Data Categorization

During your visit to our website, the following personal data may be processed:

• Name Surname
• Turkish ID Number/Foreigner ID Number/Tax ID Number
• Email
• Mobile Phone
• Transaction Security Data: Website login-logout information, IP address information
• Information and documents related to visitor requests

Purposes of Personal Data Processing

Your collected personal data will be processed for purposes such as,

• Providing feedback on your suggestions, complaints, and requests related to our services and activities,
• Fulfilling legal obligations required by legislation,
• Providing necessary information to regulatory and supervisory institutions and official authorities upon their request and inspection,
• Improving the services we offer through our website.

These personal data will be processed in accordance with the personal data processing conditions and purposes specified in Article 5 of Law No. 6698. Your personal data will be securely stored electronically for the specified purposes. Within the scope of these activities, our Company acts in compliance with all legal obligations stipulated in the legislation, especially the KVKK, regarding the protection of personal data. For detailed information about our company's data processing policy, you can review the BPN Personal Data Protection and Privacy Policy at https://www.bpn.com.tr/gizlilik-ve-kvk-hakkindabilgilendirme.

To Whom and for What Purposes Personal Data May Be Transferred

Your personal data may be transferred to authorized public institutions and organizations in compliance with the personal data transfer conditions specified in Article 8 of Law No. 6698 to fulfill our legal obligations arising from legislation.

Methods of Collecting Your Personal Data

Your personal data is collected through lawful means, either automatically or non-automatically, when you visit https://www.bpn.com.tr. The personal data collected through these channels is processed based on legal grounds, including:

• Explicit provisions in the laws,
• Necessity for the data controller to fulfill its legal obligations,
• Processing being necessary for the legitimate interests pursued by the data controller, provided that

it does not prejudice the fundamental rights and freedoms of the data subject.

Rights of Data Subjects and How to Exercise These Rights

As data subjects:

• You have the right to learn whether your personal data are processed or not,
• If your personal data are processed, you have the right to request information about this processing,
• You have the right to learn the purpose of the processing of your personal data and whether they are used for their intended purpose,
• You have the right to know the third parties to whom your personal data are transferred domestically or internationally,
• If your personal data are incomplete or incorrectly processed, you have the right to request their correction and to request notification of this correction to third parties to whom your personal data have been transferred,
• Even if your personal data are processed in accordance with Law No. 6698 and other relevant legislation, you have the right to request the deletion or destruction of your personal data if the reasons requiring their processing have ceased to exist and to request notification of this deletion or destruction to third parties to whom your personal data have been transferred,
• You have the right to object to the occurrence of a result against you as a result of analyzing your processed data exclusively through automated systems,
• If you suffer damages as a result of your personal data being processed unlawfully, you have the right to demand compensation for the harm incurred

For effective exercise of these rights, you can send your request containing your identity information and other required information regarding the right you want to exercise in accordance with Article 11 of the KVKK;

• in writing to Maslak Mah. AOS 53. Sok. No:7/1, İçKapı No:2-3 Sarıyer/Istanbul,
• or via e-mail to [email protected]

For more detailed information about additional application methods, you can review the Relevant Person Application Form.

If your application requires a cost, a fee may be charged in accordance with the tariff determined by the Personal Data Protection.