About Personal Data Protection And Processing

Information on the PDPL

ENERJISA DISCLOSURE ON PROTECTION AND PROCESSING OF PERSONAL DATA

We, at Enerjisa Müşteri Çözümleri A.Ş. (hereinafter will be referred to as “ENERJISA”), which is vested with the title of Data Controller and licensed to be a electricity supplier, would like to inform you about your personal data processed by ENERJISA with this Disclosure herein as per the Personal Data Protection Law (PDPL) no. 6698.

1) Which Personal Data Do We Collect?

2) What is the Method and Legal Ground of Collecting Personal Data?
Your personal data is collected through manual channels that are partially or fully automatic or provided that these channels are parts of any data system including any and all kinds of verbal, written, digital communication, headquarters of our company, our website, etc.; through any agreements and forms filled out by your party in the physical environment; and via digital channels including phones, mobile applications, call centres, IVR calls, grievance management systems, website cookies. ENERJISA may process the data acquired in its premises; also, may transfer the data for below-mentioned purposes; and transfer and process the data in its operations, affiliated companies or partners. Your personal data is collected based on the legal grounds defined under article 5 of PDPL as “Requirement to process personal data of parties of a contract, provided that it is directly related to drawing up or executing the contract,” “Requirement of personal data processing for the legitimate interests of data controller, provided that it does not damage fundamental rights and liberties of the relevant person,” and “Being mandatory for the data controller to fulfil their legal obligations”; and processed as per the legal grounds stated herein.

3) Why Do We Process Your Personal Data?
It is of great significance for ENERJISA to collect, use and process your personal data to carry out its activities, fulfil its liabilities in line with the legislation in particular, in the best possible way. Your personal data is processed limited with the following purposes;

• If explicitly stipulated by the related laws, to provide electricity supply services as per the Electricity Market Law and carry out electricity supply activities in compliance with the related legislation; carry out stabilisation & reconciliation market activities; audit the electricity market activities by related organisations; sustain relations with public institutions and other organisations; carry out and implement health and safety and customer relations as well as call centre processes; plan and carry out processes related to data security,
• If processing personal data of parties of a contract is required, provided that it is directly related to drawing up or executing the contract, to provide services stated in the electricity contracts as part of our electricity supply operations; carry out liabilities, customer satisfaction, corporate communication operations with support services,
• If it is mandatory for the data controller to fulfil their legal obligations, to fulfil our obligations from the legislation that our Company is subject to including Electricity Market Law and the secondary legislation; fulfil our obligations related to providing information and reporting in the event of a request from official and/or governmental organisations, including Energy Market Regulatory Authority, Ministry of Energy and Natural Resources, Enerji Piyasası İşletme A.Ş., etc.; manage legal processes with regulation and compliance; proceed litigation and execution processes for debts that our Company is a party to; reply consumer grievances,
• If personal data processing is required for the legitimate interests of data controller, provided that it does not damage fundamental rights and liberties of the relevant person, to increase quality of the services provided as part of electricity retail contracts; carry out retail, after-sales support and marketing activities of the company; prepare demand forecasts; use the data to carry out data enrichment, market survey, profiling/segmentation activities with the purpose of conducting required works to suggest the products and services provided by our Company to the personal data owners after customising these products and services according to their inclination, usage habits and requirements; prepare corporate sustainability, corporate governance, strategic planning, application; provide legal and commercial security; carry out financial operations and follow up financial issues; monitor the records of the Company premises to ensure security and supervision; carry out consultancy, business partnership, procurement, tender and retail procedures
• In the event of explicit consent,

- With Enerjisa Group Companies-5 and Hacı Ömer Sabancı Holding Companies-6, to which Enerjisa is affiliated, with the purpose to store, use and process for retail, marketing and customer services,
- With 3rd parties that Enerjisa is in business relationship, to share only with the purpose of service quality and resolve grievances, and develop joint products and services.
Your personal data is used and processed in compliance with and under the governance of PDPL with utmost confidentiality and the purpose of ENERJISA to provide you service. ENERJISA follows legislation and ethics while processing your personal data and pays utmost attention to have accurate data, avoid misuse, process in compliance with the legal grounds, keep the data updated and store the data for a reasonable period required for the purpose.

4) Why and To Whom Do We Transfer Your Personal Data?

Your personal data can be shared with the aforementioned purposes, to the extent that the legislation allows and is required by our work processes, with the parties that it must be shared with, as a matter of course of the activities we carry out as part of the practices conducted to improve the quality of the service we provide;

• If explicitly stipulated by the related laws, with related governmental authorities, organisations and institutions allowed by the Electricity Market Law and other related legislation, Energy Market Regulatory Authority, Ministry of Energy and Natural Resources, Elektrik Piyasaları İşletme A.Ş., Türkiye Elektrik Dağıtım A.Ş., Türkiye Elektrik İletim A.Ş. and related public entities
• If personal data processing is required for the legitimate interests of data controller, provided that it does not damage fundamental rights and liberties of the relevant person, with companies that we have parent - affiliate relationships, our partners - subsidiaries nationwide and abroad,• Audit of the electricity market activities by the related organisations,
• If processing personal data of parties of a contract is required, provided that it is directly related to drawing up or executing the contract, with banks and financing agencies, organisations that we are provided service, establish partnerships and collaborations to sustain electricity supply activities, the supplier company in the event of handing over your contract to another Enerjisa Group company that has a license

In line with the requirements and purposes of personal data processing defined under articles 8 of PDPL. The data is processed for a period required by our electric supply activities in accordance with our policies and procedures defined in compliance with the By-Law on Erasure, Destruction or Anonymisation of Personal Data; and erased when your relationship with ENERJISA ends, and no other legal requirement or compliance exists.

