a) Data Controller and Representative
According to the Law no.6698 on Protection of Personal Data (the “Law”), your personal data may be processed by Fibabanka A.Ş., in the capacity of Data Controller, within the scope of explained below. Within the scope of the law, “Data Processing” means all kinds of information made on the data, such as obtaining, recording, keeping, classifying personal data partially or completely, by automatic means or via the ways which are part of any data recording system, and disclosing the personal data to third persons to the extent permitted within the scope of relevant legislation.
Fibabanka takes the security measures at the highest level possible, for the purposes of ensuring that your personal data be collected, kept and shared legally and protecting the confidentiality thereof.
b) For what purposes shall personal data be processed
Your personal data which are collected shall be processed for following purposes (the “Purposes”), within the scope of the personal data processing terms and conditions and purposes set forth in articles 5 and 6 of the Law.
These purposes are;
Furthermore, even if you are not our customer, your personal data may be processed, for the purposes (the “Purposes”) of determining, monitoring, reporting and checking the risk group which you shall be included in order to determine the limits of credit which shall be made available to a risk group according to the banking legislation (you, your spouse, your children and, qualified shareholders, members of the board of directors and general manager of a bank or the partnerships, of which aforesaid persons serve as a member of the board of directors or general manager or which are controlled by aforesaid persons or jointly with a legal entity or solely, directly or indirectly or which they participate in with unlimited liability, partnerships which are jointly and individually, directly or indirectly controlled by aforesaid persons or of which aforesaid persons are a partner with unlimited liability or serve as a member of the board of directors or general manager, and real and legal person which have suretyship, guarantee or similar relations to an extent where insolvency of one of them shall result in insolvency of another one or some others among them; constitute risk group.), within the limits of processing the personal data of related persons included in the risk group.
c) Method and Legal Reason of Collecting the Personal Data
Your personal data shall be collected, within the scope of fulfilment of the Purposes defined above, in electronic environment, by filling in the online participation form / communication form / application form, by means of conversations made via the call centre, by conversations made in cases when you contact our Bank, branch by our mobile applications, short message, e-mail or in electronic environment online banking, ATMs, in physical environment, by visits you make to contracted stores, by means of the channels via which you shall contact us on social media.
Your personal data shall be collected and processed by our Bank, for following purposes and legal reasons, based on the terms and conditions for processing personal data, set forth in articles 5 and 6 of the Law.
Provided that it is directly related with concluding or implementing this agreement, based on the legal reason that it is required to process the personal data of the parties to the agreement;
Based on the legal reason that it is explicitly set forth in the laws and it is required for the Data Controller to fulfil his/her legal obligation;
Provided that the basic rights and freedoms of related person are not impaired, based on the legal reason that processing of personal data is required for legitimate interests of the Data Controller;
Based on the legal reason that processing of personal data is required for establishing, using or protecting a right;
Your personal data shall be processed by Fibabanka for the purposes of complying with the regulations relating to keeping them for legally required periods and complying other domestic and foreign legislation; providing you better and reliable services and maintaining this uninterruptedly.
d) To Whom and For What Purposes Can Personal Data Be Disclosed
Being limited to achieving the Purposes specified below; your personal data collected may be processed and disclosed to our business partners which we cooperate within the scope of our legitimate interests, consultants and other technical services providers from whom we receive services within the scope of our legitimate interests, persons, institutions permitted in the Banking Law and the legislation, institutions considered as financial institution and other third persons within the scope of conducting the Banking activities and fulfilling our legal obligations, to public entities such as the BRSA (Banking Regulation and Supervision Agency), CBRT (Central Bank of the Republic of Turkey), ISS (Identity Sharing System), BKM (Interbank card Centre), MASAK (Financial Crimes Investigation Board), GİB (Revenue Administration), CMB (Capital Markets Board) and the BAT (Banks Association of Turkey) Risk Centre and legally authorised public institutions and legally authorised private persons, to the institutions from which we receive support services for the purpose of sharing with relevant administrative and official authorities in order to prevent terrorist financing and money laundering and without being limited to these, to prevent any kinds of illegal acts, to the companies for which we conduct activities of intermediation / in the capacity of agency, for the purpose of ensuring compliance with the obligations of keeping, reporting, providing the information as required by other authorities and providing information regarding the changes and updated in relation to the banking services; conducting enterprise analysis and R&D studies; if you give explicit consent to serve you better, to promote new products and services, to conduct marketing and promotion activities, to offer you special products and services, with our affiliated partnerships, subsidiaries and other third parties, within the scope of your consent, within the framework of the personal data processing terms and conditions and purposes set forth in articles 8 and 9 of the Law.
e) Rights of Related Person Set Forth in Article 11 of the Law
We would like to declare that, as the owner of personal data, you shall have following rights, in accordance with article 11 of the Law:
As the personal data owners, if you send your requests relating to your rights set forth in above mentioned article 11 of the Law no.6698, to Fibabanka by methods set forth below, Fibabanka shall finalise the request free of any charge, as soon as possible and at the latest within thirty days, depending on the nature of relevant request. However, if transaction requires a separate cost, fee set forth in the tariff determined by the Personal Data Protection Board, shall be charged by Fibabanka. In this context, as the personal data owners;
You can make your applications to our Bank within the scope of the Law no.6698, by presenting the information certifying your identity, together with your request containing your explanations regarding your right you want to exercise, among the rights set forth in article 11 of the Law no.6698; by filling in the data owner application form available at the address of “https://www.fibabanka.com.tr/docs/default-source/bize-ulasin/kisisel-verilerin-korunmasi-kanunu/kisisel-veri-sahibi-basvuru-formu.pdf?sfvrsn=f9a24760_6” and presenting a signed copy of the form to the branches or to the address “Esentepe Mah. Büyükdere Cad. No:129 -34394 Şişli – İstanbul”, together with the documents certifying your identity, or via the e-mail address of “fibabanka.kisiselveri@hs03.kep.tr”.
