GIOEV Application Privacy Policy

GioEV Şarj İstasyonları İşletmeleri Anonim Şirketi as; importance is given to the privacy and security of your personal data, and the principles of protecting fundamental rights and freedoms guaranteed by the Constitution, especially the privacy of private life, are observed with utmost sensitivity. In accordance with the Personal Data Protection Law No. 6698, all kinds of information and documents containing all kinds of personal data you have transmitted (name, surname, T.R. Identity No., address, place of birth, date of birth, vehicle brand, model and plate number, etc.) and all kinds of special categories of personal data (health information, biometric and genetic data, appearance and dress, association, foundation, union membership, criminal conviction, data regarding security measures, religious, ethnic and all similar data) may be processed, recorded, stored, updated and preserved for the purpose of continuing services, transferred to third parties, shared and anonymized by GioEV Şarj İstasyonları İşletmeleri Anonim Şirketi as data controller in accordance with the regulations in the relevant law.

GioEV Şarj İstasyonları İşletmeleri Anonim Şirketi takes all necessary administrative and technical measures to protect the personal data processed in accordance with the relevant law and legislation within this entire scope. In accordance with the Personal Data Protection Law No. 6698 (“Law”), personal data are processed lawfully and fairly, and the accuracy of the data is ensured and updated when necessary. Attention is paid to processing data for specific, explicit and legitimate purposes, processing them in connection with, limited to and proportionate to the purposes for which they are processed, and retaining them for the period stipulated in the relevant legislation or required for the purpose for which they are processed. If the processed data are special categories of personal data as defined in the Law; personal data other than health and sexual life data may be processed without seeking the explicit consent of the data subject in cases stipulated by laws. Personal data relating to health and sexual life may be processed without seeking the explicit consent of the data subject only by persons or authorized institutions and organizations under a confidentiality obligation, for the purposes of protecting public health, preventive medicine, medical diagnosis, treatment and care services, and planning and management of health services and financing.

1. Purposes and Legal Grounds for Processing Personal Data

Your personal data are processed within the conditions and purposes specified in Articles 5 and 6 of the Law for use in necessary processes, for the fulfillment, sustainability, execution and development of our activities in accordance with all information and documents and all relevant laws and regulations, for promotional, campaign and similar activities regarding services and activities, invitations, notification of new applications, fulfillment of executed or to-be-executed contracts, planning, statistics, satisfaction surveys, ensuring security, e-mail environment, e-mails, e-newsletter memberships, social media posts, printed forms filled out at organized events, personal data collected in recruitment processes when employee candidates send their resumes during face-to-face interviews or written application forms, by submitting digital application forms electronically or via e-mail, cargo and similar methods, or through consultancy firms or telephone and through checks and research confirming the information provided by the candidate, and special categories of personal data collected according to the nature of the work, maintaining the legal and commercial security of persons in business relations, determining and implementing legal and financial affairs and similar commercial and business strategies, carrying out human resources and accounting policies, ensuring physical security and audit, compliance with domestic and international legislation, compliance with information transfer, storage and reporting obligations requested by public institutions or other authorities, and providing you with better and more reliable service and ensuring its uninterrupted continuity.

2. Retention Period of Personal Data

GioEV Şarj İstasyonları İşletmeleri Anonim Şirketi retains personal data only for the period specified in the relevant legislation or required for the purpose for which they are processed. In this context, it first determines whether a period is stipulated in the relevant legislation for the retention of personal data; if a period is determined, it acts in accordance with this period; if no period is determined, it retains personal data for the period required for the purpose for which they are processed. At the end of the period or if the reasons requiring processing cease to exist, personal data are deleted, destroyed or anonymized.

3. Method of Collecting Personal Data

Your Personal Data (such as name-surname, company information, telephone, address or e-mail addresses, vehicle brand, model and plate numbers, etc.) may, by its nature, be collected verbally, in writing or electronically through automatic or non-automatic methods, via our website, mobile application, social media channels, parties with whom we have business relations and/or from whom we receive services that complement our activities, contracted institutions and other similar channels.

