1. Identity of the Data Controller

As ÇATES Termik Santral Üretim A.Ş., we show maximum sensitivity regarding the security and confidentiality of your personal data. With this awareness and as a data controller in accordance with the Law No. 6698 on the Protection of Personal Data ("Law"), we present the following issues to your information within the scope of the obligation to enlighten in order to ensure that we can act in accordance with the Law regarding the personal data we obtain:

2. Processing of Personal Data and Purposes of Processing

Although your personal data may vary depending on the services and commercial activities offered by ÇATES Termik Santral Üretim A.Ş., they are processed by our Company in order to ensure that the services are provided in the best way possible. In this context;

If you are an employee/contact person/partner/authorized person and in some cases parent/guardian/representative, guarantor, potential customer of our Company's natural entity customer/legal entity or natural entity merchant customer, your personal data (identity, contact, customer transaction information) and your sensitive personal data (if shared by natural entity customers, in accordance with the Electricity Market Consumer Services Regulation, the health report and also the religion and blood group information in the identity documents can be obtained indirectly through a copy of the identity card and/or driver's license) may be processed limited to the purposes of executing contract processes, after-sales support services, customer relationship management processes, customer satisfaction activities, legal, financial and accounting affairs, follow-up of requests / complaints, conducting activities in accordance with the Electricity Market Law and secondary legislation and other relevant legislation, conducting / supervising business activities, conducting audit activities, conducting business continuity activities, conducting risk management processes, conducting strategic planning activities, monitoring and conducting social responsibility and civil society activities, providing information to authorized persons, persons, institutions and organizations upon request, carrying out communication activities, carrying out storage and archive activities, carrying out information security processes, and ensuring compliance with the policies and procedures of the Company and the Aydem Holding Anonim Şirketi group of companies to which the Company is affiliated.

If you are an employee/contact person/partner/authorized person of our legal entity or natural entity merchant/suppliers/business partners/subcontractors:

If you share your personal data (Identity, contact, professional experience, financial, legal action, vehicle license plate, personal data), your sensitive personal data (health, criminal conviction, association/foundation/union membership data) may also be processed for the purposes of contract processes, goods and service sales processes, follow-up of legal, financial and accounting affairs, execution of risk management processes, execution of activities in accordance with the legislation, execution of goods / service procurement processes, execution of goods / service after-sales support services, execution of goods / service production and operation processes, execution / supervision of occupational health and safety processes, business activities, performance evaluation processes, provision of information to authorized persons, persons, institutions and organizations upon request, execution of communication activities and execution of information security processes.

Also,
If you visit our company's workplaces, your identity data and physical space security data may be processed in a limited and measured manner in connection with the purposes of ensuring physical space security, creating visitor records and ensuring compliance with ÇATES Termik Santral Üretim A.Ş. policies and procedures,

If you visit our website, your transaction security data may be processed in a limited and measured manner in connection with the purposes of keeping log records in electronic environment in order to fulfill the obligations arising from the legislation in accordance with Law No. 5651, to comply with ÇATES Termik Santral Üretim A.Ş. policies and procedures and to carry out information security processes,

If you log in to the wireless network system provided free of charge by our Company, your personal data regarding identity, communication and transaction security may be processed in a limited and measured manner in connection with the purposes of ensuring your access to the system, fulfilling the obligations arising from the legislation, preventing illegal and immoral use of the system, ensuring compliance with the policies and procedures of ÇATES Termik Santral Üretim A.Ş. and carrying out information security processes.

Your personal data may also be transferred to physical archives and information systems and stored in both digital and physical environments.

3. Persons to Whom and for What Purposes the Processed Personal Data Can Be Transferred

For the purposes described in Article 2 of this Clarification Text and within the scope of the Law and relevant legislation and depending on and limited to the reasons requiring its transfer; your personal data collected may be transferred to official institutions and organizations, auditors, consultants, law and mediation offices, banks, travel agencies, our business partners, including our suppliers, to the systems of companies providing information technology services in Türkiye and abroad, whose services we benefit from and cooperate with, and to the main shareholder and group companies of our Company in Türkiye and databases shared with them for the execution of operational processes and obtaining support.

4. Method and Legal Grounds for Collecting Personal Data

For the purposes described in Article 2 of this Clarification Text and in accordance with the basic principles stipulated in the Law, your personal data may be collected by automated or non-automated methods, verbal or written information transmitted by your employer or by you directly through our e-mail address, applications and software used within the scope of the Company's activities and camera circuit camera systems records, based on and limited to the legal reasons specified in Article 5 of the Law; performance of the contract, establishment, use or establishment of the right, legitimate interest of the data controller and your explicit consent.

5. Your Rights Regarding the Protection of Personal Data

Within the framework of the personal data protection legislation, you have the right to learn whether your personal data is processed, to request information if it has been processed, to learn the purpose of processing and whether it is used by us in accordance with these purposes, to learn the third parties to whom your personal data is transferred domestically or abroad, to request correction in case of incomplete or incorrect processing and to notify the transferred third parties if it has been transferred, to request deletion or destruction in case the conditions for processing cease to exist and to notify the transferred third parties if it has been transferred, to object to this situation if you think that a result has arisen against you by analyzing the processed data exclusively through automated systems and to request the compensation of this damage if you suffer a loss due to processing in violation of the Law.

You can submit your requests within the scope of Article 11 of the Law regulating the rights of the relevant person to Santraller Mevkii Tayfun Açıl Caddesi Çatalağzı/ZONGULDAK in writing to the address Santraller Mevkii Tayfun Açıl Caddesi Çatalağzı/ZONGULDAK in accordance with the "Communiqué on the Procedures and Principles of Application to the Data Controller" with the form at the link www.yatagantermik.com.tr or to the e-mail address kvkk@cates.com.tr via e-mail confirming your membership.

Our Company will finalize the application requests according to the nature of the request and within 30 (thirty) days at the latest in accordance with Article 13 of the Law. You can find detailed information on the evaluation process of application requests in the Personal Data Protection and Processing Policy, which you can access via www.cates.com.tr.