PDPP Information Text

CanGaz Group Personal Data Protection Policy (PDPP)

CanGaz Group Personal Data Protection Policy (PDPP)

In accordance with the Law on the Protection of Personal Data No. 6698 (PDPP), your personal data will be processed by our Company, in its capacity as Data Controller, in the framework explained below, in connection with business purposes, by being used, recorded, stored, updated, transferred, and/or classified. In this context, our Company takes all technical and administrative measures to ensure an appropriate level of security to prevent the unlawful processing of your personal data, to prevent unlawful access to it, and to ensure its preservation, in accordance with the laws and regulations established for the protection of personal data, primarily to protect the privacy of personal life and the fundamental rights and freedoms of individuals.

The target audience of this text includes all real persons whose personal data are processed by our Company, excluding our Company employees or job applicants.

The personal data processed in the capacity of data controller includes, but is not limited to, the following;

Name, surname, Turkish ID number, address, phone number, email address, signature, physical space/security video recording, call center/service quality voice recording, bank account number, cookie records.

Purposes and legal reasons for the processing of personal data;

Your personal data shared by you;


  • To benefit you and/or the institutions and organizations you represent from the products and services offered by our company, necessary activities will be carried out, including but not limited to the determination and implementation of our company's commercial and business strategies, conducting marketing activities, and carrying out business development and planning activities.
  • The execution of administrative operations related to communication carried out by our company.
  • Ensuring the physical security and supervision of the locations used by our company.
  • Establishing relationships with business partners/customers/suppliers (authorized persons or their employees).
  • Ensuring the contractual requirements and financial reconciliation regarding the products and services offered together with our business partners, suppliers, or other third parties.
  • The execution of our company's human resources policies.
  • Processing will be carried out for the purpose of searching our company or
  • using the website and/or participating in fairs, seminars, or organizations organized by our company.

Method of collection and storage of personal data;

Your personal data shared with our company may be collected verbally, in writing, or electronically through automatic or non-automatic methods, offices, branches, the website, social media platforms, mobile applications, and similar means. Your personal data will be stored in electronic and/or physical environments. Our company implements the necessary business processes and technical security infrastructure developments to ensure that your personal data, obtained and stored by us, is not exposed to unauthorized access, manipulation, loss, or damage in the environments where it is stored.

Your personal data will be processed with all necessary information security measures, provided that it is not used for purposes and scope other than those communicated to you, and will be stored for the legal retention period or, if no such period is specified, for as long as required by the purpose of processing. At the end of this period, your personal data will be removed from our data flows through deletion, destruction, or anonymization methods.

Transfer of Personal Data;

Your personal data may be transferred within the framework of laws and other regulations and for the stated purposes to:


  • Companies and representatives authorized to act on behalf of our company,
  • Regulatory and supervisory institutions, public institutions or organizations authorized to explicitly request your personal data under the applicable laws,
  • Business partners, supplier and contractor companies, banks, credit risk and financial institutions, and other real or legal persons within the specified purposes.
  • Tax and similar advisors, mandatory individuals related to legal follow-up processes, institutions and organizations, and third parties from whom we receive consultancy, including auditors, may be transferred to business partners, third parties providing services, authorized persons and organizations, both domestically and internationally, for the purposes mentioned above, without limitation.

Your rights under Article 11 of the PDPP

By applying to our Company, you have the right to learn whether your personal data is being processed;

  • Request information if it has been processed;
  • Learn the purpose of processing and whether it is being used in accordance with that purpose;
  • Know the third parties to whom it has been transferred domestically/internationally;
  • Request correction if it has been processed incompletely/incorrectly;
  • Request deletion/destruction within the framework of the conditions stipulated in Article 7 of the PDPP;
  • Request notification of the transactions carried out in accordance with subparagraphs (e) and (f) above to the third parties to whom it has been transferred;
  • Object to the emergence of a result against you due to analysis carried out exclusively by automated systems;
  • Request compensation for damages in case you suffer harm due to unlawful processing.

According to the first paragraph of Article 13 of the PDP Law, you can submit your request to exercise the rights mentioned above to our Company in writing or through other methods determined by the Personal Data Protection Board.

You can personally deliver your request letter along with the necessary information to identify your identity in order to exercise the rights mentioned above, or you can send it through a notary or other methods determined by the Personal Data Protection Authority.

ON SOCIAL NETWORKS