Legal Information

KVKK Privacy Notice

1. Data controller

The data controller is Frekans Elektrik Enerjisi Toptan Satış İthalat İhracat Anonim Şirketi, Mahatma Gandhi Caddesi 89/5, Gaziosmanpaşa, Çankaya / Ankara, operating under supply licence ETS/3053-1/1795 issued by the Energy Market Regulatory Authority (EMRA).

2. Categories of personal data

We work mainly with legal entities and process personal data of their officers, employees and representatives only:

• Identity: name, surname, title, company represented.
• Contact: business email, phone number, address.
• Customer transaction: asset type, installed capacity (MW/MWh), project stage, services of interest and request details; for supply requests, consumer type, consumption, meter and installation details and uploaded electricity bills.
• Professional experience: CV, education and work history (career applications only).
• Request and complaint management: content of requests, correspondence and outcomes.
• Transaction security: IP address, timestamps, browser and device data, server logs.
• Marketing: commercial message and cookie preferences.

Special categories of data

We do not request special categories of personal data listed in Article 6 of the KVKK. Please do not include such data in your CV or messages; unsolicited special category data is not assessed and is destroyed in line with the law.

3. Purposes

• Responding to enquiries and preparing preliminary assessments of your asset
• Preparing electricity supply offers, analysing consumption profiles and providing the pre-contract information required by regulation
• Pre-contract discussions, entering into and performing contracts
• Market participation, registration, balancing and settlement with EPİAŞ, TEİAŞ, distribution companies and EMRA
• Compliance with electricity market, tax and commercial legislation
• Recruitment and candidate assessment
• Recording and resolving requests and complaints
• Information security, operating, measuring the use of and improving the website, and prevention of misuse
• Establishing, exercising and defending legal claims
• With your consent, information on our services, market bulletins and events

4. Legal grounds

Data is processed on the grounds in Article 5(2) of the KVKK: explicit provision in law (including Electricity Market Law No. 6446, Turkish Commercial Code No. 6102 and Tax Procedure Law No. 213), performance of a contract, compliance with legal obligations, establishment or defence of rights, and our legitimate interests. Where none applies, for example non-essential cookies, commercial messages to individuals or keeping your CV in a talent pool, we rely on your explicit consent, which you may withdraw at any time.

5. Collection

Data is collected through website forms, email, phone, meetings, business cards, cookies and cookieless visit statistics, by partly automated or non-automated means.

6. Transfers

Data may be transferred, limited to the purposes above, to EMRA, EPİAŞ, TEİAŞ, distribution companies and other authorities; courts and enforcement offices; auditors and legal and financial advisers; hosting, email and IT service providers; and business partners under contract. Transfers abroad are made under Article 9 of the KVKK as amended by Law No. 7499 and the related Regulation, relying on an adequacy decision or appropriate safeguards such as standard contracts, which are notified to the Authority within five business days.

7. Retention and destruction

• Commercial books, contracts and correspondence: 10 years (Turkish Commercial Code)
• Tax records: 5 years (Tax Procedure Law)
• Enquiries not resulting in a contract: 2 years from last contact
• Unsuccessful job applications: 1 year, or 2 years with consent
• Security logs: 2 years

Data is then deleted, destroyed or anonymised under the applicable Regulation, at the latest in the six-monthly periodic destruction cycle. Records needed to protect our rights are retained for the applicable limitation periods.

8. Your rights under Article 11

You may ask whether your data is processed and request information about it; learn the purpose and whether it is used accordingly; know the third parties it is transferred to in Türkiye or abroad; request correction, deletion or destruction and notification of these to recipients; object to adverse results arising solely from automated analysis; and claim compensation for damage caused by unlawful processing.

9. How to apply

Applications may be submitted in writing with a wet signature to Mahatma Gandhi Caddesi 89/5, Gaziosmanpaşa, Çankaya / Ankara, to our registered KEP address with a secure electronic or mobile signature, or from an email address registered in our records to bilgi@frekansenerji.com. Applications are answered free of charge within 30 days; where a cost arises, the fee set by the Board may be charged. You may lodge a complaint with the Personal Data Protection Board under Article 14 of the KVKK.

Privacy and Information Security Policy

Confidentiality of commercial information

Asset, generation, metering, position, bid and settlement data shared with us is treated as a trade secret and shared only with employees who need it, under confidentiality undertakings. It is not disclosed to third parties except where required by electricity market legislation (EPİAŞ, TEİAŞ, distribution companies, EMRA), by judicial or administrative authorities, or as provided in our contracts.

Technical and organisational measures

• TLS encryption of website and form traffic
• Role-based access, multi-factor authentication and access logging
• Regular backups, security updates and vulnerability scans
• Confidentiality undertakings and periodic training for staff
• Data processing and confidentiality clauses with service providers
• Physical security of environments holding personal data

Data breaches

Breaches are notified to the Personal Data Protection Board without delay and within 72 hours at the latest, and to affected persons as soon as reasonably possible.

