Identity Data

Name-surname, gender, date of birth, identity number, age, sole proprietorship name, place of birth, citizenship information, mother’s maiden name, marital status, mother’s name, father’s name, date of marriage, tax number, photocopy of driving licence, photocopy of identity card, country of birth, signature, identity card information other than the blood group and religion fields, photocopy of professional identity card, driving licence information other than the blood group, photocopy of passport, detailed civil registry copy, business card information, foreign identity number

Contact Data

Address, telephone number, mobile telephone number, e-mail address, place of residence, fax information

Finance Data

Bank account information, statement information, invoice information, financial transaction information, transaction amount, expense information, payment information (IBAN, trial balance), payment information (amount-method-date), amount and rate of interest payable, receivable balance, debt balance, total interest amount, income information, shareholding information

Risk Management Data

Risk Centre records

Request and Complaint Management Data

Complaint information received / collected from electronic and/or physical media, information on the actions taken for complaints received / collected from online channels, assessment reports of complaints received / collected from online channels

Your identity, contact, finance and risk management data

➢ Obtaining the collateral relating to the suretyships and establishing the legal transactions relating to the collateral,

➢ Conduct of the collateral procedures,

➢ Assessment of the suitability for accepting a mortgage,

➢ Creation and conclusion of the suretyship agreement based on the financial leasing service,

➢ Fulfilment of the requirements of the financial leasing agreement to which our Company is a party,

➢ Based on the legal ground that processing of personal data of the parties of a contract is necessary, provided that it is directly related to the establishment or performance of the contract

Your identity, contact, finance and risk management data

➢ Monitoring of financial transactions,

➢ Performance by our relevant business units of the necessary work for the realisation of the commercial activities conducted by our Company and execution of the related business processes,

➢ Determination and implementation of our Company’s commercial and business strategies,

➢ Monitoring and conduct of legal affairs,

➢ Planning and execution of operational risk processes

➢ Based on the legal ground that processing of data is necessary for the legitimate interests pursued by the data controller, provided that this processing shall not violate the fundamental rights and freedoms of the data subject

Your identity, contact, finance and risk management data

➢ Fulfilment of the requests of official institutions,

➢ Provision of information arising from the legislation to authorized institutions,

➢ Ensuring compliance with the retention obligations prescribed in the legislation,

➢ Responding to data subject applications in accordance with the legislation and carrying out the necessary procedures,

➢ Carrying out risk management and audit activities,

➢ Fulfilment of obligations such as identity verification, suspicious transaction reporting, record retention and provision of information which are required under the Law No. 4208 on the Prevention of Money Laundering and the relevant secondary legislation

➢ Based on the legal reason that it is clearly stipulated by law and is mandatory for the data controller to fulfill its legal obligation

Your identity, contact, finance, risk management, request and complaint data

➢ Retention of personal data throughout the general statute of limitations period for the purpose of constituting evidence in possible disputes that may arise in the future,

➢ Receipt, assessment and conclusion of your requests and complaints,

➢ Monitoring of litigation and dispute processes,

➢ Carrying out debt collection processes

➢ Based on the legal reason that data processing being mandatory for the establishment, exercise or protection of a right

➢ Our suppliers and service providers
(Refers to all 3rd party service providers from which goods and services are purchased in order to provide our services and to carry out our activities. For example; firms from which we receive consultancy, parties from which we receive information technology infrastructure services, parties from which we receive services in marketing processes, engineering firms, law offices, translation offices, cargo/courier/distribution companies, surveillance/audit/archive firms, expert valuation firms and technical maintenance, repair, control and monitoring firms, etc.)

Within the scope of fulfilling the Purposes specified above, based on the legal grounds stated for these Purposes;

Procurement by our Company of consultancy, information security, infrastructure, maintenance and repair, analysis, development, finance, accounting, storage and archive services within the scope of the fulfilment of the Purposes specified above

➢ Our business partners
(Refers to the parties with which we have a cooperation or business partnership relationship for the purpose of the sale of our Company’s products and services, primarily the financial leasing processes. For example; traffic consultancies, insurance companies, customs consultancies, banks, financial institutions, financiers, credit rating agencies, etc.)

Based on the legal ground of being directly related to the establishment or performance of the contract;

➢ Provision of the products and services you request from our Company,

➢ Fulfilment of the requirements of the contract concluded with our Company,

➢ Carrying out the risk assessment in order to provide the necessary financing within the scope of the financial leasing agreement,

Based on the legal ground that the processing of your data is mandatory for our legitimate interest, provided that it does not harm your fundamental rights and freedoms;

➢ Conduct of our business activities,

➢ Carrying out the risk assessment in order to provide the necessary financing within the scope of the financial leasing agreement,

➢ Monitoring and conduct of legal processes

➢ Sellers
(Refers to the parties that carry out the sale of all kinds of movable and immovable goods in the financial leasing processes.)

Based on the legal ground of being directly related to the establishment or performance of the contract;

➢ Purchase by the Company of the goods subject to financial leasing,

➢ Conduct of our business activities,

➢ Conduct of the financial leasing processes

➢ Our affiliates and shareholders
(Refers to the companies in which the Company is a direct or indirect shareholder.)

Based on the legal ground that the processing of your data is mandatory for our legitimate interest, provided that it does not harm your fundamental rights and freedoms;

➢ Conduct of our business activities

➢ Financial Group Companies
(Refers to the financial group companies established within the scope of the Law No. 5549, whose parent institution is Koç Holding A.Ş., and which are located under the Yapı ve Kredi Bankası Financial Group umbrella established in connection therewith.)

Based on the legal ground of being expressly provided for by the laws and being mandatory in order for the data controller to fulfil its legal obligation;

➢ Fulfilment of our legal obligations

➢ Public institutions and private organizations authorized by law
(Private and public institutions and organizations authorized to request information and documents due to relevant legal regulations or legal proceedings, private and public institutions and organizations to which information must be transferred pursuant to legal regulations, and private and public institutions and organizations with which we verify information to ensure the security of legal transactions. For example: BRSA, CMB, CBRT, Ministry of Treasury and Finance, MASAK, Risk Center of the Banks Association of Türkiye, Revenue Administration, SSI, CRA, Credit Bureau, judicial authorities, notaries, Union of Turkish Notaries, REM, etc.)

Based on the legal ground of being expressly provided for by the laws and being mandatory in order for the data controller to fulfil its legal obligation;

➢ Compliance with legal reporting and information requests,

➢ Conducting legal audit activities,

➢ Conducting legal proceedings,

➢ Fulfilling our obligations arising from legislation