A

EPİAŞ DISCLOSURE ON PROTECTION OF PERSONAL DATA

Information on the Protection of Personal Data

Purpose and Scope 

This Declaration, Law No. 6698 on the Protection of Personal Data (KVKK) and Energy Markets Management Inc. (EPİAŞ) in accordance with the KVK Policy; In line with the importance attributed by EPİAŞ to personal data; It has been prepared to present our company’s approach to the protection and processing of current and potential market participants, employee and employee candidates, company shareholders and authorities, visitors, institutions we cooperate with, and all other third parties’ personal data. 

Data Responsible

KVKK accepts EPİAŞ as Data Officer for the data processed within EPİAŞ. The purpose of establishment of EPİAŞ; is the planning, establishment, development and operation of the energy markets in the market operating license in a way that is effective, transparent, reliable and meets the needs of the energy market. In addition, EPİAŞ is committed to ensure the creation of reliable reference prices without equal discrimination between equal parties, and to enable trade through market mergers, with the highest number of market participants, product diversity and transaction volume to reach the highest level of liquidity. Your personal data may be processed, stored, stored, classified and updated by EPİAŞ in accordance with the rules of law and honesty for the purposes described below, and may be disclosed / transferred to third parties for the purposes of which the legislation allows and / or for the purposes in which it is committed. 

Purpose of Processing Personal Data

EPİAŞ processes its personal data in order to fulfill the rights and obligations granted to it by the legislation within the scope of the operation of the Energy Markets. Personal data collected as EPİAŞ Data Officer; saving, storing, preserving, reorganizing in accordance with the Law and other regulations, sharing with institutions which are authorized to request such personal data by law, transferring, classification and KVKK to domestic and foreign third parties under has the right and authority to process in other ways counted in. 

Transfer of Personal Data

Personal data processed by EPİAŞ in accordance with the law; In order to carry out our activities, our business partners, shareholders, authorized public institutions and organizations, real and legal persons can be transferred to the firms receiving support services within the framework of legal obligations and legal limitations. 

The Method and Legal Reason of Collecting Personal Data

Personal data is gathered orally, in writing or electronically, through channels such as service provider natural or legal persons (business partners), Company personnel, Company authorized persons, online services and call center, to ensure that the above mentioned purposes and our activities are fully carried out and processed. Within this framework, your personal data may be processed and transferred without the express consent of the parties in accordance with the provisions of Article 4/2 of the KVKK, in the presence of explicit consent or in the presence of the conditions stipulated in the provisions of Article 5/2 of the KVKK and Article 6/3 of the KVKK. 

Storing and Deleting Personal Data

EPİAŞ takes into account the legal obligations in the primary priority when determining the data retention limits in accordance with the KVKK and other relevant legislation. In cases where the laws and other legislation do not have a direct or indirect limit set, personal data are stored and stored in accordance with the reasonable and legal purpose for which they are processed. At the end of the period or if the reason for processing disappears, the relevant data is deleted, destroyed or anonymized. 

Rights Provided by Article 11 of the KVKK

Everyone has the right to apply to the data officer in accordance with the rights granted by KVKK; a) To learn whether personal data has been processed,b) If personal data is processed, requesting information about it,c) To learn the purpose of processing the personal data and whether they are used in accordance with their purpose,d) To know the third parties in which personal data is transferred at home or abroad,e) Requesting correction of personal data in case of incomplete or incorrect processing,f) Requesting the deletion or destruction of personal data within the framework of the conditions provided for in Article 7,g) to request that the transactions made in accordance with paragraphs (e) and (f) be notified to third parties to which personal data is transferred,h) to object to the emergence of a result against the individual by analyzing the processed data exclusively through automated systems,i) Requesting the removal of the loss in case of loss due to unlawful processing of personal data The applicant will be able to submit his requests regarding the implementation of the KVKK personally and in writing to EPİAŞ, who is responsible for the data via the EPİAŞ KEP address (enerjipiyasalari@hs01.kep.tr) or other methods specified in the Law. EPİAŞ will finalize the requests in the application within the period specified in the KVKK according to the nature of the request. Although the application is free as a rule, if the transaction requires an additional cost, the fee may be requested by EPİAŞ according to the tariff determined according to KVKK. EPİAŞ will be able to inform the related person in writing or electronically about the acceptance or rejection of the application. In case the request in the application is accepted, the data responsible is fulfilled. In case the application is caused by the error of the data responsible, the fee is returned to the related person.