Personal Data Protection Law

Processing of Personal Data and Information Notice

As a company, in accordance with Article 10 of the Personal Data Protection Law numbered 6698, we would like to inform and enlighten you about our personal data processing activities.

Data Controller Identification: Pursuant to the Personal Data Protection Law No. 6698, your personal data will be processed, recorded, stored, classified, updated, and disclosed/transferred to third parties by IFASTURK Financial Advisory and Consultancy located at Çiftehavuzlar Mah. Oruç Reis Mah. Tekstilkent Ticaret Merkezi A-6 Blok No:34 P.K. 34235 Esenler / ISTANBUL in accordance with the scope explained below, in compliance with the law and ethical principles.

Purpose of Processing Personal Data: Your personal data, depending on the services provided by our company and related to the commercial activities of our company, will be collected through various means such as verbal, written, or electronic methods via our company units and departments, website, social media channels, mobile applications, and similar tools. Additionally, when using our call centers, visiting our website, or participating in training, seminars, or events organized by our company, your personal data may be processed.

Considering our customers' usage habits, information may be provided on products of interest, and information about campaigns may be given. Your personal data will be used for promotional, marketing, promotional, and campaign activities related to those services and products.

Your personal data collected by the company will be processed within the framework of the purposes and conditions of personal data processing specified in Articles 5 and 6 of the Law.

Purposes and Conditions of Processing Personal Data:

The company processes personal data within the purposes and conditions of personal data processing specified in Article 5/2 and Article 6/3 of Law No. 6698. These purposes and conditions include:
   • Clear provisions in laws regarding the company's involvement in personal data processing,
   • Necessity for the processing of personal data by the company for the establishment or performance of a contract directly related and necessary,
   • Obligation of the company to fulfill its legal obligations,
   • Processing of personal data by the company limited to the purpose of publicity if made public by the data subject
   • Necessity for the processing of personal data by the company for the establishment, exercise, or protection of rights,
   • Legitimate interests pursued by the company, provided that they do not harm the fundamental rights and freedoms of the data subjects,
   • Necessity for the company to process personal data to protect someone's life or physical integrity, and in such cases, where the data subject is unable to express their consent due to actual impossibility or legal invalidity,
   • Legal provisions allowing the processing of special categories of personal data other than the data subject's health and sexual life,
   • Processing of special categories of personal data concerning the data subject's health and sexual life by individuals or authorized institutions and organizations under the obligation of secrecy for purposes such as protecting public health, performing preventive medicine, conducting medical diagnosis, treatment and care services, planning and managing health services and their financing.
   • In the absence of these conditions, the company obtains explicit consent from the data subjects to process personal data.

Under the mentioned conditions:

The company can process personal data for the following purposes, among others:
   • Carrying out commercial activities by relevant business units,
   • Planning and execution of activities to ensure business continuity,
   • Monitoring financial and/or accounting affairs,
   • Providing information to authorized institutions as required by legislation,
   • Planning and execution of corporate communication activities,
   • Planning and execution of production and/or operational processes,
   • Planning and execution of access authorizations for business partners and/or suppliers.
   • Planning and execution of corporate communication activities,
   • Planning and execution of production and/or operational processes,
   • Planning and execution of access authorizations for business partners and/or suppliers.
   • The necessary technical and administrative measures are taken to prevent the unlawful processing of your personal data, unauthorized access to your data, and to ensure the secure storage of your personal data.
   • Method of Collecting Personal Data and Legal Reason: Your personal data is collected by the company through channels such as customer representatives, relevant websites, mobile applications, and electronic or call center channels. Pursuant to the conditions and purposes of personal data processing specified in Articles 5 and 6 of the Personal Data Protection Law No. 6698, personal data can be processed and transferred within the purposes mentioned in items (1) and (2) of this text.
   • Rights of the Relevant Person: As data subjects, you can submit your requests regarding your rights to our Company. Depending on the nature of the request, our Company will conclude the request within a maximum of 30 (thirty) days free of charge. However, if the response process incurs a separate cost, a fee may be charged according to the tariff determined by the Personal Data Protection Board. Within this scope, data subjects have the following rights:
   • Learning whether personal data is processed,
   • Requesting information if personal data has been processed,
   • Learning the purpose of processing personal data and whether they are used in compliance with the purpose,
   • Knowing the third parties to whom personal data is transferred, both domestically and abroad,
   • Requesting correction of personal data in case of incomplete or incorrect processing, and notifying third parties to whom personal data has been transferred,
   • Requesting the deletion or destruction of personal data within the framework of the law and notifying third parties to whom personal data has been transferred,
   • Objecting to the occurrence of a result against the person by exclusively analyzing the processed data through automated systems,
   • Demanding compensation for damages in case of damage due to the unlawful processing of personal data.

Application Methods:
You can submit your applications in writing to IFASTURK Financial Advisory and Consultancy at Oruç Reis Mah. Tekstilkent Ticaret Merkezi A-6 Blok No:34 P.K. 34235 Esenler / ISTANBUL, in person or by mail with identity documents attached, or through a notary public.