Privacy Notice

1. DATA CONTROLLER

Your personal data is processed by Turkland Bank A.Ş. (“Bank”) as the data controller in accordance with the provisions of the Personal Data Protection Law numbered 6698 (“Law”). This privacy notice has been prepared to inform you about the processes by which your personal data is processed through the Feedback, Suggestion and Complaint Form (“Form”) on the website www.tbank.com.tr (“Website”).

2. PROCESSED PERSONAL DATA, PURPOSE AND LEGAL BASIS FOR PROCESSING YOUR PERSONAL DATA

Articles 5 and 6 of the Law on the Personal Data Protection Law regulate the legal grounds for processing personal data. Below, we have listed the purposes for which we process personal data and the legal grounds on which we rely within the scope of these purposes:

Purposes

Legal Grounds

Processed Personal Data

 

- Fulfilling our legal obligations in cases where authorized institutions or organizations request information from our Company or where we are required to make notifications to such institutions,

- Ensuring that our operations comply with the Law.

Art. 5/2(ç) of the Law

 

Processing necessary for compliance with a legal obligation to which the data controller is subject.

- Identity (Name, Surname, Turkish National Identity Number)

- Contact Information (Phone number, Email address)

- Transaction Security Information (Log records related to your communication request, IP address)

- Other (Country)

- Other (Request content)

- Other (Relationship with the Bank)

- Protection and exercise of our rights in the event of a potential dispute and conduct of legal proceedings.

 

Art. 5/2(e) of the Law

 

Processing is necessary for the establishment, exercise or protection of any right.

- Receiving and resolving your suggestions, requests, and complaints, and contacting you accordingly,

- Carrying out necessary banking transactions within the scope of requests and notifications,

- Conducting studies to develop and improve our banking products, services, and processes,

- Reporting, auditing, and reviewing our business processes.

Art. 5/2(f) of the Law

 

Processing of data is necessary for the legitimate interests pursued by the data controller, provided that this processing shall not violate the fundamental rights and freedoms of the data subject.

3. PARTIES TO WHOM YOUR PERSONAL DATA IS TRANSFERRED AND THE PURPOSES OF THE TRANSFER

Your collected personal data is shared with authorized institutions and organizations only for the purpose of fulfilling obligations arising from relevant legislation and when authorized institutions or organizations request it from the Bank or when we are required to notify these institutions, in accordance with the fundamental principles stipulated in the Law and the conditions for processing personal data specified in Articles 8 and 9 of the Law, and in compliance with the rules regarding the transfer of personal data.

4. METHOD OF COLLECTING YOUR PERSONAL DATA

Your personal data is collected by the Bank through the request you submit via the form on the website, within the scope of the purposes stated in this privacy notice, and is processed using automated and partially automated methods.

5. YOUR RIGHTS UNDER ARTICLE 11 OF THE LAW

As a data subject, you have the following rights pursuant to Article 11 of the Law:

  • to learn whether his/her personal data are processed or not,
  • to demand for information as to if his/her personal data have been processed,
  • to learn the purpose of the processing of his/her personal data and whether these personal
  • data are used in compliance with the purpose,
  • to know the third parties to whom his personal data are transferred in country or abroad,
  • to request the rectification of the incomplete or inaccurate data, if any,
  • to request the erasure or destruction of his/her personal data under the conditions referred to in Article 7,
  • to request reporting of the operations carried out pursuant to sub-paragraphs (d) and (e) to third parties to whom his/her personal data have been transferred,
  • to object to the occurrence of a result against the person himself/herself by analyzing the data processed solely through automated systems,
  • to claim compensation for the damage arising from the unlawful processing of his/her personal data.

To submit your requests to the Bank within the scope of Article 11 of the Law, you may use the following methods: