KVKK Policy

GREEN SERVICES ENERJİ ELEKTRİK AŞ (Green Lighting or Company) respects your privacy and attaches importance to your data security. In this context, this clarification text has been prepared in order to inform and enlighten you within the scope of the Law No. 6698 on the Protection of Personal Data ("Law", "KVKK", “GDPR”) and other relevant legislation.

Information

Law No. 6698 on the Protection of Personal Data was adopted on 24 March 2016 and entered into force upon its publication in the Official Gazette on 7 April 2016. However, according to Article 32 of the Law titled "Enforcement", Articles 8, 9, 11, 13, 14, 15, 16, 17 and 18 of this Law became effective as of 7 October 2016.

The Law was adopted in order to protect the fundamental rights and freedoms of individuals, especially the right to privacy, and to regulate the obligations of natural and legal persons who process personal data and the procedures and principles to be followed. With this text, Green Lighting informs and enlightens the visitors.

Green Lighting will only process your name, e-mail address, work and home address, telephone number and other personal data submitted by visitors through the forms on this website, limited to the purpose of processing and within the limits specified in the clarification text and, if consent is given, in the explicit consent text.

DEFINITIONS

Explicit ConsentIt refers to the consent on a specific subject, based on information and expressed with free will.
CompanyGreen Lighting Energy Technologies Inc., located at Green Kampüs, Şehit İsmail Öz Sk. No:37, 34752 Ataşehir/İstanbul, signifies the company.
CookieThey are small files that are saved on users' computers or mobile devices and help store preferences and other information on the web pages they visit.
Relevant UserPersons who process personal data within the organisation of the data controller or in accordance with the authority and instructions received from the data controller, except for the person or unit responsible for the technical storage, protection and backup of the data.
DestructionDeletion, destruction or anonymisation of personal data.
Contact Person

The real person notified by the data controller at the time of registration to the Registry for the communication to be established with the Authority regarding the obligations of legal persons resident in Turkey and non-resident legal person data controller representative within the scope of the Law and the secondary regulations to be issued based on this Law.

(The contact person is not authorised to represent the data controller. As the name suggests, it is only the person appointed to ensure the communication and "liaison" between the data controller and the relevant persons and the institution).

Law/Personal Data Protection LawLaw on the Protection of Personal Data dated 24 March 2016 and numbered 6698, published in the Official Gazette dated 7 April 2016 and numbered 29677.
Recording MediaAll kinds of media containing personal data that are fully or partially automated or processed by non-automated means, provided that they are part of any data recording system.
Personal DataAny information relating to an identified or identifiable natural person.
Processing of Personal DataAny operation performed on personal data such as obtaining, recording, storing, retaining, modifying, reorganising, disclosing, transferring, taking over, making available, classifying or preventing the use of personal data by fully or partially automatic means or by non-automatic means provided that it is part of any data recording system.
Anonymisation of Personal DataMaking personal data impossible to be associated with an identified or identifiable natural person under any circumstances, even by matching with other data.
Deletion of Personal DataDeletion of personal data; making personal data inaccessible and non-reusable in any way for the relevant users.
Destruction of Personal DataThe process of rendering personal data inaccessible, irretrievable and non-reusable by anyone in any way.
BoardPersonal Data Protection Board.
Special Category Personal DataData on race, ethnic origin, political opinion, philosophical belief, religion, sect or other beliefs, appearance and dress, membership of associations, foundations or trade unions, health, sexual life, criminal convictions and security measures, and biometric and genetic data.
Periodic DestructionIn the event that all of the conditions required for the processing of personal data disappear, the deletion, destruction or anonymisation process to be carried out ex officio at recurring intervals specified in the personal data retention and destruction policy.
PolicyPersonal data protection policy created by the company.
Data ProcessorA natural or legal person who processes personal data on behalf of the data controller based on the authorisation granted by the data controller.
Data Recording SystemRecording system in which personal data are structured and processed according to certain criteria.
Data Owner/Related PersonThe natural person whose personal data is processed.
Data ControllerThe natural or legal person who determines the purposes and means of processing personal data and is responsible for the establishment and management of the data recording system.
Source:Law No. 6698 on the Protection of Personal Data - Regulation on the Deletion, Destruction or Anonymisation of Personal Data - Regulation on the Registry of Data Controllers - Communiqué on the Procedures and Principles to be followed in the Fulfilment of the Disclosure Obligation - Communiqué on the Application and Procedural Principles to the Data Controller - Communiqué on the Procedures and Principles of Application to the Data Controller

 
DATA RESPONSIBLE

As stated in this Clarification Text, Green Lighting is the data controller in accordance with KVKK.

  1. Data Controller Information

Full Name: Green Lighting Energy Technologies Inc.

Short Name: Green Lighting

Address: Green Kampüs, Şehit İsmail Öz Sk. No:37, 34752 Ataşehir/İstanbul

I. Site: https://greenlighting.com.tr

Our Reasons for Processing Your Data

Your personal data are processed in accordance with Articles 5 and 6 of the Law for similar purposes, including but not limited to carrying out the necessary activities within the company in order to ensure that the products and services provided by our company can be offered to you, carrying out the necessary work with the relevant business unit and business partners in order to recommend products and services suitable for your consumption and purchase motivation to our customers, ensuring the rights of natural persons by providing human resources management by our company, taking the necessary steps for making, implementing and realising commercial decisions by our company, ensuring the legal security of the natural persons with whom we establish business relations and our company arising from these relations, and similar purposes.

Your personal data may be processed by Green Lighting as the data controller without seeking your explicit consent in the following cases:

  • a) It is explicitly stipulated in the laws;
  • b) It is mandatory for the protection of the life or physical integrity of the person who is unable to disclose his/her consent due to actual impossibility or whose consent is not legally valid.
  • c) It is necessary to process the personal data of the parties to the contract, provided that it is directly related to the performance of the contract.
  • ç) It is mandatory for the fulfilment of our legal obligations as a data controller;
  • d) It has been made public by the data subject himself/herself.
  • e) Data processing is mandatory for the establishment, exercise or protection of a right
  • f) Provided that it does not harm the fundamental rights and freedoms of the data subject, it can be used for the following purposes, based on any of the conditions that data processing is mandatory for the legitimate interests of the data controller.

Your personal data may be processed for the following purposes;

  • To communicate with you and others as part of the work.
  • To send you important information about changes to our terms of service, changes to our electronic services and other administrative information.
  • To provide quality, training and safety improvement (e.g. in relation to telephone calls made, recorded or monitored to our contact numbers).
  • Resolving complaints and processing data access or correction requests.
  • Prevent, detect and investigate crimes, including fraud and money laundering, and analyse and manage other business risks.
  • Comply with applicable laws and regulatory obligations (including those outside your country of residence), including anti-money laundering and anti-terrorism laws; comply with legal process; and respond to requests from public authorities and governmental authorities (including those outside your country of residence).
  • Manage our infrastructure and business operations and comply with internal policies and procedures, including those relating to audit, finance and accounting; billing and collections; IT systems; data and website hosting; business continuity and records, document and print management.
  • Identify and defend legal rights; protect our operations or the operations of our business partners, our rights, privacy, security or property, and/or your or others' such assets; and apply available remedies or limit our losses.
  • Conduct market research and analysis, including satisfaction surveys.
  • Enabling you to participate in competitions, prize draws and similar promotions and managing these activities.
  • To facilitate social media sharing functionality.
  • Personalise your experience of electronic services by providing you with tailored information and advertisements.

Your Personal Data That We Process

Identity Information: Your name, surname, Turkish ID number, mother's name, father's name, place and date of birth, student number, personnel registration number, nationality and other information provided to the company with your explicit consent.

Contact Information: Your residence address, workplace address, telephone number and e-mail address, KEP address and, if any, your mobile phone number, fax number or other communication channels that you have provided with your consent so that we can contact you.

Employment and Education Information: Your identity information filled out for application to the company (job application, student enrolment, application for participation in certified / non-certified trainings) within the scope of the application form, registration documents and/or job application forms sent to the company's official e-mail address bilgi@greenlighting.com.tr or by using other online or physical application methods provided by the company, information about your employment status, your contact details, your educational status (e.g. "university graduate, master's degree graduate, physics department graduate") and past graduation information, information about the courses/seminars you have attended, your certificate information and your national or international exam results.

To whom and for what purpose the processed personal data can be transferred

Your personal data collected; Ensuring the legal and commercial security of our company and the persons who have a business relationship with our company; Carrying out the necessary work by our business units to benefit you from the products and services offered by our company; Customising the products and services offered by our company according to your tastes, usage habits and needs, recommending them to you, determining and implementing the commercial and business strategies of our company and ensuring the execution of our company's human resources policies, to our business partners, suppliers, shareholders, legally authorised public institutions and private persons within the framework of the personal data processing conditions and purposes specified in Articles 8 and 9 of the KVKK.

Method and Legal Grounds for Collecting Personal Data

Your personal data is collected by our company through different channels and based on different legal reasons in order to carry out our commercial activities.

Your personal data are collected through the member registration form, registration/application forms filled out over the internet, receipt and expenditure documents, video and audio recording devices used in events, security camera records and Green Lighting official e-mail address bilgi@greenlighting.com.tr or any e-mail address of the company using the extension "@greenlighting.com.tr", greenaydinlatma@hs01.kep.tr KEP address.