5) Cookies on Our Websites

When you visit the website of ENERJISA, data to be processed can be collected via cookies in line with the aforementioned purposes. The technical communication files, called cookies, are small text files sent by the websites to the browsers of the users’ computers or mobile phones.

The purpose of using cookies is to provide convenience to users who visit our website. Cookies can also be used to accelerate the experiences and activities to be carried out through our websites in the future. Cookies are used to understand for which purposes people use our websites and help us enhance the structures and contents of our websites. The information acquired does not include any data to reveal your identity.

The expiration times of cookies vary depending on the browser settings of the user. Many internet browsers are set to automatically accept cookies by default. You can change these settings to block cookies or to be notified when your device receives cookies. Please refer to your browser's instructions or help to get further details on how to manage your browser settings.

6) What Are Your Rights, as Data Owner, As Per Article 11 of PDPL?

Please kindly be informed that as per Article 11 of PDPL you are entitled to;
a) Know whether or not your personal data is processed,
b) Ask further information if your personal data is processed,
c) Request information on the purpose of processing and if your data processed is misused,
d) Know the third parties nationwide and abroad to which your personal data is transferred,
e) Ask your personal data to be revised if there is any information processed is missing or incorrect,
f) Ask your personal data to be erased or destructed in the event that the grounds for the data to be processed are no longer valid, although the data was processed in compliance with the provisions of PDPL and other related legislation,
g) Ask the third parties that data is transferred about the processes carried out pursuant to the aforementioned paragraphs (e) and (f),
h) Object to have an outcome not in your favour by means of exclusive analyses through automatic systems,
i) Ask for compensation of your damages in the event of any damages due to illegal processing.

7) How to Claim Your Rights Related to Your Personal Data Submitted?

As part of article 11 of PDPL, you can claim your right to apply regarding your personal data by sending the documents proving your ID and a petition consisting of the details of your request in written to our Company head office at Barbaros Mah. Begonya Sok. Nida Kule Ataşehir Batı Sitesi No: 1/1 Ataşehir İstanbul or by sending an e-mail to enerjisamustericozumleri@hs01.kep.tr with your safe electronic signature or mobile signature or to musteriiliskileri@enerjisa.com by using your previously defined and registered e-mail address in ENERJISA’s system.

Your application must include the following information as per article 5 paragraph 2 of Communique on the Principles and Procedures for the Request to Data Controller (“Communique”);

a) Name, surname and signature, if the request is in writing,
b) For Turkish citizens, Turkish ID number; for foreigners, nationality, passport number or ID number, if exists,
c) Residential and business address for notification,
ç) Electronic mail address, telephone, fax number for notification, if exists,
d) Subject of request. Please use Data Controller Application Form for related requests. Your application shall be accepted by ENERJISA following the identity verification and the related parties shall be informed in writing or digitally within the legal periods. As per article 7 of the Communique, if your application is to be responded in writing, no fee will be charged up to ten pages. Please kindly be informed that 1 Turkish Lira shall be charged per page over ten pages in compliance with the Communique.

8) Amendments

ENERJISA reserves the right to make any revisions in its policies and procedures to comply with the amendments made in the related legislation. This Disclosure text herein was revised on 15.03.2021.
Yours faithfully,
1-Data is processed if you visit our Company buildings.
2-Data is processed if you visit www.enerjisa.com.tr.
3-Data is processed if you visit www.enerjisa.com.tr.
4-Data is processed if you call our call centre.
5-Enerjisa Group Companies: mean Başkent Elektrik Dağıtım A.Ş., Istanbul Anadolu Yakası Elektrik Dağıtım A.Ş., Toroslar Elektrik Dağıtım A.Ş., Enerjisa Başkent Elektrik Perakende Satış A.Ş., Enerjisa Toroslar Elektrik Perakende Satış A.Ş., Enerjisa Istanbul Anadolu Yakası Elektrik Perakende Satış A.Ş., Enerjisa Elektrik Enerjisi Toptan Satış A.Ş., Enerjisa Müşteri Çözümleri A.Ş., Eşarj Elektrikli Araçlar Şarj Sistemleri A.Ş., Enerjisa Üretim A.Ş., Enerjisa Enerji A.Ş.
6-Hacı Ömer Sabancı Holding Companies mean companies operating in insurance, banking and retail sectors under AvivaSA, Aksigorta, TeknoSA, CarrefourSA, Akbank, SabancıDx, Akportföy, Ak Yatırım brands, as well as all companies of which Hacı Ömer Sabancı Holding owns 20% and more shares.