Communication Process Clarification Text | Yapı Kredi Financial Leasing J.S.Co.

YAPI KREDİ FİNANSAL KİRALAMA A.O.
COMMUNICATION PROCESS CLARIFICATION TEXT

According to Law on Protection of Personal Data numbered 6698 (“Law”) your personal data can be processed by Yapı Kredi Finansal Kiralama Anonim Ortaklığı (“Company”) as data controller in the scope detailed below.

Purposes for Processing of Personal Data and Legal Grounds

Your personal data can be processed for the purposes presented below (“Purposes”) by our Company in the scope of the data processing terms and purposes given in article 5 of the Law.

Personal Data Categories	Purposes of Personal Data Processing	Legal Grounds
Your identity, communication, customer process, demand, and complaint data	➢Receipt, assessment, and conclusion of your opinions, requests, complaints, and recommendations, ➢Processing of processes relevant to your opinions, requests, complaints, and recommendations by the concerned business units,	➢Data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject
Your identity, communication, customer process, demand, and complaint data	➢Carrying out demands of official institutions, ➢Ensuring compliance with storage obligation foreseen in legislation, ➢Ensuring compliance with storage obligation foreseen in legislation, ➢Responding to applications of data subject in accordance with the legislation and carrying out the necessary procedures	➢Data processing is openly foreseen in law and mandatory for data controller to fulfil its legal obligation
Your identity, communication, customer process, demand, and complaint data	➢Constituting evidence in possible conflicts in the future, ➢Receipt, assessment, and conclusion of your demands and complaints	➢Data processing is mandatory for establishment, use or protection of a right

Processed Personal Data May be Transferred to Who, for Which Purposes, and on Which Legal Grounds

Your personal data can be transferred in the scope of the data processing terms regulated in article 5 of the Law and in line with rules on transfer of personal data given in article 8 of the Law.

Transferred Persons/Institutions	Legal Grounds and Purpose of Transfer
➢Our suppliers and service providers (Service providers mean all 3rd parties that goods and services are procured from to ensure our services can be presented and activities are carried out. For instance; companies we get consultancy, parties we get information technology infrastructure, parties we get services in marketing processes, engineering companies, law offices, translation bureaus, cargo/overnight cargo/distribution companies, monitoring/audit/archiving companies, expertise assessment companies, and technical repair, maintenance, control companies, etc.)	Based on the legal ground that processing of your data is mandatory for our legitimate interests provided that your basic rights and freedoms are unharmed; ➢Management of communication process, ➢Carrying out of our business activities, ➢Carrying out of our company’s information systems and transaction safety processes, ➢Realizing infrastructure, repair and maintenance and analysis and development processes of company systems, ➢Carrying out of paperwork related to finance, accounting, archiving activities,
➢Legally authorized public institutions and legally authorized private institutions (Means private and public institutions authorized to request information and documents based on relevant legal regulations or legal processes, private and public institutions that are required to transfer information in accordance with legal regulations, and private and public institutions whose information we confirm to ensure legal transaction security. For example: BRSA, CMB, CBRT, Ministry of Treasury and Finance, MASAK, Turkish Banking Association Risk Center, GİB, SGK, MKK, Credit Registration Bureau, judicial authorities, notaries, TNB, KEP, etc.)	Based on the legal ground that it is clearly prescribed by law and being mandatory for data controller to fulfil its legal obligation; ➢Realizing legal reporting and information requests, ➢Carrying out of legal audit activities, ➢Execution of legal processes, ➢Realizing our legal obligations

Transferred Persons/Institutions

Legal Grounds and Purpose of Transfer

➢Our suppliers and service providers
(Service providers mean all 3rd parties that goods and services are procured from to ensure our services can be presented and activities are carried out. For instance; companies we get consultancy, parties we get information technology infrastructure, parties we get services in marketing processes, engineering companies, law offices, translation bureaus, cargo/overnight cargo/distribution companies, monitoring/audit/archiving companies, expertise assessment companies, and technical repair, maintenance, control companies, etc.)

Based on the legal ground that processing of your data is mandatory for our legitimate interests provided that your basic rights and freedoms are unharmed;

➢Management of communication process,

➢Carrying out of our business activities,

➢Carrying out of our company’s information systems and transaction safety processes,

➢Realizing infrastructure, repair and maintenance and analysis and development processes of company systems,

➢Carrying out of paperwork related to finance, accounting, archiving activities,

➢Legally authorized public institutions and legally authorized private institutions
(Means private and public institutions authorized to request information and documents based on relevant legal regulations or legal processes, private and public institutions that are required to transfer information in accordance with legal regulations, and private and public institutions whose information we confirm to ensure legal transaction security. For example: BRSA, CMB, CBRT, Ministry of Treasury and Finance, MASAK, Turkish Banking Association Risk Center, GİB, SGK, MKK, Credit Registration Bureau, judicial authorities, notaries, TNB, KEP, etc.)

Based on the legal ground that it is clearly prescribed by law and being mandatory for data controller to fulfil its legal obligation;

➢Realizing legal reporting and information requests,

➢Carrying out of legal audit activities,

➢Execution of legal processes,

➢Realizing our legal obligations

Method of Personal Data Collection

Your personal data are collected in the scope of fulfilment of the Purposes mentioned above via call center, company’s internet site, e-mail in electronic setting and cargo/post via physical setting.

Rights of Data Subject Cited in Article 11 of the Law

We would like to inform you that you have the following rights regarding your personal data under article 11 of the Law:

Learning whether your personal data is processed or not,
Requesting information if your personal data is processed,
Learning the purpose of processing your personal data and whether it is used for its intended purpose,
Learning the third parties to whom your personal data is transferred at home or abroad,
Requesting correction of your personal data if it is incompletely or incorrectly processed and requesting that the action taken in this context is notified to third parties to whom your personal data is transferred,
Requesting the deletion or destruction of personal data in case the reasons for processing no longer exist, even though it is processed in accordance with the Law and other relevant legal provisions, and requesting that the action taken in this context is notified to third parties to whom your personal data is transferred,
In case your data is analyzed exclusively through automatic systems, objecting any detrimental results
Requesting compensation for the damage in case of damage due to unlawful processing of your personal data.

İIf you send your requests on your rights as data subject to our Company via Data Subject Application Form on https://www.ykleasing.com.tr/Files/leasing/Ilgili_Kisi_Basvuru_Formu.pdf address, your request will be finalized in the shortest possible time and in the latest in 30 (thirty) days based on the nature of your request. However, in case the procedure requires a separate cost, the Company will charge the price mentioned in the tariff determined by Protection of Personal Data Board.

YAPI KREDİ FİNANSAL KİRALAMA A.O.
COMMUNICATION PROCESS CLARIFICATION TEXT

Mandatory Preferences

Functionality and Preference Cookies

Performance and Analysis Cookies

Targeting or Advertising Cookies

YAPI KREDİ FİNANSAL KİRALAMA A.O.COMMUNICATION PROCESS CLARIFICATION TEXT

You are leaving YkLeasing.com.tr

Mandatory Preferences

Functionality and Preference Cookies

Performance and Analysis Cookies

Targeting or Advertising Cookies

YAPI KREDİ FİNANSAL KİRALAMA A.O.
COMMUNICATION PROCESS CLARIFICATION TEXT