1. PROTECTION OF INFORMATION
OBİŞARJ Electric Vehicle Charging Systems Inc. As (“COMPANY”), the Personal Data Protection Law No. 6698 (“KVKK”) published in the Official Gazette No. 29677 dated April 7, 2016, which aims to protect the fundamental rights and freedoms of individuals, especially the privacy of private life, in the processing of personal data. In accordance with the 10th article titled "Information Obligation" and the Communiqué on the Procedures and Principles to be Followed in the Fulfillment of the Information Obligation published in the Official Gazette dated 10 March 2018 and numbered 30356, we would like to inform you with this Information Text about your personal data processed by the COMPANY and listed below.
This information is about informing the COMPANY, which is the Data Controller, of the purposes of preserving, processing and sharing personal data with third parties, their legal reasons, the persons and organizations to which personal data may be transferred, the methods of collecting personal data and your rights and authorities within the scope of KVKK.
2. WHAT IS PERSONAL DATA?
Personal data is defined in KVKK as any information regarding an identified or identifiable natural person. Accordingly, your information such as your name, surname, e-mail address and telephone number are called personal data.
3. WHAT PERSONAL DATA DO WE COLLECT?
PERSONAL DATA CATEGORY
Identity
Communication information
Location
Legal action
Customer Transactions
Transaction Security
Risk management
Other
Name-surname, TR ID number, identity card and driver's license information,
Telephone number (extension-mobile), address, e-mail address, postal code
Location information
Information in correspondence with judicial and administrative authorities, information in the case/enforcement file,
Data such as call center records, member number, transaction number, support and request information, usage information, service type,
IP address information, password information, website access information, username and password information,
Information processed to manage commercial, technical and administrative risks,
Vehicle information, vehicle license plate information, charging station usage date and time, amount of electricity used,
4. WHAT IS THE METHOD AND LEGAL REASON FOR US COLLECTING YOUR PERSONAL DATA?
Your personal data is collected through all kinds of verbal, written and electronic media.
Your personal data may be processed within the scope of the 2nd paragraph of Article 5 of KVKK No. 6698, "Provided that it is directly related to the establishment or execution of a contract, it is necessary to process the personal data of the parties to the contract", "Provided that it does not harm the fundamental rights and freedoms of the data controller, It is collected based on the legal reasons "it is mandatory for the personal interest of the data controller" and "it is mandatory for the data controller to fulfill its legal obligation", "data processing is mandatory for the establishment, use or protection of a right" and is processed within the scope of these legal reasons. In this context, your personal data:
- Your personal data listed in identity, contact, location and other categories: "Provided that it is directly related to the establishment or execution of a contract, it is necessary to process personal data of the parties to the contract",
- Your data, which is listed in the legal transaction, customer transactions and transaction security categories, is "mandatory for the legitimate interest of the data controller, provided that it does not harm the fundamental rights and freedoms of the relevant person."
It is collected based on legal reasons and processed within the scope of these legal reasons.
5. FOR WHAT PURPOSES DO WE PROCESS YOUR PERSONAL DATA?
It is of great importance to collect, use and process some of your personal data in order for the COMPANY to carry out its activities in the best way, especially to fulfill its obligations under the legislation. Your personal data;
- Providing charging services and ensuring that these activities are carried out in accordance with the relevant legislation,
- Within the scope of our activities, providing the services in the contracts and increasing the quality of these services, carrying out the COMPANY's sales and after-sales support activities,
- Ensuring legal and commercial security,
- Management of regulation and compliance and legal processes,
- Maintaining relations with public institutions and other organizations,
- Execution and execution of occupational health and safety, customer relations and call center processes,
- Carrying out support services and obligations, customer satisfaction and corporate communication activities,
- Planning and execution of corporate sustainability, corporate management, strategic planning and information security processes,
- Preparation of applications and continuity of existing ones,
- Conducting financial operations and monitoring financial matters,
- Responding to consumer complaints,
- Conducting lawsuits and enforcement proceedings to which our COMPANY is a party,
- Conducting consultancy, business partnership, purchasing, tender and sales transactions,
In case you have explicit consent, Identity Information (such as name, surname, date of birth, TR ID number, occupation information), Contact Information (such as internal phone number, mobile phone number, e-mail, address), Location (such as Location Information), Customer Transaction Information. (data such as member number, transaction number, support and request information, data such as usage service type), Location (such as Location Information), Marketing (behavior information and cookies on websites and mobile applications created to offer, use or promote products and services Your personal data regarding other (vehicle information, vehicle license plate information, date and time of charging station usage):
- Realization of campaigns, sweepstakes and competitions,
- Increasing customer satisfaction,
- Measuring and improving brand perception,
- Carrying out market research and survey processes,
- Conducting segmentation and marketing analysis studies, presenting offers, gifts and promotions, performing analysis and profiling, making targeted promotions; Special celebrations, wish transmission, prizes, raffles and delivery of content that is liked, that you want to access again, and that you may be pleased to be reminded of,
- Customizing the products and services offered by the Company according to your likes, usage habits and needs and sending commercial electronic messages in this context,
- Promotion and marketing of personalized and/or personalized campaigns, products and services to all customers, communication regarding these, and providing information about campaigns and discounts; Providing opportunities to benefit from membership, events and economic advantages and carrying out the necessary procedures for their use,
- Organizing events and trainings and identifying participants.
