Protection of Personal Data

IDENTITY OF THE DATA CONTROLLER

This Disclosure Text has been prepared by Vakıf Katılım Bankası A.Ş. (Bank or our Bank) acting in the capacity of Data Controller at the address of “Saray mahallesi Dr. Adnan Büyükdeniz caddesi no: 10 Ümraniye/ İstanbul” within the scope of Article 10 of Law No: 6698 on Protection of Personal Data and “Communiqué on Principles and Procedures to be Followed in Fulfilment of the Obligation to Inform”.

Our purpose is to inform you about the methods of collecting your personal data, purpose and legal purpose of processing, transfer to 3rd persons when permitted by the relevant legislation and your rights on the protection of personal data.

As per Article 3 of Law No: 6698 on Protection of Personal Data; personal data means any information relating to an identified or identifiable natural persons. Our Bank carries out personal data processing activities by taking necessary security measures for the purpose of protection of fundamental rights and freedoms including the right of privacy.

Your personal data may be processed to enable our Bank to provide services to its customers in the best manner in line with the purposes mentioned below and within the scope of our obligations arising from Banking Law No: 5411, LPPD and all other legal legislation.

PROCESSING OF THE PERSONAL DATA AND PURPOSE OF PROCESSING

Your personal data including your identity information, address, contact information, occupational experience, signature, power of attorney, educational background, financial and income status, customer transaction, card details, risk management, process security, credit history, health information, vehicles and real estate properties to be purchased through financing of our Bank, legal transaction, payment details in tax and fee payment, location, declaration, audio-visual records etc. that you directly or indirectly share with us through different channels are processed by us for the purposes mentioned below;

• To carry out basic banking services including but not limited to accounts, cash, money transfer, foreign exchange/precious metal transactions, cheque/promissory note, lease certificate (sukuk), safe deposit box, institutional collection, financial intelligence services etc.,
• To offer services within the scope of Banking Law and other legislation including foreign trade, financing (loan), fund management, credit card, POS, ATM services, insurance, pension and other agency services, intermediary services etc.,
• To manage investment processes, to carry out intelligence, guarantee and reference letter transactions, to track the delinquent receivables, to carry out expertise transactions,
• To carry out inquiry transactions that we are obliged to carry out within the scope of legal legislation including Central Civil Registration System (MERNIS), The Banks Association of Turkey Risk Center, corresponding bank black lists, General Directorate of Security E-Pledge etc.,
• To carry out supervision, independent audit and internal control activities prescribed by the legislation, to fulfill information security obligations, to detect and prevent fraud operations, to investigate suspicious transactions, to carry out risk monitoring, follow-up and reporting activities, to manage and store communication and transaction audit trails, to record voice records of Customer Communication Center, to perform identity authentication and authority management, to evaluate compliance with the principles of participating banking,
• To carry out tax declaration activities and perform financial control activities,
• To receive and record camera footages of our branches, regional directorate and head office units and ATMs as required for the physical security needs of our Bank,
• To share important information (any and all information that the Bank is obliged to share with its customers) with you through your contact information.
• To fulfill our obligations as determined by public institutions and authorities such as Banking Regulation and Supervision Agency, Banks Association of Turkey and Central Bank of the Republic of Turkey to which our Bank is obliged to give information, to perform notification and statutory reporting processes,
• To offer you special offers if you allow us to do so, to carry out sales and marketing and promotional activities,
• To solve the probable problems in main banking system, to manage expenditure objection and customer satisfaction processes, to perform complaint, suggestion and demand management.

TRANSFER OF PERSONAL DATA

Within the scope of Article 8 of Law No: 6698 on transfer of personal data and Article 9 on transfer of personal data abroad, your personal data that you have submitted to us due to your banking transactions with us may be transferred to persons/institutions at home and abroad for the purposes mentioned below. The scope of the transferred data is determined to be limited to the purpose of transfer

• To persons, corporations and/or institutions authorized by law such as Banking Regulation and Supervision Agency, Central Bank of the Republic of Turkey, Turkish Revenue Administration, Capital Markets Board, Social Security Institution, Financial Crimes Investigation Board, Credit Reference Agency, Risk Center, Interbank Card Center, General Directorate of Security etc. in order to fulfill our legal obligations,
• To state institutions and organizations and contracted institutions and organizations in order to perform corporate collection transactions
• To card payment system service providers, card printing and courier firms in order to manage credit cards processes,
• To SWIFT, SWIFT service providers, domestic/foreign corresponding banks, recipient/sender banks, intermediary banks and payment/electronic money institutions in order to carry out foreign trade and out of bank money transfers,
• To prosecution offices and courts, law offices, asset management companies in order to perform and follow-up legal affairs,
• To independent audit institutions and authorized public institutions and organizations in order to audit the compliance of activities with regulation,
• To real estate property valuation institutions in order to carry out expertise operations,
• To share certificate brokerage firms, finance companies and investment companies in order to carry out investment activities,
• To research companies in order to offer you better services and to increase your satisfaction level,
• If you allow us to do so, to our business partners in order to make you benefit from common campaigns with our business partners,
• To persons, institutions and/or corporations that we carry out services in the capacity of intermediary in order to fulfill our obligations arising out of Intermediation/Agency Law;

METHOD OF AND LEGAL REASON FOR PERSONAL DATA COLLECTION

Your personal data are processed based on legal reasons below specified in Article 5 of Law No: 6698 and your express consent is asked when it is required to process your personal data for the reasons other than these legal reasons. Your personal data are processed if.

