PERSONAL DATA PROTECTION NOTICE
Pursuant to the Law No. 6698 on the Protection of Personal Data (“LPPD”), your personal data may be processed by us, as the data controller, within the scope described below.
1. PURPOSE OF PROCESSING PERSONAL DATA
Your collected personal data may be processed for the following purposes:
- Customizing and recommending the products and services offered according to the preferences, usage habits, and needs of the relevant individuals,
- Preparing the necessary records and documents as required by the relevant legislation,
- Following up on requests and complaints and improving service quality,
- Managing customer relationship processes,
- Ensuring that activities carried out electronically (internet/mobile, etc.) or physically comply with legislation and internal policies/procedures,
- Fulfilling the obligation to provide information to relevant public institutions and organizations,
- Fulfilling legal obligations,
- Managing security processes,
within the scope of Articles 5 and 6 of the LPPD.
2. PROCESSED PERSONAL DATA
The following categories of personal data provided to us or obtained automatically may be processed:
- Identity Information (name, surname, T.R. ID number, etc.)
- Contact Information (phone number, e-mail address, postal address, etc.)
- Transaction Security Information (IP address, login-logout times, password data, etc.)
- Location Information
- Customer Transaction Information (requests, complaints, transaction history, etc.)
- Visual and Audio Records (camera recordings, call center records, etc.)
- Financial Information (bank account details, billing information, etc.)
- Legal Transaction Information (court decisions, enforcement proceedings, etc.)
- Special Categories of Personal Data (health data, biometric data, etc. — processed only with explicit consent and in cases of legal obligation)
3. TRANSFER OF PERSONAL DATA
Your personal data collected may be transferred, in line with the above purposes, to the following parties:
- Authorized public institutions and organizations,
- Tax offices, the Social Security Institution, and similar administrative authorities,
- Business partners, suppliers, and third-party service providers,
- Firms providing legal consultancy and audit services,
- Information technology infrastructure providers,
in accordance with Articles 8 and 9 of the LPPD.
4. METHOD AND LEGAL BASIS OF COLLECTING PERSONAL DATA
Your personal data may be collected through various methods such as:
- Transactions made through our website, mobile applications, and social media accounts,
- Calls to our call center and email correspondence,
- Physical forms or contracts,
- Camera systems,
- Applications made through electronic platforms.
Personal data are processed based on the legal grounds stated in Article 5 of the LPPD, including:
- It is explicitly prescribed by law,
- It is necessary for the establishment or performance of a contract,
- It is necessary for the data controller to fulfill its legal obligations,
- It is necessary for the establishment, exercise, or protection of a right,
- It is necessary for the legitimate interests of the data controller provided that it does not harm the fundamental rights and freedoms of the data subject,
Explicit consent of the data subject.
5. YOUR RIGHTS UNDER THE LPPD
Pursuant to Article 11 of the LPPD, you have the following rights regarding your personal data:
- To learn whether your personal data are being processed,
- To request information if your personal data have been processed,
- To learn the purpose of processing and whether your personal data are used in accordance with that purpose,
- To know the third parties to whom your personal data are transferred, whether domestically or abroad,
- To request correction of your personal data if it is incomplete or inaccurate,
- To request deletion or destruction of your personal data under Article 7 of the LPPD,
- To request that correction, deletion, or destruction be notified to third parties to whom your personal data have been transferred,
- To object to the occurrence of any result that is to your detriment by means of analysis of your personal data exclusively through automated systems,
- To request compensation for damages arising from unlawful processing of your personal data.
6. METHOD OF APPLICATION
You may submit your requests regarding your rights under the LPPD to us in writing, together with documents verifying your identity, or by other methods determined by the Personal Data Protection Board. Your applications will be concluded as soon as possible and within thirty (30) days at the latest, depending on the nature of your request.