Disclosure Statement on the Personal Data Protection Law (PDPL)

Eresin Energy Investment Trust respects your privacy and attaches importance to your data security. In this context, this text has been prepared in order to inform and enlighten you within the scope of the Law No. 6698 on the Protection of Personal Data ("Law") and other relevant legislation.

Information

Law No. 6698 on the Protection of Personal Data was adopted on March 24, 2016 and entered into force upon publication in the Official Gazette on April 7, 2016. However, according to Article 32 of the Law, Articles 8, 9, 11, 13, 14, 15, 16, 17 and 18 of this Law became effective as of October 7, 2016.

The Law was adopted in order to protect the fundamental rights and freedoms of individuals, especially the right to privacy, and to regulate the obligations of real and legal persons who process personal data and the procedures and principles to be followed. Therefore, with this text, it is explained in order to fulfill the disclosure obligation arising from the Law and "Protection of Personal Data and Personal Data Sharing Permission" is presented for the information and review of visitors.

Eresin Energy Investment Trust accepts, declares and undertakes that it will not sell, rent or use your name, e-mail address, work and home address, telephone number and other personal data submitted through the forms on this site to third parties in any way.

Processing of Your Personal Data

By processing your personal data, we mean all kinds of operations performed on your personal data, such as obtaining, recording, storing, storing, preserving, modifying, reorganizing, disclosing, transferring, taking over, making available, classifying or preventing the use of your personal data by fully or partially automated or non-automated means, provided that it is part of any data recording system.

Data Controller and Representative

Pursuant to the Law, your personal data may be processed by Eresin Enerji Yatırım Ortaklığı as the data controller within the scope described in this text. Eresin Enerji Yatırım Ortaklığı is responsible for the establishment and management of the data recording system by determining the purposes and means of processing personal data stored in the database. When the Data Controllers Registry is opened, the data controller declares that he/she will have the title of registered data controller by registering.

Our Reasons for Processing Your Data

Your personal data you provide to our company is transferred to our business partners, service provider, supplier, group company, company official and company shareholders, authorized public institutions and organizations and private law persons for the purposes listed above, in accordance with the conditions in Articles 8 and 9 of the KVKK. In case information is requested by the courts or in order for our products to be delivered to you, sharing your address information with our business partner, which is a transportation company, or sharing reference evaluations from third company officials with the explicit consent of our personnel who have worked in our company in the past.

In addition, the Company may transfer personal data abroad for the above-mentioned purposes; in case the data owner has explicit consent or in cases where the data owner does not have explicit consent but one or more of the other conditions mentioned above are met; if there is adequate protection in the country where the data is transferred and if there is no adequate protection in the country where the data is transferred, provided that the relevant company undertakes adequate protection in writing with the data controller in the relevant foreign country and obtains the permission of the Personal Data Protection Board. For example, personal data is shared during the reservation of the hotel where our personnel will stay in a fair organization in which they participate to represent our Company abroad or with your export department during the execution of export transactions and invoicing processes. Your personal data of special nature are not transferred abroad.

Your Personal Data may be processed by Eresin Enerji Yatırım Ortaklığı as the Data Controller without seeking your explicit consent in the following cases:

It is mandatory for the protection of the life or physical integrity of the person who is unable to disclose his/her consent due to actual impossibility or whose consent is not legally valid,

It is necessary to process personal data of the parties to the contract, provided that it is directly related to the performance of the contract,
It is mandatory for the fulfillment of our legal obligations as a data controller,

It has been made public by the person concerned,

Data processing is mandatory for the establishment, exercise or protection of a right,

Provided that it does not harm the fundamental rights and freedoms of the person concerned, it can be used for the purposes we will specify below, based on any of the conditions that data processing is mandatory for the legitimate interests of the data controller.

