Protection of Personal Data

Why we process your personal data

Your personal data, whether supplied to us automatically or non-automatically, in printed or handwritten form or electronically, is processed in compliance with KVKK for the following reasons:

• To provide and deliver products and services offered/supplied by our Company and its subsidiaries and affiliates (“Çolakoğlu Group Companies”). This also includes carrying out any tasks necessarily related to such products and services,
• So that we may contact you to provide information or updates about products and services that we offer, but only if you have given us your explicit consent,
• To safeguard the legal and commercial interests of the Company, of Çolakoğlu Group Companies, and of our business partners,
• To conduct evaluations of our Company’s and Çolakoğlu Group Companies’ customers, suppliers and business partners (including their authorized representatives and employees). These evaluations may involve reputation research, event management, legal compliance checks, audits, financial matters and similar processes,
• To help us define and execute our Company’s business and commercial strategies,
• To ensure the implementation of our Company’s principles and policies and to enable our business units to carry out the necessary work for you to benefit from products and services offered/supplied by our company and/or by Çolakoğlu Group Companies,
• To personalize our products and services based on your preferences, usage habits and needs so as to improve customer satisfaction. We may also use this information to understand our customers better, to profile our customers and to engage in various marketing and advertising activities, including conducting surveys electronically and/or physically through contracted organizations,
• To safeguard the legal and commercial interests of our Company, the Çolakoğlu Group Companies, and our business partners,
• To ensure the physical security and control of all the Company’s premises,
• To plan and implement our information systems and their associated processes,
• To maintain the accuracy and currency of any of your personal data that we may need to conduct activities that have any legal, technical or administrative implications,
• To implement our Company’s principles and policies and to fulfill our legal and contractual obligations.

Sharing your personal data with others

Only for the purposes outlined above and only in compliance with the requirements of applicable laws and regulations, EgeGaz may share your personal data with the individuals and organizations which are listed below and which may or may not be residents of Türkiye:

• Our Company’s direct and indirect shareholders, subsidiaries, and affiliates,
• Individuals or organizations which provide our Company with services, including consultancy services and with which our Company, at its own discretion, may or may not enter into confidentiality agreements,
• Our business partners and suppliers; public agencies and organizations as well as private individuals that are legally authorized to access individual data.

How and why we may collect your personal data

We collect your personal data through various channels, including our Company’s own departments, affiliated group companies, websites, social media platforms, third parties, statutory authorities, any and all manner of written, verbal and/or electronic means.

Your personal data is collected, used, recorded, stored and processed by our Company in a lawful and fair manner, for the legitimate purposes clearly stated above, in a limited and proportionate way and only after providing you with clear and understandable written information and obtaining your explicit consent when necessary.

We process and share your personal data only with the individuals and organizations mentioned above and only for the following reasons as allowed by KVKK article 5/2:

• When it is explicitly required by law,
• In situations where it is essential to safeguard the life or physical well-being of the individual whose data is being processed or of someone else and it is impossible for consent to be given due to practical circumstances or consent is not considered legally valid,
• In cases where processing the personal data of those involved in a contract is essential for the contract to be entered into or executed,
• Whenever we must process or share your data to fulfill our legal responsibilities,
• If the personal data has already been made public by the data subject (you),
• When processing is necessary for the establishment, exercise or defense of legal claims,
• In cases where we have legitimate business interests for processing your data, but only if doing so does not adversely affect your fundamental rights or freedoms.

How long we retain your personal data

We retain your personal data only for as long as we are legally required or allowed to. Where there are no specific legal requirements, we determine how long to keep your personal data based on the reasons we are processing it. Whenever there is no longer a reason for us to process or retain your personal data, we will delete, destroy or anonymize it unless there are other legal reasons or grounds for not doing so.

If the purpose for processing your personal data has ended and the retention periods specified by applicable laws and regulations and by our Company have also expired, your personal data may only be retained for the purpose of its serving as evidence in potential legal disputes or for asserting or defending rights related to your personal data. To determine these retention periods, we take into account the timeframes within which you can legally exercise your rights related to the data and requests we have previously received concerning similar matters, even if the statute of limitations for those requests has expired. In such situations however, we ensure that the retained personal data is not accessed for any other reason and that access is granted only when it is absolutely necessary to use the data in connection with the specific legal dispute. Once this period of time has run its course, the personal data is deleted, destroyed, or anonymized.

Your rights as a data subject under Article 11 of the KVKK article 11

You have the following rights under Article 11 of KVKK article 11. You may exercise these rights by contacting our Company:

• You have the right to know if your personal data is being processed,
• If your personal data is being processed, you have the right to demand information about how it’s being processed,
• You have the right to know why your personal data is being processed and whether or not it’s being used appropriately for that purpose,
• You have the right to know what third parties, whether in Türkiye or in other countries, your personal data is being/has been shared with,
• You have the right to demand that your personal data be corrected or updated if it is inaccurate or incomplete and to have these changes communicated to any third parties who have received your data,
• Even when your personal data has been processed in accordance with KVKK and other applicable laws and regulations, you have the right to demand that it be deleted or destroyed if the reasons for processing it no longer exist; you also have the right to demand that we inform any third parties who have received your data about this deletion/destruction,
• You have the right to object to any decision that has been made solely on the basis of the automated processing or analysis of your personal data if the decision is detrimental to your interests,
• You have the right to demand compensation for any losses you may suffer as a result of any unlawful processing of your personal data.

To exercise any of your rights mentioned above, please complete the application form available at www.egegaz.tr. Be sure to include sufficient information to verify your identity as well as a clear explanation of which KVKK article 11 right you wish to exercise. You may then submit a signed copy of the form, along with documents proving your identity, in person at the following address: Rüzgarlıbahçe Mah. Çam Pınarı Sk. No: 1 İç Kapı No: 6 34805 Beykoz / İstanbul. If that is not practical, you may have it sent to that address through a public notary as well as by any other means allowed by KVKK. Provided they are accompanied by a valid electronic signature, these forms may also be submitted electronically to our registered email address at egegaz@hs02.kep.tr. To ensure that we’re able to respond to your requests effectively, we recommend that you provide clear and understandable details and include specific dates wherever possible.

For more detailed information about your personal data and to access the application form, please visit our Company’s website at www.egegaz.com.tr.

Data controller

EGE GAZ A.Ş.

İstanbul Trade Registry Directorate: 404404

Address: Rüzgarlıbahçe Mah. Çam Pınarı Sk. No: 1 İç Kapı No: 6 34805 Beykoz / İstanbul

Corporate website: www.egegaz.com.tr