WEBSITE VISITOR PRIVACY NOTICE

1. Data Controller and Scope of this Notice

As TURENO Enerji İnşaat Limited Şirketi (“TURENO” or the “Company”), we attach importance to the protection of personal data obtained when our website at tureno.com.tr is visited.

This Privacy Notice has been prepared to inform visitors, pursuant to Article 10 of Law No. 6698 on the Protection of Personal Data (“KVKK”) and the related legislation, about the processing of personal data of a technical nature that is obtained electronically when our website is visited and used.

Data Controller: TURENO Enerji İnşaat Limited Şirketi

Address: Ünalan Mahallesi, Libadiye Caddesi, No: 82, Emaar Square Sitesi, E Blok, Kat: 29, Daire: 291, Üsküdar/İstanbul, Türkiye

Telephone: +90 (216) 606 56 02

E-mail: info@tureno.com.tr

Website: tureno.com.tr

Detailed information on the processing of personal data submitted to us through the contact form on our website is provided in the separately published “Contact Form Privacy Notice”.

2. Personal Data Processed

When our website is visited, the following technical personal data may be processed in the course of establishing the internet connection and generating server access logs:

• Transaction Security Information: IP address, date and time of access to the website, technical records of the access request, and server response and error logs.
• Technical Connection Information: Technical information about the internet browser, operating system and device used that is transmitted to the server during the connection.
• Technical Records of Website Use: Server logs of the pages visited and the access requests made.

This information is processed under the KVKK to the extent that it constitutes personal data.

Our Company does not carry out any data processing activity aimed at profiling website visitors for advertising or marketing purposes.

3. Purposes of and Legal Grounds for Processing Personal Data

The technical personal data obtained during a visit to the website is processed for the following purposes:

3.1. Ensuring the Security of the Website

Technical access and transaction security records are processed for the purposes of ensuring the security of the website and its server infrastructure, detecting unauthorized access attempts, and investigating misuse and potential cyber security incidents.

This data processing activity is carried out under Article 5/2-f of the KVKK, on the legal ground that processing is necessary for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject.

3.2. Ensuring the Technical Operation of the Website

Connection and server logs may be processed for the purposes of making the website available to visitors, responding to connection requests, and identifying and resolving technical faults and access problems.

These activities are carried out under Article 5/2-f of the KVKK, to the extent that the processing of personal data is necessary, on the legal ground of legitimate interest in operating the website securely and properly.

Personal data is processed in a manner that is relevant, limited and proportionate to the stated purposes; it is not used for advertising targeting, behavioral profiling or marketing purposes.

4. Method of Collecting Personal Data

Your personal data is obtained electronically, by automated means, through the technical communication that takes place between your device and the website's server when you access our website, and through the generation of server access logs.

5. Transfer of Personal Data

Technical personal data relating to website visits may be processed, to the extent required by the service provided, by the IT and server infrastructure service providers from which our Company obtains services for hosting the website, operating it technically and ensuring information security.

Activities that require the transfer of personal data to third parties are carried out in accordance with the conditions set out in Article 8 of the KVKK.

In addition, where necessary to fulfil a legal obligation or to respond to lawful requests from authorized public institutions and organizations, the relevant personal data may be transferred to the competent authorities.

6. Retention and Destruction of Personal Data

Technical personal data obtained through the website is retained only for as long as the purposes of processing require.

In determining retention periods, the technical security needs of the website, the nature of the access logs and the obligations arising from the applicable legislation are taken into account.

When the reasons requiring the processing of personal data cease to exist, the data concerned is destroyed in accordance with Article 7 of the KVKK and the legislation on the erasure, destruction or anonymization of personal data.

7. Rights of the Data Subject

Pursuant to Article 11 of the KVKK, you have the following rights in relation to your personal data:

a) to learn whether your personal data is being processed;

b) to request information about the processing if your personal data has been processed;

c) to learn the purpose of the processing of your personal data and whether it is being used in accordance with that purpose;

d) to know the third parties, in Türkiye or abroad, to whom your personal data is transferred;

e) to request the rectification of your personal data if it has been processed incompletely or inaccurately;

f) to request the erasure or destruction of your personal data under the conditions set out in Article 7 of the KVKK;

g) to request that the rectification, erasure or destruction be notified to the third parties to whom your personal data has been transferred;

h) to object to any result to your detriment that arises from the analysis of your processed data exclusively by automated systems;

i) to claim compensation for any damage you suffer as a result of the unlawful processing of your personal data.

8. Application Procedure

You may submit applications concerning your rights under Article 11 of the KVKK to our Company in accordance with Article 13 of the Law and the Communiqué on the Principles and Procedures for Application to the Data Controller.

You may submit your applications:

• in writing, to our Company's address stated above;
• by registered electronic mail (KEP), secure electronic signature or mobile signature, in a manner that meets the conditions laid down in the legislation;
• to info@tureno.com.tr, using the e-mail address that you have previously notified to our Company and that is registered in our system.

Your applications will be evaluated and concluded as soon as possible depending on the nature of the request, and in any event within thirty days at the latest of the application reaching our Company.

TURENO ENERJİ İNŞAAT LİMİTED ŞİRKETİ

Address: Ünalan Mahallesi, Libadiye Caddesi, No: 82, Emaar Square Sitesi, E Blok, Kat: 29, Daire: 291, Üsküdar/İstanbul, Türkiye

E-mail: info@tureno.com.tr

Telephone: +90 (216) 606 56 02