KVKK Clarification Text

As Faturamatik Elektronik Para ve Ödeme Kuruluşu A.Ş. (the 'Company'), we place the utmost importance on the protection and security of your personal data. With this awareness, we ensure that all personal data belonging to individuals who benefit from our products and services, as well as all persons affiliated with the Company, are processed and stored with the highest level of care and diligence. In full awareness of this responsibility, we, as the 'Data Controller' under the Law No. 6698 on the Protection of Personal Data ('Law') and relevant regulations, would like to provide you with transparent information regarding the methods of collection, purposes of processing, legal grounds for processing, and your rights concerning your personal data.

The personal data you provide; Payment and Securities Settlement Systems, Payment Services and Electronic Money Institutions Law, Banking Law, Bank Cards and Credit Cards Law, Law on the Prevention of Money Laundering, and other legislation applicable to our company, as well as to fulfill our obligations arising from such legislation, the Central Bank of the Republic of Turkey (CBRT), Banking Regulation and Supervision Agency (BDDK), the Central Registry Agency Inc., the Financial Crimes Investigation Board, the Ministry of Treasury and Finance, the Credit Bureau, the Turkish Payment Institutions and Electronic Money Institutions Association (TÖDEB), and the Ministry of Treasury and Finance, Ensuring that Payment Services activities are carried out in accordance with our Company's procedures and/or relevant legislation, Execution of transactions and management of relationships conducted by our Company with its domestic and foreign Representatives, group companies, contracted institutions, contracted banks, and companies providing support services, Conducting the necessary work by our relevant units to enable you to benefit from the products and services offered by our Company, Enabling membership registration via the website and performing identity verification during membership creation, sending commercial electronic communications in accordance with your consent preferences, reporting and evaluating your shopping data, performing statistical analyses, ensuring the legal and commercial security of our Company and persons in business relations with our Company, determining and implementing our Company's commercial and business strategies, managing customer relationships within the scope of planning and executing customer relationship management processes, updating customer contact information, recommending products and services offered by our Company to you based on your preferences, usage habits, and needs, offering you personalized advertisements, campaigns, and other benefits, and ensuring the implementation of our Company's human resources policies, in accordance with the personal data processing conditions and purposes specified in Articles 5 and 6 of the Law. Your personal data will be processed in accordance with the following principles: a) Compliance with the law and rules of good faith b) Accuracy and, where necessary, updating c) Processing for specified, explicit, and legitimate purposes d) Processing that is relevant, limited, and proportionate to the purposes for which it is processed e) Retention for the period required by applicable legislation or necessary for the purposes for which it is processed.

The personal data you provide; Payment and Securities Settlement Systems, Payment Services and Electronic Money Institutions Law, Banking Law, Bank Cards and Credit Cards Law, Law on the Prevention of Money Laundering, and other legislation applicable to our company, as well as to fulfill our obligations arising from such legislation, the Central Bank of the Republic of Turkey (CBRT), Banking Regulation and Supervision Agency (BDDK), the Central Registry Agency Inc., the Financial Crimes Investigation Board, the Ministry of Treasury and Finance, the Credit Bureau, the Turkish Payment Institutions and Electronic Money Institutions Association (TÖDEB), and the Ministry of Treasury and Finance, Ensuring that Payment Services activities are carried out in accordance with our Company's procedures and/or relevant legislation, Execution of transactions and management of relationships conducted by our Company with its domestic and foreign Representatives, group companies, contracted institutions, contracted banks, and companies providing support services, Conducting the necessary work by our relevant units to enable you to benefit from the products and services offered by our Company, Enabling membership registration via the website and performing identity verification during membership creation, sending commercial electronic communications in accordance with your consent preferences, reporting and evaluating your shopping data, performing statistical analyses, ensuring the legal and commercial security of our Company and persons in business relations with our Company, determining and implementing our Company's commercial and business strategies, managing customer relationships within the scope of planning and executing customer relationship management processes, updating customer contact information, recommending products and services offered by our Company to you based on your preferences, usage habits, and needs, offering you personalized advertisements, campaigns, and other benefits, and ensuring the implementation of our Company's human resources policies, in accordance with the personal data processing conditions and purposes specified in Articles 5 and 6 of the Law.

Your personal data may vary depending on the service, product, or commercial activity provided by the “Company”; it may be collected through automated or non-automated methods, including our departments, representative offices, regional offices, sales teams, call centers, contracted institutions, organizations, and companies, SMS channels, websites, social media platforms, mobile applications, member workplace POS channels, contracted stores, companies providing support services, other channels through which the “Company” communicates with you or may communicate with you in the future, and similar means, either verbally, in writing, or electronically. Your personal data collected for this legal reason may be processed and transferred within the scope of the personal data processing conditions and purposes specified in Articles 5 and 6 of Law No. 6698 for the purposes mentioned above. In addition, your personal data mentioned above may be processed and transferred in accordance with the provisions of the Identity Reporting Law No. 1774, the Turkish Commercial Code, the Payment and Securities Settlement Systems, Payment Services and Electronic Money Institutions Law No. 6493, BDDK legislation, MASAK legislation, the Consumer Protection Law No. 6502, the Condominium Law No. 634, the Insurance Law, and the secondary legislation provisions related to the aforementioned laws, obligations arising from tax legislation, regulations of supervisory and regulatory institutions and organizations, and other mandatory cases imposed by competent public authorities and other legislation provisions. and may be transferred to the physical archives and information systems belonging to the “Company” and kept under custody both in digital and physical environments for the statutory periods.

The rights you have under Article 11 of the Law are as follows:

• Find out whether your personal data is being processed,
• Kişisel verileriniz işlenmişse buna ilişkin bilgi talep etme,
• To learn the purpose for which your personal data is processed and whether it is being used for its intended purpose,
• Knowing the third parties to whom your personal data is transferred within or outside the country,
• If your personal data has been processed incompletely or incorrectly, you have the right to request that it be corrected and that the third parties to whom your personal data has been transferred be notified of this action.
• Even if your personal data has been processed in accordance with the law and other relevant legal provisions, you have the right to request the deletion or destruction of your personal data if the reasons for its processing no longer exist, and to request that this action be communicated to third parties to whom your personal data has been transferred.
• Objecting to a result that is detrimental to the individual arising solely from the analysis of processed data by automated systems,
• Requesting compensation for damages incurred due to the unlawful processing of personal data,

In accordance with Article 13/1 of the Law, you can submit your request regarding the exercise of the rights mentioned above, Data Subject Application Form You can submit the Data Subject Application Form by filling it out and using the methods prescribed by the legislation. Depending on the nature of your request, it will be processed and concluded free of charge within the shortest time and no later than thirty days; however, if the process requires an additional cost, a fee may be charged according to the tariff set by the Personal Data Protection Board. In accordance with the Law on the Protection of Personal Data No. 6698, I acknowledge and undertake that I have read, reviewed, evaluated, and understood the information provided in this clarification text, which explains that all personal data I have provided and/or that has been collected by Faturamatik Electronic Money and Payment Institution Inc. may be processed by Faturamatik Electronic Money and Payment Institution Inc. under Articles 5 and 6 of the Law and transferred in accordance with Articles 8 and 9 of the Law.