Fraud warning

Frekans never asks for passwords, verification codes or card details by email, phone or message. Changes to our bank details are communicated only by signed official letter and should be verified through a channel known to you before acting on them. Please report suspicious messages to bilgi@frekansenerji.com or +90 312 472 57 81. Frekans is not liable for losses arising from fraudulent communications by third parties impersonating the company.

User responsibility

No transmission over the internet can be guaranteed as fully secure. Users are responsible for the security of their own devices and accounts, the accuracy of information they submit, and having authority to share third-party information.

Vulnerability disclosure

If you find a security vulnerability, please report it to bilgi@frekansenerji.com without disclosing or exploiting it. This does not authorise any act constituting a cybercrime under the Turkish Penal Code.

Cookie Policy

Types of cookies

• Essential and functional: needed for the site to work and to remember your preferences. Not subject to consent.
• Analytics: measure visits. Used only with your explicit consent.
• Marketing: used for advertising and retargeting. Used only with your explicit consent.

Cookies used on this site

As of the effective date, no analytics or marketing cookies are used.

• fk-locale — functional, first-party, local storage. Remembers your language choice. Kept until you clear it and not sent to us.
• fk-cookie-consent — essential, first-party, local storage. Records your cookie choice and its date. Kept until you clear it and not sent to us.
• Third-party content providers — some videos and images load from external servers, which may process technical data such as your IP address under their own policies.

Cookieless visit statistics

To understand which pages are read and where visitors come from, we keep visit statistics with Rybbit, open-source software running on a server we manage in Germany. This measurement uses no cookies and leaves no lasting identifier in your browser.

Collected: the page visited and its address, the referring site, external links clicked when leaving the site, browser, operating system, device type, screen size and language setting. Your IP address is used only momentarily to determine country and city, and is not stored. To group page views on the same day into one visit, a one-way code is derived from your IP address and browser details and renewed every day; it cannot identify you or link your visits across days.

This data is not shared with third parties or used for advertising. It relies on our legitimate interest in operating and improving the site and, as it is not an analytics cookie, does not depend on your cookie choice.

If analytics or marketing cookies are introduced, this policy will be updated and they will not be activated without your consent through the cookie preferences panel. You can change or withdraw your choice at any time via “Cookie preferences” in the footer.

Managing cookies

You can delete or block cookies in your browser settings (Chrome, Safari, Firefox, Edge, Opera). Blocking essential cookies may affect site functions.

Commercial Electronic Messages

Consent

Commercial messages are sent to individuals only with prior consent recorded in the Message Management System (İYS). Under the Regulation, messages may be sent to tradespeople and merchants without prior consent; they may also opt out at any time.

Opting out

You can opt out free of charge at any time via the link in the message, through İYS (iys.org.tr) or by writing to bilgi@frekansenerji.com. Requests are processed within three business days. Consent and opt-out records are kept for three years after consent ends.

Service messages

Messages relating to the performance of your contract, such as settlement notices, invoices, market operation and imbalance notices and regulatory updates, are not commercial messages and continue regardless of opt-out.

Terms of Use and Legal Notice

Information only

Content on this site is for general information only and is not investment, legal, tax or technical advice, an offer, a commitment or a contract. Only written contracts signed by our authorised representatives bind Frekans.

Market data and illustrative figures

Prices, volumes, capacities and revenue figures are compiled from public sources such as the EPİAŞ Transparency Platform or internal analysis and may be delayed, incomplete or illustrative. Past market results and scenarios do not indicate future results.

Limitation of liability

We take reasonable care over the accuracy of the site but do not warrant that information is complete, error-free or fit for a particular purpose. Subject to Article 115 of the Turkish Code of Obligations (wilful misconduct and gross negligence), Frekans is not liable for any direct or indirect loss arising from use of the site, interruptions, decisions based on its content or third-party links.

Intellectual property

The Frekans name and logo and all text, design, graphics, analysis and software on the site belong to Frekans or its licensors and are protected under Law No. 5846 and Industrial Property Law No. 6769. Apart from short quotations with attribution, content may not be reproduced, distributed, modified or used commercially without written permission.

Prohibited use

Attempts to disrupt or overload the site or bypass security, bulk automated copying, submitting false or unlawful information, and impersonating Frekans or its staff are prohibited and may constitute offences under Articles 243–245 of the Turkish Penal Code and Law No. 5651.

Changes, evidence and jurisdiction

Frekans may amend these texts and the site without notice. Under Article 193 of the Code of Civil Procedure, our books, electronic, server and email records constitute conclusive evidence. These terms are governed by Turkish law; Ankara Central Courts and Enforcement Offices have jurisdiction, without prejudice to consumers’ statutory rights under Law No. 6502.