Protection of Personal Data

Information for Our Customers about the Law on Protection of Personal Data

As Ipragaz A.S. and group companies (Ipra Enerji A.S., Yildirim Petrol Tic. ve Nakl. A.S. EVAS Ev Aletleri San. A.S. and/or other companies), considering the safety of our valuable customers, we would like to inform you in line with the "Law on Protection of Personal Data", issued for regulation of the personal data in order to protect the fundamental rights and freedom notably confidentiality of the private life. This information note is delivered to you for all Ipragaz A.S. group companies.

Our Objective:

Our objective is to inform you to ensure your satisfaction as our customers in the most transparent manner about the methods of collecting your personal data, purpose of processing your personal data and your rights regarding this subject.

Pursuant to the Law No 6698 on Protection of Personal Data (LPPD), which entered into force on 7 April 2016, with respect to any type of personal data that you have sent to our Company or collected by our Company in accordance with our business procedures and operations and the special categories of personal data ("Data"), Ipragaz A.S. and group companies, acting as Data Controllers, will be entitled to collect, record, store and keep the personal data and also update, alter, adopt, disclose to the extend allowed by law to third parties, transfer, share, classify, anonymize, and otherwise process such data as stipulated in the Law to continue its services.

Purpose of processing your personal data and the legal grounds

Your personal data is processed to provide the services related to our business activities and to perform, carry out and improve such services including the services we offer as agency/representative, carry out promotional and marketing campaigns and activities in relation to such services and products, perform the requirements of the agreements you and/or we have executed; collect and inquiry information and perform credibility assessments, planning, statistical activities, customer satisfaction activities; ensure safety, comply with the legislation on prevention of money laundering, comply with domestic and international laws and regulations; comply with the requirements of the governmental authorities regarding storing, reporting, and providing information, to offer better and more reliable service to you, develop adequate services and new products for you and to maintain this level of service on uninterrupted basis.

Collection methods of the personal data:

Your personal data is collected in printed form or on electronic environment by the Head Office units, branches, internet site and call center of our Company, public agencies and organizations, the parties which provide services that complement or extend the activities of our Company, contracted entities and support service providers using automatic or non-automatic means.

Persons/entities your personal data may be transferred to:

Your personal data may be transferred to the shareholders and participations of our Company and subsidiaries of the aforesaid; personnel, legal, financial and tax advisors, IT consultants, auditors, and business partners of our Company; consultants, entities and parties which provide services that complement or extend the activities of our Company and support service providers and contracted entities, international or local card payment systems, companies and organizations, governmental authorities such as EMRA, BRSA, CMB, Turkish Central Bank, the Financial Crimes Investigation Board, Banking Association, Small and Medium Industry Development Organization (KOSGEB), Revenue Administration, Undersecretariat of Treasury, SSI, and public organizations and entities such as Ministries, judicial authorities, banks and domestic/international finance organizations, domestic/international merchants, and other third parties that you explicitly give your consent.

Your rights under the Article 11 of the relevant law:

By applying to our Company, you have the right to a) Find out whether or not your personal data has been processed, b) Request information if your personal data has been processed, c) Find out the purpose of processing of your personal data and whether your personal data is used in accordance with this purpose, d) Find out the identities of the third parties in the country or abroad to whom your personal data has been transferred, e) Request rectification in case your personal data is processed incompletely or inaccurately, f) Request deletion or destruction of your personal data within the framework of the conditions set forth under article 7 of the Law, g) Request notification of the operations made as per (e) and (f) above to third parties to whom your personal data has been transferred, h) Object to occurrence of any result that is to your detriment by means of analysis of personal data exclusively through automated systems, i) Request compensation for the damages in case you incur damages due to unlawful processing of your personal data.

We reserve our right to demand from you the expenses our Company incurs for performing your requests in accordance with the tariff given in article 13 of the Law on Protection of Personal Data titled "Application to Data Controller".

Conditions which do not require consent:

According to Article 5/2 of the Law 6698 on Protection of Personal Data, the Company is entitled to use the personal data without obtaining explicit consent if it is expressly permitted by any law; it is necessary to process the personal data of parties of a contract, provided that the processing is directly related to the execution or performance of the contract; it is necessary for compliance with a legal obligation which Ipragaz A.S. and group companies as the data controller are subject to; the relevant information is revealed to the public by the data subject; it is necessary to process the data for the institution, usage, or protection of a right; it is necessary for the legitimate interests of the Company as the data controller, provided that the fundamental rights and freedoms of the data subject are not harmed, and under the exceptions set forth in the LPG Market Law and relevant legislation, the Electricity Market Law and its secondary legislation (Consumer Services Regulation), and article 73/4 of the Banking Law, and

The data which are already published or disclosed to public or which are available in the official registrations or balance sheets and annual reports as per the principle of publicity stipulated in the law or which must be disclosed for informing the public as per requirements of the law, and the Data that Banks must disclose to perform the legal obligations arising out of the legislation they are subject to and/or due to the legal requirements and/or perform the legal obligation to transfer data to the parties which are entitled to request confidential information as stipulated by the law are not subject to the Company’s confidentiality obligation and the Company is authorized to disclose, give, process and transfer such Data without obtaining an additional letter of consent.

Our Obligation to Store the Data by Law:

As per the legislation and in accordance with the Regulation on Procedures and Principles Regarding Accounting Practices of Companies and Storing Documents, our Company is legally obliged to store the information and document which pertain to you. In case you request that your personal data is deleted or destructed, this request will be performed at the end of the said 10-year period.

Our Company will be entitled to anonymize your data even after expiry of the said period for business/marketing analyses and evaluations including risk analyses in order to improve our services and make our services safer in line with legitimate interests of our Company. Your personal data which is not included in the abovementioned scope may be deleted upon your request.

The Data Subjects can exercise these rights by making a written application through one of the methods given below:

• through a notary public and with documents proving their identities,
• By an e-mail sent from their Registered E-Mail Address (REM) to the Registered E-Mail Address (REM) of EVAS (,
• By hand delivery of their application bearing their three signatures and copies of birth certificate