Our company may send campaign information, information about new products and promotional offers to its customers and members from time to time. Our members may make any choice regarding whether to receive such information while becoming a member, and may later change this choice from the account information section after logging in as a member, or may notify through the link in the information message sent to them.

Personal information transmitted electronically to our company by our members during the approval process carried out through our company or by e-mail shall not be disclosed to third parties outside the purposes and scope determined by the "Loyalty Agreement" we have concluded with our Members.

In order to identify system-related problems and quickly resolve problems or disputes that may arise regarding the provided service, our company records and uses the IP address of its members. IP addresses may also be used to identify users in a general manner and to collect comprehensive demographic information.

Our company may use the requested information outside the purposes and scope determined by the Loyalty Agreement for direct marketing by itself or by persons with whom it cooperates. Personal information may also be used to contact the user when necessary. Information requested by our company or provided by the user, or information related to transactions made through our company, may be used by our company and persons with whom it cooperates for various statistical evaluations, database creation and market research, without disclosing the identity of our members, also outside the purposes and scope determined by the "Loyalty Agreement".

Our company undertakes to keep confidential information strictly private and confidential, to regard this as a confidentiality obligation, and to take all necessary measures and show due care to ensure and maintain confidentiality and to prevent all or any part of confidential information from entering the public domain or being used without authorization or disclosed to a third party.

4. Transfer of Personal Data

Your Personal Data may be transferred, within the framework of the activities of GioEV Şarj İstasyonları İşletmeleri Anonim Şirketi, for the fulfillment of its purposes, determination and implementation of strategy, ensuring the execution of human resources policies, to company officials, shareholders, employees, business partners, persons or third parties from whom services are received, legal, financial and tax advisors, auditors, consultants, institutions or persons, authorities such as SSI, ministries, judicial authorities and all public institutions and organizations legally authorized, and/or abroad within the framework of the conditions and purposes set forth in Articles 8 and 9 of the Law. In the event of transfer abroad, the foreign country to which the personal data will be transferred must have adequate protection; if adequate protection is not available, compliance shall be ensured with the requirements that the data controllers in Türkiye and in the relevant foreign country undertake adequate protection in writing and that the permission of the Personal Data Protection Authority is obtained.

5. Rights of the Personal Data Subject Pursuant to Article 11 of the Law

As a personal data subject, you have the right to request the following matters from GioEV Şarj İstasyonları İşletmeleri Anonim Şirketi.

1. To learn whether personal data are processed,
2. To request information if personal data have been processed,
3. To learn the purpose of processing personal data and whether they are used in accordance with their purpose,
4. To know the third parties to whom personal data are transferred domestically or abroad,
5. To request correction if personal data have been processed incompletely or incorrectly,
6. To request correction if personal data have been processed incompletely or incorrectly and to request notification of the transaction made in this scope to third parties to whom the personal data have been transferred,
7. Although processed in accordance with the Law and other relevant laws, to request deletion or destruction of personal data if the reasons requiring their processing cease to exist, and to request notification of the transaction made in this scope to third parties to whom the personal data have been transferred,
8. To object to the occurrence of a result against the person by analyzing the processed data exclusively through automated systems,
9. To request compensation for damages if the person suffers damage due to unlawful processing of personal data
10. The accuracy and up-to-date preservation of the information/data you share is important in terms of exercising the rights held over the data within the meaning of the Law and other relevant legislation, and the responsibilities arising from providing incorrect information belong entirely to you.

We reserve the right to request from you the costs we will incur in fulfilling your requests according to the tariff regulated in Article 13 of the Law titled Application to the Data Controller.

6. Cases Where Personal Data May Be Processed Without Seeking the Explicit Consent of the Data Subject Pursuant to the Law

1. It is expressly provided for by laws.
2. It is mandatory for the protection of the life or physical integrity of the person or another person who is unable to express consent due to actual impossibility or whose consent is not legally valid.
3. It is necessary to process personal data belonging to the parties to a contract, provided that it is directly related to the establishment or performance of the contract.
4. It is mandatory for the data controller to fulfill its legal obligation.
5. The data have been made public by the data subject themselves.
6. Data processing is mandatory for the establishment, exercise or protection of a right.
7. Provided that it does not harm the fundamental rights and freedoms of the data subject, data processing is mandatory for the legitimate interests of the data controller.

7. Principles Specified in the Law Regarding the Protection and Processing of Personal Data

GioEV Şarj İstasyonları İşletmeleri Anonim Şirketi acts in accordance with the Constitution, the general principles set forth in the Law and other relevant legislation regarding the protection and processing of personal data; and also complies with the following principles with great care and diligence:

1. Personal data processing activities must comply with the law and the rules of fairness.
2. Ensuring that personal data are accurate and, where necessary, up to date.
3. Processing personal data for specific, explicit and legitimate purposes.
4. Being relevant, limited and proportionate to the purposes for which they are processed.
5. Retaining them for the period stipulated in the relevant legislation or required for the purpose for which they are processed.

8. Methods for Personal Data Subjects to Exercise Their Rights / Application Method

If the data subject requests information on the matters stated in section E above, the application shall be answered within thirty days at the latest following a written application to our institution as data controller. If the transaction also requires a cost, we reserve the right to request the fees in the tariff determined by the Personal Data Protection Authority.

9. Credit Card Security

Our company prioritizes the security of credit card holders who shop through our mobile application or other channels. Your credit card information is not stored in our system in any way.

There are two things you need to pay attention to in order to understand that you are on a secure site when you enter the transaction process. One of them is a key or lock icon in the bottom line of your browser. This indicates that you are on a secure internet page and all your information is protected by encryption. This information is used only depending on the sales transaction process and in line with your instructions. Information regarding the credit card used during shopping is encrypted with the 128-bit SSL (Secure Sockets Layer) protocol independently of our mobile application and websites and transmitted to the relevant bank for inquiry. If the availability of the card is approved, shopping continues. Since no information regarding the card can be viewed or recorded by us, third parties are prevented from obtaining this information under any circumstances.

Only you can access and change all the information you provide when becoming a member. If you keep your member login information secure, it is not possible for others to access or change information about you. For this purpose, during membership transactions, operations are carried out within a 128-bit SSL security area. This system is an international encryption standard that cannot be broken.

10. Third-Party Websites and Applications

Our company may provide links to other sites within the website. Our company bears no responsibility for the privacy practices and contents of the sites accessed through these links. Advertisements published on the site belonging to our company are distributed to our users through our advertising business partners. The Privacy Policy Principles in this agreement relate only to the use of our company's mobile application and website and do not cover third-party websites.

11. E-Mail Security

Never write your credit card number or passwords in e-mails you send to our company for any reason. Information contained in e-mails may be seen by third parties. Our company cannot guarantee the security of information transmitted from your e-mails under any circumstances.

12. Browser Cookies

Our company may obtain information about users who visit our site or mobile application and users' use of the website by using a technical communication file (Cookie). The technical communication files in question are small text files sent by a website to the user's browser to be stored in the main memory. The technical communication file facilitates the use of the Internet by storing status and preferences about the site.

The technical communication file helps to obtain statistical information about how many people visit the site, for what purpose a person visits the site, how many times they visit and how long they stay on the site, and to dynamically generate advertisements and content from specially designed user pages for users. The technical communication file is not designed to retrieve data or any other personal information from the main memory or your e-mail. Most browsers are initially designed to accept the technical communication file, but users may change the settings so that the technical communication file does not arrive or a warning is given when the technical communication file is sent.

Our company may amend the provisions of this "Privacy Policy" at any time by sending electronic mail to users or publishing it on its website.

If the provisions of the Privacy Policy change, they shall enter into force on the date of publication.

