Information Notice

ELEKTRONİK BİLGİ GÜVENLİĞİ A.Ş. INFORMATION NOTICE ON THE PROCESSING OF PERSONAL DATA

The Information Notice has been prepared regarding the processing of the personal data of the Company's customers by Elektronik Bilgi Güvenliği Anonim Şirketi (“Company”) pursuant to Law number 6698 on Protection of Personal Data (“Law”).

a) Recipients and Purposes of Transferring Personal Data

The personal data is collected and processed for the following purposes and on the relevant legal grounds, in accordance with the relationship you will establish with our Company.

- On the legal ground that it is necessary for the Company to perform its legal obligations as the data controller;

Compliance with our legal obligations (for instance, responding to requests for information and documents by authorised persons and authorities, or verification of credentials)
- On the legal ground that the processing of personal data of the parties to an agreement is necessary provided that it is directly related to the execution or performance of an agreement;
To ensure that our business units perform the necessary works and execute the relevant business processes to enable relevant individuals to benefit from the products and services offered by our Company;
The provision of the products or services you have requested from our Company;
Processing your payments
- On the legal ground that the processing of data is necessary for the legitimate interests of the data controller, provided that it does not infringe the fundamental rights and freedoms of the data subject;
Responding to the requests and complaints you have submitted to us and implementing the necessary procedures in relation to your requests;
Performing works necessary to conduct the commercial activities undertaken by our Company and managing the associated business processes;
Ensuring the management and security of the technical infrastructure for the products we offer
The planning and implementation of our Company’s commercial and/or business strategies;
Implementing processes aimed at ensuring customer satisfaction; management of inquiries and complaints;
The development of our products and services, and the planning of internal business strategies accordingly;
The activities aimed at safeguarding the legal and economic security of our Company through our products and services;
In case the recipients of communications are employees or representatives of organisations classified as merchants or tradespeople, performing marketing, promotional and advertising activities regarding our corporate products and services, and sending commercial electronic communications in this context
- On the legal ground that data processing is necessary for the establishment, exercise or defence of a legal claim;
The resolution of consumer disputes, legal proceedings or similar disputes, and the protection of our Company’s rights and interests;
- In case you provide explicit consent,
The performance of marketing, promotional and advertising activities regarding the products and services offered by our Company, and sending commercial electronic communications in this context,
The planning and execution of activities necessary to recommend and promote the products and services offered by our Company to relevant individuals, tailored to their preferences, usage habits and needs,
In case your credentials are verified using remote identity verification methods, the processing of your biometric personal data for the purpose of verifying credentials is required under our legal obligations.

b) Method and Legal Basis for the Collection of Your Personal Data

Your personal data is collected electronically via the products and software we provide, our Company’s websites and the electronic forms on these websites, call centres and email; and physically via printed forms, official identification documents and agreements. If you require the loading of your qualified electronic certificate onto your chip-enabled ID card, your personal data may also be collected via the chip on your ID card.

c) Recipients and Purpose of Transferring the Processed Personal Data

Your personal data may be transferred in line with the data processing conditions specified under Articles 5 and 6 of the Law; in order to achieve the aforementioned purposes by the Company; to public authorities and private legal entities authorised by law as part of our compliance with our legal obligations; to organisations from which we receive technical infrastructure support in order to perform our contractual obligations, and to third-party service providers who provide technical support; to legal and financial advisors providing services within the scope of our legitimate interests and other technical service providers, and in case you provide explicit consent, to business partners for the purpose of communication and promotion activities related to your explicit consent, in particular, marketing and promotion activities, in accordance with the conditions of data transfer specified under Article 8 of the Law.

d) Rights of Data Subjects and the Exercise of the Rights

Please note that, pursuant to Article 11 of the Law, you have the right to:

Get information as to whether your personal data is processed or not,
Request information if personal data is processed,
Get information on the purpose of processing personal data and whether they are used in accordance with the relevant purpose,
Get information about the third parties to whom personal data is transferred in the country or abroad,
Request correction of personal data in case of incomplete or incorrect processing and request notification of the action taken for this purpose to third parties to whom personal data is transferred,
Request deletion or destruction of personal data in case the reasons that require processing are no longer valid, and request notification of the action taken for this purpose to third parties to whom personal data is transferred,
Object to the unfavourable outcome that arises when processed data is analysed solely via automatic systems,
Request compensation of losses in case any loss arises due to unlawful processing of personal data.

You may submit requests regarding the rights listed above to our Company. Depending on the nature of your request, your application will be processed free of charge as soon as possible and at the latest within thirty days.

Information Notice

a) Recipients and Purposes of Transferring Personal Data

The personal data is collected and processed for the following purposes and on the relevant legal grounds, in accordance with the relationship you will establish with our Company.

- On the legal ground that it is necessary for the Company to perform its legal obligations as the data controller;

To ensure that our business units perform the necessary works and execute the relevant business processes to enable relevant individuals to benefit from the products and services offered by our Company;

The provision of the products or services you have requested from our Company;

Processing your payments - On the legal ground that the processing of data is necessary for the legitimate interests of the data controller, provided that it does not infringe the fundamental rights and freedoms of the data subject;

Responding to the requests and complaints you have submitted to us and implementing the necessary procedures in relation to your requests;

Performing works necessary to conduct the commercial activities undertaken by our Company and managing the associated business processes;

Ensuring the management and security of the technical infrastructure for the products we offer

The planning and implementation of our Company’s commercial and/or business strategies;

Implementing processes aimed at ensuring customer satisfaction; management of inquiries and complaints;

The development of our products and services, and the planning of internal business strategies accordingly;

The activities aimed at safeguarding the legal and economic security of our Company through our products and services;

b) Method and Legal Basis for the Collection of Your Personal Data

c) Recipients and Purpose of Transferring the Processed Personal Data

d) Rights of Data Subjects and the Exercise of the Rights

Please note that, pursuant to Article 11 of the Law, you have the right to:

Get information as to whether your personal data is processed or not,

Request information if personal data is processed,

Get information on the purpose of processing personal data and whether they are used in accordance with the relevant purpose,

Get information about the third parties to whom personal data is transferred in the country or abroad,

Request correction of personal data in case of incomplete or incorrect processing and request notification of the action taken for this purpose to third parties to whom personal data is transferred,

Request deletion or destruction of personal data in case the reasons that require processing are no longer valid, and request notification of the action taken for this purpose to third parties to whom personal data is transferred,

Object to the unfavourable outcome that arises when processed data is analysed solely via automatic systems,

Request compensation of losses in case any loss arises due to unlawful processing of personal data.

You may submit requests regarding the rights listed above to our Company. Depending on the nature of your request, your application will be processed free of charge as soon as possible and at the latest within thirty days.

Processing your payments
- On the legal ground that the processing of data is necessary for the legitimate interests of the data controller, provided that it does not infringe the fundamental rights and freedoms of the data subject;