Personal data are also collected by physically sending documents, physically filling in a document provided by the company, filling in the library membership form filled in order to provide library services with wet signature, or other internal numbers of the Company.

Your personal data is also collected automatically through cookies used on https://greenlighting.com.tr and its extensions. These cookies are only necessary cookies for the visitor to use the site with full efficiency and are used to remember the visitor's preferences and do not provide any other personal data. You can access our cookie policy at https://greenlighting.com.tr/cerez-politikasi.

The Company does not engage in any personal data processing activities that do not fall within the scope of personal data processing conditions.

The personal data processing conditions in the KVKK are as follows;

  • Explicit consent of the person concerned,
  • Explicitly stipulated in the laws,
  • It is necessary for the protection of the life or physical integrity of the person who is unable to disclose his/her consent due to actual impossibility or whose consent is not legally valid,
  • It is necessary to process personal data belonging to the parties to the contract, provided that it is directly related to the establishment or performance of a contract,
  • It is mandatory for the data controller to fulfil its legal obligation,
  • It has been made public by the data subject himself/herself,
  • Data processing is mandatory for the establishment, exercise or protection of a right,
  • Data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject.

The basic processing condition for special categories of personal data is explicit consent and the company basically does not aim to process special categories of personal data. However, your special categories of personal data that we need to process due to our activities or that you have approved with your explicit consent are also processed in a measured manner within the legislation.

The conditions listed in the KVKK for the processing of special categories of personal data are as follows;

  • Explicit consent of the person concerned,
  • Explicitly stipulated in the laws for special categories of personal data other than health and sexual life,

Personal data relating to health and sexual life, however,

  • Protection of public health,
  • Preventive medicine,
  • Medical diagnosis,
  • Carrying out treatment and care services,
  • For the planning and management of health services and financing,
  • It may be processed by persons under the obligation to keep secrets or by authorised institutions and organisations without seeking the explicit consent of the person concerned.

One or more personal data processing conditions that make a personal data processing activity lawful may exist at the same time.

In order to fulfil our aforementioned purposes, it is necessary to process your data mentioned above. While transferring identity information to our company, data that are not actually within our processing purposes may also be transferred to us. Within the scope of administrative and technical measures, we delete and/or anonymise such data at the end of the periods stipulated in the legislation, but it is not possible to ensure this situation under all circumstances. In this case, it is necessary to apply for your explicit consent for the processing of such data. 

Rights of the Relevant Person listed in Article 11 of the KVKK

As personal data owners, if you submit your requests regarding your rights to our company by the methods set out below in this Clarification Text, our Company will finalise the request free of charge as soon as possible and within thirty days at the latest, depending on the nature of the request. However, if a fee is stipulated by the Personal Data Protection Board, the fee in the tariff determined by our company will be charged. In this context, personal data owners;

  • To learn whether personal data is being processed,
  • Request information if personal data has been processed,
  • To learn the purpose of processing personal data and whether they are used in accordance with their purpose,
  • To know the third parties to whom personal data are transferred domestically or abroad,
  • To request correction of personal data in case of incomplete or incorrect processing and to request notification of the transaction made within this scope to third parties to whom personal data is transferred,
  • Although it has been processed in accordance with the provisions of the KVKK and other relevant laws, to request the deletion or destruction of personal data in the event that the reasons requiring its processing disappear and to request notification of the transaction made within this scope to third parties to whom personal data is transferred,
  • To object to the emergence of a result to the detriment of the person himself/herself by analysing the processed data exclusively through automated systems,
  • In case of damage due to unlawful processing of personal data, it has the right to demand compensation for the damage.

How Can You Exercise Your Rights?

You can fill in the "application form" that you can download by using the link https://greenlighting.com.tr/iletisim in line with your request / complaint and send the said form to us via iletisim@greenlighting.com.tr or you can physically fill in the form and send it to “Green Kampüs, Şehit İsmail Öz Sk. No:37, 34752 Ataşehir/İstanbul” via cargo/mail.

If you submit your request to us using one of the methods shown above, in accordance with Art. 13/2, your request will be evaluated within 30 days at the latest and you will be informed about the matter. If your request is accepted, the necessary procedures will be carried out immediately by the data controller Green Lighting. 

Requests are met free of charge as a rule, however, if fulfilling the requirements of the request requires costs, the fee stipulated in Article 7 of the "Communiqué on the Procedures and Principles of Application to the Data Controller" shall be waived up to 10 pages. If the application of the data subject is to be answered in writing, no fee is charged up to 10 pages. 1 TL transaction fee may be charged for each page over 10 pages. If the response to the application is given in a recording medium such as CD, flash memory, the fee that may be requested by the data controller cannot exceed the cost of the recording medium.", Green Lighting may charge a fee.

AMENDMENT

  1. Amendment No.1 The document has not been amended yet.

Amendment Date: -