Data Controller: GioEV Şarj İstasyonları İşletmeleri Anonim Şirketi

Address: Merkez, Kelle İbrahim Cd. No:28, 34820 Beykoz/Istanbul

E-mail: info@gioev.com

GioEV Şarj İstasyonları İşletmeleri Anonim Şirketi as; importance is given to the privacy and security of your personal data, and the principles of protecting fundamental rights and freedoms guaranteed by the Constitution, especially the privacy of private life, are observed with utmost sensitivity. In accordance with the Personal Data Protection Law No. 6698, all kinds of information and documents containing all kinds of personal data you have transmitted (name, surname, T.R. Identity No., address, place of birth, date of birth, vehicle brand, model and plate number, etc.) and all kinds of special categories of personal data (health information, biometric and genetic data, appearance and dress, association, foundation, union membership, criminal conviction, data regarding security measures, religious, ethnic and all similar data) may be processed, recorded, stored, updated and preserved for the purpose of continuing services, transferred to third parties, shared and anonymized by GioEV Şarj İstasyonları İşletmeleri Anonim Şirketi as data controller in accordance with the regulations in the relevant law.

GioEV Şarj İstasyonları İşletmeleri Anonim Şirketi takes all necessary administrative and technical measures to protect the personal data processed in accordance with the relevant law and legislation within this entire scope. In accordance with the Personal Data Protection Law No. 6698 (“Law”), personal data are processed lawfully and fairly, and the accuracy of the data is ensured and updated when necessary. Attention is paid to processing data for specific, explicit and legitimate purposes, processing them in connection with, limited to and proportionate to the purposes for which they are processed, and retaining them for the period stipulated in the relevant legislation or required for the purpose for which they are processed. If the processed data are special categories of personal data as defined in the Law; personal data other than health and sexual life data may be processed without seeking the explicit consent of the data subject in cases stipulated by laws. Personal data relating to health and sexual life may be processed without seeking the explicit consent of the data subject only by persons or authorized institutions and organizations under a confidentiality obligation, for the purposes of protecting public health, preventive medicine, medical diagnosis, treatment and care services, and planning and management of health services and financing.

1. Purposes and Legal Grounds for Processing Personal Data

Your personal data are processed within the conditions and purposes specified in Articles 5 and 6 of the Law for use in necessary processes, for the fulfillment, sustainability, execution and development of our activities in accordance with all information and documents and all relevant laws and regulations, for promotional, campaign and similar activities regarding services and activities, invitations, notification of new applications, fulfillment of executed or to-be-executed contracts, planning, statistics, satisfaction surveys, ensuring security, e-mail environment, e-mails, e-newsletter memberships, social media posts, printed forms filled out at organized events, personal data collected in recruitment processes when employee candidates send their resumes during face-to-face interviews or written application forms, by submitting digital application forms electronically or via e-mail, cargo and similar methods, or through consultancy firms or telephone and through checks and research confirming the information provided by the candidate, and special categories of personal data collected according to the nature of the work, maintaining the legal and commercial security of persons in business relations, determining and implementing legal and financial affairs and similar commercial and business strategies, carrying out human resources and accounting policies, ensuring physical security and audit, compliance with domestic and international legislation, compliance with information transfer, storage and reporting obligations requested by public institutions or other authorities, and providing you with better and more reliable service and ensuring its uninterrupted continuity.

2. Retention Period of Personal Data

GioEV Şarj İstasyonları İşletmeleri Anonim Şirketi retains personal data only for the period specified in the relevant legislation or required for the purpose for which they are processed. In this context, it first determines whether a period is stipulated in the relevant legislation for the retention of personal data; if a period is determined, it acts in accordance with this period; if no period is determined, it retains personal data for the period required for the purpose for which they are processed. At the end of the period or if the reasons requiring processing cease to exist, personal data are deleted, destroyed or anonymized.

3. Method of Collecting Personal Data

Your Personal Data (such as name-surname, company information, telephone, address or e-mail addresses, vehicle brand, model and plate numbers, etc.) may, by its nature, be collected verbally, in writing or electronically through automatic or non-automatic methods, via our website, mobile application, social media channels, parties with whom we have business relations and/or from whom we receive services that complement our activities, contracted institutions and other similar channels.

