Gersan Elektrik Ticaret Ve Sanayi A.Ş. (hereinafter referred to as the “Company”), as the Data Controller, has prepared this general information text in accordance with the Law on the Protection of Personal Data No. 6698 and its Regulations, to inform personal data subjects, within the framework of Article 10 on the Obligation to Inform and Article 11 on the Rights of Data Subjects, regarding the purposes for which your personal data will be processed, to whom and for what purposes the processed data may be transferred, the method and legal grounds for collecting your personal data, and your rights under the applicable legislation.
1- Information on the Purposes and Legal Grounds for Processing of Personal Data by Our Company
Our company, Gersan Elektrik Ticaret Ve Sanayi A.Ş., which produces systems and materials that carry, connect, and protect conductors along the line from power plants to household sockets, processes personal data due to the operation and activities of the company, in accordance with the Labor Law No. 4857, the Occupational Health and Safety Law No. 6331, the Turkish Commercial Code No. 6102, the Turkish Code of Obligations No. 6098, the Law on the Protection of Consumers No. 6502, the Law on the Regulation of Electronic Commerce No. 6563, other relevant laws and complementary regulations, and contracts concluded with business partners, subcontractors, customers, employees, and administrative authorities, in order to meet legal obligations and protect the Company’s legitimate interests. Personal data is collected, processed, and destroyed in accordance with the law. These personal data may be:
- Collected by the Company for purposes of fulfilling contractual requirements, legal obligations, administrative requirements, and/or audit purposes, and retained in accordance with the durations prescribed by law.
- Processed and used in order to provide services related to the Company’s fields of activity and to improve the quality of these services.
- Processed and used to enable the Data Subject to benefit from the Company’s online website.
- Processed and used to comply with information retention, reporting, and notification obligations regarding suppliers and subcontractors.
- Additionally, personal data may also be used, subject to the consent of the data subject, within the scope of Customer Relationship Management practices such as improving service quality, sales, and marketing activities. Data may be processed for the improvement and development of services provided by the Company, for the promotion and communication of new services, to provide necessary information to the Data Subject, to establish contact with the user, and to fulfill obligations arising from the nature of the services offered.
- Processed and used when necessary for the purposes of contracts entered into by the Company.
- Furthermore, our Company may process and share personal data with third parties in accordance with Articles 5 and 8 of the Law on the Protection of Personal Data and/or in cases where exceptions in the relevant legislation apply. Examples include:
- Where it is clearly provided for by law,
- Where it is mandatory to protect the life or physical integrity of the person who is unable to give consent due to actual impossibility or whose consent is not legally valid,
- Where processing of personal data is necessary, provided that it is directly related to the conclusion or performance of a contract with our Company,
- Where it is necessary to comply with legal obligations,
- Where it has been made public by the Data Subject,
- Where it is necessary for the establishment, exercise, or protection of a right,
- Where it is necessary for the legitimate interests of our Company, provided that it does not harm the fundamental rights and freedoms of the Data Subject.
2- Detailed Information on Personal Data
Your personal data may be processed by our Company within the scope of the Law on the Protection of Personal Data No. 6698. Within the scope of the law, our Company’s legal entity is considered the data controller.
Your personal data will not be used for purposes other than those specified without your explicit informed consent, and unless required by law and/or reporting obligations to official authorities/institutions, they will not be shared or transferred with others.
Your personal data is processed, among other things, for the purposes of ensuring the legal and commercial security of our Company and its business partners, conducting the Company’s commercial activities, and fulfilling the requirements of the Company’s human resources policies.
Necessary technical and administrative measures are taken to prevent your personal data from being unlawfully processed, accessed, or misused, and to ensure their secure retention.
The Data Subject accepts that the information shared may be classified and stored in a database in accordance with the Company’s personal data policies, and may be used by the Company for usage and transaction information, performance evaluations, marketing campaigns of the Company and its business partners, annual reports, and other necessary operations for as long as required, provided that necessary security measures are taken. Data may only be transferred to infrastructure providers and third parties providing services for the purposes stated in the Company’s personal data policies, and may be stored and processed in data centers located in Turkey. Personal data may be shared with our Group Companies, domestic subsidiaries, joint ventures, business partners, suppliers, dealers, subcontractors, contracted institutions, and administrative or judicial authorities authorized by law to request such data, in accordance with Articles 8 and 9 of the Law, and with adequate safeguards taken.
To identify potential issues within the website and to resolve technical problems and/or other issues promptly, the site may keep IP log records of users within the periods specified by law. Within the website, users may be asked to fill in various forms or surveys, and certain personal information (such as name-surname, address, company details, phone, or e-mail address) may be recorded in the website’s databases.
“Cookie” Usage
During Users’ visits to the Website, data such as visited sections and clicked areas are automatically collected by our Company. These statistical data are obtained using a technology called “cookies.” The purpose of this technology is to make the content of the visited sections easier to access for the User from their first visit onwards. Most browsers are designed to accept these “cookies” by default; however, Users may change their browser settings at any time to prevent the receipt of such cookies or to ensure that a warning is displayed when cookies are sent.
Information on the Method of Collecting Personal Data
Your personal data is collected by our Company through emails sent to the Company’s info address, from our partners, subsidiaries, dealers, suppliers, subcontractors, business partners, or directly from the data subject, provided it is in compliance with the law. Your personal data may be obtained wholly or partially by automated means or through non-automated methods provided that it is part of a data recording system. Your personal data may also be processed and shared for the legal reasons and purposes stated in this text, within the scope of the conditions and purposes of processing personal data specified in Articles 5 and 6 of the Law.
4- Retention Period of Personal Data
Personal data is retained by our Company for the duration specified in the laws applicable to that data or for as long as necessary for the purpose for which it is processed.
5- Obligations of Our Company Regarding Deletion, Destruction, or Anonymization of Personal Data
Your personal data processed for the purposes specified in this Information Text will be deleted by us when the purposes requiring processing cease to exist, when the periods specified by law have expired, or upon your exercise of this right as a data subject under the legislation.
6- Information on Personal Data Protection Measures and Data Subject Rights
Your personal data will be retained as long as the purpose of processing remains valid. All necessary administrative and technical security measures are taken by our Company to prevent the loss of personal data, unlawful access, and/or unlawful use. Despite all measures, in the event that personal data is unlawfully accessed by third parties, this will be reported to you and to the Personal Data Protection Board, and all additional measures will be taken by our Company. As a data subject, you may exercise the following rights under the Law on the Protection of Personal Data No. 6698 by applying to our Company in writing:
- To learn whether personal data is being processed,
- If personal data has been processed, to request information in relation thereto,
- To learn the purpose of the processing of personal data and whether they are used in accordance with their purpose,
- To know the third parties to whom personal data is transferred domestically or abroad,
- To request the correction of personal data if it is incomplete or incorrectly processed,
- To request the deletion or destruction of personal data under the conditions provided for in Article 7 of the Law,
- To request notification to third parties to whom personal data has been transferred regarding the operations carried out pursuant to paragraphs 5 and 6,
- To object to the occurrence of a result against the person himself/herself by analyzing the processed data exclusively through automated systems,
- To request compensation for damages in case of suffering damage due to the unlawful processing of personal data.
Your applications will be concluded as soon as possible and within a maximum of 30 days. Currently, such applications are free of charge. However, if the Personal Data Protection Board sets a fee schedule, the applications will be charged in accordance with the said schedule.