• It is expressly provided by the laws,
• It is directly related to establishment or performance of an agreement,
• It is necessary for the data controller to fulfil its legal obligation,
• It is obligatory to process data for the purposes of the legitimate interests of the controller provided that the processing does not prejudice the fundamental rights and freedoms of the data subject,
• It is obligatory to process data for the establishment, exercise or protection of a right

Your personal data are also processed through automatic systems or through non-automated means provided that it is a part of any data recording system. Your personal data are achieved by our Bank through;

• Branches, head office, units, regional directorates and branches of our Bank,
• Customer Communication Center and Telephone Banking,
• Internet Banking and Mobile Banking Applications,
• ATM and Kiosk systems,
• Forms to be filled on internet websites,
• Identity Sharing System, Address Sharing System, Trade Registry Gazette, Land Registry and Cadastre Information System, Risk Center, Credit Reference Agency etc,
• Means of payment such as ATM systems and credit cards,
• Companies that we carry out services in the capacity of intermediary/agent,
• Social media accounts of our Bank,
• Camera systems in branches, regional directorates and head office buildings and ATMs,,
• Interbank card center,
• Communication channels such as registered electronic mail, electronic notification, electronic mail, mail, fax, short message service etc,
• Notifications, applications and negotiations with our Bank.

YOUR RIGHTS ON PROTECTION OF THE PERSONAL DATA

Within the scope of Article 11 of Law No: 6698 on Protection of Personal Data governing the rights of the relevant persons, Everyone, in connection with herself/himself, has the right;

• To learn whether or not her/his personal data have been processed,
• To request information as to processing if her/his data have been processed,
• To learn the purpose of processing of the personal data and whether data are used in accordance with their purpose,
• To know the third parties in the country or abroad to whom personal data have been transferred,
• To request rectification in case personal data are processed incompletely or inaccurately and to request notification of the operations made to third parties to whom personal data have been transferred,
• To request deletion or destruction of personal data and to request notification of the operations made to third parties to whom personal data have been transferred,
• To object to occurrence of any result that is to her/his detriment by means of analysis of personal data exclusively through automated systems and,
• To request compensation for the damages in case the person incurs damages due to unlawful processing of personal data.

You may send your requests in respect thereof through application form available on our website, through methods included in the application form or through calling our Customer Communication Center at 0850 202 1 202 and 444 44 77.

As per Article 13 of the Law, our Bank shall conclude your requests included in the applications made as specified above free of charge within the shortest time but within latest thirty days according to the nature of the request. If such transaction requires any additional cost, the Bank may request a fee in accordance with the conditions determined by Personal Data Protection Board and by taking account of the Updated Tariff specified by the Board.

IDENTITY OF THE DATA CONTROLLER

This Disclosure Text has been prepared by Vakıf Katılım Bankası A.Ş. (our Bank) acting in the capacity of Data Controller within the scope of Article 10 of Law No: 6698 on Protection of Personal Data and “Communiqué on Principles and Procedures to be Followed in Fulfilment of the Obligation to Inform”. Our purpose is to inform you about the methods of collecting your personal data, purpose and legal purpose of processing, transfer to 3rd persons when permitted by the relevant legislation and your rights on the protection of personal data.

As per Article 3 of Law No: 6698 on Protection of Personal Data; personal data means any information relating to an identified or identifiable natural persons. Our Bank carries out personal data processing activities by taking necessary security measures for the purpose of protection of fundamental rights and freedoms including the right of privacy.

PROCESSING OF THE PERSONAL DATA AND PURPOSE OF PROCESSING

Your identity details received during your visit to our Bank’s Headquarters, Branches and Regional Directorates of our Bank, the data with respect to the use of visitor card submitted to you, your images recorded by our security cameras are processed by us in order to ensure the security of physical spaces of our Bank, to follow-up visitor entry-exit activities, to respond to the requests of the state institutions and organizations on visitors; and your identity details, contact information, websites that you visit are processed by us in order to ensure the internet service and data security if you prefer to connect to visitor network of our Bank. Monitoring areas of the security cameras, number of these areas, monitoring times and periods will be applied to the extent necessary for the purpose of security. The areas beyond the scope of the security of physical areas such as toilets, prayer rooms etc. are not monitored by cameras.

TRANSFER OF PERSONAL DATA

Personal data that we receive from our visitors are transferred to the relevant state institutions and organizations when requested by a court decision in order to fulfil our legal obligations.

