Information Notice on Personal Data Protection
This “Information Notice” under the Turkish Personal Data Protection Law no. 6698 (“PDP Law”) is drawn up by ARF Renewable Energy Inc. (hereinafter referred to as “ARF”) in their capacity as the Data Controller to inform you about the purposes for which we may process your personal data, to which third parties and for which purposes we may transfer your personal data, and the methods and legal grounds we may use to collect your personal data, as provided for in PDP Law Article 10 (Obligation of the Data Controller to Inform) and Article 11 (Rights of the Data Subject).
According to the Turkish Personal Data Protection Law no. 6698 (“PDP Law”), enacted on 7 April 2016, we may in our capacity as the Data Controller save, store, update and reupdate your personal data that you may share with us in order to use the service we provide, disclose and transfer your personal data to third parties, and process them, in each case to the extent permitted by Law and limited to the extent required by current circumstances. ARF takes the necessary measures to ensure an adequate level of data security in line with applicable law in order to prevent the unlawful use, and proper storage, of your data during processing and transfer.
In order to make our services available to our customers within the framework of all legal obligations under applicable law including without limitation the Personal Data Protection Law no. 6698 (“PDP Law”), the Turkish Penal Code no. 5237, Law No. 5651 on Regulation of Publications on the Internet and Combating Crimes Committed by means of such Publication, and all legislation secondary to any of the foregoing, the type of personal data collected by ARF in their capacity as the Data Controller may vary depending on the services, products or commercial activities provided by ARF. We may collect your personal data verbally, in writing or electronically through automated or non-automated means including without limitation our offices, branches, dealers, call center, website, social media, etc. Your personal data may be processed and updated as long as you benefit from ARF's products and services. In addition, your personal data may be processed when you use our call center or website with the intention of using Company services, when you purchase goods and/or services from our Company's contracted dealers and branches, when you visit our Company or our website, and when you participate in training, seminars, sweepstakes or organizations organized by our Company.
In order for you to benefit from ARF’s services, your personal data will be processed based on your explicit consent in any of the cases stipulated by applicable law (notably Article 5/f.2 of the PDP Law), with all necessary information security measures taken. It being understood that none of your personal data will be used outside the purposes and scope specified in this Information Notice. Your personal data will be stored for such period as is provided by law or is required for the purpose of processing. Upon expiry of the period provided by law or required for the purpose of processing, or if in cases where an explicit consent is required, you withdraw your explicit consent, ARF will anonymize your personal data before any further use. ARF conducts periodic checks to make sure that any personal data, whether ex officio or otherwise, are anonymized in due time.
The purposes for which we may process your personal data is to render service, to record the identity, address and other information necessary for the identification of transaction owners, to edit all electronic and/or hardcopy records and documents that will be used as a basis for transactions, and to comply with the information storage, reporting and information obligations stipulated by national and international legislation and/or all relevant authorities.
In order to carry out our company activities, to provide services, opportunities and possibilities to our customers and to improve our service quality, ARF may share your personal data with group companies, the principal shareholder, direct/indirect domestic/foreign affiliates, institutions that we have contracted in connection with our activities, call centers, lawyers, auditors, consultants and other third parties from whom we receive service, contracted advertising agencies, business partners, audit firms or public institutions or organizations authorized to request such data on grounds of a legal obligation, and any other relevant authorities including but not limited to the foregoing, provided that your explicit consent is obtained or in cases that fall under Article 5/f.2 of the PDP Law, on the condition that adequate security and privacy measures are taken pursuant to applicable law, including notably the PDP Law.
ARF will not use your personal data outside the purpose of processing and will not transfer and/or disclose them to any third party without your consent or unless required so by applicable law. ARF reserves the right to disclose information whose disclosure to public institutions and organizations and/or judicial authorities is required by applicable law.
YOUR RIGHTS UNDER PDP LAW ARTICLE 11:
You have the right to fully or partially waive any consent you have given regarding the processing of your personal data. You also have the right to a) learn whether your personal data have been processed, b) if yes, request information about it, c) learn the purpose of data processing and whether the data is used for intended purposes, d) get information about the third parties to whom your personal data is transferred in or outside the country, e) request rectification of incomplete or inaccurate personal data (if any), f) request deletion or destruction of your personal data after the reasons for processing your personal data have ceased, g) if you have requested the rectification of incomplete or inaccurate personal data or the deletion or destruction of your personal data after the reasons for processing have ceased, request that such rectification, deletion or destruction is notified to the third parties to whom your personal data was transferred, h) object to any outcome to your detriment as a result of your personal data being processed exclusively by automated means, and i) request compensation for damage incurred due to the unlawful processing of your personal data. ARF reserves all rights that may arise out of or in connection with this notice and/or applicable law. Please note that we reserve the right to refuse unreasonably difficult requests, and also the right to claim compensation for expenses that ARF may incur as a result of any such request, based on the rates set forth in Article 13 of the PDP Law.
Applicable legislation requires ARF to keep the records and documents of transactions with our customers for a period of 10 years. Any request for the deletion and/or destruction of personal data will be fulfilled upon expiry of the 10-year period. Until then, ARF will cease to process your personal data, nor share them with third parties unless required so by national and international laws, regulations and conventions, and you will not be contacted anymore for any product promotion or marketing purposes.
As per the PDP Law, any requests pursuant to the preceding paragraphs must be made in writing. For this, you can use the form available on our website, which should state the right you want to exercise, and submit the form together with documents verifying your identity to our company address (Cinnah Caddesi No:52/7 Çankaya/Ankara) by hand delivery, through a notary public or by any other means defined in the PDP Law. Up-to-date information on the Data Controller (i.e., ARF) can be accessed at any time on VERBIS (Data Controllers’ Registry Information System)
Best Regards.