Our company may send campaign information, information about new products and promotional offers to its customers and members from time to time. Our members may make any choice regarding whether to receive such information while becoming a member, and may later change this choice from the account information section after logging in as a member, or may notify through the link in the information message sent to them.

Personal information transmitted electronically to our company by our members during the approval process carried out through our company or by e-mail shall not be disclosed to third parties outside the purposes and scope determined by the "Loyalty Agreement" we have concluded with our Members.

In order to identify system-related problems and quickly resolve problems or disputes that may arise regarding the provided service, our company records and uses the IP address of its members. IP addresses may also be used to identify users in a general manner and to collect comprehensive demographic information.

Our company may use the requested information outside the purposes and scope determined by the Loyalty Agreement for direct marketing by itself or by persons with whom it cooperates. Personal information may also be used to contact the user when necessary. Information requested by our company or provided by the user, or information related to transactions made through our company, may be used by our company and persons with whom it cooperates for various statistical evaluations, database creation and market research, without disclosing the identity of our members, also outside the purposes and scope determined by the "Loyalty Agreement".

Our company undertakes to keep confidential information strictly private and confidential, to regard this as a confidentiality obligation, and to take all necessary measures and show due care to ensure and maintain confidentiality and to prevent all or any part of confidential information from entering the public domain or being used without authorization or disclosed to a third party.

4. Transfer of Personal Data

Your Personal Data may be transferred, within the framework of the activities of GioEV Şarj İstasyonları İşletmeleri Anonim Şirketi, for the fulfillment of its purposes, determination and implementation of strategy, ensuring the execution of human resources policies, to company officials, shareholders, employees, business partners, persons or third parties from whom services are received, legal, financial and tax advisors, auditors, consultants, institutions or persons, authorities such as SSI, ministries, judicial authorities and all public institutions and organizations legally authorized, and/or abroad within the framework of the conditions and purposes set forth in Articles 8 and 9 of the Law. In the event of transfer abroad, the foreign country to which the personal data will be transferred must have adequate protection; if adequate protection is not available, compliance shall be ensured with the requirements that the data controllers in Türkiye and in the relevant foreign country undertake adequate protection in writing and that the permission of the Personal Data Protection Authority is obtained.

5. Rights of the Personal Data Subject Pursuant to Article 11 of the Law

As a personal data subject, you have the right to request the following matters from GioEV Şarj İstasyonları İşletmeleri Anonim Şirketi.

1. To learn whether personal data are processed,
2. To request information if personal data have been processed,
3. To learn the purpose of processing personal data and whether they are used in accordance with their purpose,
4. To know the third parties to whom personal data are transferred domestically or abroad,
5. To request correction if personal data have been processed incompletely or incorrectly,
6. To request correction if personal data have been processed incompletely or incorrectly and to request notification of the transaction made in this scope to third parties to whom the personal data have been transferred,
7. Although processed in accordance with the Law and other relevant laws, to request deletion or destruction of personal data if the reasons requiring their processing cease to exist, and to request notification of the transaction made in this scope to third parties to whom the personal data have been transferred,
8. To object to the occurrence of a result against the person by analyzing the processed data exclusively through automated systems,
9. To request compensation for damages if the person suffers damage due to unlawful processing of personal data
10. The accuracy and up-to-date preservation of the information/data you share is important in terms of exercising the rights held over the data within the meaning of the Law and other relevant legislation, and the responsibilities arising from providing incorrect information belong entirely to you.

We reserve the right to request from you the costs we will incur in fulfilling your requests according to the tariff regulated in Article 13 of the Law titled Application to the Data Controller.

6. Cases Where Personal Data May Be Processed Without Seeking the Explicit Consent of the Data Subject Pursuant to the Law

1. It is expressly provided for by laws.
2. It is mandatory for the protection of the life or physical integrity of the person or another person who is unable to express consent due to actual impossibility or whose consent is not legally valid.
3. It is necessary to process personal data belonging to the parties to a contract, provided that it is directly related to the establishment or performance of the contract.
4. It is mandatory for the data controller to fulfill its legal obligation.
5. The data have been made public by the data subject themselves.
6. Data processing is mandatory for the establishment, exercise or protection of a right.
7. Provided that it does not harm the fundamental rights and freedoms of the data subject, data processing is mandatory for the legitimate interests of the data controller.

