Data Policy
Enerco Enerji Sanayi ve Ticaret Anonim Şirketi (“Company”) places maximum importance on the protection and processing of Personal Data in accordance with the Law on the Protection of Personal Data numbered 6698 (“LPPD”) and we act with all diligence in all our planning and activities. With this awareness, we take all administrative and technical measures for the protection and processing of Personal Data.
1. Scope of Policy
This Policy; is prepared for shareholders business partners, company officials, employee candidates, visitors, customers, potential customers, contractor and third parties and shall be applied in case of process of data belonging specified person
2. Definitions
In this Notification, the terms of ‘personal data’, ‘sensitive personal data’ and ‘processing personal data’ have been used with the meanings stated in LPPD. Under LPPD, the term ‘personal data’ has been defined as “any information relating to an identified or identifiable natural person” and the term ‘processing personal data’ has been defined as “any operation performed upon personal data such as collection, recording, storage, preservation, alteration, re-organization, disclosure, transmission, assignment, making available, classification or preventing the use thereof, fully or partially through automatic means or provided that the process is a part of any data registry system, through non-automatic means”.
3. Purposes of Data Processing
3.1. Employee Candidate
Your personal data will be processed in compliance with the principles stipulated in the Article 5 and 6 of LPPD and within the scope of purposes stated below:
Supervision the status, qualifications and experience of the Candidate to the applied position, determining the most suitable candidate for the position applied, checking references, exchanging information on candidates from declared references during recruitment, confirming the correctness of the information given by the Candidate, researching the candidates, evaluating the application for suitable positions to be opened in the future, in accordance with the explicit consent of the candidate regarding that matter, to communicate with the Employee Candidate about the application and recruitment process, or to communicate with the candidate for any position opened in the future, meeting the requirements of the relevant legislation or the requests of the competent institutions or organizations
3.2. Employee
Employee’ personal data will be processed in compliance with the principles stipulated in the Article 5 and 6 of LPPD and within the scope of purposes stated below:
To maintain the management and working order of employees, fulfillment of obligations arising from the employment contract with our Company and other legal, administrative or contractual obligations, fulfillment of obligations regarding the Minimum Living Allowance, to ensure the compliance with company policies, such as security and internet usage requirements, ensure To successfully complete management related objectives such as training and quality control, conduct of orientation programs for adaptation of the employees to the Company, organization of sports activities, organizing events, inviting employees, monitoring the attendance to such events, making reservations for these events, making domestic or foreign travel organizations, hotel reservations, making and following up on visa applications for the employees, to monitor, control and supervise the equipment or vehicles which are assigned to an employee, supervising all kinds of documents related to the activities carried out in the company, and keeping records as to the persons who obtain, borrow, archive, destroy and carry out other similar activities with respect to these documents, for the deduction of the union membership fees from the salaries of the employees, to ensure that the company can fulfill its obligations within the framework of occupational health and safety legislation, to conduct employee performance evaluations, organization of in-house trainings, monitoring of attendance to such trainings, determination of appropriate employees for such trainings, determination of employee expenses, allocating such expenses, monitoring expenses, making necessary payments to employees, following up on expenses and payments, distribution of tasks, determination of job definitions and notification of the employees regarding any changes thereto, inspecting the health conditions of the employees required for the relevant position, conducting periodic health checks, making administrative arrangements at the workplace for the employees to work in suitable positions, resolving legal disputes that may arise from health problems after the end of the employment relationship, elimination of conflicts, making the necessary notifications to the Social Security Institution and fulfilling legal obligations, determining salaries, promotions, bonuses, permits and similar rights of the employees, providing gifts or promotions, including raffles or contests, celebrating birthdays, organizing donations or other similar activities in favor of employees or their relatives, taking the opinion of employees through questionnaires and polls, investigation, detection, prevention, examination and notification to the relevant administrative or judicial authorities regarding violations to the employment contract and the law, checking references; the provision of safe working practices, the control and management of the access of employees to the system and employee absence, to resolve disputes that may arise between the Company and its employees in the future, in the event of a merger, division, type change, control change or restructuring involving the Company, to ensure that the process is carried out in a healthy manner, taking the opinion of employees that quit, to eliminate any shortcomings and to improve the workplace
3.3. Customer
Customer’ personal data will be processed in compliance with the principles stipulated in the Article 5 and 6 of LPPD and within the scope of purposes stated below:
Fulfillment of obligations arising from the employment contract with our Company and other legal, administrative or contractual obligations, reply of questions, demands and claims to provide effective customer service, determination of problems related to customer account, solving the identified problems, introduce and notify to application and services of Company, investigation, detection, prevention, examination and notification to the relevant administrative or judicial authorities regarding violations to the employment contract and the law, invitation of our customers to our organizations, creation of invitation lists, organization planning, communication with our customers in this process, to conduct of business development activities, to conduct market analysis and to create a customer portfolio, taking the opinion of customer through questionnaires and polls, to resolve disputes that may arise between the Company and its employees in the future, in the event of a merger, division, type change, control change or restructuring involving the Company, to ensure that the process is carried out in a healthy manner
3.4. Contractor
Contractor’ personal data will be processed in compliance with the principles stipulated in the Article 5 and 6 of LPPD and within the scope of purposes stated below:
Fulfillment of obligations arising from the contract with our Company and other legal, administrative or contractual obligations, supervising whether the sub conductor is acting in compliance with contractual obligations, Control of the quality of the service or product provided by the contractor, to manage of operation that payments to the suppliers, checking of financial conditions, charging, invoicing, etc., to manage of company’s process and policy about purchase of service/product, provide reference for sub-conductor, indicate to our group companies or business partner that taking services from sub-conductor, to resolve disputes that may arise between the Company and its employees in the future, in the event of a merger, division, type change, control change or restructuring involving the Company, to ensure that the process is carried out in a healthy manner
4. Transfer of Personal Data
Your personal data will be transfered in compliance with the principles stipulated in the Article 8 and 9 of LPPD and within the scope of purposes stated below:
To plan and implement our human resources policies in the best possible way, to plan and conduct our business partnerships and strategies correctly, to ensure business operation, to provide legal, commercial and physical security of our company and our partners, to provide the corporate functioning of our company and to provide products and services work to make good use of it; to provide the highest level of data security, the creation of databases, the development of the services offered in our company’s website, to communication with the people who give their requests and complaints to our Company and eliminating the mistakes on the site.
5. Transfer of Personal Data Related Parties
Your Personal data will be transfered to; our suppliers, shareholders, business partners, suppliers, group companies, affiliates, companies and institutions that we cooperate with, and outsourced company for contractural or legal obligations (including security, health, work safety, law, etc.) and the authorized official institutions and organizations
6. Storage Period of Personal Data
As a basic principle, the Company keep the personal data for the period specified in the related laws and regulations when it is foreseen in the legislation. If a period is not prescribed in the legislation on how long personal data must be kept, the personal data shall be deleted, destroyed or anonymization after the period required for the Company to be processed in accordance with the practices of the company and its practices and commercial life or the statutory time limits stipulated in the related laws.
If the personal data has reached the end of the intended period of processing or it has reached the end of the period of holding in terms of the relevant legislation; personal data may only be kept in evidence for possible legal disputes. The periods of time is statute of limitations for right are taken as basis. In this case, the stored personal data is not accessed for any other purpose and only when it is necessary to use it in the relevant legal dispute, the personal data is accessed. After the expiration of the this period, personal data is deleted, destroyed or made anonymous.
7. The Rights of Data Subject
You are duly entitled to apply to Company and to learn whether or not your personal data are processed; if processed, to request information in connection therewith; to learn the purpose of processing and whether or not such data are used for the intended purposes; to learn the identity of third parties who received such data at home or at abroad; if your data are under processed or misprocessed, to ask for the correction thereof; to ask for deletion/destruction of such data under the conditions specified in Article 7 of LPPD; to request notification of such deletion or destruction to persons to whom the data are transferred; to raise objection against a result obtained in disfavor of you due to analysis of such data solely via automatic systems; and if you incur damages due to processing of your data in violation of the laws, to demand indemnification for your damages. If, in exercising your foregoing rights, the underlying transaction involves an additional cost, the applicable fee shall be charged to you pursuant to the relevant legislation.
