ACCESSIBLE BANKING CLARIFICATION TEXT REGARDING THE PROTECTION AND PROCESSING OF PERSONAL DATA
We, as Türk Ticaret Bankası A.Ş., aim to render our banking services suitable for the access and use of our disabled customers in line with the provisions of the “Law on Disabled People” and the “Regulation on Accessibility of Banking Services.”
1. Data Controller
This clarification text has been prepared by Türk Ticaret Bankası A.Ş. (“Bank”), in the capacity of data controller, pursuant to Article 10 of the Law No. 6698 on the Protection of Personal Data (“Law”) and the Communiqué on the Principles and Procedures to be Followed in Fulfilling the Obligation to Inform (“Communiqué”).
| Address | Barbaros Mah. Mor Sümbül Sok. WBC İş Merkezi No: 9 Ataşehir / |
| Mersis (Central Registry System)/Trade Registry Number | 0876005425600014/ 2883 |
2. Purposes and Legal Grounds for Processing Personal Data
|
Data Categories |
Purposes of Processing |
Legal Grounds |
|---|---|---|
|
Health Information Identity Information Contact Information
Health Information Identity Information Contact Information |
Carrying out identity verification and authentication Rendering our banking services suitable for the access and use of our disabled customers Conducting activities in compliance with the legislation Executing retention and archive activities Conducting legal processes and lawsuits Providing information and reporting to authorized persons, institutions, and organizations (Banking Regulation and Supervision Agency (BDDK), Financial Crimes Investigation Board (MASAK), Interbank Card Center (BKM), courts, etc.) within the scope of obligations arising from legal regulations and legislation Improving business processes and conducting analysis Executing and ensuring information systems, transaction, and operational security processes
Determining or developing strategies regarding the presentation of products and services Ensuring legal, technical/administrative, and physical security, and business continuity in accessibility processes Conducting business processes |
Being necessary for the fulfilment of our legal obligation Being explicitly stipulated in the laws
Being directly related to the establishment or execution of contract Being mandatory for our legitimate interests, provided that it does not harm your fundamental rights and freedoms |
3. To Whom and for What Purposes Processed Personal Data May Be Transferred
Your personal data, which has been collected in line with the fulfilment of the Purposes stated above, may be transferred to Legally Authorized Institutions and Organizations (BDDK, MASAK, BKM, courts, etc.), upon request, for the purposes of fulfilling our legal obligations, establishing, exercising, or protecting a right, operating legal procedures, and complying with the legislation within the framework of data processing conditions set forth in Article 5 of the Law and in accordance with the rules regarding personal data transfer specified in Article 8 of the Law.
4. Method of Collecting Personal Data
Your personal data may be obtained through the following methods in line with the purposes specified above. Methods of obtaining personal data from you or your representatives acting on your behalf (agent, guardian, legal representative, etc.):
• Non-automated methods via face-to-face service channels (general directorates and branches),
• Automated methods via call records from our Customer Contact Centre,
• Automated methods via our Bank's mobile application, website, and ATMs,
• Electronically and/or physically via forms, instructions, contracts, phone, email, fax, short messages (SMS), cargo, and post.
5. Your Rights
Pursuant to Article 11 of the Law on the Protection of Personal Data, you have the following rights regarding your personal data:
a) To learn whether your personal data is being processed,
b) To request information if your personal data has been processed,
c) To learn the purpose of processing your personal data and whether they are used in accordance with the purpose,
d) To know the third parties to whom your personal data is transferred domestically or abroad,
e) To request correction if your personal data has been processed incompletely or inaccurately, and to request notification of the transaction made within this scope to third parties to whom your personal data has been transferred,
f) To request the deletion or destruction of your personal data if the reasons requiring its processing cease to exist, even though it has been processed in accordance with Law No. 6698 and other relevant law provisions, and to request notification of the transaction made within this scope to third parties to whom your personal data has been transferred,
g) To object to any outcome against you resulting exclusively from the analysis of your processed data through automated systems,
h) To demand compensation for damages in case you suffer damage due to unlawful processing of your personal data.
To exercise your rights stated above, you may submit your requests to our Bank:
Your application must contain:
a) Given name, surname, and signature, if the application is written,
b) Republic of Türkiye ID number for citizens of the Republic of Türkiye; nationality, passport number, or ID number, if any, for foreigners,
c) Residential or workplace address for notification,
d) Electronic mail address, telephone, and fax number for notification, if any,
e) Subject of the request.
Your request will be finalized free of charge as soon as possible and within thirty (30) days at the latest. If the transaction regarding your application requires an additional cost, the fee specified in the tariff determined by the Board may be charged.