Communication Process Clarification Text | Yapı Kredi Financial Leasing J.S.Co.

YAPI KREDİ FİNANSAL KİRALAMA A.O. CUSTOMER PRIVACY NOTICE

Your personal data may be processed by Yapı Kredi Finansal Kiralama Anonim Ortaklığı (“Company”) as the data controller in accordance with the Personal Data Protection Law No. 6698 (“Law”) within the scope specified below.

Your Collected Personal Data

Within the scope of the conduct of our Company’s activities, your personal data specified below may be processed.

Personal Data Category	Individual Personal Data
Identity Data	Name-surname, gender, date of birth, identity number, age, sole proprietorship name, place of birth, citizenship information, mother’s maiden name, marital status, mother’s name, father’s name, date of marriage, tax number, photocopy of driving licence, photocopy of identity card, country of birth, signature, identity card information other than the blood group and religion fields, photocopy of professional identity card, driving licence information other than the blood group, photocopy of passport, detailed civil registry copy, business card information, foreign identity number
Contact Data	Address, telephone number, mobile telephone number, e-mail address, place of residence, fax information
Location Data	Location information (GPS)
Finance Data	Bank account information, statement information, invoice information, financial transaction information, transaction amount, expense information, payment information (IBAN, trial balance), payment information (amount-method-date), amount and rate of interest payable, receivable balance, debt balance, total interest amount, income information, shareholding information
Risk Management Data	Risk Centre records
Request and Complaint Management Data	Complaint information received / collected from electronic and/or physical media, information on the actions taken for complaints received / collected from online channels, assessment reports of complaints received / collected from online channels
Customer Transaction Data	The sector in which the natural person customer operates, customer relationship commencement date, customer relationship termination date, customer number, customer payment receipts, customer instructions, call centre records, retirement information, customer requests, the trade registry directorate to which the natural person customer is affiliated, the trade registry number of the natural person customer, customer undertaking, customer application forms, customer collateral information, disbursement form, customer assignment information, customer deeds of assignment, member merchant number, customer agreement, portfolio information
Marketing Data	Explicit consent sharing consent, information and assessments obtained as a result of direct marketing activities, the estimated needs and wishes of the customer, the customer’s hobbies, information and assessments obtained as a result of campaign activities to be carried out for marketing purposes, customer website usage habits, customer website usage frequency, customer website usage duration, the customer’s data enrichment activities, the customer’s habits, surveys conducted with the customer, satisfaction surveys conducted with the customer customer personal comments, preferences, tastes and likes, habits, the customer’s targeting information

Purposes and Legal Grounds for Processing Personal Data

Your collected personal data may be processed for the purposes set out below (the “Purposes”) within the personal data processing conditions and purposes specified in Article 5 of the Law.

Personal Data Categories

Personal Data Processing Purposes

Legal Grounds

Your identity and contact data

Ø Updating customer contact information

Ø Based on the legal ground that processing of personal

data of the parties of a contract is necessary, provided

that it is directly related to the establishment or

performance of the contract

Your identity, contact, customer transaction, risk management and finance data

Ø Carrying out the identification procedures of the leased

goods and the control procedures at specified intervals,

Ø Opening sales and financial leasing records and

carrying out invoicing activities,

Ø Preparation and execution of lending activities,

Ø Establishment or performance of the financial leasing

agreement in relation to our Company’s products and

services,

Ø Planning and execution of the restructuring process,

Ø Preparation and execution of lending activities,

Ø Carrying out the ownership transfer procedures where

so agreed in the contract,

Ø Provision of post-financial leasing support services

Ø Based on the legal ground that processing of personal

data of the parties of a contract is necessary, provided

that it is directly related to the establishment or

performance of the contract

Your identity, contact and risk management data

Ø Performance by our relevant business units of the

necessary work for the realisation of the commercial

activities conducted by our Company and execution of

the related business processes,

Ø Ensuring the legal, technical and commercial-business

security of our Company and of the data subjects having

a business relationship with our Company,

Ø Determination and implementation of our Company’s

commercial and business strategies,

Ø Planning and execution of operational risk processes

Ø Based on the legal ground that processing of data is

necessary for the legitimate interests pursued by the data

controller, provided that this processing shall not violate

the fundamental rights and freedoms of the data subject

Your identity, contact, customer transaction, risk management and finance data

Ø Conduct of customer relations,

Ø Monitoring of financial transactions,

Ø Performance by our business units of the necessary

work in order to enable data subjects to benefit from the

products and services offered by our Company, including

the sales and marketing activities of our products and

services, and execution of the related business

processes,

Ø Execution of information security processes

Ø Based on the legal ground that processing of data is

necessary for the legitimate interests pursued by the data

controller, provided that this processing shall not violate

the fundamental rights and freedoms of the data subject

Your identity, contact and customer transaction data

Ø Planning and execution of customer satisfaction and

corporate communication activities,

ØCarrying out prize draw, campaign, competition,

promotion or advertising activities

Ø Based on the legal ground that processing of data is

necessary for the legitimate interests pursued by the data

controller, provided that this processing shall not violate

the fundamental rights and freedoms of the data subject

Your identity, contact, customer transaction, risk management, finance and location data

