Privacy Notice for the Protection of Personal Data

In order to protect the fundamental rights and freedoms of individuals, especially the privacy of private life, and to determine the obligations of natural and legal persons processing personal data, Ziraat Teknoloji A.Ş. ("Ziraat Teknoloji") as the data controller, would like to inform you in accordance with Article 10 of the Law on the Protection of Personal Data ("KVKK") titled "Information Obligation of the Data Controller," published in the Official Gazette dated April 7, 2016, and numbered 29677.

Ziraat Teknoloji maintains the confidentiality of personal information obtained from data subjects by keeping the system infrastructure and internet servers at the most reliable level.

Purpose, Method of Processing Personal Data, and Legal Basis

Ziraat Teknoloji processes your identity, communication, resume, legal transaction, customer transaction, location, camera images, risk management information, financial, professional experience, visual and auditory records, demographic information, education level, and income level information; through various contracts, electronic mail, application forms, written or verbal communication channels with our company, automatically in oral, written, or electronic form during the establishment of your legal relationship with our company and throughout the continuation of this relationship. This processing is based on legal reasons, including but not limited to the explicit provisions in the laws specified in Article 5/2(a) of the KVKK, the necessity for the establishment or performance of the contract as stated in Article 5/2(c) of the KVKK, the fulfillment of our company's legal obligations as stated in Article 5/2(d) of the KVKK, the data subject making the information public by themselves as stated in Article 5/2(e) of the KVKK, the establishment, exercise, or protection of a right as stated in Article 5/2(e) of the KVKK, and the necessity of processing for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject as per Article 5/2(f).

  • Ensuring the proper fulfillment of contractual obligations;
  • Recording your information to fulfill our obligations regarding knowing our customer in accordance with the regulations we are subject to;
  • Recording notifications such as complaints, objections, requests, suggestions, satisfaction in our notification management system to better serve you;
  • Planning and executing business activities and operational processes;
  • Conducting and executing customer relationships;
  • Ensuring the accuracy and currency of your data;
  • Fulfillment of support service obligations, customer satisfaction, corporate communication activities;
  • Evaluation of requests and complaints made via Social Media and proposing solutions;
  • Execution and management of business conducted with Ziraat Bank A.Ş. and domestic, foreign branches, and subsidiaries;
  • Execution of lawsuits and execution follow-ups that our company is a party to;
  • Planning and execution of corporate sustainability, corporate governance, strategic planning, and information security processes;
  • Recording camera images for security reasons and our obligations arising from the law;

In some of the activities carried out by Ziraat Teknoloji, explicit consent from you may be required when processing your personal data. In accordance with Article 6/2 of the KVKK, your explicit consent is required for the purposes of providing physical security and appropriate support services based on your fingerprint and disability status information and for the purposes of processing your personal data related to behavioral analyzes, planning, and execution of recruitment processes, introduction, and advertising activities in accordance with Article 5/1 of the KVKK.

Transfer of Your Personal Data

Your personal data may be transferred to public institutions and organizations such as the BRSA, CMB, MASAK, Union of Turkish Bar Associations, Ministry of Finance, insurance companies, third parties with whom we conduct our activities within the scope of privacy agreements and other similar contracts, including T.C. Ziraat Bank A.Ş. and its domestic and foreign subsidiaries, within the framework of the purposes and legal reasons specified in Article 1 of this Information Text in accordance with the provisions of the Law on the Protection of Personal Data regarding the transfer and international transfer of personal data.

Storage of Your Personal Data

Your personal data may be stored for the periods required by the purposes of processing. In the absence of another reason or legal ground, the personal data that has fulfilled its purposes is deleted, destroyed, or anonymized when the international law or regulation does not exist, and the contractual obligations arising from the contracts cease to exist.

Rights of the Data Subject Whose Personal Data is Processed

Regarding the processing of your personal data, you can exercise the following rights by making a request to Ziraat Teknoloji. Requests submitted in this context will be concluded free of charge by Ziraat Teknoloji within thirty days at the latest. However, if a fee is stipulated by the Personal Data Protection Board, a fee determined by our company can be charged. In this context, as the data subject;

  • Learning whether personal data is processed;
  • Requesting information if personal data has been processed;
  • Learning the purpose of processing personal data and whether they are used appropriately for their purpose;
  • Knowing the third parties to whom personal data are transferred domestically or abroad;
  • Requesting correction if personal data is incomplete or incorrectly processed;
  • Requesting deletion or destruction of personal data;
  • Requesting notification of corrections, deletions, or destructions to third parties to whom personal data has been transferred, in case of correction, deletion, or destruction of personal data;
  • Objecting to the emergence of a result against the person by analyzing the processed data exclusively through automatic systems;
  • Requesting compensation for damages in case of damage due to the illegal processing of personal data;

You have these rights. Within the scope of the Law No. 6698, you can personally submit your written applications regarding your rights regarding your personal data, along with identity documents encouraging your identity, and your petition containing your request, to "Yıldız Technical University Davutpaşa Campus Technology Development Zone C2 Block 34220 Esenler/ISTANBUL" in person, by notary, or to ziraatteknoloji@hs01.kep.tr via secure electronic signature, mobile signature, or using the electronic mail address previously notified to our company, and the applications will be accepted by our institution following the identity verification process, and a response will be provided within the periods specified in the law.