EPC Energy Official Website Privacy Policy
The purpose of this Privacy Policy is to determine the terms and conditions regarding the use of personal data shared with EPC Energy Inc. (“Company”) by the users/members/visitors (“Data Subject”) of the www.epcas.com.tr website (“Site”) operated by the Company, or personal data generated by the Company during the Data Subject’s use of the Site.
The Data Subject declares that they have been informed regarding the processing of their personal data through this Privacy Policy and consents to the use of their personal data as specified herein.
What Data Is Processed?
Under this heading, the types of data processed by the Company that are considered personal data under the Personal Data Protection Law are listed. Unless explicitly stated otherwise, the term “personal data” within the scope of the terms and conditions presented in this Privacy Policy will cover the information listed below.
• Contact Form – Subject/Reason
• Contact Form – Contact Information
o Name Surname
o Email Address
o Phone Number
• Contact Form – Request Text
In accordance with Articles 3 and 7 of the Personal Data Protection Law, data that has been irreversibly anonymized will not be considered personal data under the provisions of the said law, and processing activities related to such data will be carried out without being bound by the provisions of this Privacy Policy.
Furthermore, within the scope of information regarding cookies on the https://www.epcas.com.tr Official Website, the IP addresses and email addresses of Website Visitors will be protected by the Company within the framework of obligations under Law No. 6698 on the Protection of Personal Data (KVKK).
Who Can Access the Data?
The Company may transfer the personal data belonging to the Data Subject, and new data obtained using this personal data, to its business partners, shareholders, suppliers, Company officials, and EPC Energy Inc. for the purpose of fulfilling the objectives stated to the Data Subject in this Privacy Policy, limited to the provision of said services.
The Company may share personal data with third parties such as outsourced service providers (including those sending SMS), hosting service providers, law firms, research companies, and call centers to improve the Data Subject’s experience (including enhancement and personalization), ensure the Data Subject’s security, detect fraudulent or unauthorized uses, conduct operational evaluation research, resolve errors related to Site services, and achieve any of the purposes set forth in this Privacy Policy.
The Data Subject agrees that, limited to the purposes stated above, the aforementioned third parties may store the Data Subject’s personal data on servers anywhere in the world, and the Data Subject gives their prior consent to this matter.
Regarding Data Access Rights and Correction Requests
The Data Subject, by applying to the Company, has the right to:
• Learn whether personal data is being processed,
• Request information if their personal data has been processed,
• Learn the purpose of personal data processing and whether it is used in accordance with its purpose,
• Know the third parties to whom personal data is transferred domestically or abroad,
• Request correction of personal data if it is incomplete or incorrectly processed,
• Request the deletion or destruction of personal data within the framework of the conditions stipulated in the relevant legislation,
• Request that corrections, deletions, and destructions made in accordance with the relevant legislation be notified to third parties to whom personal data has been transferred,
• Object to the emergence of a result against the person by analyzing the processed data exclusively through automated systems,
• Request compensation for damages if personal data is processed unlawfully.
To exercise rights regarding personal data, the “Application Form for Data Subjects to the Data Controller” may be used. Applications made in this regard will be answered within a maximum of 30 (thirty) days. Detailed information regarding the exercise of legal rights can be accessed from the EPC Energy Inc. Personal Data Protection Policy at www.epcas.com.tr.
The Data Subject undertakes that the information subject to this Privacy Policy is complete, accurate, and up-to-date, and that they will immediately update this information if any changes occur. The Company shall not be held responsible if the Data Subject fails to provide up-to-date information.
The Data Subject acknowledges that if they make a request that results in the Company being unable to use any of their personal data, they may not be able to fully benefit from the Site’s functionality, and declares that all responsibility arising in this context will belong to them.
Retention Period of Personal Data
The Company will retain the personal data provided by the Data Subject for the period required by the processing purposes stated above.
In addition, in the event of any dispute that may arise between the Company and the Data Subject, the Company may retain personal data for the purpose of making necessary defenses within the scope of the dispute and for the statute of limitations periods determined by the relevant legislation.
Measures and Commitments Regarding Data Security
The Company undertakes to take the necessary technical and administrative measures to ensure an appropriate level of security and to conduct necessary audits to:
• prevent unlawful processing of personal data,
• prevent unlawful access to personal data, and
• ensure the preservation of personal data
under the conditions specified in the relevant legislation or expressed in this Privacy Policy.
The Company may not disclose personal data obtained about the Data Subject to others or use it for purposes other than the processing purpose, in violation of this Privacy Policy and the provisions of the Personal Data Protection Law.
If links to other applications are provided through the Site, the Company bears no responsibility for the privacy policies and content of those applications.
Changes to the Privacy Policy
The Company may change the provisions of this Privacy Policy at any time. The updated Privacy Policy becomes effective on the date it is presented to the Data Subject by any method.