We aim to inform you about your personal data processed by Gdz Elektrik (“Gdz” or “the Company”).

At Gdz Elektrik (“the Company”), we give due consideration to secure and process the personal data that belongs to you -our esteemed consumers- and we are responsible for, in accordance with the Personal Data Protection Law (the “KVKK”) No. 6698 and the relevant legislation.

In this regard, we would like to inform you as the Data Controller under the KVKK and relevant regulations.

1. Data Controller:

Gdz Elektrik is a “Data Controller” under the KVKK and relevant regulations, and you can reach the company using the contact details below.

Address : Üniversite Cad. No: 57 35042 Bornova/İZMİR

Phone: 0 232 477 26 00

Fax: 0 232 435 13 92

Email: bilgi@gdzelektrik.com.tr

2. Personal Data Processed:

As part of your relationship with Gdz Elektrik, the following personal data is processed:

Your Identity Details: Full Name, ID Card, National ID Number, Tax Number

Your Contact Details: Home address, Email address, Land line, Mobile phone

Data on the Security of Company Service Points: Surveillance Camera Footage, Visitor Records

Your Consumer Request Details: Installation Number, Consumer Action Details

Your Visual and Audio Data:Video Footage, Voice Records

Data on Process Security: Webpage Access Logs

3. Purpose of Processing Personal Data:

Your personal data obtained as part of your relationship with our Company is processed under the personal data processing conditions and purposes stated in Articles 5 and 6 of the KVKK with the objectives below.

• To offer power distribution services and make investments as per the Electricity Market Law,
• To read meter,
• To connect to the distribution system, to operate distribution plants,
• To offer services related to the business field of our Company, (such as drawing up request estimations, balancing and reconciliation market), to improve the quality of these services, to offer other services and comply with the obligations to inform parties,
• To ensure legal and commercial safety of the Company and of the parties that have a business relationship with the Company,
• To ensure that the human resources policies of the Company are implemented,
• To determine and implement commercial and business strategies,
• To sign connection agreements with consumers as part of contractual processes,
• To send payment notices to real and legal persons using illegal electricity,
• To run the electricity project approval process,
• To run bill processes,
• To transfer data to the Market Management System,
• To monitor and carry out legal proceedings,
• To carry out instalment and execution processes,
• To meet failure and maintenance requests,
• To handle connection views and 3rd party-project approval processes,
• To carry out production plant processes,
• To transfer information related to service content,
• To provide wireless network for guests,
• To ensure safety at the Company service buildings and transformer hubs,
• To track requests and complaints,
• To carry out survey processes,
• To handle the consumer compensation process as per the Commercial Quality Table,
• To upload consumer data to the system for archiving purposes,
• To handle financing and accounting,
• To handle product/service purchasing processes,
• To provide physical environmental safety.

4. Parties to Whom the Personal Data Processed may be Transferred, and the Related Purposes:

For the purposes set out in Article III of this Disclosure Form, your Personal Data can be transferred to official institutions in the country; law enforcement; courts and enforcement offices; our business partners; service providers and their authorized personnel; third parties -real or legal person- with whom we have a business relationship; banks; our group companies and affiliates; our suppliers and support service providers, with the conditions of and purposes for personal data processing stated in Articles 8 and 9 of the KVKK.

5. Method and Legal Basis for Collecting Personal Data:

When you are establishing a legal relationship with our Company and as long as such relationship continues, your personal data is collected in verbal, written or electronic media from you, third parties and legal bodies via written or verbal communication channels linked with our Company through the website, various contracts, mobile applications, email, application forms and similar means. Personal data collected as described above is processed for the lawful reasons below, which are set forth in Articles 5, 6 and 8 of the KVKK.

• You give express consent,
• It is clearly stipulated in the legislation that our Company is subject to, in particular the Electricity Market Law, Tax Procedure Law, Turkish Law of Obligations and Turkish Commercial Code.
• Comply with national and international principles and procedures on consumer recognition, and fulfil the obligations set forth in the legislation and by official authorities with regards to data storing, reporting and informing,
• On the condition that it is directly connected to the establishment or performance of a contract, it is required to process the personal data of the parties to the contract, to offer the products and services demanded, and fulfil the obligations stated in the contracts you signed,
• It is required to fulfil legal obligations,
• It is made public by the relevant person themselves,
• It is obligatory to process data to provide, exercise or protect a certain right,
• It is obligatory to process data for legitimate interests of the data controller provided that such processing does not harm the fundamental rights or freedoms of the relevant person.

Your sensitive personal data, on the other hand, is collected, stored and processed based on the lawful reasons below:

• You give express consent,
• Personal data other than health-related data can be processed without seeking express consent in cases stipulated by law,
• Health-related personal data can be processed without seeking express consent from the relevant person, by persons or authorized organizations who have a confidentiality obligation, only with aims of protecting public health, preventive medicine, medical diagnosis, care services, planning and managing health-related finances.

6. Personal Data Subject’s Rights Set Forth in Article 11 of the KVKK:

As per the provisions of Article 11 of the Law, you have the following rights with respect to your personal data.

• Find out if your personal data has been processed,
• If your personal data has been processed, request information on the processing of the same,
• Find out the purpose of processing your personal data and if the data has been used for the intended purpose,
• Find out the third parties to whom your personal data has been transferred at home or abroad,
• If your personal data has been processed in an incomplete or incorrect way, demand rectification and request that such rectification be also communicated to third parties to whom such data was transferred,
• Although your personal data has been processed in compliance with the provisions of the Law No. 6698 and other legislation, request deletion or destruction of such data if the reasons for processing it are no longer valid, and request that such action be also communicated to third parties to whom such data was transferred,
• If -in particular- automated analysis of the processed personal data leads to a result that is against the data subject, object to such result,
• Request indemnification if you incur loss due to unlawful processing of your personal data.

7. How to Send a Request:

As per the first paragraph of Article 13 of the KVKK, regarding your requests to exercise the rights listed above, you can bring a written form to Üniversite Cad. No:57 Bornova/İZMİR with wet-ink signature, or send it through a notary public. Besides, based on Article 5 of the “Communiqué on the Procedures and Principles for Application to Data Controller”, you can send your request to our registered email (KEP) address, gdzelektrik@hs02.kep.tr, signed with secure e-signature, using KEP address, secure e-signature, mobile signature, or the email address that you have communicated to our Company before and that is registered in our systems.

In this application, please ensure that your request is clear and understandable and that your request is about you or, if you are making this request acting on behalf of someone else, please ensure that you are duly authorized to do so and hold certification demonstrating such authorization; and that your application contains identity and address details, as well as documents authenticating your identity. Applications in this context shall be accepted upon identity authentication to be performed by us. Your requests shall be responded to in the shortest time possible, or in 30 days maximum, depending on the nature of the request. If a written response is sent for your application, no fees shall be charged for up to 10 pages; for every page above 10 pages, a fee of 1 Turkish lira may be charged. If the response to your application is sent in a recording medium such as a CD or flash drive, a fee corresponding to the price of that medium may be requested.

8. Amendments:

The disclosure form can be amended depending on the amendments to legislation. In case of an amendment, we will be announcing it on our website; so, it is recommended that you regularly visit our website so that you know about these changes.