- Promoting the products and services we provide with our business partners, suppliers, group companies and direct or indirect shareholders, as well as their own products and services.
It is processed for limited purposes. Your personal data is used and processed by the COMPANY in strict confidentiality, within the framework and under the control of KVKK, for the purpose of serving you. While processing your data, the COMPANY pays attention to the law and the rule of honesty, ensuring that the data is accurate, not used outside the scope of processing, processed for legitimate purposes, kept up to date and preserved for a reasonable period of time required for the targeted purpose.
6. TO WHOM DO WE TRANSFER YOUR PERSONAL DATA AND FOR WHAT PURPOSES?
Your personal data, for the purposes stated above, to the extent permitted by the legislation and required by our business processes,
- To the Energy Market Regulatory Authority (EMRA) in order to ensure transparency within the scope of its regulatory and auditing powers in accordance with the Electricity Market Law and its secondary legislation, to resolve disputes and to use it as evidence in disputes that may arise,
- To public authorities, private law and public law legal entities, real persons, group companies, direct or indirect shareholders, if it is clearly provided for in the law,
- Provided that it is directly related to the establishment or execution of a contract, banks and financial institutions, insurance companies, individuals and organizations carrying out digitalization, information and technology businesses, natural persons and private law legal entities including local administrations and infrastructure organizations, our shareholders, to our suppliers and authorized public institutions,
- To our suppliers, business partners, group companies, direct or indirect shareholders, authorized private law and public law legal entities and real persons, including local administrations, infrastructure organizations, and real persons, as it is mandatory for the fulfillment of our legal obligations,
- To public authorities, authorized private law and public law legal entities and real persons for the establishment, exercise or protection of a right,
- If you are a member and have your explicit consent, your personal data will be transferred to the "For What Purposes Do We Process Your Personal Data?" In order to achieve the purposes stated in the title, we transfer our data to the cloud database of Amazon Web Services (“AWS”), from which we purchase storage and hosting services within the scope of the service agreement as a third party service provider, and to cloud databases located abroad called Google Cloud belonging to Google LLC.
In order to fulfill the COMPANY's legal obligations arising from legislation such as system use and tax regulations, name-surname, TR ID number, address, telephone number and e-mail address data are kept in our systems and processed for the period required by the above-mentioned policies and procedures and legal regulations. .
These data are processed within the framework of our policies and procedures determined in accordance with the Regulation on Deletion, Destruction or Anonymization of Personal Data, for the period required by the COMPANY's activities and legal regulations, and are deleted in cases where you no longer have a relationship with the COMPANY and there is no reasonable or legal requirement or compliance.
7. AS A DATA OWNER, WHAT ARE YOUR RIGHTS MENTIONED IN ARTICLE 11 OF KVKK?
In accordance with Article 11 of KVKK, your personal data;
- To find out whether it is processed or not,
- To request information if processed,
- To learn the purpose of processing and whether they are used for their intended purpose,
- To know the third parties to whom personal data is transferred domestically or abroad,
- Requesting correction of any incomplete or incorrect processing,
- To request the deletion or destruction of personal data in case the reasons requiring processing are eliminated, even though it has been processed in accordance with the provisions of KVKK and other relevant laws,
- Requesting notification of the transactions made in accordance with paragraphs (e) and (f) above to third parties to whom it has been transferred,
- To object to the emergence of a result against you by analyzing it exclusively through automatic systems,
- To request compensation for the damage in case you suffer damage due to illegal processing,
We hereby inform you that you have the rights.
8. HOW CAN YOU USE YOUR RIGHTS REGARDING YOUR PERSONAL DATA YOU HAVE NOTIFIED TO US?
Your requests within the scope of Article 11 of the Law, which regulates the "rights of the relevant person", can be submitted to the COMPANY headquarters in writing, through the information shown in the table, in accordance with the "Communiqué on the Procedures and Principles of Application to the Data Controller", to the Registered E-mail Address ("KEP"). You can send it with your secure electronic signature or mobile signature, or to the COMPANY e-mail address* by using your e-mail address that has been previously notified to our company and registered in our system.
In your application, specified in the 2nd paragraph of Article 5 of the Communiqué on the Procedures and Principles of Application to the Data Controller ("Communiqué");
- Name, surname and signature if the application is written,
- TR ID number for citizens of the Republic of Turkey, nationality, passport number or identification number, if any, for foreigners,
- Residence or workplace address subject to notification,
- E-mail address, telephone and fax number for notification, if any, and
- subject of request
It is mandatory to be present. We would like to point out that you can submit your Relevant Person Application to us by filling out the "Relevant Person Application Form".
Your application will be answered as soon as possible and within thirty (30) days at the latest, following the identity verification by our COMPANY.
I accept and declare that I have been informed in accordance with the Law regarding my processed data and my rights.
* You can find information about the Data Controller Company in the table below.
Data Controller: Obişarj Elektrikli Vehicle Şarj Sistemleri A.Ş.
Address (Written Application): Şahkulu Mah. Serdar-ı Ekrem Cad. No:15/A Beyoğlu İSTANBUL
E-mail address: obisarj@obisarj.com
Cap Address: obisarj@hs01.kep.tr
9. CHANGES
The COMPANY reserves the right to make changes in its policies and procedures regarding personal data to ensure compliance with legislative changes.
regards