Clarification Text on Mobile Application by Yapı Kredi Finansal Kiralama A.Ş.

During your use of our Yapı Kredi Leasing Mobile application (Hereinafter referred to as , “Mobile Application” ”), we, as Yapı Kredi Finansal Kiralama A.Ş. (Hereinafter referred to as “Yapı Kredi Financial Leasing”, “Yapı Kredi Leasing” or “Company"), would like to inform you about the processing of your personal data and other information as well as the permissions we collect through the Mobile Application, in order to improve your experience with some functions in our Mobile Application and to use it more comfortably.

The use of our Mobile Application is carried out in accordance with the legislation we are subject to, especially the Personal Data Protection Law No. 6698 (“Law”).

For What Purposes the Personal Data will be Processed and the Legal Reasons

Your collected personal data may be processed for the purposes set out below (“Purposes”) withinthe personal data processing conditions and purposes specified in Article 5 of the Law.

Based on the legal reason that it is clearly stipulated by the law and is mandatory for the data controller to fulfill its legal obligation;

• Data on your identity, contact details and transaction security in order to fulfill official institution requests,
• Data on your identity, contact details and transaction security in order to provide information to authorized bodies based on legislation,
• Data on your identity, contact details and transaction security in order to ensure compliance with the storage obligations stipulated in the legislation,
• Data on your identity, contact details and transaction security in order to respond to the related individual applications in accordance with the legislation and to carry out the necessary actions,
• Data on your identity, contact details and transaction security in order to fulfill our legal obligations arising from the legislation to which our company is subject,

Based on the legal reason that it is necessary to process personal data of the parties to the contract, provided that it is directly related to the establishment or performance of a contract;

• Data on your identity, contact details and transaction security in order to carry out your sign-up procedures in the Mobile Application,
• Data on your identity, contact details and transaction security in order to benefit from the products and services available in the Mobile Application,

Based on the legal reason that data processing is mandatory for the legitimate interests of the data controller, without prejudice to the fundamental rights and freedoms of the person concerned;

• Data on your identity, contact details and transaction securityin order for our business units to carry out the necessary works and to perform the relevant business processes so that you can benefit from the products and services offered by our company using the Mobile Application,
• Data on your identity, contact details and transaction security for the purpose of planning and execution of our company's commercial and/or business strategies,
• Data on your identity, contact details and transaction security in order to provide the relevant products and services to you within the scope of the permissions you have granted on your device for the Mobile Application.

As a company, we obtain permissions in our Mobile Application through different functions for various purposes on the basis of different operating systems and process your personal data through these functions. The main purposes of these application permissions as well as the collected data and the application are as follows:

 

Android Phone Operating Systems

App Permission	Reason for Permission
Identity	This is the permission requested so that we can monitor the total number of our customers using our Mobile Application and send you instant notifications
Phone	It is the permission obtained for calling Yapı Kredi Leasing branches and Customer Communication Center from the contact menu and for sending a one-time password.
Camera	It is the permission required to access the Payment Center by scanning the QR Code.
Device ID and Search Information	It is required for the 'Remember Me' function to Work.

 

IOS Phone Operating Systems

App Permission	Reason for Permission
Notification	This is the permission required for smart assistant notifications to be sent to your device.
Camera	It is the permission required to access the Payment Center by scanning the QR Code.

To Whom and for What Purposes the Processed Personal Data May be Transferred

Your personal data collected in line with the fulfillment of the above-mentioned Purposes may be transferred, as per data processing conditions regulated in Article 5 of the Law, and the rules regarding the transfer of personal data specified in Article 8 of the Law, to our business partners, affiliates, suppliers and shareholders within the scope of our legitimate interests with the establishment and performance of the contract, and to legally authorized public institutions and legally authorized natural persons pursuant to the fulfillment of our legal obligations and as clearly stipulated in the law.

Method of Collecting Personal Data

Your personal data is collected through our Mobile Application and in-house systems.

Rights of the Relevant Person Listed in Article 11 of the Law

We hereby inform you that you have the following rights regarding your personal data in accordance with Article 11 of the Law:

• Being informed of whether your personal data is being processed or not,
• Requesting information if your personal data has been processed,
• Obtaining information on the purpose of processing your personal data and whether they are used for their intended purpose,
• Knowing the third parties to whom your personal data is transferred at home or abroad,
• Demanding correction of your personal data in case of incomplete or incorrect processing, and requesting notification of the transaction made within this scope to the third parties to whom your personal data has been transferred,
• Requesting the deletion or destruction of your personal data in the event that the reasons requiring it to be processed disappear even though it has been processed in accordance with the provisions of the Law No. 6698 and other legislation, and asking for the notification of the transaction made accordingly to the third parties to whom your personal data has been transferred,
• Objecting to the occurrence of a result that is unfavorable to you after the analysis of your processed data performed exclusively through automatic systems,
• Requesting compensation for the damage if you suffer damage due to unlawful processing of your personal data.

As a relevant person, if you submit your requests regarding your rights to our Company via the Relevant Person Application Form available at https://www.ykleasing.com.tr/Files/leasing/Ilgili_Kisi_Basvuru_Formu.pdf your request will be finalized as soon as possible and within 30 (thirty) days at the latest, depending on the nature of the request. However, if the transaction requires an additional cost, the fee at the tariff determined by the Personal Data Protection Board will be charged by the Company