METHOD OF AND LEGAL REASON FOR PERSONAL DATA COLLECTION

Your personal data are collected through non-automated means during the identification process and through automated means during the recording of visitor card data and security camera footages based on legal reasons when it is required for our Bank to fulfil its obligations under the relevant articles of Law No: 6698 on Protection of the Personal Data and Law No: 5651 on Publications that are Made on the Internet Environment and Fight Against Crimes Committed Through These Publications, when it is expressly provided by the laws and when it is obligatory to process data for the purposes of the legitimate interests of the controller provided that the processing does not prejudice the fundamental rights and freedoms of the data subject.

YOUR RIGHTS ON PROTECTION OF THE PERSONAL DATA

Within the scope of Article 11 of Law No: 6698 on Protection of Personal Data governing the rights of the relevant persons, Everyone, in connection with herself/himself, has the right;

• To learn whether or not her/his personal data have been processed,
• To request information as to processing if her/his data have been processed,
• To learn the purpose of processing of the personal data and whether data are used in accordance with their purpose,
• To know the third parties in the country or abroad to whom personal data have been transferred,,
• To request rectification in case personal data are processed incompletely or inaccurately and to request notification of the operations made to third parties to whom personal data have been transferred,
• To request deletion or destruction of personal data and to request notification of the operations made to third parties to whom personal data have been transferred,
• To object to occurrence of any result that is to her/his detriment by means of analysis of personal data exclusively through automated systems and,
• To request compensation for the damages in case the person incurs damages due to unlawful processing of personal data,

has rights.

You may send your requests in respect thereof through application form available on our website, through methods included in the application form or through calling our Customer Communication Center at 0850 202 1 202 and 444 44 77.

As per Article 13 of the Law, our Bank shall conclude your requests included in the applications made as specified above free of charge within the shortest time but within latest thirty days according to the nature of the request. If such transaction requires any additional cost, the Bank may request a fee in accordance with the conditions determined by Personal Data Protection Board and by taking account of the Updated Tariff specified by the Board.

IDENTITY OF THE DATA CONTROLLER

This Disclosure Text has been prepared by Vakıf Katılım Bankası A.Ş. (our Bank) acting in the capacity of Data Controller within the scope of Article 10 of Law No: 6698 on Protection of Personal Data and “Communiqué on Principles and Procedures to be Followed in Fulfilment of the Obligation to Inform” for our customers using our call center

PROCESSING OF THE PERSONAL DATA AND PURPOSE OF PROCESSING

The identity details, contact information, voice record, financial information required for the banking transactions and personal data requested for the purpose of security are processed in order to address the caller, to confirm the call, to statistically analyze the number of calls, to manage telephone banking services and to use as evidence for the disputes that may arise in the future.

TRANSFER OF PERSONAL DATA

If you allow to do so, your personal data such as your name, surname, contact information etc. will be transferred to our business partner and our business partner will call you on behalf of our Bank in order to evaluate the performance of our customer representative and your satisfaction.

METHOD OF AND LEGAL REASON FOR PERSONAL DATA COLLECTION

Your personal data will be collected through phone calls and processed in automated means based on legal reasons when it is required to process data for the purposes of the legitimate interests of the data controller provided that the processing does not prejudice the fundamental rights and freedoms of the data subject as mentioned in Article 5 of Law on Protection of Personal Data and will be shared with the relevant judicial authorities if requested for legal disputes other than survey studies.

YOUR RIGHTS ON PROTECTION OF THE PERSONAL DATA

Within the scope of Article 11 of Law No: 6698 on Protection of Personal Data governing the rights of the relevant persons, Everyone, in connection with herself/himself, has the right;

• To learn whether or not her/his personal data have been processed,
• To request information as to processing if her/his data have been processed,
• To learn the purpose of processing of the personal data and whether data are used in accordance with their purpose,
• To know the third parties in the country or abroad to whom personal data have been transferred,
• To request rectification in case personal data are processed incompletely or inaccurately and to request notification of the operations made to third parties to whom personal data have been transferred,
• To request deletion or destruction of personal data and to request notification of the operations made to third parties to whom personal data have been transferred,
• To object to occurrence of any result that is to her/his detriment by means of analysis of personal data exclusively through automated systems and,
• To request compensation for the damages in case the person incurs damages due to unlawful processing of personal data,

has rights.

You may send your requests in respect thereof through application form available on our website, through methods included in the application form or through calling our Customer Communication Center at 0850 202 1 202 and 444 44 77.

As per Article 13 of the Law, our Bank shall conclude your requests included in the applications made as specified above free of charge within the shortest time but within latest thirty days according to the nature of the request. If such transaction requires any additional cost, the Bank may request a fee in accordance with the conditions determined by Personal Data Protection Board and by taking account of the Updated Tariff specified by the Board.

IDENTITY OF THE DATA CONTROLLER

This Disclosure Text has been prepared by Vakıf Katılım Bankası A.Ş. (Bank or our Bank) acting in the capacity of Data Controller at the address of “Saray mahallesi Dr. Adnan Büyükdeniz caddesi no: 10 Ümraniye/ İstanbul” within the scope of Article 10 of Law No: 6698 on Protection of Personal Data and “Communiqué on Principles and Procedures to be Followed in Fulfilment of the Obligation to Inform”.

