INFORMATION TEXT ON THE PROTECTION OF PERSONAL DATA

Your personal data is processed by the Company for the following purposes and based on the legal grounds specified in Articles 5 and 6 of the KVKK (Law on the Protection of Personal Data):

​

3.1. Based on the legal ground that "processing of personal data belonging to the parties to a contract is necessary, provided that it is directly related to the establishment or performance of said contract":

• Identity, communication, financial, and customer transaction data for the purpose of duly fulfilling obligations under the contract;

• Identity, communication, and customer transaction data for the purpose of conducting communication activities;

• Identity and communication data for the purpose of executing the processes related to the establishment and performance of the membership agreement;

• Identity, communication, financial, and customer transaction data for the purpose of delivering the products offered by the Company to customers and fulfilling the obligations undertaken within the scope of the distance sales contract;

• Identity, communication, and financial data for the purpose of conducting financial and accounting affairs;

• Identity, communication, financial, and transaction security data for the purpose of ensuring that operations are carried out in accordance with the legislation;

• Identity, communication, and customer transaction data for the purpose of managing customer relations;

• Identity, communication, financial, and customer transaction data for the purpose of tracking and resolving requests/complaints;

• Identity, communication, financial, and customer transaction data for the purpose of executing product after-sales support services;

• Identity, communication, and transaction security data for the purpose of managing account access authorizations;

• Identity, communication, and transaction security data for the purpose of conducting information security processes;

• Identity, communication, financial, customer transaction, and legal transaction data for the purpose of providing information to authorized persons, institutions, and organizations.

3.2. Based on the legal ground that "processing is mandatory for the data controller to fulfill its legal obligation":

• Identity, communication, financial, legal transaction, customer transaction, and transaction security data for the purpose of fulfilling the obligation to provide information to authorized institutions and organizations arising from the legislation;

• Identity, communication, financial, and customer transaction data for the purpose of conducting storage and archiving activities;

• Identity, communication, financial, and transaction security data for the purpose of ensuring that operations are carried out in accordance with the legislation;

• Identity, communication, and legal transaction data for the purpose of responding to data subject applications in accordance with the legislation;

• Identity, communication, financial, legal transaction, and customer transaction data for the purpose of tracking and executing legal affairs;

• Identity, communication, financial, and customer transaction data for the purpose of managing contract processes;

• Identity, communication, financial, and customer transaction data for the purpose of conducting financial and accounting affairs;

• Identity, communication, and transaction security data for the purpose of conducting information security processes.

3.3. Based on the legal ground that "processing is mandatory for the legitimate interests of the data controller, provided that it does not violate the fundamental rights and freedoms of the data subject":

• Identity, communication, financial, and customer transaction data for the purpose of planning and executing the commercial activities conducted by the Company;

• Identity, communication, financial, and customer transaction data for the purpose of planning and executing the Company’s commercial and business strategies;

• Identity, communication, financial, customer transaction, and transaction security data for the purpose of managing the development processes of workflows and products to provide better service to customers;

• Identity, communication, financial, customer transaction, and transaction security data for the purpose of conducting studies directed at evaluating, developing, and improving products, services, and the user experience.

3.4. Based on the legal ground that "processing is explicitly stipulated in the laws":

• Identity, communication, financial, and legal transaction data for the purpose of tracking and executing legal affairs;

• Identity, communication, financial, and customer transaction data for the purpose of managing and responding to customer requests and complaints;

• Identity, communication, financial, legal transaction, customer transaction, and transaction security data for the purpose of conducting processes to ensure transaction and information security;

• Identity, communication, financial, transaction security, legal transaction, and customer transaction data for the purpose of providing information to authorized persons, institutions, and organizations.

3.5. Based on the legal ground that "data processing is mandatory for the establishment, exercise, or protection of a right":

• Identity, communication, financial, legal transaction, and customer transaction data for the purpose of tracking and executing legal affairs;

• Identity, communication, financial, legal transaction, and customer transaction data for the purpose of conducting processes to obtain legal consultancy;

• Identity, communication, financial, transaction security, and customer transaction data for the purpose of ensuring that operations are carried out in accordance with the legislation;

• Identity, communication, financial, transaction security, legal transaction, and customer transaction data for the purpose of providing information to authorized persons, institutions, and organizations.