is processed,
2. Requesting information regarding personal data if it has been processed,
3. Learning the purpose of processing personal data and whether it is used in accordance with that purpose,
4. Knowing the third parties to whom personal data is transferred within the country or abroad,
5. Requesting the correction of personal data in case of incomplete or incorrect processing and requesting the notification of this correction to third parties to whom personal data has been transferred,
6. Requesting the deletion or destruction of personal data in case the reasons requiring its processing cease to exist, despite being processed in accordance with the KVKK and relevant other legal provisions, and requesting the notification of this action to third parties to whom personal data has been transferred,
7. Objecting to the occurrence of a result against the individual by analyzing the processed data exclusively through automated systems,
8. Requesting compensation for damages in case of suffering a loss due to the unlawful processing of personal data.
Everyone can submit their requests regarding these rights to our Company in accordance with the Communiqué on the Procedures and Principles for Applications to the Data Controller. Requests will be evaluated and concluded free of charge as soon as possible and, in any case, within a maximum of thirty (30) days. If the evaluation and decision-making process requires an additional cost, the fee determined by the Personal Data Protection Authority will be applied.
Identity of the Data Controller
Website Address: http://www.energrom.com.tr
Phone Number: (0216) 693 19 11
Email Address: info@energrom.com.tr
Address: Kavacık Mah., Ertürk Sokak, No:1 K1 Plaza, Ground Floor, Beykoz/Istanbul
