Corporate Customer Information Notice

Purposes and Legal Basis for Processing Your Personal Data:

Information Security

Our purposes for processing your personal data

• Receiving your requests for proposals, establishing necessary communication with you accordingly, and fulfilling your requests.
• Responding to your questions; planning and executing request and complaint management activities; evaluating and resolving requests and/or complaints from individuals; and coordinating, planning, and executing necessary work with relevant business units and parties for this purpose.
• To perform any contractual relationship with you or to carry out the activities necessary for the establishment of a contract.
• Maintaining and managing customer relationships, opening necessary records for this purpose, and carrying out activities.
• Planning and execution of activities aimed at developing, monitoring, and controlling commercial business, studies, and operations.
• Designing, developing, and executing corporate governance and communication activities; planning and/or executing business continuity activities; executing strategic planning activities; planning and executing record-keeping and listing activities related to the company's business relationships; planning and executing operational processes.
• Product and service development, analysis of provided products, and planning of business development activities.
• In accordance with Law No. 5651 on the Regulation of Publications Made on the Internet and Combating Crimes Committed Through Such Publications, our responsibilities include fulfilling our obligations regarding keeping internet access records, planning, auditing and executing information security processes, establishing and managing information technology infrastructure, planning and executing activities related to the physical/electronic security of our Company, and carrying out legally required procedures/records and notifications.
• Providing information to authorized institutions and organizations due to legal obligations and/or performing activities and obligations related to auditing.
• Marketing, promotion, and advertising activities regarding the products and services offered by our company are carried out, and commercial electronic communications are sent within this scope.

The legal basis on which we process your data for the stated purpose.

• Processing the personal data of the parties to a contract is necessary provided that it is directly related to the establishment or performance of the contract.
• Data processing is necessary for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject.
• It is necessary for the data controller to fulfill its legal obligations.
• We may also rely on the condition that data processing is necessary for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject, or if you, as the recipient, are a merchant or tradesperson, or an employee of such an organization, provided that you have given your explicit consent. In any case, we remind you that you have the right to refuse to receive communications from us.

How your personal data is collected

Your personal data is collected electronically through the products and services we offer, our company websites and electronic forms on these websites, call centers and email, and physically through printed forms, official IDs and contracts. You can find the legal grounds on which we rely when collecting your personal data in detail under the heading "1. Purposes and Legal Basis for Processing Your Personal Data".

Parties to whom your personal data may be transferred and the purposes of such transfers.

Your personal data may be transferred to our suppliers who provide us with technical infrastructure or call center support for the fulfillment of the purposes stated above, to our affiliates who may provide services related to your request, and, where legally required, to legally authorized public institutions and/or private individuals, within the framework of the personal data processing conditions and purposes specified in Article 8 of Law No. 6698.

The Data Subject's Rights as Listed in Article 11 of Law No. 6698

As data subjects;

• To find out whether your personal data is being processed,
• You have the right to request information regarding the processing of your personal data.
• To learn the purpose for which your personal data is processed and whether it is being used appropriately for that purpose,
• Knowing the third parties to whom your personal data is transferred, whether domestically or internationally.
• You have the right to request the correction of your personal data if it is incomplete or inaccurate, and to request that this correction be notified to third parties to whom your personal data has been transferred.
• Even if your personal data has been processed in accordance with Law No. 6698 and other relevant legislation, you have the right to request the deletion or destruction of your personal data if the reasons requiring its processing cease to exist, and to request that this action be notified to third parties to whom your personal data has been transferred.
• You have the right to object to an outcome that is unfavorable to you, resulting solely from the analysis of your processed data by automated systems.

You have the right to claim compensation for any damages you suffer as a result of the unlawful processing of your personal data. As a data subject, if you submit your requests regarding your rights to our Company via the Data Subject Application Form located at Data Subject Application Form, your request will be processed as soon as possible, and at the latest within 30 (thirty) days, depending on the nature of the request.