In mission-critical infrastructure, enclosure integrity is not a detail — it is a risk management strategy.
Built for environments where reliability cannot be compromised.
GERSAN ELEKTRİK TİC. VE SAN. A.Ş. (hereinafter referred to as “Gersan”) has prepared this text to inform its employees, customers, suppliers, visitors, partners, business associates, and all persons related to Gersan about the collection, processing, and lawful protection of all kinds of personal data in accordance with Law No. 6698 on the Protection of Personal Data, and to inform the data subjects about their rights under the relevant legislation.
It is hereby stated for the information of data subjects that the personal information provided to Gersan may be recorded, stored, updated, and transferred to the persons and institutions listed herein within the limits and conditions stated in this text and for the purposes specified.
a-) Collection, Processing and Purpose of Personal Data
Your personal data is collected by Gersan directly from the data subjects, from sources where you have consented to the sharing of your personal data, or from publicly available sources, verbally, physically, or electronically, based on various legal grounds specified in this text; and is collected for the purpose of conducting our activities. The personal data collected on these legal grounds may also be processed and transferred within the scope of the personal data processing conditions and purposes stated in Articles 5 and 6 of the Law on the Protection of Personal Data and for the purposes indicated in section (b) of this Information Text.
The personal data collected will be processed within the scope of the conditions and purposes of personal data processing specified in Articles 5 and 6 of the KVKK, for the purposes of ensuring the physical, legal, and commercial security of Gersan and its employees; ensuring the implementation of Gersan’s human resources policies; fulfilling occupational health and safety requirements; compliance with the Labor Law and regulations concerning the operation of businesses; monitoring and tracking employee attendance and performance as required by law; and determining and implementing the employer’s commercial and business strategies.
b-) To Whom and For What Purpose Personal Data May Be Transferred
The collected personal data may be transferred to persons or institutions authorized by law and within the framework of the data processing conditions and purposes set out in Articles 8 and 9 of the Law, for the purposes of carrying out Gersan’s commercial activities in accordance with the legislation and company policies and procedures; ensuring the legal and commercial security of Gersan and persons related to Gersan; ensuring the implementation of Gersan’s human resources policies; fulfilling occupational health and safety requirements; compliance with the Labor Law and regulations concerning the operation of businesses; monitoring and tracking employee attendance and performance as required by law; determining and implementing Gersan’s commercial and business strategies; and to the extent required for data security, necessary precautions are taken and data is stored for the required period. Such data may be transferred to regulatory and supervisory authorities, relevant public institutions, professional organizations and similar entities, authorized public and/or private legal entities requesting data within their legal authority and for limited purposes; domestic affiliates directly/indirectly; consultants; auditors; and/or service providers.
c-) Rights of the Personal Data Owner under Article 11 of the KVKK
As data owners, if you submit your requests regarding your rights via the methods described below in this Information Text, Gersan will conclude the request free of charge within thirty days at the latest, depending on the nature of the request. However, if a fee tariff is prescribed by the Personal Data Protection Board and/or legislation, Gersan will collect the fee in accordance with the specified tariff. Real persons whose personal data are processed have the following rights under Article 11 of the KVKK:
Pursuant to the first paragraph of Article 13 of the KVKK, to exercise the above rights, you must submit your requests in writing or by other methods determined by the Personal Data Protection Board, with the information and documents specified in Article 5 of the Regulation on Procedures and Principles Regarding the Application to the Data Controller (in case of amendment or repeal of this regulation, with the documents determined in the new legislation replacing this Regulation) to Gersan. Your application must be submitted to Gersan in writing. In this context, the channels and procedures for submitting written applications to Gersan within the scope of Article 11 of the KVKK are explained below.
To exercise the rights specified above, please submit your request indicating the right you wish to exercise under Article 11 of the KVKK together with explanations regarding your request, by personally delivering it with your identity documents to the address İstanbul Anadolu Yakası Organize Sanayi Bölgesi Gazi Bulvarı No:39 34953 Tuzla / ISTANBUL, via notary, or by other methods specified in the KVKK, or by submitting it with a secure electronic signature at gersanusa.com.
In mission-critical infrastructure, enclosure integrity is not a detail — it is a risk management strategy.
Built for environments where reliability cannot be compromised.