KVKK

Contrust Energy Systems Inc. Privacy Policy

As Contrust Enerji Sistemleri A.Ş., we show the highest level of sensitivity regarding the protection and processing of personal data. Within the scope of Law No. 6698 on the Protection of Personal Data (“KVKK”), our basic principle in the processing of personal data related to our employees, customers, suppliers, visitors and other third parties; to respect the privacy rights of data owners and to use the data only within the legal framework, for clear and legitimate purposes.

Policy Objective

This policy; It has been organized in order to determine the processing conditions, storage, protection, protection, destruction, transfer to third parties and the rights of data owners of personal data processed by our Company.

Scope of the Policy

Our policy covers the personal data of all data subjects, including customers, employees, employee candidates, suppliers, business partners, visitors and other third parties.

Collection of Personal Data

This privacy policy determines the principles regarding the collection, use, storage, deletion, anonymization and transfer of personal data to third parties. The policy applies to all personal data obtained within the scope of our Company’s activities and is applied in accordance with the applicable legislation.

Your personal data may be collected in the following ways:

  • Our website, mobile applications, cookies,
  • E-mail, telephone, oral interviews, forms,
  • Contracts, application documents, camera recordings,
  • Third-party digital platforms and social media.
1. Purposes of Processing Personal Data

Personal data;

  • Fulfillment of legal obligations,
  • Execution of recruitment processes,
  • Personnel affairs and performance evaluations,
  • Compensation and benefits management,
  • Customer relations and marketing activities,
  • Improving service quality,
  • Ensuring physical and digital security,
  • Execution of communication and organization processes,
  • It is processed for audit, ethics, risk management and follow-up of legal proceedings.
2. Methods of Collection of Personal Data

Data may be obtained by our Company in written, verbal, electronic media; application forms, contracts, e-mails, call centers, websites and digital applications. Physical interviews, surveys and other means of communication may also be used.

3. Storage and Destruction of Personal Data

Your personal data:

  • They are kept for their legal storage period,
  • When the retention period expires or the purpose of data processing no longer exists, it is deleted, destroyed or anonymized by appropriate methods,
  • Storage and destruction procedures are carried out within the framework of the “Periodic Destruction” schedule.
4. Storage Period and Destruction Methods

The personal data collected are stored for the periods stipulated by the applicable legislation. When the retention period expires or the purpose of processing no longer exists, the data is deleted, destroyed or anonymized by secure methods. Destruction operations are carried out irreversibly in physical, digital or written media depending on the type of data.

5. Security Measures

Both technical and administrative measures are taken to protect personal data:

  • Access controls and logs,
  • Encryption and firewalls,
  • Staff training and confidentiality undertakings,
  • Contractual obligations with data processors and organizations,
  • Periodic audits and risk analysis,
  • Technical studies to eliminate security vulnerabilities

Our Company keeps personal data in a secure environment against unauthorized access, data loss and misuse.

6. Transfer of Personal Data to Third Parties

Personal data;

  • In cases clearly stipulated in the legislation,
  • If it is directly related to the performance of a contract,
  • To fulfill legal obligations,
  • For the purpose of establishing, exercising or protecting a right,
  • In emergencies directly related to public health or the life of the data subject

In line with Articles 8 and 9 of the KVKK, it may be transferred to our business partners, suppliers, authorized public institutions and private law legal entities, shareholders and group companies, domestically or abroad.

7. Rights of Data Subjects

Pursuant to Article 11 of the LPPD, data subjects have the following rights:

  • Learn whether their personal data is being processed,
  • Request information if processed,
  • Learn the purpose of processing and whether it is used in accordance with this purpose,
  • Knowing the third parties to whom it is transferred domestically or abroad,
  • Request correction if incomplete or incorrectly processed,
  • To request the deletion or destruction of the data in case the reasons requiring its processing disappear,
  • Request notification to third parties to whom transactions are transferred,
  • Objecting to an unfavorable result when analyzed by automated systems,
  • To demand compensation for damages in case of loss

Applications must be submitted to our company in writing and applications will be finalized within 30 days at the latest.

8. Special Categories of Personal Data

Sensitive personal data such as race, ethnic origin, health, sexual life are processed only with explicit consent or within the scope of legal exceptions, by taking necessary security measures.

9. Application Procedure

In order to exercise your rights, you can apply to our company with a written KVKK application form and submit the necessary documents. Your applications will be returned within 30 days at the latest.

CONTRUST ENERGY SYSTEMS A.Ş KVKK APPLICATION FORM (Click here to download the form)

10. Updating the Policy

This policy is regularly reviewed and updated according to changes in legislation and implementation needs. Updated versions are published on our company’s website.