GDPR | Lokal Enerji 2024

Lokal Enerji A.Ş. (hereinafter referred to as the "Company") ensures the security of personal data under its control. In accordance with the Personal Data Protection Law numbered 6698 ("Law"), the Company takes necessary technical and administrative measures to ensure the secure storage and lawful processing of personal data.

In this context, an Information Text has been prepared within the scope of the Personal Data Protection Law in order to inform you about the processing, retention, and transfer of your personal data in accordance with the Law.

1. Purposes for Processing Personal Data

Your personal data may be collected, updated, and processed by the Company through various channels such as the company units, offices, website, social media channels, mobile applications, databases, order systems, subscription systems, affiliates, collaboration partners, in compliance with the current legislation, including the Petroleum Market Law, LPG Market Law, and other regulations of the Energy Market Regulatory Authority, Revenue Administration, and relevant institutions, depending on the services provided by the Company and its commercial activities, both automatically or non-automatically.

In accordance with the conditions specified in Articles 5 and 6 of the Law and all relevant legislation, your personal data may be processed by the Company for the following purposes:

Ensuring compliance with legal obligations required or mandated by legal regulations,
Providing software services and other outsourced services for operational activities,
Conducting necessary studies by relevant departments for the fulfillment of commercial activities specified in the Company's main contracts in accordance with legislation and relevant company and Company policies, and carrying out activities in this regard,
Determining, planning, and implementing the Company's short, medium, and long-term commercial policies,
Customizing services, products, and projects offered by the Company according to the preferences, usage habits, and needs of relevant individuals, and providing information about products, services, and projects,
Providing effective customer service,
Offering services and proposals,
Conducting all kinds of marketing and advertising activities,
Determining visitor profiles,
Ensuring the commercial reliability of the Company,
Responding to requests, demands, and complaints and ensuring their resolution,
Providing support services to business partners, dealers, customers, visitors within the scope of the contract and service standards,
Conducting market research and statistical studies,
Establishing contact with individuals in business relationship with the Company,
Marketing, compliance management, seller/supplier management,
Planning, auditing, and executing information security processes,
Establishing and managing information technology infrastructure,
Planning and executing access permissions to Data Subject information for employees,
Tracking financial and/or accounting transactions including invoicing,
Tracking legal affairs,
Planning and executing corporate communication activities,
Processing data to ensure accuracy and currency.

2. Transfer of Personal Data and Transfer Purposes

Your personal data may be transferred by the Company for the following purposes in line with the legitimate and legal personal data processing purposes of the Company, in accordance with the basic principles stipulated by the Law and the personal data processing conditions and purposes specified in Articles 8 and 9 of the Law:

Protecting commercial reputation and trust,
Determining, planning, and implementing short, medium, and long-term trade and business strategies,
Conducting necessary studies by our business units for providing you benefits from the products, services, and projects offered,
Customizing products, services, and projects according to your preferences, usage habits, and needs,
Ensuring the legal and commercial security of individuals in business relationship (administrative operations related to communication carried out by the Company, assessment processes of business partners/customers/suppliers/dealers (authorized or employees), reputation research processes, legal compliance process, audit, financial affairs, etc.),
Ensuring the execution of human resources policies and procurement of the Company in accordance with the Company's principles, targets, and strategies,
Transfer to our authorized personnel, business partners, suppliers, shareholders, legally authorized institutions and organizations for the execution of human resources policies of the Company.

3. Transfer Abroad

In accordance with Article 9 of the Law, your personal data may be transferred abroad by the Company for the following purposes: ensuring the fulfillment of commercial activities, communication operations, ensuring the physical security and audit of locations owned by the Company, evaluation processes of business partner/customer/supplier/dealer (authorized or employees), reputation research processes, legal compliance process, audit, financial affairs, etc. planning and execution of human resources policies of the Company, provided that sufficient protection or commitment to sufficient protection is provided by the data controller abroad, or with your explicit consent or, in the absence of explicit consent, within the framework of the provisions regulated in the Law.

4. Method of Collection, Legal Basis, and Protection of Personal Data

Your personal data is stored under conditions compliant with the legislation for the period required by legal obligations or permitted by relevant legislation. Your personal data may be collected, processed, transferred, and stored within the scope of the purposes specified in articles 1 and 2 of this text, within the personal data processing conditions and purposes specified in Articles 5 and 6 of the Law.

Your personal data may be obtained by the Company through various channels (Company headquarters, branches, dealers, agents, sales offices, or other physical environments where you can contact, call centers, websites, mobile applications, and similar electronic transaction platforms, social media or other public media, by participating in events such as training, seminars organized by them, by investigation method, or by other Group Companies or other individuals and organizations contracted by them, automation systems, databases, order systems, subscription systems, affiliates, fuel stations, and cooperation partners, etc.) The Company, which carries out its activities in line with the principles, targets, and strategies of the Company Group, may transfer personal data collected and processed by one of the companies within the Company Group to other companies within the Company Group, and these data may be processed by other companies.

The protection of personal data is important for our Company. Our Company undertakes to keep personal data confidential, to take all necessary technical and administrative measures to ensure the confidentiality and security of personal data, and to exercise due diligence. Although our Company takes necessary information security measures, if personal data is damaged or obtained by unauthorized persons as a result of attacks on the website and system, our Company immediately informs you and the Personal Data Protection Board of this situation.

5. Your Rights as a Data Subject Under Article 11 of the Law

As data subjects, if you submit your requests regarding your rights to the Company using the methods set out below, the Company will conclude your request as soon as possible and within no later than 30 (thirty) days, depending on the nature of the request. However, if a fee is stipulated by the Personal Data Protection Board, the fee in the specified tariff may be charged.

In this context, data subjects can contact the Company and exercise the following rights:

To learn whether the Company processes personal data about them,
If personal data is processed by the Company, to request information regarding this data processing activity,
If personal data is processed by the Company, to learn the purpose of the data processing activity and whether it is being used in accordance with the intended purpose,
If personal data is transferred to third parties domestically or abroad, to request information about these third parties,
To request the correction of personal data if it has been processed incompletely or inaccurately,
If personal data has been processed incompletely or inaccurately, to request that this situation be communicated to the third parties to whom the personal data has been transferred,
Despite being processed in accordance with the law and other relevant legislation, to request the deletion, destruction, or anonymization of personal data if the reasons for processing no longer exist,
If the reasons for processing personal data no longer exist, to request that this situation be communicated to the third parties to whom the personal data has been transferred,
To object to the emergence of a result against the person concerned by analyzing the processed data exclusively through automated systems,
To request the compensation of the damage if personal data is processed unlawfully and as a result, the data subject suffers damage.

Pursuant to Article 13 (paragraph 1) of the Law, you can submit your request to exercise your above-mentioned rights in writing or by other methods determined by the Personal Data Protection Board. In this context, you can contact our Company to exercise your rights under Article 11 of the Law by sending an e-mail to info@lokalenerji.com. Requests and notifications received through channels other than this address will not be evaluated.

The Company reserves the right to make changes to this Clarification Notification due to possible changes in the Personal Data Protection Law and the methods to be determined by the Personal Data Protection Board.