Energrom Enerji İnşaat Ticaret ve Sanayi A.Ş. (hereinafter referred to as “Company”) takes all technical and legal measures in processing your personal data as part of its activities in accordance with the Personal Data Protection Law Number 6698 (hereinafter referred to as (“PDPL”). Data subjects may review the following disclosure text for more information about processing of their personal data, disclosure of such data to third parties, legal reasons for collection of personal data and the rights that can be exercised by them under PDPL.
A. Personal Data to be Processed, Purpose of Processing Personal Data, Method of Collection and Legal Reason for Processing Personal Data
Your personal data is collected through physical non-automatic means such as petitions, forms, verbal statements, information received from competent authorities and organizations, contracts, invoices etc. or through digital automatic and partly-automatic means such as e-mails, telephone conversations, website etc.
Our Company processes your personal data based on the following legal reasons:
· Explicit consent is obtained (“Article 5/1, Article 6/2”).
· It is expressly provided for by the laws (“Article 5/2-a”).
· It is necessary for the protection of life or physical integrity of the person himself/herself or of any other person, who is unable to explain his/her consent due to the physical disability or whose consent is not deemed legally valid. (“Article 5/2-b”).
· Processing of personal data of the parties of a contract is necessary, provided that it is directly related to the establishment or performance of a contract. (“Article 5/2-c”).
· It is necessary for compliance with a legal obligation to which the data controller is subject. (“Article 5/2-ç”).
· Personal data has been made public by the data subject himself/herself. (“Article 5/2-d”).
· Data processing is necessary for the establishment, exercise or protection of any right (“Article 5/2-e”).
· Processing of data is necessary for the legitimate interests pursued by the data controller, provided that this processing shall not violate the fundamental rights and freedoms of the data subject. (“Article 5/2-f”).
|
Purpose of Processing Personal Data |
Personal Data Processed |
Conditions of Processing Personal Data |
|
Managing procurement, quotation and analysis processes |
First Name, Last Name, Turkish Identification Number, Telephone Number, Tax Office, Quotation Amount, Tax Identification Number |
Article 5/2-c Article 5/2-e, Article 5/2-f |
|
Managing financial processes |
First Name, Last Name, Turkish Identification Number, Bank Account Number, Tax Office and Tax Identification Number, Payment Amount, Signature, Telephone Number, E-mail |
Article 5/2-c Article 5/2-ç, Article 5/2-e |
|
Managing product/service procurement and contract processes, making procurement |
First Name, Last Name, Turkish Identification Number, E-Mail, Telephone Number, Tax Identification Number, Tax Office, Bank Account Number, Signature, Address |
Article 5/2-c, Article 5/2-e, Article 5/2-f |
|
Managing invoicing processes |
First Name, Last Name, Turkish Identification Number, Tax Office, Bank Account Number, Signature, Address, Tax Identification Number, Company Information |
Article 5/2-a, Article 5/2-c, Article 5/2-ç, Article 5/2-e |
|
Making price searches for procurement of Products/Services |
First Name, Last Name, Company Name, Address, Telephone Number, E-mail |
Article 5/2-c, Article 5/2-e, Article 5/2-f |
|
Creating potential customers portfolio |
First Name, Last Name, Company Name, Telephone Number, E-mail |
Article 5/2-f |
|
Managing sale and contract processes, fulfilling obligations |
First Name, Last Name, Turkish Identification Number, E-mail, Telephone Number, Tax Identification Number, Tax Office, Bank Account Number, Signature, Address |
Article 5/2-c, Article 5/2-e |
|
Creating a list of Suppliers/Customers |
First Name, Last Name, Company Name, Telephone Number, E-mail |
Article 5/2-f |
|
Managing communication processes |
First Name, Last Name, Position, Telephone Number, Company Name |
Article 5/2-f |
|
Managing requests and complaint processes |
First Name, Last Name, Turkish Identification Number, Telephone Number, E-mail, Request Detail |
Article 5/2-e, Article 5/2-f |
|
Receiving e-newsletter registrations and managing newsletter information processes |
|
Article 5/1 |
|
Following up cases, mediation processes and proceedings |
Personal data covered and/or provided in the file |
Article 5/2-a, Article 5/2-c, Article 5/2-ç, Article 5/2-e, Article 5/2-f |
|
Managing correspondences with competent authorities and organizations |
Personal data covered by the request or information |
Article 5/2-a, Article 5/2-c, Article 5/2-ç |
|
Managing personnel candidate application processes |
