İSTANBUL UYGULAMALI GAZ VE ENERJİ TEKNOLOJİLERİ ARAŞTIRMA MÜHENDİSLİK SANAYİ VE TİCARET ANONİM ŞİRKETİ

INFORMATION TEXT PURSUANT TO PERSONAL DATA PROTECTION ACT NO 6698

Dear Our Valuable Client,

As İstanbul Uygulamalı Gaz ve Enerji Teknolojileri Araştırma Mühendislik Sanayi ve Ticaret Anonim Şirketi (“UGETAM”), we pay due care and take seriously the issue of compliance with Personal Data Protection Act No 6698, and accordingly are taking all precautions to the maximum extent possible. In this context, we, acting as the capacity of data controller, are processing your personal data in accordance with the Act. This Information Text About Personal Data Protection and Processing (“Information Text") contains information about purpose of data processing, data categories, data collection methods and legal grounds, destinations and purposes of personal data transfer, data processing period and your rights relating to your data.

Our Data Collection Method and Purpose of Personal Data Processing

Once you start benefiting from UGETAM services, your identity details, contact, address and bill details, your audio and call records, and, if you contact our call centers or company phones, your personal data relating to identity and audio data are processed by UGETAM physical or electronic means limited to purposes indicated in this information text, provided not to jeopardize your fundamental rights and liberties, in accordance with the Act.

Your personal data will be processed;

to enable you benefit from our services,
to contribute in environmental and human health,
to carry out billing transactions,
to manage the claim complaint process

to authenticate the applicant for your all verbal, written and electronic applications to contact with our institution, by checking your identity, contact details, and other data provided us by attaching them to the application document, or verbally, or by hand.

to use in corporate communications and event management activities and processes, and for carrying out the works by business units of our company, necessary to ensure personal data subjects make use of our services.

to carry out and follow up financial reporting and risk management activities,

to notify the amendments in legislation or our policies, or provide notifications which concern the data subject,

to ensure legitimate interests of our company,

to identify the communication and contents of the audio and call recordings captured when data subjects contact our call centers or via our company phones.

to plan and implement our human resources policy,

to make service procurements under applicable laws, and to pay the contract prices for the services procured,

to fulfill our contractual obligations or legal obligations,

Destinations and Purpose of Transfer of Personal Data Processed

Your personal data will be transferred by UGETAM to the parties listed below but limited to the purposes defined in this information text;

Istanbul Metropolitan Municipality, its Subsidiaries, our business partners and vendors in order to ensure performance and continuity of the public services and our commercial activities,

Our vendors, but limited to the purposes of procurement of products and services,

Istanbul Metropolitan Municipality, Turkish Ministry of Interior and audit companies under the relevant contracts in order for ensuring audits on operations, being a public service, according to provisions of applicable legislation,

Our vendors, in order for development and implementation of the strategies relating to our public services, and commercial activities,

Our parent institution Istanbul Metropolitan Municipality, its Subsidiaries, ISKI, IETT and town municipalities in order to set up joint database, maintain coordination, and for delivery of the services more effectively and faster,

Private and public legal persons operating in Turkey in order to improve recognition and brand equity of the company, to improve and keep Internet infrastructure up-to-date,

Authorized public agencies and authorities in line with demands of relevant public agencies and authorities, but limited to the purposes of such demand

Istanbul Metropolitan Municipality, its Subsidiaries in order to set up a joint database for our personnel and prospective personnel, to follow up performance, to maintain coordination for this purpose,

Software development firms and technology firms operating in Turkey in order to create the databases for operating systems and computer software used by our company, maintain functionality of the software, and repair and maintenance works relating to the software;

Occupational Health and Safety firms, hospitals and health-care institutions in order to ensure emergency medical responses, and obligations of occupational health and safety;

Relevant banks and financial instructions, in order to perform banking and financial transactions of our company and subsidiaries;

Our solution partner companies which carry out repair, maintenance and service operations, vendors and companies operating in this field;

Our contract research and survey firms in order to carry out research and survey activities as part of the client and subscriber satisfaction.

Your personal data processed for the purposes set out in this Information Text About Your Personal Data will be anonymized and used, or destroyed, or erased when the purpose of processing as required by Article 7/1 of Act No 6698 has ceases to exist and/or when the periods set out in the acts pursuant to Article 138 of Turkish Penal Code have elapsed.

Method of Collecting Your Personal Data and Legal Grounds

Your personal are collected by non-automatic methods via the forms you filled in or documents you submitted us.

Your personal data are legally processed on the basis of a contract you signed with us, or when it is necessary to process your personal data because of direct relation with the performance of a contract pursuant to Article 5/2 (c) of Act No 6698, and on the basis of a necessity to process your personal data to safeguard our legitimate interests pursuant to Article 5/2 (f) of Act No 6698.

Means of Application to Data Controller and Your Rights

You can always contact us to get information about following matters under the Act;

to be informed as to whether your personal data is processed or not,

to get information about the purpose of processing of your personal data, whether they are used in line with intended purpose,

to learn the parties to which your personal data are transferred,

to require correction in case of missing or inaccurate processing, and, if conditions met, to require deletion of your personal data, and to require said deletion be notified to third parties to which personal data are transferred,

to lodge an appeal against any results against your interests arisen due to the analysis of processed data via exclusively automated systems,

to claim compensation of damages incurred by you as a result of illegal processing of your personal data.

to require deletion or destruction of your personal data when the reasons which required the lawful processing of your personal data cease to exist.

Data subject may submit their written requests relating to these rights via a letter of warning to be delivered to UGETAM via a notary public, or physically appearing and producing his/her identity document at our Head Office, at the address provided below. In this case, requests of data subject will be evaluated and concluded free of charge in the shortest time but no later than thirty (30) days. Should any extra costs required for evaluation and decision-making processes, then the fees defined in the tariff set by Personal Data Protection Board shall be taken as a basis.

Your request will be answered in the shortest time and no later than thirty (30) days as prescribed by the Act. However, transaction requires any extra costs, UGETAM reserves the right to charge the fees ove