Personal Data Protection Law

CLARIFICATION TEXT ON PERSONAL PROTECTION

DAK ELEKTRİK TİC. A.S. ("Company"), according to the regulations within the scope of the Law on the Protection of Personal Data No.6698 ("KVKK") data shared with our  Company (by obtaining your explicit consent except for exceptional cases that do not require explicit consent regulated in the LPPD), all your personal data (name, surname, Turkish Republic No, address, place of birth, date of birth, etc.) and all kinds of special data (health information, biometric and genetic information, dress code, association, foundation, union membership, criminal conviction, data on security measures, religion, and all kinds of information and documents containing all kinds of data, such as ethnicity etc. and can be processed, recorded, stored in accordance with the principle of honesty, data its accuracy is ensured and it can be updated and stored when necessary, transferred to third parties, shared and anonymized. Personal data categories can be classified as follows.

Data Categories
ID information	Name, surname, ID information (ID number, wallet number, father's name, mother's name, place of birth, province, district, neighborhood, issue number, family order number, serial number, household number, page number, registration location, reason for issue, date of issue, previous surname), nationality, marital status, date of birth, ID photocopy, vehicle information, IP addresses of work computers used by employees and web browsing movements, hobbies, exit interview reports, discharge certificate, annual leave book , resignation interview forms, SGK registration number, tax deduction letter, height, weight, employee internet access logs.
Contact Information	Home and mobile phone numbers, full address information, e-mail addresses, internal contact information (internal phone number, corporate e-mail address)
Financial Information	Financial and salary details, payrolls, bonus payments, file and debt information regarding mortgage  proceedings files, bank information, minimum subsistence allowance information, individual retirement and personal accident insurance amount and information, and the like.
Personal Data categorized as classified	Syndicate, ex-conviction status / criminal record, health policies, health reports related to disability, health declaration document, health reports, pregnancy status, pregnancy report, occupational disease records, employment examination form, daily patient complaints, medications used, clinic history, chest radiography, hearing test, eye examination, blood type information, employment and periodic examination forms signed by the workplace doctor, religious knowledge section in the identity card, blood group section in the driver’s license, association / foundation memberships and so on.
Information on Education	Educational status, certificate and diploma information, foreign language information, education and skills, CV (CV)
Visual Data	Photographs, closed circuit security camera images
Employee Performance and Career Development Information	Training attendance sheets, training hours and durations, (if any) exam results, internal promotion evaluation processes (English, general aptitude tests, personality inventory), ethical non-compliance reports, personnel promotion transfer movements file, HR outbound search team scoring and performance reports, meeting records, scorecard information, recruitment date, weekly working hours (login-logout records), all other information specially entered by employees on the profile builder screen
Working Data	Registration number, position, department and unit, title, last employment date, entry and exit dates, insurance entry / retirement, allocation number, social security number, tax office number, flexible hours working status, holding registration number, travel status, pension fund information, pension fund entry date, pension fund registration number, accounting code, number of working days, projects worked, monthly total overtime information, severance pay base date, severance pay additional days, days on strike, leave seniority base date, leave severance additional day, leave group, departure / return date, day
Family and Relative Information	Marriage certificate; name and surname of spouse and children, ID Number, gender, date of birth; family and relatives' name, surname and telephone number, family notification forms.

 

Our policy of protection and processing of personal data aims to protect the data obtained from our customers, prospective customers, suppliers, business partners or cooperating companies, institutions and organizations, customers and employees, company employees or other persons alsoincluding the relevant regulations. For this reason, your personal data are processed in accordance with the relevant legislation by stating what your rights are in the ways and purposes detailed below in accordance with the 10th and 11th articles of the LPPD titled "Obligation of the Data Officer" as the data controller.

1. Collection, Processing and Processing Purposes of Personal Data 

Your personal data may vary depending on the service, product or commercial activity provided by our Company; It may be collected verbally, in writing or electronically through the offices, branches, website, social media channels, third parties, legal authorities and similar means of our Company and its member merchants, automatically or non-automatically. In addition, it can be processed when you use our website with the intention of using the services of the Company or when you use other services in areas of operation of the Company.

Your collected personal data is processed by our business units in order to bring benefit to you from the products and services offered by our Company, the fulfillment, sustainability, development of our activities, the customization of the products and services offered by our Company according to your taste, usage habits and needs, commercialization in line with your permission preferences, sending electronic messages, sending e-mails, sending mail, survey applications, statistical analysis, ensuring the legal and commercial security of our Company's employees and people who have business relations with our Company (Administrative operations for communication carried out by our company, business partner / customer / supplier (managers or employees) evaluation processes, legal compliance process, financial affairs, etc.), determination and implementation of our company's commercial and business strategies, e-mails, e-newsletter subscriptions, social l media sharing, maintenance of legal and commercial security of people in business relations, determination and implementation of legal and financial affairs and similar commercial and business strategies, execution of accounting policies, execution of human resources policies (obtaining criminal records and medical reports from workers, etc.), will be processed in accordance with the personal data processing conditions and purposes specified in Articles 5 and 6 of the LPPD in order to ensure compliance with local and international legislation, and to ensure compliance with the information transfer, storage and reporting obligations requested by public institutions or other authorities.

