Personal Data Protection Law

PRIVACY NOTICE FOR WEBSITE VISITORS

I. Privacy Notice

1. Introduction

This privacy notice has been prepared by the Electricity Producers Association ("Association") to ensure the processing of our visitors' personal data in compliance with the Constitution of the Republic of Turkey, international agreements to which our country is a party regarding human rights, and especially the Law on Protection of Personal Data numbered 6698 ("KVKK") in line with the relevant legislation, enabling the effective exercise of the rights of the data subjects whose data are processed by the Association. All personal data shared with our Association may be processed in compliance with the law, related to our activities and services, and in a reasonable and proportionate manner.

2. Definitions

The terms 'personal data', 'sensitive personal data', and 'processing of data' used in this privacy notice are used in accordance with the definitions in the KVKK. The term "personal data" as mentioned in the KVKK refers to any kind of information relating to an identified or identifiable natural person; while "processing of personal data" refers to all kinds of operations carried out on the data, including but not limited to obtaining, recording, storing, preserving, altering, disclosing, transferring, taking over, making available, classifying, or preventing the use of data by non-automatic means that are part of any data recording system, either wholly or partially.

3. Principles of Processing Personal Data

Pursuant to Article 4 of the KVKK, personal data belonging to the data subject will be processed by the Association, as the data controller, in compliance with the law and principles of honesty; accurately and, when necessary, updated; for specific, clear, and legitimate purposes; related to the purpose for which they are processed, limited, and measured; and will be retained for the period stipulated by the relevant legislation or the purpose for which they were processed, in accordance with the rules of retaining data.

4. Purposes of Processing Personal Data

Your personal data will be processed for:

· Ensuring the security of workplaces or internet and similar electronic systems.

· Resolving potential legal disputes.

· Making necessary notifications to the relevant institutions upon the lawful request of authorized public institutions or organizations.

in compliance with the personal data processing conditions specified in Articles 5 and 6 of the KVKK.

5. Transfer of Your Personal Data

Our Association acts in accordance with the regulations stipulated in the KVKK regarding the transfer of personal data. Unless there are exceptional cases specified in the legislation, personal data and sensitive personal data are not transferred to other natural or legal persons without the explicit consent of the data subject. However, in exceptional cases stipulated by the KVKK and other legislation, the transfer of personal data to authorized administrative or judicial institutions or private organizations is carried out with utmost care, complying with the form and limitations prescribed by the legislation.

Your personal data may be transferred

to authorized public institutions and organizations or legally authorized private individuals for fulfilling legal obligations or establishing, using, or protecting the rights belonging to the Association,

in accordance with the procedures and principles stipulated in the relevant legislation and the personal data transfer conditions and purposes specified in Articles 8 and 9 of the KVKK.

6. Method of Collecting Personal Data/Sensitive Personal Data and Legal Basis

Your personal data is obtained through automatic methods by providing information directly by the data subject by entering the hotspot system on the Association's internet addresses or by submitting requests and forms through the system, and by recording the transactions performed after entering the system.

The legal reasons for the processing of your personal data by the Association;

The explicit consent given by the data subject in the Consent Text, exceptions to the explicit consent specified in the first paragraph of Article 5 of the KVKK, and subparagraphs c, e, and f of the second paragraph of Article 5 of the KVKK. Your personal data is collected by our Association in compliance with the prevailing legislation and for the purposes specified in Articles 4 and 5 of this Privacy Notice.

7. Rights of the Data Subject as Stated in Article 11

Data subjects have the right, as the data controller, to apply to the Association and inquire about whether their personal data is being processed; request information if their personal data has been processed; learn the purpose of processing their personal data and whether they are used in accordance with this purpose; be informed about third parties to whom their personal data is transferred, within the country or abroad; request correction if their personal data is incomplete or incorrect; request the deletion or destruction of their personal data within the framework of the conditions specified in Article 7 of the Law No. 6698 on the Protection of Personal Data; request notification to third parties to whom their personal data has been transferred regarding the transactions made pursuant to subparagraphs (d) and (e) of Article 11 of the KVKK; object to the occurrence of a result against themselves by analyzing their processed data exclusively through automated systems; and request the compensation of damages in case of suffering damages due to the unlawful processing of their personal data.