1) Compliance with the law and the rules of integrity,
2) Accuracy and, where necessary, up-to-dateness,
3) Processing for specific, clear, and legitimate purposes,
4) Relevance, limitation, and proportionality to the purpose of processing,
5) Retention for the period stipulated in the relevant legislation or necessary for the purpose of processing.
Your personal data may be collected verbally, in writing, or electronically through automated or non-automated methods, which may vary depending on the service, product, or commercial activity provided by our Company, through our Company's and our member businesses' offices, branches, dealers, call centers, websites, social media channels, mobile applications, and similar means. Additionally, when you call our call center with the intention of using our Company's services, visit our website, or attend training, seminars, events, or meetings organized by our Company, your personal data may be processed.
Legal Basis for Collecting Personal Data
Your personal data is collected, in any verbal, written, or electronic form, in accordance with the purposes stated above, to provide the products and services we offer within the legal framework and to enable our Company to fully and accurately fulfill its contractual and legal responsibilities. Your personal data collected for this legal reason may also be processed and transferred for the purposes specified in this text, in accordance with the personal data processing conditions and purposes stipulated in Articles 5 and 6 of the Personal Data Protection Law.
Personal data may be collected by our Company for the following purposes:
• Improving the services offered, developing new services, and providing information about them.
• For existing and prospective customers who have consented to commercial electronic messages; It is used to promote and market campaigns and services,
• Resolve customer problems and complaints,
• Conduct statistical assessments and market research,
• Determine and implement the company's commercial and business strategies,
• Manage relationships with member businesses and business partners,
• Monitor accounting and payment transactions,
• Compliance with legal processes and regulations,
• Respond to information requests from administrative and judicial authorities,
• Plan internal reporting and business development activities,
• Perform financial controls and reporting and submit legal notifications,
• Manage internal control and audit activities,
• Ensure information and transaction security and prevent malicious use,
• Make necessary arrangements to ensure the up-to-date and accurate processing of processed data, and perform activities related to all of these processes.

Transfer of Processed Personal Data
Our company may share your personal data with our domestic and international business partners, member businesses, banks, financial institutions, independent auditing firms, and other individuals and organizations permitted by the Law on Payment and Securities Settlement Systems, Payment Services, and Electronic Money Institutions, as well as other legislative provisions. Stored data may be transferred in accordance with the personal data processing conditions and purposes specified in Articles 8 and 9 of the Personal Data Protection Law.
Records and documents related to transactions conducted by our company with its customers are stored for a certain period of time under legal regulations. If you request the deletion of your personal data, this request may be fulfilled until the end of the period specified by legal regulations. During this period, your personal data will not be processed or shared with third parties except as required by legal regulations.
Personal Data Owners' Rights Listed in Article 11 of the Personal Data Protection Law
As personal data owners, if you submit your requests regarding your rights to our Company using the methods set out below in this Information Notice, our Company will finalize the request within thirty days at the latest, free of charge, depending on the nature of the request. However, if the Personal Data Protection Board stipulates a fee, the fee specified in the tariff determined by our Company will be charged. In this context, personal data owners; • To learn whether personal data has been processed,
• To request information if personal data has been processed,
• To learn the purpose of processing personal data and whether it is being used in accordance with its intended purpose,
• To know the third parties to whom personal data has been transferred, both domestically and internationally,

To request correction of personal data if it is incompletely or inaccurately processed, and to request notification of the action taken to third parties to whom personal data has been transferred,
• To request the deletion or destruction of personal data if the reasons requiring processing no longer exist, despite the processing being in accordance with the provisions of the Personal Data Protection Law and other relevant laws, and to request notification of the action taken to third parties to whom personal data has been transferred,
• To object to the analysis of processed data exclusively through automated systems, resulting in a detrimental outcome,
• To request compensation for damages suffered due to unlawful processing of personal data.