INFORMATION TEXT REGARDING THE PROCESSING OF PERSONAL DATA
The Law on the Protection of Personal Data No. 6698 was published in the Official Gazette on April 7, 2016, with issue number 29677 and entered into force. The law, prepared by considering international documents, comparative legal practices, and the needs of our country, aims to process and protect personal data in accordance with modern standards. The purpose of the Law is to regulate the conditions for processing personal data, protect the fundamental rights and freedoms of individuals in the processing of personal data, and set out the obligations and procedures that natural and legal persons processing personal data must comply with.
Our company is obliged to comply with the Law on the Protection of Personal Data No. 6698, and all personal data processed within our business activities is subject to this law.
General Principles in the Processing of Personal Data
Our company complies with the general principles outlined in the Law No. 6698 regarding the processing of personal data. Our general principles for processing personal data are as follows:
- Complying with the law and fairness,
- Being accurate and up to date when necessary,
- Processing for specific, clear, and legitimate purposes,
- Being relevant, limited, and proportional to the purposes for which they are processed,
- Retaining data for as long as necessary for the purposes for which they are processed or as required by law.
Your personal data may be collected by our company through automatic or non-automatic methods, depending on the service, product, or commercial activity provided by us, and may be collected through means such as our company offices, branches, dealers, call centers, website, social media platforms, mobile applications, and other similar tools, either orally, in writing, or electronically.
Additionally, your personal data may be processed when you contact our call center, visit our website, or participate in training sessions, seminars, events, and meetings organized by our company.
Legal Basis for Collecting Personal Data
Your personal data is collected in verbal, written, or electronic form for the purposes outlined above in order to offer our products and services within the framework of the applicable legal regulations and to fulfill the legal obligations and responsibilities of our company in an accurate and complete manner. The personal data collected for this legal reason may be processed and transferred within the framework of the data processing conditions and purposes specified in Articles 5 and 6 of the Law on the Protection of Personal Data.
Personal data is used by our company for the following purposes:
- Improving the services offered, developing new services, and informing customers about them,
- Sending commercial electronic communications (for customers and potential customers who have given consent) regarding campaigns and promotions,
- Resolving customer complaints and issues,
- Conducting statistical evaluations and market research,
- Defining and implementing the company’s commercial and business strategies,
- Managing relationships with partner businesses and merchants,
- Monitoring accounting and payment transactions,
- Legal processes and compliance with regulations,
- Responding to requests for information from administrative and judicial authorities,
- Planning company’s internal reporting and business development activities,
- Financial control, reporting, and legal notifications,
- Managing internal control and auditing activities,
- Ensuring information and transaction security and preventing malicious use,
- Ensuring the data is accurate and up to date, and making necessary adjustments as needed for all the processes mentioned above.
Transfer of Processed Personal Data
Our company may share your personal data with domestic and international business partners, member merchants, banks, financial institutions, independent auditing firms, etc., in accordance with the provisions of the Law on Payment and Securities Settlement Systems, Payment Services, and Electronic Money Institutions, and other related regulations. Stored data may be transferred within the data processing conditions and purposes specified in Articles 8 and 9 of the Law on the Protection of Personal Data.
Records and documents related to transactions with our customers must be kept for a certain period as required by legal regulations. If you request the deletion of your personal data, this request will be fulfilled at the end of the period defined by legal regulations, and during this time, your personal data will not be processed except as required by legal obligations, and will not be shared with third parties.
Rights of the Data Subject under Article 11 of the Law on the Protection of Personal Data
As personal data subjects, you may submit your requests regarding your rights, as described below, to our company. We will respond to your requests free of charge within thirty days, depending on the nature of the request. However, if the Personal Data Protection Authority determines a fee, the company will charge according to the tariff established. In this context, personal data subjects have the following rights:
- To learn whether their personal data has been processed,
- To request information regarding their processed personal data,
- To learn the purpose of processing personal data and whether it is used for the intended purposes,
- To know the third parties to whom personal data is transferred, whether domestically or abroad,
- To request the correction of incomplete or inaccurate personal data and to request that the correction be communicated to the third parties to whom the data has been transferred,
- To request the deletion or destruction of personal data when the reasons for processing have ceased to exist, and to request that this be communicated to third parties to whom the data has been transferred,
- To object to the result of the processing of personal data solely through automated systems that are used to analyze the data, leading to a negative result for the data subject,
- To request compensation for damages arising from the unlawful processing of personal data.
Submitting Requests in Accordance with Article 13 of the Law
In accordance with Article 13, Paragraph 1 of the Law on the Protection of Personal Data, you can submit your requests regarding the rights listed above to our company in writing or via other methods determined by the Personal Data Protection Authority. Since the Personal Data Protection Authority has not specified a method at this stage, you are required to submit your requests to our company in writing. The methods and channels for submitting your requests under Article 11 of the Law on the Protection of Personal Data are provided below.
I hope this translation meets your needs! If you need further adjustments or have any additional questions, feel free to ask.