First Name, Last Name, Signature, Date of Birth, Gender, Civil Status, Nationality, Place of Birth, E-mail Address, Telephone Number, Address, Military Service Status, Educational Background, Foreign Language Knowledge, Computer Literacy, Work Experience Information, Course, Seminar, Certificate, Award and Appreciation Information, Photographs, Number of Children, Profession of Spouse, Reference Details, Information about Contact Persons, Position Applied, Driver’s License Information, Wage Expectation, Smoking Details, Hobby Details, Personal Data Provided in CV or Specified by Candidate, Conviction and Security Measure Details, Health Details, Membership for Associations and Organizations |
Article 6/2, Article 5/1, Article 5/2-c, Article 5/2-e, Article 5/2-f |
B. Disclosure of Personal Data
Your personal data processed can be disclosed to the following parties for the above-mentioned purposes in accordance with the conditions prescribed in the PDPL:
· Legally-authorized and relevant public authorities and organizations such as Social Security Institution, courts, enforcement offices, tax offices etc. in connection with and limited to the requests of these authorities and organizations according to the legal regulations,
· Banks, suppliers and business partners for the purposes of exercising contractual rights and fulfilling obligations and managing our operations specific to our sector,
· Independent audit firms, specialized consultants, supervisory and regulatory authorities for the purpose of fulfilling our contractual and legal obligations,
· Suppliers, audit companies and information security companies which provide us with services for the purpose of ensuring the necessary quality, confidentiality and standards,
· Natural persons and legal entities as well as public authorities and organizations with which we cooperate for the purpose of conducting the activities of our Company,
· Business partners and suppliers and public disclosure for the purpose of ensuring advertising, publicity and promotion processes,
· Third party individuals and organizations that require references based on valid legal reasons and limited to the subject of request,
· Software companies and our suppliers operating in this field inland and abroad for the purpose of procuring and ensuring the maintenance and repair of our operating systems, computer programs, software, cloud services,
· Our suppliers located inland and/or abroad for the purpose of enhancing the recognition and brand value of the Company, developing and keeping the website infrastructure up-to-date,
· Companies/organizations that are located inland and abroad and that provide security, technology and cloud services for digital data,
· Companies that are located abroad and that provide services to us for our applications, software and systems, due to the fact that their entities and servers are located abroad,
· Shareholders of our Company located abroad, as part of our Company reports and information processes.
C. Rights of Data Subjects
In accordance with the Article 11 of the PDPL, data subjects are entitled:
1. To know whether their personal data has been processed or not,
2. If their personal data has been processed, to ask for information about processing of such data,
3. To know the purpose of processing of personal data and to know whether such data is used in accordance with the purpose,
4. To know the third parties inland or abroad, to whom such personal data has been disclosed,
5. If the personal data has been processed incompletely or wrongly, to ask for correction of it and to ask for providing information to third parties, to whom such personal data has been disclosed, in connection with the operation conducted,
6. To ask for deletion or disposal of personal data because the reasons that require processing of such personal data have disappeared although the personal data has been processed in accordance with the provisions of the PDPL and other relevant laws, and to ask for providing information to third parties, to whom such personal data has been disclosed, in connection with the operation conducted,
7. To object to the occurrence of any negative results about data subject through analysis of the processed data exclusively by automatic systems,
8. To ask for the indemnification of the loss suffered due to the processing of personal data in violation of the law.
Data Subjects may forward their requests to exercise these rights to our Company in accordance with the Communiqué on Procedures and Principles for Making an Application to Data Controllers. These rights will be considered and finalized free of charge as soon as possible and ultimately in maximum thirty (30) days. If this consideration and decision-making process requires us to incur a separate expense, we will charge the fee indicated in the tariff determined by the Personal Data Protection Board.
Identification Details of Data Controller
Website Address: http://www.energrom.com.tr
Telephone Number: (0216) 693 19 11
E-mail Address: info@energrom.com.tr
Address: Kavacık Mah., Ertürk Sokak, No:1 K1 Plaza, Zemin Kat, Beykoz/İstanbul