Clarification Text on the Law on Protection of Personal Data

PERMAK ENERGY (Data Controller), considering the security of you, our valued user, in order to protect fundamental rights and freedoms, especially the privacy of private life, within the scope of our obligation to inform based on the Law on Protection of Personal Data* ("Law") regulated regarding personal data;

As per the Law, your personal data is recorded and stored as Data Controller and Data Processor for the establishment of the service relationship, ensuring service continuity, performing our services, and due to responsibilities arising from other laws as a company.

In this context, as the Data Controller, personal information may be obtained, recorded, stored, updated to maintain the contractual relationship, reorganized, disclosed to third parties to the extent permitted by the relevant legislation, transferred, shared, and processed in other ways listed in the Law within the framework explained in the Law.

Your personal data refers to your name, surname, date of birth, place of birth, home address, Turkish ID number, Tax Office and Tax Number, driver's license serial number, ID serial number, phone numbers, motor vehicle plate, passport number, resume, photographs, images and voice recordings, fingerprints, retina scan, IP address, e-mail address, hobbies, people you interact with, group memberships, family information, health information and records, health data, medical institution records such as X-ray and MRI, blood type, country-city-postal code, age, gender, criminal record, bank account number, academic information, marital status, information about your children, emergency contact information, disability status, military records, monthly premium and service document, payrolls, and other data and information that directly or indirectly identifies you, not limited to those listed.

Your personal data is processed for purposes such as planning and executing our company's human resources processes, including recruitment, performance evaluation, creation and storage of personnel files, conducting exit interviews, carrying out other internal operational activities, and ensuring security within and around the company. In addition, our company processes, stores, and transfers personal data and special categories of personal data that it deems necessary only to provide the best service and product it aims to deliver, to the extent permitted by legal regulations, in addition to the information it must necessarily obtain from its customers and their representatives. Our company receives personal data within the scope of support services, purchase and sale (conducting commercial relations) from real persons. For individuals from whom our company has received support, real persons with whom the company has commercial relations for its continuity, real persons from whom it is obliged to receive services by law, and both job candidates and employed personnel;

. Constitution of the Republic of Turkey

• Labor Law No. 4857,
• Social Security Law No. 5510,
• Occupational Health and Safety Law No. 6331,
• Law of Obligations No. 6098,

. Turkish Commercial Code No. 6102

. Tax Procedure Law No. 213 and Laws within the scope of tax obligations

• Personal Data Protection Law No. 6698 and regulations,
• In audits conducted by Ministry of Labor and Social Security Inspectors,
• In audits to be conducted by the Social Security Institution

. Audits to be conducted by Tax Offices and Auditors

To contact when necessary in the data bank,

• For Statistical Studies,
• To be presented to relevant institutions and organizations in training, reservation, incentive applications,
• Also to present in court and expert examinations,
• To present to Local Law Enforcement and Organized Industrial Zone Directorate if requested, your personal data may be processed, stored, transferred to the extent prescribed by law, and deleted or destroyed at the end of the periods determined by law.

In addition, our Company may process your personal data for other purposes specified in Articles 5 and 6 of the PDPL and limited to these data processing conditions.

Special categories of personal data refer to data relating to people's race, ethnic origin, political opinion, philosophical belief, religion, sect or other beliefs, appearance and dressing, membership of associations, foundations or trade-unions, health, sexual life, criminal convictions and security measures, and their biometric and genetic data.

Our company does not, as a rule, request or process special categories of personal data from its users. However, if information and data that are mandatory for registration due to the policies of third parties and organizations constitute special categories of personal data, they may be recorded limited to this. For example; if the "religion" field is present and your religious belief is included in your identity copy requested for certified domain names, it may be within the scope of special categories of personal data, although the purpose is not to record your special category data.

Your personal data may be shared to the extent necessary with persons, institutions and organizations permitted by legislative provisions and other third parties; our direct or indirect domestic and foreign affiliates; legal units, financial advisors, occupational health and safety experts and doctors, our call center, and consultants and organizations we work with, cooperate with to carry out our company activities.

Without prejudice to the cases stipulated in Article 28 of the Law titled Exceptions, your rights that you can use by applying to our Company within the framework of Article 11 of the Law are as follows:

1. Learning whether your personal data is being processed,
2. Requesting information if your personal data has been processed,
3. Learning the purpose of processing your personal data and whether they are used in accordance with their purpose,
4. Knowing the third parties to whom your personal data is transferred at home or abroad,
5. Requesting correction if your personal data is processed incompletely or inaccurately, requesting deletion or destruction of personal data within the framework of the conditions stipulated in Article 7 of the Law,
6. Requesting notification of the transactions made pursuant to subparagraphs (d) and (e) to third parties to whom your personal data has been transferred,
7. Objecting to the occurrence of a result against you by analyzing your processed data exclusively through automated systems,
8. Requesting compensation for damages in case you suffer damage due to unlawful processing of your personal data.

It is possible to submit your requests regarding your rights and the implementation of the PDPL to our Company's Human Resources Department in writing or by other methods to be determined by the Personal Data Protection Board. Our company will finalize such requests free of charge as soon as possible and within thirty days at the latest, depending on the nature of the request. We would like to state that we reserve our right to request from you the costs to be incurred by our Company to fulfill your requests, according to the tariff specified in Article 13 of the Law titled Application to Data Controller.

IF YOU WANT TO CONTACT US FOR YOUR REQUESTS

If you want to contact us, provide feedback or manage your problems within the scope of PDPL, you can send it to info@permakenerji.com.tr with a secure electronic signature.

In this context, we would like to remind you that your written applications on the subject can be accepted following the identity verification to be made by us.

* Law on Protection of Personal Data No. 6698 published in the Official Gazette dated April 7, 2016 and numbered 29677