This Personal Data Protection and Processing Notice (“Notice”) has been prepared by EMELEC Electric Engineering Inc. as the Data Controller to inform data subjects about the purposes of collection, processing, protection, storage, use, transfer, deletion and anonymization of personal data in accordance with the Turkish Personal Data Protection Law No. 6698 (“Law”). The aim of this Notice is to fulfill the Company’s legal disclosure obligation and provide transparency to data subjects regarding their personal data. emelec.com.tr
Through this Notice, EMELEC aims to create the legal basis and procedures for the protection and processing of personal data, raise awareness among related parties, and ensure compliance with the Law. emelec.com.tr
This Notice applies to all personal data obtained, recorded, stored, processed, archived, used, transferred or otherwise acquired by EMELEC in the course of its activities from real customers, potential customers, company shareholders, officers, employees, job applicants, visitors, business partners, and other third parties. emelec.com.tr
EMELEC shall comply with the general principles and procedures set out in the Law and related legislation regarding the protection and processing of personal data. The Company declares and undertakes to act in accordance with the following principles: emelec.com.tr
Personal data shall be processed lawfully, fairly, and transparently.
Data shall be accurate and up‑to‑date, and necessary measures shall be taken to ensure accuracy.
Processing shall be limited to specific, explicit and legitimate purposes.
Processing shall be relevant, limited and proportionate to the purposes for which the data is collected.
Personal data shall be retained only for the period required by law or for the purpose for which it was collected. emelec.com.tr
Special categories of personal data (such as health, biometric data, ethnic origin, philosophical belief, etc.) will be processed with additional legal safeguards in accordance with the Law. emelec.com.tr
EMELEC processes the following categories of personal data depending on the relationship and lawful basis: emelec.com.tr
Identity Information: name, surname, identity number, passport, driver’s license, address and similar data.
Contact Information: phone number, email address, address.
Employment Data: employment details, payroll, social security information.
Legal Data: correspondence with authorities, litigation and related documentation.
Customer Transaction Data: invoices, orders, service requests.
Security Data: CCTV footage, physical access logs, network logs, IP addresses.
Financial Data: bank account information, tax numbers, IBAN, credit card details.
Professional Information: resumes, education, training, certificates.
Visual/Auditory Records: photos and audio recordings.
Health Data: data necessary for workplace safety such as blood type and medical records.
Criminal and Security Data: if legally permitted, information related to criminal records and security measures. emelec.com.tr
The personal data processed by the Company relate to the following individuals: emelec.com.tr
Company Employees
Job Applicants
Real Customers
Potential Customers
Company Shareholders
Company Officers
Visitors
Third Parties (e.g., guarantors, family members, former employees)
Customer Representatives and Their Employees emelec.com.tr
Personal data may be processed for the following purposes: emelec.com.tr
Fulfillment of contractual and legal obligations
Legal proceedings and compliance with official requests
Preparation of corporate documents and board resolutions
Research, development and innovation activities
Organization of social events and recording photos/videos
Website, intranet, promotional and social media use
Travel and accommodation arrangements
Insurance processing
Audits and internal inspections
Implementation of workplace safety and employee welfare programs
Human Resources operations (hiring, evaluation, training)
Protection of legal, technical and commercial confidential information
Physical and information security of Company premises and systems
Handling and responding to suggestions, complaints, requests
Conducting commercial and contractual processes
Other purposes reasonably related to Company operations and legal compliance emelec.com.tr
Personal data may be transferred to: emelec.com.tr
Authorized public institutions and enforcement authorities
Service providers and business partners
Banks and financial institutions
Cloud and IT service providers
Group companies, subsidiaries and affiliates
Legal advisors and auditors emelec.com.tr
Transfers are made in accordance with applicable law and based on contractual and legal requirements. emelec.com.tr
Personal data are collected directly from data subjects or through third parties using various means including: emelec.com.tr
Company website and online forms
E‑mail and phone communication
Public sources and legal records
Events and training participation forms emelec.com.tr
Legal grounds include: explicit consent, compliance with legal obligations, performance of contract, legitimate interests, and necessity for the establishment or protection of rights. emelec.com.tr
Under Article 11 of the Law, data subjects have the following rights: emelec.com.tr
To learn whether personal data are processed
To request information about processed data
To learn the purpose of processing and whether data are used accordingly
To know domestic or international third parties to whom data are transferred
To request correction of incomplete or inaccurate data
To request deletion or destruction of personal data
To object to automated decision‑making or profiling
To seek compensation for damages caused by unlawful data processing emelec.com.tr
Personal data will be retained only for the period required by law or the purpose for which it was processed. Once these conditions no longer apply, data will be securely deleted, destroyed, or anonymized in accordance with applicable policies. emelec.com.tr
For any exercise of rights or questions regarding this Notice, data subjects may contact the Company’s data protection officer or authorized representative.