Our purpose is to inform you about the methods of collecting your personal data, purpose and legal purpose of processing, transfer to 3rd persons when permitted by the relevant legislation and your rights on the protection of personal data.

PROCESSING OF THE PERSONAL DATA AND PURPOSE OF PROCESSING

Your personal data will be used in our Bank’s units, branches, transaction platforms and call centers etc. in order to ensure the performance and security of your transactions in verbal, written or electronic environment through RIA and for the development of the product in reporting, informing and classification processes.

TRANSFER OF PERSONAL DATA

Your personal data is shared with corporations and/or institutions authorized by law such as Banking Regulation and Supervision Agency, Central Bank of the Republic of Turkey, Financial Crimes Investigation Board, Undersecretariat of Treasury etc. in order to fulfill our legal obligations arising from Banking Law to which our Bank is subject, further shared with RIA, relevant foreign public and private enterprises with regard to the performance of money receiving transaction.

METHOD OF PERSONAL DATA COLLECTION

Your personal data are collected through RIA if you make a fund transfer (money sending/receiving) transaction and/or directly from you. Your personal data are also collected through public and private institutions and organizations permitted or authorized by laws and regulations in accordance with the principles of processing and transfer mentioned in relevant articles of Law No: 6698 on Protection of Personal Data.

YOUR RIGHTS ON PROTECTION OF THE PERSONAL DATA

Within the scope of Article 11 of Law No: 6698 on Protection of Personal Data governing the rights of the relevant persons, Everyone, in connection with herself/himself, has the right to learn whether or not her/his personal data have been processed, to request information as to processing if her/his data have been processed, to learn the purpose of processing of the personal data and whether data are used in accordance with their purpose, to know the third parties in the country or abroad to whom personal data have been transferred, to request rectification in case personal data are processed incompletely or inaccurately and to request notification of the operations made to third parties to whom personal data have been transferred, to request deletion or destruction of personal data and to request notification of the operations made to third parties to whom personal data have been transferred, to object to occurrence of any result that is to her/his detriment by means of analysis of personal data exclusively through automated systems and to request compensation for the damages in case the person incurs damages due to unlawful processing of personal data./p>

You may send your requests in respect thereof through application form available on our website, through methods included in the application form or through calling our Customer Communication Center at 0850 202 1 202 and 444 44 77.

As per Article 13 of the Law, our Bank shall conclude your requests included in the applications made as specified above free of charge within the shortest time but within latest thirty days according to the nature of the request. If such transaction requires any additional cost, the Bank may request a fee in accordance with the conditions determined by Personal Data Protection Board and by taking account of the Updated Tariff specified by the Board.

IDENTITY OF THE DATA CONTROLLER

This Disclosure Text has been prepared by Vakıf Katılım Bankası A.Ş. (Bank or our Bank) acting in the capacity of Data Controller at the address of “Saray mahallesi Dr. Adnan Büyükdeniz caddesi no: 10 Ümraniye/ İstanbul” within the scope of Article 10 of Law No: 6698 on Protection of Personal Data and “Communiqué on Principles and Procedures to be Followed in Fulfilment of the Obligation to Inform”.

PROCESSING OF THE PERSONAL DATA AND PURPOSE OF PROCESSING

Personal data such as your TR ID No, telephone number etc. that we request through Q-Matic are processed in order to offer a better service to you during your visits to our branches and other details such as date, time and place of your visit are processed in order to analyze the number of visitors in the branches and to make you complete your transactions within the shortest time possible.

TRANSFER OF PERSONAL DATA

Your TR ID No and telephone number details that we request from you and the date of your visit to our branch will be shared with authorized state institutions and organizations, if requested, or will be stored on our Bank’s servers and destroyed at the end of legal protection period in line with the principles and procedures set forth in the Law on Protection of the Personal data, if not requested.

METHOD OF AND LEGAL REASON FOR PERSONAL DATA COLLECTION

Your personal data will be collected through Q-Matics and processed based on legal reasons when it is required to process data for the purposes of the legitimate interests of the data controller provided that the processing does not prejudice the fundamental rights and freedoms of the data subject as mentioned in Article 5 of Law on Protection of Personal Data.

YOUR RIGHTS ON PROTECTION OF THE PERSONAL DATA

You may send your requests in respect thereof through application form available on our website, through methods included in the application form or through calling our Customer Communication Center at 0850 202 1 202 and 444 44 77.

As per Article 13 of the Law, our Bank shall conclude your requests included in the applications made as specified above free of charge within the shortest time but within latest thirty days according to the nature of the request. If such transaction requires any additional cost, the Bank may request a fee in accordance with the conditions determined by Personal Data Protection Board and by taking account of the Updated Tariff specified by the Board.

IDENTITY OF THE DATA CONTROLLER

This Disclosure Text has been prepared by Vakıf Katılım Bankası A.Ş. acting in the capacity of Data Controller within the scope of Article 10 of Law No: 6698 on Protection of Personal Data and “Communiqué on Principles and Procedures to be Followed in Fulfilment of the Obligation to Inform”.

