Disclosure Text on Protection of Personal Data
"This legal information is prepared to fulfill the clarification obligations by TURK Elektronik Para A.Ş., (""Company""), acting as data supervisor as per Communique On Principles And Procedures To Be Followed In Fulfillment Of The Obligation To Inform in accordance with Article no. 10 of Law no. 6698 on the Protection of Personal Data, (""Law"").
What Personal Data We Collect From You
Customer Identity Data, Contact Data and the Financial Information Data are processed within the framework of data processing conditions such as “it is necessary to process the personal data of the parties to the contract provided that it is directly related to the establishment of or the performance under a contract” or “it is mandatory to process data for the legitimate interests of the data controller provided that the relevant person’s fundamental rights and freedoms are protected” as specified in Article 5 of the Law for these purposes: in order to be used in all kinds of products and services provided under the capacity of electronic money institution, to perform the necessary activities by the relevant business units for carrying out the commercial activities of the company and planning the relevant commercial and/or business strategies, conducting business processes and contract processes, for identifying the identities of those carrying out transactions and the beneficiaries of such transactions before the transactions carried out or mediated by the Company. Customer Identity Data, Contact Data, and Financial Information Data are also processed based on the cause of action; “it is mandatory for the data controller to satisfy its legal obligation”, specified in Article 5 of the Law to store, report and communicate the information requested by public institutions such as the BRSA, CBRT, and MASAK for a period of 10 years.
Purpose of Processing of Personal Data
Identity Data, Contact Data, and the Financial Information Data are collected via contact form/campaign form/application form or Company’s call center and processed automatically or by telephone recording, based on causes of action such as “it is necessary to process the personal data of the parties to the contract provided that it is directly related to the establishment of or the performance under a contract” or “it is mandatory to process data for the legitimate interests of the data controller provided that the relevant person’s fundamental rights and freedoms are protected”, specified in Article 5 of the Law.
Your sensitive personal data will be processed based on your explicit consent in order to verify your identity within the scope of the vitality test.
How We Collect Personal Data
he personal data of the aforementioned customers can be transferred to persons or entities permitted by Law No. 6493 and other legislation; BRSA, MASAK, CBRT and including but not limited to relevant public legal entities, our principal shareholder, our direct/indirect domestic affiliates, program partner institutions from whom we receive services and cooperate with to carry out our electronic money issuance activities based on causes of action such as “it is necessary to process the personal data of the parties to the contract provided that it is directly related to the establishment of or the performance under a contract” or “it is mandatory to process data for the legitimate interests of the data controller provided that the relevant person’s fundamental rights and freedoms are protected” as specified in Article 8 of the Law. Such data can be transferred to legal authorities or the law enforcement agencies upon request, based on the cause of action, “it is mandatory for the data controller to satisfy its legal obligation”, specified in Article 8 of the Law. In addition, the aforementioned personal data are transferred abroad provided that the servers used in the technical infrastructure of the electronic mail services of the Company are located overseas, based on the cause of action; “it is necessary to process the personal data of the parties to the contract provided that it is directly related to the establishment of or the performance under a contract”, specified in Article 9 of the Law. Furthermore, provided that the relevant person’s explicit consent is obtained, the Company may transfer such data to third-party service providers for planning and performing the activities necessary for recommending and promoting the products and services provided by the Company by customizing them according to the interests, usage habits and needs of the people, measuring customer satisfaction, increasing the participation in credit campaigns and for researches before and after the advertisements and the launch.
Transfer of Processed Personal data
Your personal data can be transferred,
- Within the scope of our legal obligations, to the BRSA, MASAK, CBRT and relevant authorized public/institutional organizations, including but not limited to the BRSA, MASAK, CBRT, and upon request, to judicial authorities or relevant law enforcement agencies,
- Program / Business Partner organizations that we receive services and/or cooperate with,
- To third parties who are our Suppliers who provide services for this business by the Company regarding the services provided through param.com.tr within the scope of your explicit consent (e.g. Live Support line),
- Message Management System,
- Our main shareholders, direct/indirect domestic subsidiaries and shareholders as it is mandatory for the data controller to fulfill its legal obligation.
What Are Your Rights
Purpose of data processing and whether this data is used for intended purposes, d) to know the third parties to whom the personal data is transferred at home or abroad, e) to request the rectification of the incomplete or inaccurate data, f) to request the erasure or destruction of the data under the conditions laid down in Article 7 of KVKK, g) to request notification of the operations carried out in compliance with sub-paragraphs (e) and (f) to third parties to whom personal data has been transferred, h) to object to the processing, exclusively by automatic means, of personal data which leads to an unfavorable consequence for the data subject, i) to request compensation for the damage arising from the unlawful processing of personal data. Pursuant to the ""Comminuque On The Principles And Procedures For The Request To Data Controller"", you can send your relevant request to TURK Elektronik Para Inc., with the Mersis Number 0871053107900001 at the address Prof. Dr. Ahmet Taner Kışlalı Mahallesi 2405 Sokak No: 5 ÇANKAYA/ANKARA in writing or through registered electronic email to the address [email protected]."
