KVKK Privacy Policy

1. Data Controller

EnerjiNova Enerji Mühendislik A.Ş. acts as the data controller for the personal data we process. Our contact information:

2. Personal Data We Collect

We may collect the following categories of personal data:

• Identity Information: Name, surname, national ID number, date of birth
• Contact Information: Email address, phone number, postal address
• Professional Information: Company name, job title, business contact details
• Financial Information: Bank account details (for payment processing), tax information
• Transaction Information: Project details, service requests, quotation history
• Technical Information: IP address, browser type, device information, cookies
• Communication Data: Email correspondence, phone call records, chat logs

3. How We Collect Personal Data

We collect personal data through:

• Contact forms on our website
• Email and phone communications
• Project quotation and service request processes
• Contractual agreements and business transactions
• Meetings and site visits
• Cookies and similar tracking technologies
• Third-party sources (with your consent)

4. Purposes of Processing

We process your personal data for the following purposes:

• Providing energy engineering services (feasibility studies, EPC, O&M)
• Processing service requests and preparing quotations
• Contract execution and project management
• Customer relationship management and communication
• Invoicing, payment processing, and accounting
• Legal compliance and regulatory reporting
• Quality assurance and service improvement
• Marketing communications (with your explicit consent)
• Website analytics and user experience optimization

5. Legal Basis for Processing

We process your personal data based on the following legal grounds under KVKK Article 5:

• Explicit consent (for marketing communications and cookies)
• Contractual necessity (to fulfill our contractual obligations)
• Legal obligation (tax, accounting, and regulatory compliance)
• Legitimate interests (fraud prevention, security, business analytics)

6. Data Sharing and Transfer

We may share your personal data with:

• Service Providers: IT infrastructure, cloud hosting, CRM systems (under data processing agreements)
• Business Partners: Equipment suppliers, subcontractors (only as necessary for project execution)
• Legal Authorities: Tax authorities, courts, regulators (when legally required)
• Financial Institutions: Banks (for payment processing)
• Professional Advisors: Lawyers, auditors, consultants (under confidentiality obligations)

International Transfers: If we transfer data outside Turkey, we ensure adequate safeguards are in place (standard contractual clauses, adequacy decisions, or your explicit consent).

7. Data Retention

We retain your personal data only as long as necessary for the purposes for which it was collected:

• Contractual Data: Duration of contract + 10 years (legal requirement)
• Accounting Records: 10 years (tax law requirement)
• Marketing Consent: Until consent is withdrawn
• Website Cookies: As specified in our Cookie Policy
• Correspondence: 3 years after last communication

After the retention period expires, we securely delete or anonymize your data.

8. Your Rights Under KVKK

Under KVKK Article 11, you have the right to:

• Learn whether your personal data is being processed
• Request information about the processing if it has been processed
• Learn the purpose of processing and whether data is used accordingly
• Know the third parties to whom data is transferred domestically or abroad
• Request correction of incomplete or inaccurate data
• Request deletion or destruction of data under KVKK Article 7 conditions
• Request notification of correction/deletion/destruction to third parties
• Object to adverse results arising from automated processing
• Request compensation for damages arising from unlawful processing

9. How to Exercise Your Rights

To exercise your rights, you can submit a written request to:

We will respond to your request within 30 days, free of charge. If the request requires additional costs, we may charge a fee as permitted by the Personal Data Protection Board.

10. Data Security

We implement technical and organizational measures to protect your data:

• SSL/TLS encryption for data transmission
• Access controls and authentication mechanisms
• Regular security audits and penetration testing
• Employee training on data protection
• Secure data backup and disaster recovery procedures
• Physical security measures for our offices and servers

11. Cookies

Our website uses cookies to improve user experience and analyze website traffic. For detailed information, please refer to our separate Cookie Policy. You can control cookies through your browser settings.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last Updated" date. We encourage you to review this policy periodically.

13. Contact Us

If you have questions about this Privacy Policy or our data protection practices, please contact us: