DISCLOSURE TEXT ON PERSONAL DATA
As Premium Energy, we attach importance to ensuring the security of your personal data. Your personal data is processed, stored and protected by Premium Enerji in accordance with the basic principles and personal data processing conditions in the Law No. 6698 on the Protection of Personal Data ("KVKK"). For this purpose, as a company that takes all kinds of measures for data protection and shows maximum sensitivity, We would like to inform you about the processing of your personal data.
1. Our Principles for Processing Personal Data
Your personal data is processed by us in the light of the following principles:
- Compliance with the law and good faith,
- Being accurate and up to date when necessary,
- Processing for specific, explicit and legitimate purposes,
- Being relevant, limited and proportionate to the purpose for which they are processed,
- Retention for the period stipulated in the relevant legislation or required for the purpose for which they are processed.
2. Disclosure Obligation
Article 10 of the LPPD requires data controllers to fulfill the obligation to inform the data subjects whose data are processed while obtaining their consent in this regard. Premium Energy "data subjects" who have the title of "data controller" within the scope of the relevant article:
- Identity of the data controller and its representative, if any,
- The purposes for which personal data are processed,
- To whom and for what purpose the processed personal data may be transferred,
- Methods and legal reasons for collecting personal data,
- It informs about the rights that the data subject may direct to the data controller in accordance with Article 11 of the LPPD.
This information is provided with this Disclosure Text and our explanations are given below.
3. Identity of the Data Controller
Pursuant to Article 3/1 (ı) of the LPPD, the data controller is defined as "real or legal persons who determine the purposes and means of processing personal data and are responsible for the establishment and management of the data recording system". In this context, the Company is the data controller and the information of the Company is shared below in order to contact Premium Enerji regarding your personal data:
PREMİUM ENERJİ ÇÖZÜMLERİ SANAYİ VE TİCARET ANONİM ŞİRKETİ Address : Maslak Mah. Eski Büyükdere Cad. Giz 2000 Plaza NO:7 İç Kapı No:33 Sarıyer / İSTANBUL E-mail : info@premiumenerji.com Registered E-mail : premiumenerji@hs01.kep.tr Phone : 0 212 912 23 34
4. Processing and Purposes of Personal Data
Your personal data is processed only with your explicit consent or in the presence of one of the following cases of compliance with the law. These are;
- Explicitly stipulated in the la
- It is mandatory for the protection of the life or physical integrity of the person who is unable to disclose his/her consent due to actual impossibility or whose consent is not legally valid, himself/herself or someone else,
- Provided that it is directly related to the conclusion or performance of a contract, it is necessary to process personal data of the parties to the contract,
- The data controller must fulfill its legal obligation,
- It has been made public by the person concerned,
- Data processing is mandatory for the establishment, exercise or protection of a right,
- Data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject
In this respect, personal data are processed by the Company for the performance of the employment contracts concluded with the employees of the Company, the necessity of data processing for the legitimate interests of the Company in terms of employees, employee candidates and interns, and to fulfill the obligations arising from the Labor Law No. 4857, Turkish Code of Obligations No. 6098, Social Security and Health Insurance Law No. 5510 and other legislation.
In addition, in order to fulfill the obligations arising from the Turkish Commercial Code No. 6102, Turkish Code of Obligations No. 6098 and other legislation and for the performance of the contracts concluded for the fulfillment of the Company's operational activities, suppliers, dealers, contractors, intermediaries related to the Company's business and activities, Any natural and legal person ("Business Partners") with whom Premium Enerji conducts joint business or receives services, including joint venture shareholders, brokers, representatives, distributors and other service providers, and certain personal data belonging to the employees of business partners may also be processed. For the avoidance of doubt, the scope of data processing activities carried out by Premium Enerji includes issuing invoices and self-employment receipts for the purchase of materials and/or services from domestic or abroad, concluding consultancy agreements with third parties and keeping the records of the lawsuits to which the Company is a party, and personal data are also processed during these activities.
