➢Updating client contact information,

➢Carrying out the identification procedures of leased goods and periodic inspection procedures,

➢Opening sales and financial leasing records and performing invoicing activities,

➢Preparation and execution of lending operations,

➢Establishment or performance of a financial leasing agreement for the products and services of our Company,

➢Planning and execution of the restructuring process,

➢Preparation and execution of lending operations,

➢Carrying out the transfer of ownership transactions if agreed in the agreement,

➢Provision of support services after financial leasing

➢Maintenance of client relations,

➢Follow-up of financial transactions,

➢Carrying out the necessary work by our business units and carrying out the relevant business processes in order for the data subjects to benefit from the products and services offered by our Company, including the sales and marketing activities of our products and services,

➢Carrying out the necessary work by our relevant business units for the realisation of the commercial activities conducted by our Company and execution of the related business processes,

➢Ensuring the legal, technical and commercial-business security of our Company and the data subjects who are in business relationship with our Company,

➢Determining and implementing the commercial and business strategies of our company,

➢Planning and execution of operational risk processes,

➢Execution of information security processes,

➢Planning and execution of client satisfaction and corporate communication activities,

➢Carrying out sweepstakes, campaigns, competitions, promotions or advertising activities,

➢Fulfilment of the requests of official institutions,

➢Providing information to authorised institutions due to legislation,

➢Ensuring compliance with the storage obligations stipulated in the legislation,

➢Responding to the data subject applications in accordance with the legislation and carrying out the necessary procedures,

➢Carrying out risk management and audit activities

➢Identifying and controlling risk groups for the determination of credit limits to be granted,

➢Fulfilment of obligations such as identity verification, suspicious transaction reporting, record keeping and providing information required by the Law No. 4208 on Prevention of Money Laundering and related secondary regulations.

➢Evidential significance in possible disputes that may arise in the future,

➢Receipt, evaluation and finalisation of your requests and complaints

➢Sending advertisements, promotions, campaigns and similar commercial electronic messages to your contact information you share with our Company

➢Necessity to process data for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject (Employees of merchants or tradesmen clients)

➢(Other persons) Explicit consent

➢Our business partners
(It refers to the parties with whom we have a cooperation or business partnership relationship for the sale of our Company's products and services, especially financial leasing processes. For instance; traffic consultancies, insurance companies, customs consultancies, banks, financial institutions, financiers, credit rating agencies, etc.).

Based on the legal ground that it is directly related to the execution or performance of the contract;

➢Provision of the products and services you request from our company,

➢Fulfilment of the requirements of the contract concluded with our Company,

➢Risk assessment for the provision of the necessary financing within the scope of the financial leasing contract,

Based on the legal ground that the processing of your data is mandatory for our legitimate interest, provided that it does not harm your fundamental rights and freedoms;

➢Execution of our business activities,

➢Making a risk assessment to provide the necessary financing under the financial leasing agreement,

➢Follow-up and execution of legal procedures,

➢Sellers
(It refers to the parties that realise the sale of all kinds of movable and immovable goods in financial leasing processes.)

Based on the legal ground that it is directly related to the establishment or performance of the contract;

➢Purchase of goods subject to financial leasing by the Company,

➢Execution of our business activities,

➢Execution of financial leasing processes,

➢Our subsidiaries and shareholders
(It refers to the companies in which the Company has direct or indirect shareholding)

Based on the legal ground that the processing of your data is mandatory for our legitimate interest, provided that it does not harm your fundamental rights and freedoms;

➢Execution of our business activities,

➢Financial Group Companies
(It refers to the financial group companies under the umbrella of Yapı Kredi Bank Financial Group, which was established within the scope of Law No. 5549 and whose parent company is Koç Holding A.Ş. and which is affiliated to Yapı Kredi Bank Financial Group.)

Based on the legal grounds that it is clearly stipulated by law and that it is mandatory for the data controller to fulfil its legal obligation;

➢Fulfilment of our legal obligations,

➢Our suppliers and service providers
(It refers to all third party service providers from whom goods and services are purchased in order to provide our services and carry out our activities. For instance, companies from which we obtain consultancy, parties from which we obtain information technology infrastructure services, parties from which we obtain services in marketing processes, engineering firms, law offices, translation offices, cargo/courier/distribution companies, surveillance/audit/archive firms, expertise and appraisal firms and technical maintenance, repair and inspection follow-up firms, etc.).

Based on the legal ground that the processing of your data is mandatory for our legitimate interest, provided that it does not harm your fundamental rights and freedoms;

➢Execution of our business activities,

➢Management of our company's information systems and transaction security processes,

➢Implementation of infrastructure, maintenance, repair, analysis and development processes of the company systems,

➢Performance of paperwork procedures related to finance, accounting, storage and archive activities.

➢Legally authorised public institutions and legally authorised private institutions
(It refers to private and public institutions and organisations authorised to request information and documents due to relevant legislation or legal processes, private and public institutions and organisations to which information transfer is mandatory due to legislation, and private and public institutions and organisations to which we confirm information to ensure the security of legal proceedings. For instance: Banking Regulation and Supervision Agency (BRSA), Capital Markets Board (CMB), Central Bank of the Republic of Turkey (CBRT), Ministry of Treasury and Finance, Financial Crimes Investigation Board (MASAK), Banks Association of Turkey Risk Centre, Revenue Administration (RA), Social Security Institution (SSI), Credit Registry Agency (CRA), Credit Registration Bureau (CRA), judicial authorities, notaries, Notaries Union of Turkey (TNB), Registered Electronic Mail KEP), etc.)

Based on the legal grounds that it is clearly stipulated by law and that it is mandatory for the data controller to fulfil its legal obligation;

➢Fulfilment of legal reporting and information requests,

➢Execution of legal audit activities,

➢Execution of legal processes,

➢Fulfilment of our obligations arising from the legislation,