EPC ENERGY KVKK GENERAL DISCLOSURE STATEMENT

Pursuant to the Law on Protection of Personal Data No. 6698 (“KVKK”), your personal data will be processed by EPC Energy and Power Conversion Systems Joint Stock Company (“COMPANY”), in its capacity as Data Controller, by being used, recorded, stored, updated, transferred, and/or classified within the framework described below, in connection with business purposes.

In this context, our Company takes all technical and administrative measures to ensure an appropriate level of security, primarily to protect the privacy of private life, to protect the fundamental rights and freedoms of individuals, and to prevent unlawful processing, unlawful access, and ensure the preservation of personal data, in accordance with the Laws and Regulations enacted for the protection of personal data.

METHODS AND LEGAL GROUNDS FOR COLLECTING YOUR PERSONAL DATA

Our Company may collect your personal data through automatic and non-automatic written, verbal, and digital methods via www.epcas.com.tr and our other websites, our facilities, our customer service points, other customer service channels, our social media accounts, membership/contact registration forms, your product purchases from our Company, the website support panel, cookies, web analysis tools, and similar technologies, as well as through security cameras and visitor entry records if you visit one of our company locations.
Our Legal Grounds for Processing Your Personal Data;

  • Based on the legal ground that it is necessary to process the personal data of the parties to a contract, provided that it is directly related to the establishment or performance of a contract:
    • Updating customer contact information,
    • Opening sales records and carrying out invoicing activities,
    • Establishment or performance of the sales contract due to your purchase of our Company’s products and services, and tracking of orders,
    • Provision of the products and services you purchased,
    • Provision of after-sales support services.
  • Based on the legal ground that it is explicitly stipulated by law and necessary for the data controller to fulfill its legal obligation:
    • Fulfilling official institutional requests,
    • Providing information to authorized institutions as required by legislation,
    • Ensuring compliance with retention obligations stipulated in legislation,
    • Responding to data subject applications in accordance with legislation and carrying out necessary procedures.
  • Based on the legal ground that data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject:
    • Managing customer relations,
    • Tracking financial transactions,
    • Carrying out the necessary work by our business units to enable data subjects to benefit from the products and services offered by our Company, including sales and marketing activities of our products and services, and executing related business processes,

YOUR PROCESSED PERSONAL DATA

Your personal data processed by our Company may vary depending on your relationship with our Company; personal data such as your name, surname, phone number, email address, postal address, information you transmit via our websites and official social media channels (Newsletter subscription, Contact Form, Social Media communication buttons), your transactions, browsing activities and behaviors, and information related to the device and internet connection you use (such as brand, model, language preference, browser information, IP, location, wireless connection status), cookie information, and your interests are processed.

PROCESSING OF YOUR PERSONAL DATA AND PURPOSES OF PROCESSING

Your personal data is processed for the following purposes:

  • Based on the legal ground that it is necessary to process the personal data of the parties to a contract, provided that it is directly related to the establishment or performance of a contract, for the purposes of providing you with the requested products and services and fulfilling the requirements of the contract between you and our Company;
  • Based on the legal grounds that it is necessary to process the personal data of the parties to a contract, provided that it is directly related to the establishment or performance of a contract, or that data processing is mandatory for our Company’s legitimate interest, for the purposes of finalizing requests, transactions, and complaints regarding products imported and sold by our Company or for which customer support services are provided, executing after-sales support processes, product sales, delivery, returns, and providing after-sales customer support services;
  • Based on the legal ground that data processing is mandatory for our Company’s legitimate interest, for the purposes of planning and executing supply chain management processes, planning and executing Company operation processes, managing relations with business partners and/or suppliers, planning and executing sales processes of products and/or services, providing better service to users of our website and applications, conducting marketing analysis studies, evaluating and increasing customer satisfaction, improving websites, mobile applications, stores, and other service channels, executing loyalty processes for company products and services, conducting business activities, conducting audit, internal control, legal, financial, and internal operations, conducting training activities, organization and event management, information security and physical security processes, conducting storage and archiving activities, conducting activities in compliance with legislation, and ensuring control of services performed by our Company and authorized third parties;
  • Based on the legal ground that it is necessary for our Company to fulfill its legal obligations and for the establishment, exercise, or protection of a right in case of any dispute, for the purposes of complying with our Company’s legal obligations and making necessary notifications to relevant/authorized public institutions;
  • Based on your explicit consent, for the purposes of promoting and marketing our Company’s products and services, enabling you to benefit from campaigns, promotions, discounts, advantages, and similar opportunities offered by our Company, providing general or personalized advertisements, announcements, newsletters, campaign information for the promotion and marketing of our Company’s products, increasing the recognition of our Company and our brands through messages sent with greetings, wishes, and other content, planning personalized campaigns, promotions, discounts, and advantages based on your shopping habits and interests regarding our Company’s products and recommending them to customers suitable for the relevant profile and segment, and sending advertisements, promotional and informational messages, and satisfaction survey forms related to these.

WITH WHOM AND FOR WHAT PURPOSES DO WE SHARE YOUR PERSONAL DATA?

Your personal data may be transferred to third parties to the extent necessary and relevant for the purposes mentioned above and in accordance with the legislation. The main situations in which your personal data may be shared with real and legal persons within the framework of our Company’s standard processes are as follows:

Your personal data may be transferred to our Company’s sales points, regional directorates, and business partners to enable the execution of your transactions and requests on our website and other service channels and to receive healthy service from all channels; to third-party cookie providers for the purposes specified in the “Cookie Policy”; to companies and agencies we receive support from for marketing, promotion, advertising, and communication purposes; to cargo and logistics companies that deliver your ordered spare parts products; to service provider companies we receive support from for the execution and improvement of functions on our websites and mobile applications, sending instant notifications and SMS/email messages, and call center and similar communication services; to consultants, auditors, legal, information technology, logistics, archive, etc. suppliers from whom our Company receives support services related to internal operations, audit, internal control, information systems, legal, and accounting processes; and to persons and institutions authorized to request your personal data.

YOUR RIGHTS UNDER KVKK

We would like to remind you that you have the rights listed below under Article 11 of the KVKK:

  • To learn whether personal data is processed and to request information regarding this,
  • To learn the purpose of processing personal data and whether they are used in accordance with their purpose,
  • To know the third parties to whom personal data are transferred domestically or abroad,
  • To request the rectification of personal data if they are incomplete or incorrectly processed, and to request that the transaction made within this scope be notified to third parties to whom personal data have been transferred,
  • To request the erasure or destruction of personal data if the reasons requiring their processing have disappeared, despite being processed in accordance with the KVKK and other relevant laws, and to request that the transaction made within this scope be notified to third parties to whom personal data have been transferred,
  • To object to the emergence of a result against the person by analyzing the processed data exclusively through automatic systems,
  • To demand compensation for damages incurred due to unlawful processing of personal data.

APPLICATION AND CONTACT

You can submit your requests regarding your aforementioned rights under the KVKK to our Company, provided that your identity is verified, in writing and in accordance with the current regulations of the KVK Authority. You can submit your applications to our Company by filling out the “KVKK Application Form” on our websites and delivering it by hand or by mail, or via your pre-registered email address in our systems to kvkk@epcas.com.tr or to epc@hs02.kep.tr with a secure electronic signature. For detailed information, you can review the relevant form.

Your application will be responded to within 30 days. For a healthy response to your applications, in accordance with the legislation, your application must include your name, surname, Turkish ID number (nationality and passport number for foreigners), address information where we can send our response, and documents proving your identity. If you are applying via email, the email address you use must be pre-registered in our systems. You must specify your request in a clear, explicit, and understandable manner, and the subject of your request must be related to you personally, or if you are acting on behalf of someone else, you must be specifically authorized in this regard and document your authorization.

Consents given for receiving commercial electronic messages can be withdrawn at any time. You can submit your requests for the withdrawal of previously given consents for receiving commercial electronic messages and your communication preferences to our Company via the methods specified within the relevant communication or via kvkk@epcas.com.tr.


IDENTITY OF THE DATA CONTROLLER

Mersis No: 0336051908500011

Commercial Title: EPC ENERJİ VE GÜÇ DÖNÜŞÜM SİSTEMLERİ ANONİM ŞİRKETİ

Address: Esenşehir M.Fevzi Çakmak Cad.Pırlanta Sok.No:61 Ümraniye / İSTANBUL

Phone: +90 216 499 54 84

KEP Address: Epc@hs02.kep.tr