2. To Whom and For What Purposes the Processed Personal Data Can Be Transferred

By taking the necessary security measures your personal data collected to achieve the below-mentioned purposes can be transferred within the framework of the personal data processing conditions and purposes specified in Articles 8 and 9 of the LPPD:

Your personal data collected can be used in order to benefit you from the products and services offered by our Company / Companies, customizing the products and services offered by our company according to your likes, usage habits and needs, analyzing by our company and / or the member companies / brands of the customer satisfaction programs we manage though our business units 

Providing special advertisements, campaigns and other benefits for you by analyzing by our company and / or member companies / brands of the customer satisfaction programs we manage, sending commercial electronic messages in line with your permission preferences, sending e-mail, sending mail, survey applications, reporting and evaluating your shopping data, statistical conducting analyzes,

Ensuring the legal and commercial security of our company and those in business relations with us (administrative operations for communication carried out by our company, partner / customer / supplier (authorized or employees) evaluation processes, legal compliance process, financial affairs, etc.)

With formulation and implementation of our company's commercial and business strategies, legally authorized public institutions and private persons, legal, financial and tax consultants,

In order to ensure the execution of the HR policies of our company, our member businesses, business partners, shareholders, group companies, auditors, can be kept domestically or transferred cross-border.

Your personal data (identity data, contact data, customer data, customer transaction information, financial information, etc.) can be kept locally or transferred cross-border to achieve the above-mentioned purposes by taking the necessary security measures.

In the event that your data is to be transferred cross-border to obtain your consent the country of transfer is required to have adequate protection of personal data. In case of lack of adequate protection of those responsible for the data in the relevant foreign country and in Turkey, a commitment in written to sufficient personal data protection as of the Personal Data Protection Authority will be required. 

 3. Method and Legal Reason for Collecting Personal Data

Your personal data, in any verbal, written or digital environment, through our website, social media channels, the parties with whom we have business relations and / or the complementary services of our activities, contracted organizations and other similar channels, the products we offer by the Company for the purposes stated above, and is obtained in order to provide the services within the determined legal framework and to fulfill our Company's contractual and legal obligations in a complete and correct manner. Your personal data collected for this legal reason can also be processed and transferred for the purposes specified in articles (1) and (2) of this text within the scope of the personal data processing conditions and purposes specified in Articles 5 and 6 of the LPPD.

This information form is an annex and an integral part of your requests for all kinds of contracts and provision of service you have signed with our Company.

4. Retention Period of Personal Data

Our company keeps personal data only for the period specified in the relevant legislation or throughout the purpose for which they are processed. In this context, if a period is specified for the retention of personal data in the relevant legislation, it acts in accordance with this period, and if a period is not specified,   personal data can be retained for the period required for the purpose of processing. In the event of the expiration of the period or disappearance of the reasons requiring its processing, the personal data are deleted, destroyed or anonymized and the use by the Company may be endure.

 5. Rights of Personal Data Owner enumerated in Article 11 of LPPD

As personal data owners, if you submit your requests regarding your rights to our Company through the methods set out below in this InformationText, our Company will finalize the request free of charge within thirty days at the latest, depending on the nature of the request. However, if a fee is stipulated by the Personal Data Protection Board, the fee in the tariff determined by our Company will be charged. In this regard, personal data ownershave the ; 

1. Learning whether personal data is processed, 
2. If personal data has been processed, to request information regarding the processing, 
3.  Learning the purpose of processing personal data and whether they are used appropriately for their purpose, 
4. To identify the third parties to whom personal data are transferred locally or internationally.
5. To request correction of personal data in case of incomplete or incorrect processing and to request notification of the transaction(s) made within this scope to third parties to whom personal data have been transferred,
6. Although it has been processed in accordance with the provisions of the LPPD and other relevant laws, to request the deletion or destruction of personal data in the event that the reasons for its processing disappear, and to request notification of the transaction made within this scope to third parties to whom personal data have been transferred,
7. Object to the occurrence of a result against the person himself by analyzing the processed data exclusively through automated systems, 
8. In case of damage due to the unlawful processing of personal data, the owner of the personal data has the right to demand the compensation of the damage.

In accordance with the 1st paragraph of Article 13 of the LPPD, your request for exercising your rights stated above, your request containing the necessary information identifying your identity in writing and other information requested and your explanation about your right to exercise the rights specified in Article 11 of the LPPD and can send it to kvkk@dak-energy.com; to address by hand with documents identifying your identity, send it via registered mail, send it via notary public or other methods specified in the LPPD, or send it via registered electronic mail (KEP), secure electronic signature, mobile signature or by using the electronic mail address previously notified to the data controller by the data subject and registered in the data controller's system. Our company may reject your application along with disclosure of reason.

You can access the application form from the KVKK section on our website.