Learn More +90 850 335 0634
Learn More +90 850 335 0634

Investa Energy – Personal Data Protection Policy

Privacy Policy & Personal Data Protection Notice

(Prepared in compliance with the Turkish Personal Data Protection Law No. 6698 “KVKK” and the EU General Data Protection Regulation “GDPR”)

1. Identity of the Data Controller

This Privacy Policy and Personal Data Protection Notice (“Policy”) has been prepared by Investa Enerji İç ve Dış Ticaret A.Ş. (“Company” or “Investa Energy”) in its capacity as Data Controller, to inform data subjects about the collection, processing, storage, and protection of their personal data.

Company Name: Investa Enerji İç ve Dış Ticaret A.Ş.
Address: Gülbahar Mah. Büyükdere Cad. Bengün Plaza No: 107/9 34394 Şişli / İSTANBUL / TÜRKİYE
Trade Registry No: 1040397
Tax Office / No: Zincirlikuyu Tax Office / 478 119 7772
Website: www.investaenergy.com
E-mail: info@investaenergy.com
Phone: +90 850 335 0634

2. Purposes of Processing Personal Data

Your personal data is processed in compliance with KVKK, GDPR, and other applicable data protection laws for the following purposes:

  • Conducting our business operations and delivering services

  • Managing and executing contractual processes

  • Customer relationship management and handling customer requests

  • Determining and implementing our commercial and business strategies

  • Carrying out financial transactions and invoicing processes

  • Complying with legal obligations and regulatory requirements

  • Managing promotion, marketing, and campaign activities related to our products and services

  • Evaluating job applications and managing human resources processes

  • Ensuring internal security and operational continuity

3. Categories of Processed Personal Data & Collection Methods

Categories of personal data we process include:

  • Identity Information: Name, surname, Turkish ID number, date of birth, etc.

  • Contact Information: Phone number, e-mail address, mailing address, etc.

  • Financial Information: Bank account details, billing and payment data, etc.

  • Customer Transaction Information: Requests, complaints, purchase history, customer support records, etc.

  • Website Usage Data: Cookies, IP address, browser type, device information, etc.

Collection Methods:
We collect personal data directly from you via:

  • Forms on our website

  • E-mail and telephone communications

  • Social media interactions

  • In-person meetings and service agreements

  • Automated systems such as cookies and analytics tools

4. Legal Basis for Processing

Your personal data is processed based on the following legal grounds:

  • Your explicit consent

  • Necessity for the performance of a contract

  • Compliance with legal obligations

  • Our legitimate interests, provided they do not override your fundamental rights and freedoms

5. Technical and Administrative Measures

We implement appropriate technical and organizational measures to ensure the security of your personal data, including but not limited to:

  • Encryption and secure data storage

  • Firewalls and intrusion prevention systems

  • Access control and authorization procedures

  • Regular internal security audits

  • Employee data protection training programs

6. Special Categories of Personal Data

We do not process special categories of personal data (such as health information, biometric data, or criminal records) unless required by law and with your explicit consent. When such processing is necessary, additional security measures are applied.

7. Data Retention & Deletion

Your personal data is stored only for as long as necessary to fulfill the purposes outlined in this Policy and in accordance with legal retention periods.
When the retention period expires, data will be securely deleted, destroyed, or anonymized.

8. International Data Transfers

Your personal data may be transferred to service providers located outside Türkiye (e.g., cloud storage, CRM, and marketing platforms). In such cases, data transfers are carried out in compliance with KVKK and GDPR requirements, ensuring adequate protection levels through appropriate safeguards (e.g., Standard Contractual Clauses).

9. Cookies & Tracking Technologies

Our website uses cookies and similar technologies to enhance your browsing experience.
You may disable cookies through your browser settings. For more details, please see our Cookie Policy.

10. Your Rights

Under KVKK and GDPR, you have the right to:

  • Learn whether your personal data is processed

  • Request information on how your data is processed

  • Learn the purposes of processing and whether it is used accordingly

  • Know the third parties to whom your data is transferred domestically or abroad

  • Request correction of incomplete or inaccurate data

  • Request deletion or destruction of your personal data under applicable laws

  • Request notification of corrections or deletions to third parties

  • Object to automated decision-making processes that may affect you

  • Request compensation for damages in case of unlawful processing

You can exercise these rights by contacting us at info@investaenegy.com.

11. Updates to This Policy

This Policy may be updated from time to time to reflect changes in our practices or legal requirements. The latest version will always be available on our website.

Issued and published by Investa Enerji İç ve Dış Ticaret A.Ş.