Personal Data Protection

We aim to inform you about your personal data processed by our company titled GüzelEnerji with this Disclosure Text [Disclosure Text], pursuant to Article 10 of the Personal Data Protection Law (“PDPL") No. 6698, published in the Official Gazette No. 29677, dated April 7, 2016, which aims to protect the fundamental rights and freedoms of individuals, especially the privacy of private life, in the processing of personal data and the Communiqué on the Procedures and Principles Applicable to Fulfillment of the Disclosure Obligation, published in the Official Gazette No. 30356, dated March 10, 2018.

1. IDENTITY OF THE DATA CONTROLLER

GüzelEnerji has the title of "Data Controller" within the scope of PDPL and related regulations, and you can contact us via the contact information given below.

Adres: Cevizli Mahallesi, Tugay Yolu Caddesi, OYAK Dragos Plaza No:10/C İç Kapı No: 82 Kat: 17-18-19-20 34846, Maltepe / İstanbul
Telefon: 0 216 606 73 93
Fax: 0 216 225 08 25
E-posta: moil.akaryakit@guzelenerji.com.tr

2. PROCESSED PERSONAL DATA

The following personal data of yours are processed within the scope of your relationship with GüzelEnerji;

(I) ID Details: name and surname, identity card, identification number, tax identification number;
(II) Contact Details: email, telephone, cell phone;
(VI) Data on the Security of our Company Campus: CCTV records, visitors' records, entry and exit records to and from stations;
(VII) Details of Your Vehicle: license plate number;
(VIII) Your Customer Tracking Details: customer number, customer transaction information;
(IX) Your Audio & Visual Recording Data; sound recordings,

3. PURPOSES OF PERSONAL DATA PROCESSING

The personal data collected in the scope of your relationship with GüzelEnerji are processed for the following purposes;

• Following-up and carrying out legal affairs,
• Uploading customer information to the system in order to carry out archive activities,
• Carrying out finance and accounting transactions,
• Conducting advertising/campaign/promotion processes,
• Conducting contract processes,
• Drawing up of Monthly Withholding Tax Returns,
• Conducting the process for the follow-up of the claims and complaints,
• Ensuring the follow-up of the security of movable properties and resources,
• Conducting activities in accordance with the legislation,
• Carrying out the wage policy,
• Conducting the marketing processes related to products/services,
• Conducting the purchase and sale of products/services,
• Conducting marketing and analysis studies,
• Ensuring the security of the physical location,
• Carrying out logistics activities,
• Conducting strategic planning activities,

4. TRANSFER OF PROCESSED PERSONAL DATA

Your personal data may be transferred to domestic official institutions and organizations, law enforcement agencies, executive directorates, third party real and legal persons, service providers and their officials, business partners, banks, shareholders of our Company, our group companies and affiliates, suppliers and support service providers for the purposes set forth in Article 3 of this Clarification Disclosure Text within the scope of the provisions of PDPL regarding transfer of personal data and transfer of personal data to abroad.

5. METHODS AND LEGAL GROUNDS OF COLLECTING PERSONAL DATA

Your personal data are collected, stored and processed before GüzelEnerji from you, third parties and legal authorities during the establishment of your legal relationship with our Company and during the continuation of such relationship, through the internet, telephone, e-mail and physical, written, verbal and electronic media for the purposes set out above, based on the grounds of lawfulness listed in Articles 5 and 8 of the Law and stated below.

• Your explicit consent is sought,
• It should have been clearly stipulated so as per the legislation to which our Company is subject, including the Tax Procedure Law, Turkish Code of Obligations, Turkish Commercial Code,
• There is a must comply with national and international principles and principles regarding the recognition of customers, and to comply with the information retention, reporting and disclosure obligations stipulated by legislation and official authorities,
• Provided that it is directly related to the establishment or performance of a contract, it is necessary to process the personal data of the parties to the contract, to provide the requested products and services, and to fulfill the requirements of the contracts you have concluded,
• It is necessary for the fulfillment of a legal obligation,
• It has been made public by the person concerned,
• Data processing is mandatory for the establishment, exercise or protection of a right,
• Data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject.

6. RIGHTS OF THE DATA SUBJECT

Pursuant to article 11 of the Law, you have the following rights in relation to your personal data:

• To learn whether your personal data are processed or not,
• To request information if the personal data are processed,
• To learn the purpose of personal data processing and whether this data is used for intended purposes,
• To know the third parties to whom your personal data is transferred at home or abroad,
• To request the rectification of the incomplete or inaccurate personal data, if any,
• To request the erasure or destruction of personal data,
• To request that the third parties to whom personal data have been transferred be notified of the actions regarding the correction, erasure or destruction of personal data,
• To object to the processing, exclusively by automatic means, of personal data, which leads to an unfavorable consequence for the data subject,
• To request compensation for the damage arising from the unlawful processing of your personal data.

7. IF YOU WOULD LIKE TO CONTACT US FOR YOUR RIGHTS AND REQUESTS

You can send your requests in accordance with your legal rights stipulated in the relevant law and other legislation, with a petition served to our address above, by hand, or through a notary public. Apart from that, you can send your request to the address of total.kurumsal@totalistasyonlari.com.tr by using the registered e-mail (KEP) address, secure electronic signature, mobile signature or the e-mail address that you have previously notified to our Company and registered in our systems in accordance with Article 5 of the Communiqué on the Procedures and Principles Regarding Application to the Data Controller.

Applications to be made within this scope will be accepted following the identity verification to be carried out by us, and your requests will be finalized as soon as possible and within 30 (thirty) days at the latest, depending on the nature of the request. In case of a written response to the application, no fee will be charged for up to 10 (ten) pages, and a transaction fee of 1 (one) Turkish Lira may be charged for each page over 10 (ten) pages. If the response to the application is provided in a recording medium such as a CD or flash memory, a fee may be charged in the amount of the cost of the recording medium.