Data Controller Application Form.

This English text is a translation provided for information. The Turkish text is the original and prevails in case of any discrepancy.

Privacy Notice for the Data Controller Application Form

This Privacy Notice has been prepared by TSY Enerji Endüstrisi Sanayi ve Ticaret Anonim Şirketi, acting as data controller, within the framework of Article 10 of the Personal Data Protection Law No. 6698 (“KVKK”) and the Communiqué on the Procedures and Principles to be Followed in Fulfilling the Obligation to Inform, in order to inform you about the purposes and legal grounds for processing your personal data, the method of collection, to whom it may be transferred and your rights under the KVKK.

The following personal data you share through the “Data Controller Application Form” below;

• is processed so that the necessary evaluation and work can be carried out on the subject of your application,
• and for the purposes of conducting the related business processes and contacting you about the subject.

We do not have absolute control over the information you share through this form. We recommend that you do not share with our company any personal data, or special categories of personal data, that you do not want us to know.

Under Article 5 of the KVKK, your identity and contact data is processed on the legal grounds of “obtaining the applicant’s identity and contact details and answering the application within the statutory period, and fulfilling the legal obligation of the data controller”; and, should the application or the response later become the subject of a legal dispute, records are retained on the legal ground of the establishment, exercise or protection of a right. Any special category of personal data you send us in the form is processed by automated or non-automated means on the legal ground in Article 6 of the KVKK, “data processing is mandatory for the establishment, exercise or protection of a right”, and will be shared only with the competent judicial authorities in legal disputes.

You may submit your requests under Article 11 of the Law, which regulates the rights of the data subject, to our contact addresses below in accordance with the “Communiqué on the Procedures and Principles of Application to the Data Controller”, or through the contact channels stated in this form.

TSY Enerji Data Controller Application Form

1. General Information

The Personal Data Protection Law No. 6698 (“KVKK”) grants the data subject (the “Applicant”) the right to make requests concerning the processing of their personal data under Article 11 of the KVKK.

This application form has been prepared to identify your relationship with TSY Enerji Endüstrisi Sanayi ve Ticaret Anonim Şirketi (“TSY Enerji”), to fully determine any personal data of yours processed by TSY Enerji, to answer your application accurately and within the statutory period, and to make the application process easier for you. To ensure the security of your personal data and prevent unlawful transfers, TSY Enerji may request additional information to verify identity and authority. Responsibility for information provided by the Applicant that is inaccurate and/or out of date, or for unauthorised requests, lies with the Applicant.

Under Article 7 of the Communiqué on the Procedures and Principles of Application to the Data Controller, no fee is charged for written answers of up to ten pages. A processing fee of 1 Turkish lira may be charged for each page above ten. If the answer is given on a recording medium such as a CD or flash drive, a fee equal to the cost of the medium may be requested.

2. Scope of the Right to Apply under Article 11 of the KVKK

By applying to TSY Enerji, the Applicant may request to:

1. learn whether their personal data is processed,
2. request information if their personal data has been processed,
3. learn the purpose of processing their personal data and whether it is used for that purpose,
4. know the third parties in Turkey or abroad to whom their personal data is transferred,
5. request correction of their personal data if it is incomplete or inaccurate, and request that third parties to whom it was transferred be notified,
6. request deletion, destruction or anonymisation of their personal data where the reasons for processing no longer exist, even though it was processed in accordance with the KVKK and other laws, and request that third parties to whom it was transferred be notified,
7. object to a result against them arising from analysis of their data exclusively by automated systems,
8. claim compensation for damage suffered due to unlawful processing of their personal data.

3. Method of Application

Under Article 13(1) of the KVKK, applications concerning these rights must be submitted to us in writing and signed, or by other methods determined by the Personal Data Protection Board (the “Board”).

Written applications may be submitted by printing this form and sending it:

• in person by the Applicant,
• through a notary,
• by registered electronic mail (KEP), secure electronic signature or mobile signature, or
• by e-mail from the address the Applicant has previously notified to us and that is registered in our system.

The written application channels are set out below.

For applications made by e-mail, TSY Enerji may request additional information to verify the Applicant’s identity and may take the necessary measures.

Under Article 13(2) of the KVKK, applications submitted to us will be answered in writing or electronically within thirty days of receipt, depending on the nature of the request.

4. Your Identity and Contact Details

A. Applicant Contact Details

First name

Surname

Turkish ID No / Passport No (for foreign nationals)

Telephone

E-mail

Home or business address

B. Please state your relationship with TSY Enerji.

(Visitor, customer, business partner employee, job applicant, former employee, third-party company employee, shareholder, etc.)

• Visitor
• Customer (products or services)
• Prospective customer
• Supplier employee
• Supplier representative
• Shareholder / Partner
• Employee
• Job applicant
• Intern
• Parent / Guardian / Representative
• Other: ……………………………

Within our company, the contact you are in touch with:

Department

Subject

5. Please choose how you would like to receive our response:

• Send it to my address.
• Send it to my e-mail address. (Choosing e-mail lets us respond faster.)
• I will collect it in person. (Collection by proxy requires a notarised power of attorney or letter of authority.)

6. Subject of Request

Please describe your request under the KVKK in detail below.

Your request

Applicant

You can use your browser’s print command to print this form.

Name / Surname

Signature (for written applications)

Data Controller

Data Controller: TSY Enerji Endüstrisi Sanayi ve Ticaret Anonim Şirketi

Address: Köşklü Çeşme Mah. 563. Sk. No: 17 İç Kapı No: 1 Gebze / Kocaeli

E-mail: kvkk@tsyenergy.com

Kep: tsyenerji@hs01.kep.tr

This text was prepared within the scope of KVKK Compliance Consultancy. © Uyumbox Danışmanlık | www.uyumbox.com