PROCESSING OF THE PERSONAL DATA AND PURPOSE OF PROCESSING

Your personal data are processed by our Bank in order to conduct pricing works to offer fuel oil service with reduced price prior to the signature of agreement with respect to Direct Debiting and Collection System.

TRANSFER OF PERSONAL DATA

Identity details, contact information and occupational experience information that you have submitted to us will be shared with Direct Debiting and Collection System sellers/providers for the purpose of conducting pricing works

METHOD OF AND LEGAL REASON FOR PERSONAL DATA COLLECTION

Your personal data will be collected through our branches and e-mail channels based on and limited to the legal reason “explicit and express consent for the processing of personal data” mentioned in Article 5 of the Law No: 6698 on Protection of the Personal Data.

YOUR RIGHTS ON PROTECTION OF THE PERSONAL DATA

Within the scope of Article 11 of Law No: 6698 on Protection of Personal Data governing the rights of the relevant persons, Everyone, in connection with herself/himself, has the right;

• To learn whether or not her/his personal data have been processed,
• To request information as to processing if her/his data have been processed,
• To learn the purpose of processing of the personal data and whether data are used in accordance with their purpose,
• To know the third parties in the country or abroad to whom personal data have been transferred,
• To request rectification in case personal data are processed incompletely or inaccurately and to request notification of the operations made to third parties to whom personal data have been transferred,
• To request deletion or destruction of personal data and to request notification of the operations made to third parties to whom personal data have been transferred,
• To object to occurrence of any result that is to her/his detriment by means of analysis of personal data exclusively through automated systems and,
• To request compensation for the damages in case the person incurs damages due to unlawful processing of personal data.

has rights.

You may send your requests in respect thereof through application form available on our website, through methods included in the application form or through calling our Customer Communication Center at 0850 202 1 202 and 444 44 77.

As per Article 13 of the Law, our Bank shall conclude your requests included in the applications made as specified above free of charge within the shortest time but within latest thirty days according to the nature of the request. If such transaction requires any additional cost, the Bank may request a fee in accordance with the conditions determined by Personal Data Protection Board and by taking account of the Updated Tariff specified by the Board.

IDENTITY OF THE DATA CONTROLLER

This Disclosure Text has been prepared by Vakıf Katılım Bankası A.Ş. acting in the capacity of Data Controller for the purpose of fulfilment of the obligation to inform within the scope of Law No: 6698 on Protection of Personal Data.

METHOD OF COLLECTION, PROCESSING, PURPOSE OF PROCESSING AND LEGAL REASON FOR COLLECTION OF THE PERSONAL DATA

Your personal data have been transferred to our Bank by Directorate General of Foundations and are collected based on legal reason “when it is required to process data for the establishment, exercise or protection of a right” mentioned in Article 5 of the Law and processed for the purpose of performance of the payments to the beneficiaries and opening an account in the name of the beneficiary.

TRANSFER OF PERSONAL DATA

Your personal data are transferred to the state institutions and organizations authorized within the scope of the legal legislation to which our Bank is subject and to the institutions authorized for the purpose of auditing operations.

YOUR RIGHTS ON PROTECTION OF THE PERSONAL DATA

We would like to remind that you have all the rights set forth in Article 11 of Law No: 6698 on Protection of Personal Data governing the rights of the relevant persons in connection with herself/himself.

You may send your requests in respect thereof through application form available on our website, through methods included in the application form or through calling our Customer Communication Center at 0850 202 1 202 and 444 44 77.

As per Article 13 of the Law, our Bank shall conclude your requests included in the applications made as specified above free of charge within the shortest time but within latest thirty days according to the nature of the request. If such transaction requires any additional cost, the Bank may request a fee in accordance with the conditions determined by Personal Data Protection Board and by taking account of the Updated Tariff specified by the Board.

IDENTITY OF THE DATA CONTROLLER

This Disclosure Text has been prepared by Vakıf Katılım Bankası A.Ş. (Bank or our Bank) acting in the capacity of Data Controller at the address of “Saray mahallesi Dr. Adnan Büyükdeniz caddesi no: 10 Ümraniye/ İstanbul” within the scope of Article 10 of Law No: 6698 on Protection of Personal Data and “Communiqué on Principles and Procedures to be Followed in Fulfilment of the Obligation to Inform”.

Your personal data may be processed to enable our Bank to provide services to its customers in the best manner in line with the purposes mentioned below and within the scope of our obligations arising from Banking Law No: 5411, LPPD and all other legal legislation.

PROCESSING OF THE PERSONAL DATA AND PURPOSE OF PROCESSING

In the event of sale of the real estate that you own or when you give your real estate as a collateral for the financing support that you receive from our Bank; your personal data such as identity details, contact information and personal data on your real estate will be processed for the completion of sales transactions and pledges to be established and for the establishment of the pledge with current ownership.

TRANSFER OF PERSONAL DATA

Your personal data are transferred to Directorate General of Land Registry and Cadastre, persons, institutions and organizations authorized by law, our business partners with respect to the sales of and establishment of pledge on real estates and to HYPOTEX system where online hypothecation processes are carried out in order for the fulfilment of our obligations of our Bank.

