Personal Data Protection Policy

As TFS Engineering Electric Mechanical Construction Industry and Foreign Trade Limited Company, we respect the personal data you have shared with us and care about the safety of fundamental rights and freedoms, especially the privacy of private life. We would like to inform you in detail about the security of the personal data you share by the Law on the Protection of Personal Data No. 6698 (“KVKK”), the way your personal data is collected, the purposes of the processing, legal reasons and our mutual rights and obligations.

Your personal data, in the capacity of Data Controller, may be obtained, recorded, preserved, disclosed, transferred to third parties or abroad to the extent permitted by the legislation, in accordance with the provisions of the KVKK and within the framework described below, by TFS Engineering Electric Machinery Construction Industry and Foreign Trade Limited Company, or to other shapes can be processed.

Collection of Your Personal Data

Your personal data may be collected verbally, in writing or electronically, by automatic or non-automatic methods, in order to meet the messages, requests and complaints you have sent to us and to fulfil the requirements.

For What Purpose Your Personal Data Will Be Processed

Personal data before our company; planning and execution of commercial activities, obtaining services on issues not directly provided by us, and not within our area of expertise, provision of system solutions services for the electrification of industrial facilities and superstructure/infrastructure projects and mechanical works, communication with current/potential customers and business partners, corporate sustainability activities in order to plan and execute the works to protect the reputation of our company, to manage the request and complaint processes, to ensure that the activities are carried out in accordance with the procedures of our company and the relevant legislation, related to the law and honesty rules and the purpose for which they are processed, limited and measured, stipulated in the related legislation, or necessary for the purpose for which they are processed, it will be processed by the principles of storage for a period of time.

Transfer of Your Personal Data

The personal data obtained by you in order to fulfil the above-mentioned purposes, by the law and the rules of good faith, and in accordance with the principles of keeping them for as long as necessary for the purpose for which they are processed, limited and measured, stipulated in the relevant legislation or for the purpose for which they are processed. Domestic/foreign/international, public/private institutions and organizations, companies and our company's consultants or solution partners, other authorized institutions and organizations, suppliers or subcontractors, persons or organizations permitted by the provisions of the legislation, within the scope of their legal authority. Limited to the purpose for which it is intended, legally authorized public and/or private legal entities, persons or organizations permitted or required by the provisions of other legislation, and with official authorities upon the request of official authorities.

In addition, following Articles 5 and 8 of the KVKK and/or in case of exceptions in the relevant legislation, it will be able to process and share personal data with third parties without the consent of the Data Owner. The main of these situations are listed below:

• It is clearly stipulated in the laws,
• It is compulsory for the protection of the life or physical integrity of the person or another person, who is unable to express his consent due to actual impossibility or whose consent is not legally recognized,
• It is necessary to process personal data, provided that it is directly related to the establishment or performance of any contract between the data owner and the Company,
• It is compulsory for the fulfilment of legal obligations,
• It has been made public by the data owner himself,
• Data processing is mandatory for the establishment, exercise, or protection of a right,
• Data processing is mandatory for the Company's legitimate interests, provided that it does not harm the fundamental rights and freedoms of the data owner.

Method and Legal Reason for Personal Data Collection

Your personal data is collected in an electronic environment to provide the services we offer by the Company within the legal framework determined in line with the above-mentioned purposes and this context, for our Company to fulfil its contractual and legal responsibilities thoroughly and accurately. Your personal data collected for this legal reason can also be processed and transferred for the purposes specified in articles (1) and (2) of this text, within the scope of the personal data processing conditions and purposes specified in Articles 5 and 6 beyond the KVK Law.

Rights of Personal Data Owner

As personal data owners, if you submit your requests regarding your rights to our Company through the methods set out below, our Company will conclude your request free of charge as soon as possible and within thirty (30) days at the latest. However, if a fee is stipulated by the Personal Data Protection Board, the price in the tariff determined by our Company will be charged.

In this context, personal data owners;

• Learning whether personal data is processed or not,
• If personal data has been processed, requesting information about it,
• Learning the purpose of processing personal data and whether they are used appropriately for their purpose,
• Knowing the third parties to whom personal data is transferred in the country or abroad,
• Requesting correction of personal data in case of incomplete or incorrect processing and requesting notification of the transaction made within this scope to the third parties to whom the personal data has been transferred,
• Requesting the deletion or destruction of personal data if the reasons requiring processing are eliminated, although it has been processed in accordance with the provisions of the KVKK and other relevant laws, and requesting the notification of the transaction made within this scope to the third parties to whom the personal data has been transferred,
• Object to the occurrence of a result against the person himself by analyzing the processed data exclusively through automated systems, vIn case of loss due to unlawful processing of personal data, it has the right to demand compensation for the damage.

You may request to exercise these rights in writing, or if a distinct method is determined by the Personal Data Protection Board, to the address, including the necessary information to identify you and your right to exercise the rights specified in Article 11 of the KVK Law, following this method. You can send it via e-mail.

Deletion, Destruction or Anonymization of Your Personal Data

According to Article 7 of the KVK Law, although the personal data has been processed by the relevant legislation, the personal data is deleted, destroyed, or anonymized by our Company, ex officio or upon the request of the personal data owner, in case the reasons for processing are no longer valid.

The procedures and principles regarding this matter will be fulfilled by the KVK Law and the Regulation on the Deletion, Destruction or Anonymization of Personal Data published in the Official Gazette dated 28.10.2017 and numbered 30224.

When you request the deletion or destruction of your personal data by applying to our firm;

a) If all the conditions for processing personal data have disappeared; Your personal data subject to the request is deleted, destroyed, or anonymized. Your request will be finalized within thirty (30) days at the latest and you will be informed.
b) If all the conditions for processing personal data have been removed and the personal data subject to the request has been transferred to third parties, this situation shall be notified to third parties; It is ensured that the necessary actions are taken within the scope of the regulation.
c) If all of the personal data processing conditions have not been eliminated, your request may be rejected by explaining the reason following the third paragraph of Article 13 of the KVK Law and the refusal will be notified to you in writing or electronically within thirty days (30) at the latest.

Deletion, Destruction or Anonymization of Your Personal Data

According to Article 7 of the KVK Law, although the personal data has been processed by the relevant legislation, the personal data is deleted, destroyed, or anonymized by our Company, ex officio or upon the request of the personal data owner, in case the reasons for processing are no longer valid.

The procedures and principles regarding this matter will be fulfilled by the KVK Law and the Regulation on the Deletion, Destruction or Anonymization of Personal Data published in the Official Gazette dated 28.10.2017 and numbered 30224.

When you request the deletion or destruction of your personal data by applying to our firm;

a) If all the conditions for processing personal data have disappeared; Your personal data subject to the request is deleted, destroyed, or anonymized. Your request will be finalized within thirty (30) days at the latest, and you will be informed.
b) In case all the conditions for processing personal data have been removed, and the personal data subject to the request has been transferred to third parties, this situation must be notified to the third parties; it is ensured that the necessary actions are taken within the scope of the regulation.
c) If all of the personal data processing conditions have not been eliminated, your request may be rejected by explaining the reason following the third paragraph of Article 13 of the KVK Law, and the refusal will be notified to you in writing or electronically within thirty days (30) at the latest.