Clarification Letter On Personal Data Protection
16 July 2018
As Turkiye Finans Katılım Bankası A.Ş., protection of the rights of privacy of our customers and other related persons, ensuring information security and information protection are among our main principles.
Within the scope of the Law on Protection of Personal Data no. 6698 ("Law"), your personal data you shared with the Bank (information on your education, work and social life, your financial status) and the sensitive personal data (information on membership to trade union / association / foundation, penal conviction, marital status, biometric data, and medical status etc.) shall be retained, saved, updated, and may be disclosed/transferred to 3rd persons (in cases permitted by the legislation), classified in compliance with the Law and processed by the manners stipulated under the Law.
Processing Your Personal Data:
Any operation which is performed upon your personal data such as collection, recording, storage, preservation, alteration, adaptation, disclosure, transfer, retrieval, making available for collection, categorization or blocking its use by wholly or partly automatic means or otherwise than by automatic means which form part of a filing system is deemed as "Processing of Personal Data".
Within the scope of the Law, your Personal Data which you have provided to our Bank are being processed;
a. By Türkiye Finans Katılım Bankası A.Ş in its capacity as the Data Supervisor,
b. In order to use in all services and products offered by our Bank within the framework of the Banking Law and other related laws and legal regulations and participation banking principles, including, but not limited to, fulfilling the obligations stipulated in the legislation or BRSA, CBRT and other authorities, performing participation banking activities, offering new products and services in line with customer satisfaction and needs, and rendering services, providing financing, rendering payment services, provision of intermediary service for order transmission and investment services, custody services, foreign exchange transactions, agency services (insurance, retirement etc.),
c. By obtaining through head office departments and branches, telephone banking, internet banking, mobile banking, POS, ATM, call center and similar channels of the Bank in verbal, written and electronic environment.
Transfer of Your Personal Data:
Due to the foregoing reasons, your personal data may be shared with persons explicitly authorized by law (BRSA, CMB CBRT etc.), with persons listed in Article 73 of the Banking Law, with program partners and companies rendering service to the Bank, with domestic and foreign correspondent banks, the counter banks in case of SWIFT transactions, and with partners and affiliates of the Bank domiciled at home or abroad with regards to consolidated financial statement preparation–risk management and internal audit practices
and with the
IRS (US Internal Revenue Service), the European Securities and Markets Authority (ESMA) and similar institutions in case you are natural person or a legal entity with origins in the USA, the EU or other foreign countries or trade in markets of the USA, the EU and/or other overseas markets or subject to tax laws applicable in the USA, the EU or other foreign countries.
Cases Where Your Data May Be Processed Due to Risk Group:
If you are in the same risk group as our bank customers, your personal data can be processed even if you are not a customer of our Bank, in the framework of financial evaluations and in accordance with the Banking
legislation, in order to determine, identify, monitor and report regarding the risk group and control the financing disbursed for the risk group.
With the term "Risk Group", it is referred to, in short, including but not limited to the persons who enter into a surety, personal guarantee or similar relationship with you, your spouse, your children, your parents and/or legal entities where these persons are Board members or General Directors, control or is a partner of the same, to such extent that the insolvency of any of them will give rise to the insolvency of one or more of the others. However, the principles regarding the determination of the Risk Group can be updated within the framework of the Banking Legislation.
Your Rights as Data Owner:
We kindly submit for your information that, regarding Personal Data processing, you may apply to Türkiye Finans Katılım Bankası A.Ş, as the Data Supervisor, and you are entitled to:
a. Learn whether your personal data are being processed,
b. Request information in case your personal data has been processed,
c. Find out the reason for processing of personal data and whether they have been used properly for that purpose,
ç. Know the third parties to whom personal data have been transmitted at home or abroad,
d. Request the correction of personal data if they are missing or incorrect,
e. Request for the deletion or destruction of the personal data, within the framework of the prescribed provisions set forth in the Law,
f. Request that the third parties to whom personal data have been transferred be notified of these matters,
g. Object to any unfavorable result that they suffer due to analysis of processed data only by means of automatic systems, and
ğ. Demand indemnification of loss if you suffer loss due to your personal data being processed in breach of the Law.
We kindly submit for your information that you are entitled to the above mentioned rights.
You may submit your requests and complaints related to processing of your Personal Data via the KEP address firstname.lastname@example.org or through the branches of the Bank.