METHOD OF AND LEGAL REASON FOR PERSONAL DATA COLLECTION

Your personal data are processed based on legal reasons when it is directly related to establishment or performance of an agreement or when it is expressly provided by the laws as mentioned in Article 5 of the Law. Your personal data are collected by Directorate of Land Registry, the intermediary institution for the sale of the real estate or by the buyer.

YOUR RIGHTS ON PROTECTION OF THE PERSONAL DATA

Within the scope of Article 11 of Law No: 6698 on Protection of Personal Data governing the rights of the relevant persons, Everyone, in connection with herself/himself, has the right;

• To learn whether or not her/his personal data have been processed,
• To request information as to processing if her/his data have been processed,
• To learn the purpose of processing of the personal data and whether data are used in accordance with their purpose,
• To know the third parties in the country or abroad to whom personal data have been transferred,
• To request rectification in case personal data are processed incompletely or inaccurately and to request notification of the operations made to third parties to whom personal data have been transferred,
• To request deletion or destruction of personal data and to request notification of the operations made to third parties to whom personal data have been transferred,
• To object to occurrence of any result that is to her/his detriment by means of analysis of personal data exclusively through automated systems and,
• To request compensation for the damages in case the person incurs damages due to unlawful processing of personal data.

You may send your requests in respect thereof through application form available on our website, through methods included in the application form or through calling our Customer Communication Center at 0850 202 1 202 and 444 44 77.

As per Article 13 of the Law, our Bank shall conclude your requests included in the applications made as specified above free of charge within the shortest time but within latest thirty days according to the nature of the request. If such transaction requires any additional cost, the Bank may request a fee in accordance with the conditions determined by Personal Data Protection Board and by taking account of the Updated Tariff specified by the Board.

IDENTITY OF THE DATA CONTROLLER

This Disclosure Text has been prepared by Vakıf Katılım Bankası A.Ş. (Bank or our Bank) acting in the capacity of Data Controller at the address of “Saray mahallesi Dr. Adnan Büyükdeniz caddesi no: 10 Ümraniye/ İstanbul” within the scope of Article 10 of Law No: 6698 on Protection of Personal Data and “Communiqué on Principles and Procedures to be Followed in Fulfilment of the Obligation to Inform”.

PROCESSING OF THE PERSONAL DATA AND PURPOSE OF PROCESSING

In the event that you make a transaction within the scope of Notaries Union of Turkey Secure Payment System project during your vehicle buying and selling transaction, your personal data specified below will be processed by our Bank within this period.

Name and surname and TR ID No of the buyer and seller, telephone number of the buyer and IBAN information of the buyer will be processed limited to the purposes mentioned above for the purpose of fulfilment of the obligations by our Bank during such transactions.

TRANSFER OF PERSONAL DATA

Your personal data obtained within the scope of Secure Payment Project will be transferred to the Central Bank of the Republic of Turkey and Banking Regulation and Supervision Agency for the purpose of fulfilment of our legal obligations arising from the laws to which Notaries Union of Turkey and our Bank are subject for the completion of the relevant transactions.

METHOD OF AND LEGAL REASON FOR PERSONAL DATA COLLECTION

Your personal data are processed in automated means based on legal reasons when it is directly related to establishment or performance of an agreement and it is required to process the personal data of the parties to the agreement and when it is necessary for the data controller to fulfil its legal obligation as mentioned in Article 5 of the Law No: 6698 on Protection of the Personal Data in parallel with your buying and selling transactions.

YOUR RIGHTS ON PROTECTION OF THE PERSONAL DATA

Within the scope of Article 11 of Law No: 6698 on Protection of Personal Data governing the rights of the relevant persons, Everyone, in connection with herself/himself, has the right;

• To learn whether or not her/his personal data have been processed,
• To request information as to processing if her/his data have been processed,
• To learn the purpose of processing of the personal data and whether data are used in accordance with their purpose,
• To know the third parties in the country or abroad to whom personal data have been transferred,
• To request rectification in case personal data are processed incompletely or inaccurately and to request notification of the operations made to third parties to whom personal data have been transferred,
• To request deletion or destruction of personal data and to request notification of the operations made to third parties to whom personal data have been transferred,
• To object to occurrence of any result that is to her/his detriment by means of analysis of personal data exclusively through automated systems and,
• To request compensation for the damages in case the person incurs damages due to unlawful processing of personal data.

You may send your requests in respect thereof through application form available on our website, through methods included in the application form or through calling our Customer Communication Center at 0850 202 1 202 and 444 44 77.

As per Article 13 of the Law, our Bank shall conclude your requests included in the applications made as specified above free of charge within the shortest time but within latest thirty days according to the nature of the request. If such transaction requires any additional cost, the Bank may request a fee in accordance with the conditions determined by Personal Data Protection Board and by taking account of the Updated Tariff specified by the Board.

