Information Notice Under the Turkish Personal Data Protection Law and Relevant Legislation

Information Notice Under the Turkish Personal Data Protection Law and Relevant Legislation

As Turkish Menkul Değerler A.Ş. (the “Company”), we attach the utmost importance to the privacy of private life, the protection of personal data, and information security. Pursuant to the Turkish Personal Data Protection Law No. 6698 (“Law”) and the applicable legislation, we, in our capacity as the Data Controller, implement all necessary administrative and technical measures to ensure the security of your personal data.

How Do We Fulfil Our Obligation to Inform?

In line with the principles of transparency and accountability, the Company provides data subjects with information—tailored to the specific processing activity—across each channel and process through which personal data are collected.

In this context, information is provided:

in the relevant cookie banners and policy for cookies used during your visit to our website,

in the relevant area where the form is displayed when you complete contact forms to communicate with us,

during account opening and contractual processes at our branches and/or through our digital channels,

during subscription stages for e-newsletters or campaign

Accordingly, in compliance with Article 10 of the Law, we fulfil our obligation to inform through the information notices made available in the relevant sections, including information on the purposes for which your personal data are processed, the recipients to whom such data may be transferred, the method of collection, and the legal grounds for processing.

What Are Your Rights as a Data Subject?

Pursuant to Article 11 of the Law, you are entitled to:

learn whether your personal data are processed;

request information if your personal data have been processed;

learn the purpose of processing and whether your personal data are used in accordance with such purpose;

know the third parties to whom your personal data are transferred, domestically and/or abroad;

request correction of personal data in the event they are processed incompletely or inaccurately;

request deletion or destruction of your personal data and request that such actions be notified to third parties to whom the personal data have been transferred;

object to the occurrence of a result to your detriment arising solely from the analysis of processed data by automated means; and

request compensation for damages in the event you suffer damages due to unlawful processing of your personal data.
Application Procedure and Contact

You may submit your requests regarding the rights listed above to the Company in accordance with the procedures set out in the Communiqué on the Principles and Procedures for Application to the Data Controller.

By completing the Data Subject Application Form accessible via the link below, you may submit your applications through one of the following methods:

  1. In Writing: By submitting your application, together with documents verifying your identity, to the Company’s registered address (or to the branch nearest to you) in person or via a notary public;
  2. Via Registered Electronic Mail (KEP): By sending your application to our registered electronic mail (KEP) address muhaberat@hs02.kep.tr, using a secure electronic signature or mobile signature;
  3. Via E-mail: By using the e-mail address previously registered in the Company’s systems and duly verified, and sending your application to [Company KVKK E-mail Address].

Depending on the nature of your request, it will be concluded as soon as possible and in any event within 30 (thirty) days, free of charge. However, where the requested transaction entails an additional cost, a fee may be charged in accordance with the tariff determined by the Personal Data Protection Board.