Personal Data Protection Law
Home / Personal Data Protection Law

Personal Data Protection Law

ENEVA ENERGY

This Personal Data Protection Law (KVKK) Disclosure Text ("Disclosure Text") prepared by ENEVA ENERGY ("Data Controller", "ENEVA ENERGY") in accordance with the Constitution of the Republic of Turkey, relevant international human rights conventions, and Law No. 6698 on the Protection of Personal Data ("KVKK", "Law") aims to inform you about ENEVA ENERGY’s personal data practices and your rights as a data subject.

Personal data processing refers to any operation performed on personal data, including collection, recording, storage, retention, modification, rearrangement, disclosure, transfer, acquisition, accessibility, or classification, whether fully or partially automated or non-automated.

Under KVKK, your personal data may only be processed by the Data Controller within the scope described in this text. ENEVA is responsible for determining the purposes and means of processing personal data registered in its database and for establishing and managing the data recording system.

The Data Controller will take all necessary technical and administrative measures to process your personal data within the limits prescribed by relevant legislation, in line with Article 4 of KVKK, ensuring that data is:

  • Processed lawfully and fairly,
  • Accurate and, when necessary, up-to-date,
  • Processed for specific, explicit, and legitimate purposes,
  • Relevant, limited, and proportionate to the purposes for which it is processed,
  • Retained for the period required by legislation or necessary for the intended purposes.

Collected Personal Data

As the Data Controller, we process personal data collected via the website from our members and service recipients to fulfill our disclosure obligations. This includes identity data, contact information, financial data shared for banking purposes, digital footprint data, and order history.

Collection Methods and Legal Basis

Personal data is collected electronically. The data is processed and transferred in accordance with Articles 5 and 6 of the Law and the purposes outlined in this Disclosure Text.

Purposes of Processing

Your personal data is processed to operate the products and services provided by the Data Controller, understand your needs, offer products and services tailored to your preferences, measure satisfaction, improve and diversify products and services, conduct quality and standard audits, make and implement commercial decisions, comply with legal reporting obligations, and ensure the legal security of individuals involved in business relations.

Legal Grounds

Your personal data may be processed by the Data Controller without requiring explicit consent based on one or more of the following grounds:

  • Explicitly stipulated by law,
  • Necessary to protect the life or physical integrity of the data subject or another person when consent cannot be given,
  • Required for the performance of a contract to which the data subject is a party,
  • Necessary for the Data Controller to fulfill a legal obligation,
  • Made public by the data subject,
  • Necessary for establishing, exercising, or protecting a right,
  • Necessary for the legitimate interests of the Data Controller without harming the fundamental rights and freedoms of the data subject.

Storage of Personal Data

Personal data is stored for purposes such as service provision, contract management, customer satisfaction, accounting, and security. Data without a legitimate retention purpose is deleted after the termination of the relevant commercial relationship, except where needed for legal claims.

Transfer of Personal Data

Your personal data may be transferred to our business partners, banks, legally authorized public institutions, and private entities for purposes including service provision, operational needs, legal obligations, and commercial activities, in accordance with Articles 8 and 9 of KVKK.

Rights of Data Subjects

As a data subject, you have the right to:

  • Learn whether your personal data is processed,
  • Request information if your data has been processed,
  • Learn the purpose of processing and whether data is used accordingly,
  • Know third parties to whom your data is transferred domestically or abroad,
  • Request correction of incomplete or inaccurate data and notification to third parties,
  • Request deletion or destruction of data under legal conditions and notify third parties,
  • Object to automatic processing resulting in adverse outcomes,
  • Request compensation if harmed due to unlawful data processing.

Contact

You can submit requests to the Data Controller via the designated email or written address. Required contact details are:

Address: Yakuplu Mah., Hurriyet Blv., Skyport Sit. No: 1/64, PK: 34520 Beylikdüzü / Istanbul
Phone: +90 (212) 982 46 14
Email: info@enevaenerji.com.tr