HSA Enerji A.Ş. – Privacy Notice under the Personal Data Protection Law (Law No. 6698)
As HSA Enerji A.Ş., pursuant to Article 10 of the Law No. 6698 on the Protection of Personal Data (“KVKK”), we would like to inform and enlighten you regarding the processing of your personal data, the transfer of such data, the methods and legal grounds of data collection, and your other rights listed under Article 11 of the Law.
We may process, record, store, classify, update, and, where permitted by legislation and/or limited to the purpose of processing, disclose or transfer your personal data to third parties within the scope of the purposes set out below, in accordance with the law and the principles of good faith.
DATA CONTROLLER AND REPRESENTATIVE
In accordance with the Law, HSA Enerji A.Ş., operating at
Head Office: Fatih Sultan Mehmet Mah. Poligon Cad. Buyaka 2 Sitesi 2 Blok No: 8B İç Kapı No: 24 Ümraniye / İstanbul
Factory: Manisa OSB III. Kısım Keçiliköy OSB Mah. Mustafa Kemal Bulvarı No:15/1 Yunusemre / Manisa
is the Data Controller.
PROCESSED PERSONAL DATA
Within the scope of benefiting from our products and services, the following categories of your personal data are processed:
Identity Information (e.g., name, surname, Turkish ID number, and similar identifiers),
Contact Information (e.g., address, mobile phone number, e-mail address, and other contact details),
Financial Data (e.g., bank account number, IBAN, credit card details, payment and invoicing information),
Customer Transaction Data (e.g., order and request information, shopping history),
Transaction Security Data (e.g., website browsing information, IP address, login/logout data, passwords),
Other Personal Data that you directly provide within the scope of your requests, suggestions, and complaints.
PURPOSES OF PROCESSING PERSONAL DATA
Your personal data are processed by HSA Enerji A.Ş., in compliance with the fundamental principles regulated under KVKK and relevant legislation, based on your explicit consent and/or other conditions listed in Article 5/2 of the Law, primarily as required by applicable laws.
The purposes of processing personal data by HSA Enerji A.Ş. include:
Fulfilling commercial requirements and performing services,
Carrying out necessary work by relevant business units and managing related processes and reports,
Determining the company’s commercial and operational strategies,
Evaluating requests and complaints,
Ensuring that company operations are conducted in compliance with procedures and legal obligations,
Executing collaborations and managing reference relations with business partners in various sectors,
Fulfilling information-sharing, reporting, and notification obligations required by public authorities and regulatory bodies,
Meeting information and document retention obligations arising from applicable laws,
Managing finance, communication, market research, and procurement operations,
Managing legal processes and ensuring continuous, reliable, and high-quality service delivery.
Your personal data will be processed within the scope of the conditions and purposes of personal data processing stated in Articles 5 and 6 of the Law No. 6698.
METHOD AND LEGAL BASIS FOR COLLECTING PERSONAL DATA
Your personal data may be obtained by our Company through various channels — including HSA Enerji A.Ş.’s headquarters, factory, subcontractors, business partners, physical offices, call centers, websites, electronic transaction platforms, social media, or other publicly available sources, as well as other group companies and contracted third parties — in written, oral, audio, visual, or electronic form.
We process your personal data based on one or more of the following legal grounds:
Your explicit consent (e.g., for advertising, promotional, and marketing activities),
Legal obligations under applicable Turkish laws and regulations (e.g., Turkish Code of Obligations, Commercial Code, Consumer Protection Law, Law No. 5651 on Internet Publications, Law No. 6563 on Electronic Commerce),
Necessity for the performance of a contract to which you are a party,
Fulfillment of a legal obligation (e.g., compliance with regulatory or judicial requests, alternative dispute resolution, litigation),
Legitimate interests pursued by our Company, provided that such processing does not violate your fundamental rights and freedoms.
For further details, please refer to our “Personal Data Processing and Protection Policy.”
TRANSFER OF PROCESSED PERSONAL DATA
Your personal data are processed lawfully, fairly, accurately, up to date, for specific and legitimate purposes, and retained only as long as necessary.
Your personal data may be transferred to the following parties in Turkey and/or abroad within the purposes mentioned above and under the conditions specified in Articles 8 and 9 of the Law No. 6698:
Our business partners and affiliates,
Shareholders and suppliers,
Insurance companies,
Notaries, banks, and financial institutions,
Legal, accounting, and tax consultants,
Authorized public institutions and private individuals,
Domestic and/or international service providers who process personal data on behalf of our company in areas such as data storage, archiving, IT support (servers, hosting, software, cloud computing, etc.).
RIGHTS OF THE DATA SUBJECT
As the data subject, you have the following rights under Article 11 of the Law No. 6698:
To learn whether your personal data are processed,
To request information regarding the processing of your data,
To learn the purpose of processing and whether data are used in accordance with that purpose,
To know the third parties to whom your data are transferred domestically or abroad,
To request correction if your personal data are incomplete or inaccurate,
To request deletion or destruction of your personal data,
To request that third parties to whom your data are transferred be notified of such corrections or deletions,
To object to results arising from automated data analysis that may adversely affect you,
To request compensation for damages arising from unlawful processing of your data.
To ensure your data remain accurate and up to date, please inform us through the channels below if there are any changes to your personal information.
CONTACT FOR REQUESTS
If you wish to submit a request in writing:
You can deliver a wet-signed copy of the “KVKK Application Form” available on our website (https://hsaenergy.com/) together with an ID document in person, through a duly notarized power of attorney, or via notary to the following address:
Fatih Sultan Mehmet Mah. Poligon Cad. Buyaka 2 Sitesi 2 Blok No: 8B İç Kapı No: 24 Ümraniye / İstanbul
If you wish to submit a request electronically:
You may sign the “KVKK Application Form” with a secure electronic signature or mobile signature as defined under the Electronic Signature Law No. 5070, and send it to our Registered Electronic Mail (KEP) address hsaenerji@hs01.kep.tr, or use your previously registered and verified e-mail address to send it to info@hsaenerji.com.
(For verification purposes, we may request additional confirmation, such as contacting your registered e-mail address or by phone. In cases where applications are submitted on behalf of the data subject, a notarized special power of attorney must be provided.)
Requests will be evaluated and responded to within thirty (30) days, in writing or electronically, depending on the nature of the request.
HSA ENERJİ A.Ş.
Head Office: Fatih Sultan Mehmet Mah. Poligon Cad. Buyaka 2 Sitesi 2 Blok No: 8B İç Kapı No: 24 Ümraniye / İstanbul
Factory: Manisa OSB III. Kısım Keçiliköy OSB Mah. Mustafa Kemal Bulvarı No:15/1 Yunusemre / Manisa
Tel: +90 216 771 16 54 – 55
E-mail: info@hsaenerji.com