KVKK Information Notice

1. Identity of Data Controller
As Eren Enerji Elektrik Üretim A.Ş. ("Company"), we hereby inform you regarding the following matters within the scope of our obligation to inform regarding your personal data that we obtain in the capacity of data controller in accordance with Article 10 of the Personal Data Protection Law No. 6698 and the Communique on Procedures and Principles Regarding the Performance of the Obligation to Inform ("Communique").

In addition to the information provided during the collection of personal data from the relevant persons such as Prospective Employees, Employee, it is aimed to provide information under this general information notice to the following persons whose personal data are obtained from third parties.

2. Purpose of Processing Personal Data
In parallel with the business processes of our Company, we process identity and contact data of employees and authorized representatives of the companies that benefit from our products and services with which we have a commercial business relationship as a company, our suppliers; identity, contact and financial data of the persons who participate in the tender processes of our Company, data on the identity, contact and professional experience of the persons who provide training in our Company in order to organise training within the Company and provide the necessary training to our employees; identity, contact, vehicle licence plate information, security camera images of our visitors in case our company is visited; identity and contact data of the persons who contact our Company either through the website, by telephone or in person, and information regarding their opinions, suggestions and requests about our Company, limited to the purposes of:

• performance of activities aimed at ensuring business continuity
• execution of contractual processes;
• execution of procurement processes for Goods/ Services;
• execution of processes for selling Goods/Services;
• execution of production and operation processes for Goods/ Services;
• performance of finance and accounting operations;
• execution of contingency management processes
• Information security processes
• conducting Audit/ Ethics activities,
• training activities
• management activities
• ensuring compliance of operations with the applicable legislation
• physical security of premises
• creating and monitoring visitor records
• provision of information to competent persons, organizations, and institutions
• follow up of requests/ complaints
• conducting social responsibility and civil society activities

3. Transfer of Personal Data and Purpose of Transfer
Personal data described in Article 2 of this Information Notice may be transferred to competent public institutions and organisations, our business partners that provide services during our commercial activities and our group companies within Eren Holding, primarily Eren Holding A.Ş., for the purposes specified in the same article, depending on and limited to the reasons requiring transfer within the scope of the Law and applicable regulations.

4. Method and Legal Ground of Collecting Personal Data
The personal data in question are processed by automatic or non-automatic means through verbal or written notifications made by you and security camera recording based on the legal grounds of being explicitly stipulated in the law, performance of the contract, legal obligation of the data controller, legitimate interest of the data controller, as stated in Article 5 of the Law.

5. Your Rights Regarding the Protection of Personal Data
You may submit your requests under article 11 of the Law that specifies the rights of data subjects by completing KVKK Application Form and submitting the same to Atatürk Mahallesi, Ertuğrul Gazi Sokak, Metropol İstanbul Sitesi C2 Blok No: 2A/26 Ataşehir/Istanbul address in writing or from personal KEP address to our Company's KEP address [email protected] or via e-mail to the e-mail address [email protected] by using secure electronic signature, mobile signature or electronic mail address you previously notified to us and registered in our system.