Personal Data Protection Law

MAST ENERJİ VE TEKNOLOJİ A.Ş. PERSONAL DATA PROTECTION AND PROCESSING POLICY

1. INTRODUCTION

As Mast Enerji ve Teknoloji A.Ş., within the scope of the Law on the Protection of Personal Data No. 6698 (KVKK), we undertake to fulfill all our obligations regarding the processing, storage, protection, and destruction of personal data. This text explains the purposes for which personal data collected by our company are processed, the legal grounds, the rights of data subjects, and the measures we take regarding data security.

2. PURPOSES OF PROCESSING PERSONAL DATA

The collected personal data are processed in accordance with the conditions and purposes of personal data processing specified in Articles 5 and 6 of the KVKK for the following purposes:

  • Creating and managing the records of our employees and customers,
  • Conducting and auditing company activities,
  • Managing human resources processes,
  • Carrying out occupational health and safety processes,
  • Fulfilling contractual obligations,
  • Fulfilling legal obligations and sharing necessary information with official authorities,
  • Conducting financial transactions and accounting processes,
  • Managing customer service activities and satisfaction processes,
  • Managing contract processes within the scope of the Labor Law and other relevant legislation,
  • Enabling the exercise of rights arising from the applicable legislation and fulfilling legal obligations,
  • Providing responses when requested by the relevant authority within the scope of judicial and administrative investigations,
  • Managing customer service activities and satisfaction processes.

3. METHODS OF COLLECTING PERSONAL DATA AND LEGAL GROUNDS

Your personal data are collected verbally, in writing, or electronically through our website, e-mail, phone calls, social media platforms, and face-to-face meetings.

The legal grounds for processing your personal data are as follows:

  • Your explicit consent,
  • Circumstances stipulated by law,
  • Necessity for the establishment or performance of a contract,
  • Fulfillment of legal obligations,
  • Protection of legitimate interests.

4. STORAGE AND PROTECTION OF PERSONAL DATA

Our company takes necessary technical and administrative measures to ensure the security of personal data. Within this scope:

  • Security systems are used against risks such as unauthorized access, loss, theft, or disclosure,
  • Regular inspections regarding data security are carried out,
  • Employees are trained on the protection of personal data.

Personal data are stored for the periods stipulated in the relevant legislation and securely destroyed when these periods expire.

5. SHARING PERSONAL DATA WITH THIRD PARTIES

Your personal data may only be transferred within the cases stipulated by the KVKK and within the framework of legal obligations to:

  • Authorized public institutions and organizations,
  • Business partners and suppliers,
  • Legal advisors and relevant authorities for the fulfillment of legal obligations.

Our company takes necessary data security measures in cases where personal data are shared with third parties.

6. RIGHTS OF THE DATA SUBJECT

Pursuant to Article 11 of the KVKK, as data subjects you have the following rights:

  • To learn whether your personal data are processed,
  • To request information if your personal data have been processed,
  • To learn the purpose of processing and whether they are used in line with this purpose,
  • To know the third parties to whom personal data are transferred domestically or abroad,
  • To request the correction of incomplete or inaccurate data,
  • To request the deletion or destruction of personal data,
  • To object to any result arising against you through the analysis of processed data exclusively by automated systems,
  • To demand compensation if you suffer damage due to unlawful processing of your personal data.

To exercise these rights, you can contact us via info@mastenerji.com.tr.

7. EXCEPTIONS TO THE RIGHT OF APPLICATION

Pursuant to Article 28/2 of the Law, except for the right to claim compensation for damages, data subjects shall not be able to exercise the rights specified in Article 11 of the Law in the following cases:

  • When processing personal data is necessary for the prevention of crime or for criminal investigation,
  • When processing personal data that have been made public by the data subject.

8. UPDATES AND ENFORCEMENT

This policy may be updated by MAST ENERJİ VE TEKNOLOJİ A.Ş. when deemed necessary. The updated text shall enter into force on the date it is published on the company’s website. Within the scope of this policy, all our employees and business partners are obliged to comply with the rules regarding the protection of personal data.

FINAL REMARK

As Mast Enerji ve Teknoloji A.Ş., we securely protect your personal data and process them only when necessary. As a demonstration of the importance we attach to your privacy, we store your data with the highest security standards. If you have any questions, you can contact us via info@mastenerji.com.tr.