As MB Geothermal, we attach great importance to ensuring the security of your personal data.

In this context, in accordance with Law No. 6698 on the Protection of Personal Data (“KVKK Law”) and relevant legislation, we take the necessary measures to ensure an appropriate level of security in the processing of your personal data and its transfer to third parties within the framework of our activities carried out by our company. We take the necessary measures to prevent unlawful processing and access of your personal data and to ensure its preservation. With full awareness of this responsibility, as the “Data Controller,” we process your personal data as explained below and within the limits stipulated by legislation.

If the Declaration is renewed in its entirety or in specific articles, the effective date and version of the Declaration will be updated. The Declaration will be published on our company website (https://www.mbgeothermal.com) and made available to relevant parties.

1. THE PERSON PROCESSING YOUR DATA

MB Geothermal is the legal entity responsible for establishing and managing the data recording system, determining the purposes and means of processing your personal data. Once you provide your explicit consent to the processing of your personal data, or if explicit consent is not required, upon notification, our company will begin processing your personal data, ensuring data security. We may authorize one or more data processors to process your personal data, ensuring the necessary level of security for them.

2. LEGAL BASIS FOR PROCESSING YOUR PERSONAL DATA, FOR WHICH PURPOSES IT MAY BE PROCESSED, WITH WHICH METHODS IT MAY BE OBTAINED AND WHICH DATA OF YOURS WILL BE PROCESSED

Your personal data may vary depending on the service, product, or commercial activity provided by our company; it may be collected verbally, in writing, or electronically, through automated or non-automated methods, offices, branches, dealers, websites, social media channels, mobile applications, and similar means. Your personal data may be processed, created, and updated as long as you utilize our company’s products and services.

Your personal data may be used to enable you to benefit from the goods and services offered by our company, to fulfill the obligations included in the agreements signed between us, to carry out the necessary work by our relevant units and to manage the processes, to determine and implement our company’s commercial and financial strategies, to plan and execute operational and human resources processes, to inform and carry out transactions related to advertising, communication, marketing and financial processes, to plan and execute corporate communication activities, customer relations and customer requests and complaints management processes, to manage relations with business partners, to fulfill the sales and marketing activities of the company / group companies, to comply with information storage, reporting and information obligations, to execute accurate and up-to-date data processing policy, to ensure the legal and commercial security of relevant persons who have commercial relations with our company, to carry out legal transactions and applications, to carry out transactions before official and private institutions and organizations, to perform contractual obligations, etc. within the scope of transactions and actions in accordance with the law, ethics and rules of honesty and for legitimate purposes, limited to the periods specified in the legislation, in accordance with the KVK Law Art. It is processed in accordance with the provisions of 5 and 6.

3. SHARING YOUR PERSONAL DATA

Your collected personal data may be transferred to our domestic and international subsidiaries, business partners, suppliers, company officials, shareholders, MB Holding Group Companies, legally authorized public institutions and private individuals, for the purposes we have explained above, within the framework of the personal data processing conditions and purposes specified in Articles 8 and 9 of the Personal Data Protection Law.

4. DESTRUCTION OF YOUR PERSONAL DATA

Our Company retains the personal data it processes for the periods specified by legislation. Unless a specific period is specified by legislation, personal data is retained for the period required by our Company’s practices and business practices, based on the services our Company provides while processing that data, and for periods deemed necessary in practice after that period, solely for the purpose of providing evidence in potential legal disputes. After these periods, the personal data in question is deleted, destroyed, or anonymized on the first date of destruction, in accordance with Article 7 of the Personal Data Protection Law.

5. YOUR RIGHTS REGARDING THE PROCESSING OF YOUR PERSONAL DATA

You can submit your requests below to our company within the framework of Article 11 of the Personal Data Protection Law.;

  • To learn whether your personal data has been processed or not, and if so, to request information about it,
  • Learning the purpose of processing your personal data and whether they are used in accordance with their purpose,
  • Learning about third parties to whom your personal data is transferred, whether domestically or abroad,
  • Request correction of personal data if it is processed incompletely or incorrectly,
  • Requesting the deletion, destruction or anonymization of your personal data in the event that the reasons requiring the processing of your personal data within the scope of Article 7 of the Personal Data Protection Law are eliminated,
  • Request that the transactions made in accordance with clauses (d) and (e) be notified to third parties to whom your personal data has been transferred,
  • Objection to a result that is detrimental to you due to the analysis of processed data exclusively through automated systems,
  • To request compensation for damages in case of damages due to unlawful processing of your personal data.

In accordance with Article 14 of the Personal Data Protection Law, if the application is rejected, the response is found insufficient or the application is not responded to in a timely manner, the personal data owner may file a complaint with the Board within thirty days from the date on which he/she learns of our Company’s response and, in any case, within sixty days from the date of application.