The explicit consent of the data owners is obtained by the company in order to process data for the purposes stated above, and in cases where explicit consent is not required by law, data processing activities are carried out in accordance with the data processing conditions.
Within the scope of Article 6 of the LPPD, special categories of personal data that may subject the data subjects to discrimination and therefore require more sensitive protection are listed. Pursuant to the relevant provision, these data are; race, ethnic origin, political opinion, philosophical belief, religion, sect or other belief, appearance and dress, association, foundation or union membership, health, sexual life, criminal conviction and security measures, and biometric and genetic data.
Among these data, data on health and sexual life can only be processed with explicit consent; personal data other than health and sexual life can be processed without the explicit consent of the data subject in cases stipulated by law..
Data on health and sexual life can only be processed by persons or authorized institutions and organizations under the obligation of confidentiality for the purposes of protecting public health, preventive medicine, medical diagnosis, treatment and care services, planning and management of health services and financing, without seeking the explicit consent of the person concerned.
The Company only obtains health data of its employees and employee candidates such as a committee report, a report that they can work in heavy and dangerous jobs, and prosecutor's certificate and criminal records only during the recruitment phase, as expressly stipulated in the laws, and no other special categories of personal data are processed.
5. To whom and for what purpose the processed personal data can be transferred
Your personal data may be shared with business partners, public legal entities and judicial authorities within the scope of the purposes listed above and when necessary for the Company to fulfill its legal obligations.
In addition, some personal data obtained from our employees and business partners within the Company are transferred abroad in order to provide server services within the Company and to fulfill the contracts concluded.
In the sharing of your personal data, the regulations in Articles 8 and 9 of the KVKK are complied with and all kinds of technical and administrative measures are taken to ensure data security during and after the sharing process.
Pursuant to Article 8 of the LPPD, personal data may be transferred without the explicit consent of the data subject or in the presence of one of the conditions specified under the heading "2. Purposes of Processing" above.
Pursuant to Article 9 of the LPPD, in order to transfer personal data abroad, in addition to the above, there must be adequate protection in the foreign country where the personal data will be transferred. The countries with adequate protection are determined by the Personal Data Protection Board ("Board").
6. Rights of the Relevant Person
As a concerned person, by applying to us, you have the right to;
- To learn whether personal data is processed or not,
- Request information if their personal data has been processed,
- To learn the purpose of processing personal data and whether they are used for their intended purpose,
- To know the third parties to whom personal data is transferred domestically or abroad,
- To request correction of personal data in case of incomplete or incorrect processing,
- To request the deletion or destruction of personal data in the event that the reasons requiring the processing of personal data within the framework of Article 7 of the KVKK disappear,
- In case personal data are incomplete or incorrectly processed, to request notification to third parties to whom personal data are transferred that they have been corrected or that personal data have been deleted and destroyed within the scope of Article 7 of the KVKK,
- To object to the emergence of a result to the detriment of the person himself/herself by analyzing the processed data exclusively through automated systems,
- We inform you that you have the right to demand the compensation of the damage in case of damage due to unlawful processing of personal data.
It is possible to submit your other requests regarding your rights and the implementation of the KVKK in writing or by other methods to be determined by the Board.
The Company will finalize your requests within this scope free of charge as soon as possible and within thirty days at the latest, depending on the nature of the request. However, if the transaction requires an additional cost, the fee in the tariff to be determined by the Board may be charged.
7. How Do We Protect?
All necessary technical and administrative measures are taken by our Company to protect the personal data collected and processed by the Company, to prevent unauthorized access and to prevent the real and legal persons with whom the Company cooperates from being victimized.
The Company attaches utmost importance to ensuring that the software used in the Company's activities comply with the standards, that third parties are carefully selected, that employees are authorized with certain limits, that employees receive training in this direction, and that internal policies are put into effect to protect personal data.
8. Right to Apply and Obtain Information
In relation to personal data, within the scope of Article 11 of the KVKK, if any of the rights described above are desired to be exercised, an application may be made to the Company. This application should be made to the Company in writing or by other methods determined by the Board.