IDENTITY OF THE DATA CONTROLLER

This Disclosure Text has been prepared by Vakıf Katılım Bankası A.Ş. (Bank or our Bank) acting in the capacity of Data Controller at the address of “Saray mahallesi Dr. Adnan Büyükdeniz caddesi no: 10 Ümraniye/ İstanbul” within the scope of Article 10 of Law No: 6698 on Protection of Personal Data and “Communiqué on Principles and Procedures to be Followed in Fulfilment of the Obligation to Inform”.

PROCESSING OF THE PERSONAL DATA AND PURPOSE OF PROCESSING

Your personal data such as your TR ID No, name, surname, father’s name and mobile phone number and information of the real estate subject to sale are transferred by the buyer (our customer) to our Bank for the purpose of commencement of the expertise process prior to sale of your real estate with financing support. Said personal data are used in line with and limited to the purposes mentioned above.

TRANSFER OF PERSONAL DATA

Your personal data are transferred to Webtapu Real Estate Valuation Portal of the Directorate General of Land Registry and Cadastre, to persons, institutions and organizations authorized by law and to our business partners, real estate appraisal firms, appraisers and to INVEX (expertise module) where online expertise transactions are conducted for the purpose of fulfilment of our legal obligations.

METHOD OF AND LEGAL REASON FOR PERSONAL DATA COLLECTION

Your personal data mentioned above are processed based on legal reasons when it is directly related to establishment or performance of an agreement and when it is expressly provided by law as mentioned in Article 5 of the Law. Your personal data are collected by the Directorate of Land Registry, intermediary institutions for the sale of real estate and by the buyer.

YOUR RIGHTS ON PROTECTION OF THE PERSONAL DATA

Within the scope of Article 11 of Law No: 6698 on Protection of Personal Data governing the rights of the relevant persons, Everyone, in connection with herself/himself, has the right;

• • to learn whether or not her/his personal data have been processed,
• • to request information as to processing if her/his data have been processed,
• • to learn the purpose of processing of the personal data and whether data are used in accordance with their purpose,
• • to know the third parties in the country or abroad to whom personal data have been transferred,
• • to request rectification in case personal data are processed incompletely or inaccurately and to request notification of the operations made to third parties to whom personal data have been transferred,
• • to request deletion or destruction of personal data and to request notification of the operations made to third parties to whom personal data have been transferred,
• • to object to occurrence of any result that is to her/his detriment by means of analysis of personal data exclusively through automated systems and,
• • to request compensation for the damages in case the person incurs damages due to unlawful processing of personal data.

You may send your requests in respect thereof through application form available on our website, through methods included in the application form or through calling our Customer Communication Center at 0850 202 1 202 and 444 44 77.

As per Article 13 of the Law, our Bank shall conclude your requests included in the applications made as specified above free of charge within the shortest time but within latest thirty days according to the nature of the request. If such transaction requires any additional cost, the Bank may request a fee in accordance with the conditions determined by Personal Data Protection Board and by taking account of the Updated Tariff specified by the Board.

IDENTITY OF THE DATA CONTROLLER

This Disclosure Text has been prepared by Vakıf Katılım Bankası A.Ş. acting in the capacity of Data Controller within the scope of Article 10 of Law No: 6698 on Protection of Personal Data and “Communiqué on Principles and Procedures to be Followed in Fulfilment of the Obligation to Inform”.

PROCESSING OF THE PERSONAL DATA AND PURPOSE OF PROCESSING

Your personal data including your identity information, contact information, photograph, references, educational background, occupational experience, military service status, nationality, association/foundation memberships, blood group, smoking habit, interests, hobbies, personal webpage information, social networks, marital status, gender, place of birth, date of birth, driving license ownership and information, curriculum vitae data including the works and projects carried out etc. that you share with us during your job application to and your candidate employee period in our bank are processed by us for the purposes mentioned below;

• Evaluation of your personal data during interview process,
• Determination and evaluation of education, training, health, qualification and skills required for the working conditions of the Bank,
• Communicating with the referees for the purpose of confirmation of the information provided,
• Evaluation of your conformity to candidate position,
• Implementation of employment proposal and job placement processes,
• If you are not hired now, evaluation of your curriculum vitae and communicating with you for a possible appropriate position in the future.

TRANSFER OF PERSONAL DATA

The career portal of our Bank is provided through a cloud service allocated by our contracted business partner to our institution. Your personal data that you submit to our Bank through Vakıf Katılım’s career portal, your unit/position data and occupational experience data are shared with authorized State Institutions and Organizations for the purpose of sending inventory and aptitude/ability test link by the relevant institution to you.

METHOD OF AND LEGAL REASON FOR PERSONAL DATA COLLECTION

Your personal data are collected based on and limited to legal reasons such as “presence of explicit consent for the processing of personal data” as specified in Article 5 and “presence of explicit consent for the processing of special categories of personal data” as specified in Article 6 of Personal Data Protection Law No: 6698 through the methods of uploading CVs to Vakıf Katılım’s career portal website, filling in resume forms on Vakıf Katılım’s career portal website, sending CVs to e-mail address, submitting printed CVs by hand etc.

YOUR RIGHTS ON PROTECTION OF THE PERSONAL DATA

Within the scope of Article 11 of Law No: 6698 on Protection of Personal Data governing the rights of the relevant persons, everyone, in connection with herself/himself, has the right;

• to learn whether or not her/his personal data have been processed,
• to request information as to processing if her/his data have been processed,
• to learn the purpose of processing of the personal data and whether data are used in accordance with their purpose,
• to know the third parties in the country or abroad to whom personal data have been transferred,
• to request rectification in case personal data are processed incompletely or inaccurately and to request notification of the operations made to third parties to whom personal data have been transferred,
• to request deletion or destruction of personal data and to request notification of the operations made to third parties to whom personal data have been transferred,
• to object to occurrence of any result that is to her/his detriment by means of analysis of personal data exclusively through automated systems and,
• to request compensation for the damages in case the person incurs damages due to unlawful processing of personal data.

You may send your requests in respect thereof in writing to Vakıf Katılım Bankası A.Ş. at the address of “Saray Mahallesi Dr. Adnan Büyükdeniz Caddesi No:10 Ümraniye/İstanbul” or through calling our Customer Communication Center at 0850 202 1 202 and 444 44 77 as per Communiqué on the Principles and Procedures of Application to the Data Controller.

Click to view Data Owner Application Form.

IDENTITY OF THE DATA CONTROLLER

This Disclosure Text has been prepared by Vakıf Katılım Bankası A.Ş. (Bank or our Bank) acting in the capacity of Data Controller at the address of “Saray mahallesi Dr. Adnan Büyükdeniz caddesi no: 10 Ümraniye/ İstanbul” within the scope of Article 10 of Law No: 6698 on Protection of Personal Data and “Communiqué on Principles and Procedures to be Followed in Fulfilment of the Obligation to Inform”.

PROCESSING OF THE PERSONAL DATA AND PURPOSE OF PROCESSING

In the event that you apply to our Bank through our branches for the purpose of using our credit card product, your personal data specified below are processed. Your identity information, contact information, occupational experience and educational background are processed by us in order to receive and evaluate your credit card application, to deliver your credit card if your application is granted, to conduct credit card management and reporting processes, to evaluate your limit increase requests and conduct marketing activities subject to your consent;

TRANSFER OF PERSONAL DATA

Your personal data may be transferred to the parties below as limited to the above-mentioned purposes;

• To authorized institutions and organizations (Banking Regulation and Supervision Agency, Capital Markets Board, The Central Bank of the Republic of Turkey, Turkish Revenue Administration, Judicial Authorities etc.) in order for our Bank to fulfill our legal obligations,
• To our business partners, other banks and financial institutions that we receive external service in order to carry out banking activities and to offer our products and services based on your request,
• To the relevant institutions if the card holder is subject to any foreign tax laws,
• To the contracted law offices in order to follow-up the judicial processes with respect to unpaid credit card debts or to settle the disputes,
• To insurance companies that we act as agent for the purpose of managing processes with respect to insurance policies or other insurance companies that we don’t act as agent with respect to insurance policies in which our Bank is a loss payee,
• To contracted business partners for the purpose of printing and distribution of the credit cards,
• To the relevant natural or legal persons to which our Bank is legally obliged to transfer personal data without being limited to the business purposes mentioned above.

METHOD OF AND LEGAL REASON FOR PERSONAL DATA COLLECTION

Your personal data are collected directly from you during your application, through automatic systems for the purpose of conclusion of the credit card processes or through indirect methods such as Identity Sharing System, Address Sharing System, KKB Score etc. In line with the above-mentioned purposes, your personal data are processed when it is necessary for our Bank to fulfil its legal obligations, when it is directly related to the credit card agreement that you sign or to the establishment of performance of the agreement or when its explicitly provided and stipulated by laws and may be used for marketing purposes in the event of your explicit consent.

YOUR RIGHTS ON PROTECTION OF THE PERSONAL DATA

Within the scope of Article 11 of Law No: 6698 on Protection of Personal Data governing the rights of the relevant persons, everyone, in connection with herself/himself, has the right;

• to learn whether or not her/his personal data have been processed,
• to request information as to processing if her/his data have been processed,
• to learn the purpose of processing of the personal data and whether data are used in accordance with their purpose,
• to know the third parties in the country or abroad to whom personal data have been transferred,
• to request rectification in case personal data are processed incompletely or inaccurately and to request notification of the operations made to third parties to whom personal data have been transferred,
• to request deletion or destruction of personal data and to request notification of the operations made to third parties to whom personal data have been transferred,
• to object to occurrence of any result that is to her/his detriment by means of analysis of personal data exclusively through automated systems and,
• to request compensation for the damages in case the person incurs damages due to unlawful processing of personal data.

You may send your requests in respect thereof through application form available on our website, through methods included in the application form or through calling our Customer Communication Center at 0850 202 1 202 and 444 44 77.

As per Article 13 of the Law, our Bank shall conclude your requests included in the applications made as specified above free of charge within the shortest time but within latest thirty days according to the nature of the request. If such transaction requires any additional cost, the Bank may request a fee in accordance with the conditions determined by Personal Data Protection Board and by taking account of the Updated Tariff specified by the Board.