Your personal data may be processed for the following purposes:

To communicate with you and others as part of the business,

To send you important information about changes to our terms of service, changes to our electronic services and other administrative information,

Provide quality, training and safety improvement (for example, in relation to recorded or monitored phone calls to our contact numbers),

Resolve complaints and process requests for data access or correction,

Comply with applicable laws and regulatory obligations (including those outside your country of residence), including anti-money laundering and anti-terrorism laws, comply with due process of law, and respond to requests from public authorities and governmental authorities (including those outside your country of residence),

Manage our infrastructure and business operations and comply with internal policies and procedures, including those in connection with auditing, finance and accounting, billing and collections, IT systems, data and website hosting, business continuity and records, document and print management,

Identify and defend legal rights; protect our operations or the operations of our business partners, our rights, privacy, security or property, and/or your or others' assets; and apply available remedies or limit our losses,

Conducting market research and analysis, including satisfaction surveys,

Facilitate the social media sharing function,

To personalize your experience with electronic services by providing you with tailored information and advertisements.

To whom and for what purpose the processed personal data can be transferred

Your collected personal data may be transferred to our business partners, suppliers, legally authorized public institutions and private persons within the framework of the personal data processing conditions and purposes specified in Articles 8 and 9 of the KVK Law for the purposes of ensuring the legal and commercial security of our Company and the persons who have a business relationship with our Company, carrying out the necessary work by our business units to benefit you from the products and services offered by our Company, customizing the products and services offered by our Company according to your tastes, usage habits and needs, determining and implementing the commercial and business strategies of our Company and ensuring the execution of our Company's human resources policies. and 9. of the KVK Law within the framework of the personal data processing conditions and purposes specified in Articles 8 and 9 of the KVK Law.

Method and Legal Reason of Personal Data Collection

We process your personal data for the purposes listed above, in accordance with the Turkish Code of Obligations No. 6098, Commercial Code No. 6102, Various Tax Legislation, Social Security Legislation, Law No. 6502 on Consumer Protection, Labor Law No. 4857, Law No. 6563 on the Regulation of Electronic Commerce, Law No. 6331, Customs Law No. 4458 and the regulations and communiqués issued pursuant to these Laws and in accordance with all other legal legislation or based on your explicit consent.

Processing of personal data; It refers to all kinds of operations performed on data such as obtaining, collecting, recording, storing, storing, preserving, changing, rearranging, disclosing, transferring, taking over, making it available, classifying or preventing its use, provided that such data is fully or partially automated or part of any data recording system.

In our Company, personal data may be obtained and collected verbally, in writing or electronically for the above-mentioned purposes, including but not limited to the following; by fully or partially automatic or non-automatic means provided that it is part of any data recording system, through the Company's workplaces, departments, b2b sales site and website, social media channels, cameras and other similar means. For example

Through the surveillance footage at our workplace,

With the visual and audio broadcasts we made at the fairs we attended for marketing

By filling out the complaint and suggestion form on our website by our customers who have the title of consumer

By recording our company's phones during calls, by sending e-mails to our company or to the company e-mail address of our company employees, by faxing, from written texts sent to the mobile phones of our company employees,

Personal data related to job applications are collected through career portals, e-mail, İŞKUR, references and by physically filling out the application form. Pursuant to paragraph 1 of Article 13 of the KVK Law, you can submit your request to exercise your rights mentioned above to our Company in writing or by other methods determined by the Personal Data Protection Board. Since the Personal Data Protection Board has not determined any method at this stage, you must submit your application to our Company in writing in accordance with the KVK Law. In this context, the channels and procedures you will submit your written application to our Company within the scope of Article 11 of the KVK Law are explained below.

In order to exercise your rights stated above, you can fill out the form below and send your request, which includes the necessary information identifying your identity and your explanations regarding the right you request to exercise among the rights specified in Article 11 of the KVK Law, to the following address of the relevant company in person with documents identifying your identity, send it through a notary public or other methods specified in the KVK Law, or send the relevant form to the KEP address of the relevant company with secure electronic signature.