7. Principles Specified in the Law Regarding the Protection and Processing of Personal Data

GioEV Şarj İstasyonları İşletmeleri Anonim Şirketi acts in accordance with the Constitution, the general principles set forth in the Law and other relevant legislation regarding the protection and processing of personal data; and also complies with the following principles with great care and diligence:

1. Personal data processing activities must comply with the law and the rules of fairness.
2. Ensuring that personal data are accurate and, where necessary, up to date.
3. Processing personal data for specific, explicit and legitimate purposes.
4. Being relevant, limited and proportionate to the purposes for which they are processed.
5. Retaining them for the period stipulated in the relevant legislation or required for the purpose for which they are processed.

8. Methods for Personal Data Subjects to Exercise Their Rights / Application Method

If the data subject requests information on the matters stated in section E above, the application shall be answered within thirty days at the latest following a written application to our institution as data controller. If the transaction also requires a cost, we reserve the right to request the fees in the tariff determined by the Personal Data Protection Authority.

9. Credit Card Security

Our company prioritizes the security of credit card holders who shop through our mobile application or other channels. Your credit card information is not stored in our system in any way.

There are two things you need to pay attention to in order to understand that you are on a secure site when you enter the transaction process. One of them is a key or lock icon in the bottom line of your browser. This indicates that you are on a secure internet page and all your information is protected by encryption. This information is used only depending on the sales transaction process and in line with your instructions. Information regarding the credit card used during shopping is encrypted with the 128-bit SSL (Secure Sockets Layer) protocol independently of our mobile application and websites and transmitted to the relevant bank for inquiry. If the availability of the card is approved, shopping continues. Since no information regarding the card can be viewed or recorded by us, third parties are prevented from obtaining this information under any circumstances.

Only you can access and change all the information you provide when becoming a member. If you keep your member login information secure, it is not possible for others to access or change information about you. For this purpose, during membership transactions, operations are carried out within a 128-bit SSL security area. This system is an international encryption standard that cannot be broken.

10. Third-Party Websites and Applications

Our company may provide links to other sites within the website. Our company bears no responsibility for the privacy practices and contents of the sites accessed through these links. Advertisements published on the site belonging to our company are distributed to our users through our advertising business partners. The Privacy Policy Principles in this agreement relate only to the use of our company's mobile application and website and do not cover third-party websites.

11. E-Mail Security

Never write your credit card number or passwords in e-mails you send to our company for any reason. Information contained in e-mails may be seen by third parties. Our company cannot guarantee the security of information transmitted from your e-mails under any circumstances.

12. Browser Cookies

Our company may obtain information about users who visit our site or mobile application and users' use of the website by using a technical communication file (Cookie). The technical communication files in question are small text files sent by a website to the user's browser to be stored in the main memory. The technical communication file facilitates the use of the Internet by storing status and preferences about the site.

The technical communication file helps to obtain statistical information about how many people visit the site, for what purpose a person visits the site, how many times they visit and how long they stay on the site, and to dynamically generate advertisements and content from specially designed user pages for users. The technical communication file is not designed to retrieve data or any other personal information from the main memory or your e-mail. Most browsers are initially designed to accept the technical communication file, but users may change the settings so that the technical communication file does not arrive or a warning is given when the technical communication file is sent.

Our company may amend the provisions of this "Privacy Policy" at any time by sending electronic mail to users or publishing it on its website.

If the provisions of the Privacy Policy change, they shall enter into force on the date of publication.

Data Controller: GioEV Şarj İstasyonları İşletmeleri Anonim Şirketi

Address: Merkez, Kelle İbrahim Cd. No:28, 34820 Beykoz/Istanbul

E-mail: info@gioev.com