Ø Fulfilment of the requests of official institutions,

Ø Provision of information arising from the legislation to

authorized institutions,

Ø Ensuring compliance with the retention obligations

prescribed in the legislation,

Ø Responding to data subject applications in accordance

with the legislation and carrying out the necessary

procedures,

Ø Carrying out risk management and audit activities (in

line with this purpose, the relevant data of the seller of

the goods subject to financial leasing and of the other

partners of your commercial enterprise shall also be

processed)

Ø Determination and control of risk groups in order to

establish the credit limits to be extended,

Ø Fulfilment of obligations such as identity verification,

suspicious transaction reporting, record retention and

provision of information which are required under the Law

No. 4208 on the Prevention of Money Laundering and the

relevant secondary legislation,

Ø Fulfilment of the recording and retention obligations

that are mandatory pursuant to the Identity

Notification Law No. 1774

Ø Based on the legal reason that it is clearly stipulated

by law and is mandatory for the data controller to fulfill its

legal obligation

Your identity, contact, customer transaction, risk management, finance, request and complaint data

Ø Constituting evidence in possible disputes that may

arise in the future,

Ø Receipt, assessment and conclusion of your requests

and complaints

Ø Based on the legal reason that data processing being

mandatory for the establishment, exercise or protection

of a right

Your identity and contact data

Ø Sending advertising, promotion, campaign and similar

commercial electronic messages to the contact details

you have shared with our Company

Ø (Merchants who are natural persons) Based on the

legal ground that processing of data is necessary for the

legitimate interests pursued by the data controller,

provided that this processing shall not violate the

fundamental rights and freedoms of the data subject

Ø (Other persons) Explicit consent

Your identity, contact and marketing data

Ø Carrying out the marketing processes of the

Company’s products and services, and recommending

and promoting the products and services offered by

customising them in accordance with your likes, usage

habits and needs, including profiling and analysis

activities

Ø Explicit consent

Recipient Parties and Purposes for Transferring Personal Data

Your personal data may be transferred pursuant to the data processing conditions specified in Article 5 of the Law and in accordance with the rules regarding the transfer of personal data specified in Articles 8 and 9 of the Law.

Transfer Parties

Purpose and Legal Ground of Transfer

Ø Our suppliers and service providers

(Refers to all 3rd party service providers from which goods and services are purchased in order to provide our services and to carry out our activities. For example; firms from which we receive consultancy, parties from which we receive information technology infrastructure services, parties from which we receive services in marketing processes, engineering firms, law offices, translation offices, cargo/courier/distribution companies, surveillance/audit/archive firms, expert valuation firms and technical maintenance, repair, control and monitoring firms, etc.)

Within the scope of fulfilling the Purposes, based on the legal grounds stated for these Purposes;

Ø Procurement by our Company of consultancy, information security, infrastructure, maintenance and repair, analysis, development, finance, accounting, storage and archive services within the scope of the fulfilment of the Purposes specified above

Ø Our business partners

(Refers to the parties with which we have a cooperation or business partnership relationship for the purpose of the sale of our Company’s products and services, primarily the financial leasing processes. For example; traffic consultancies, insurance companies, customs consultancies, banks, financial institutions, financiers, credit rating agencies, etc.)

Based on the legal ground of being directly related to the establishment or performance of the contract;

Ø Provision of the products and services you request from our Company,

Ø Fulfilment of the requirements of the contract concluded with our Company,

Ø Carrying out the risk assessment in order to provide the necessary financing within the scope of the financial leasing agreement

Based on the legal ground that the processing of your data is mandatory for our legitimate interest, provided that it does not harm your fundamental rights and freedoms;

Ø Conduct of our business activities,

Ø Carrying out the risk assessment in order to provide the necessary financing within the scope of the financial leasing agreement,

Ø Monitoring and conduct of legal processes

Ø Sellers

(Refers to the parties that carry out the sale of all kinds of movable and immovable goods in the financial leasing processes.)

Based on the legal ground of being directly related to the establishment or performance of the contract;

Ø Purchase by the Company of the goods subject to financial leasing,

Ø Conduct of our business activities,

Ø Conduct of the financial leasing processes

Ø Our affiliates and shareholders

(Refers to the companies in which the Company is a direct or indirect shareholder.)

Based on the legal ground that the processing of your data is mandatory for our legitimate interest, provided that it does not harm your fundamental rights and freedoms;

Ø Conduct of our business activities

Ø Financial Group Companies

(Refers to the financial group companies established within the scope of the Law No. 5549, whose parent institution is Koç Holding A.Ş., and which are located under the Yapı ve Kredi Bankası Financial Group umbrella established in connection therewith.)

Based on the legal ground of being expressly provided for by the laws and being mandatory in order for the data controller to fulfil its legal obligation;

Ø Fulfilment of our legal obligations

Ø Public institutions and private organizations authorized by law

(Private and public institutions and organizations authorized to request information and documents due to relevant legal regulations or legal proceedings, private and public institutions and organizations to which information must be transferred pursuant to legal regulations, and private and public institutions and organizations with which we verify information to ensure the security of legal transactions. For example: BRSA, CMB, CBRT, Ministry of Treasury and Finance, MASAK, Risk Center of the Banks Association of Türkiye, Revenue Administration, SSI, CRA, Credit Bureau, judicial authorities, notaries, Union of Turkish Notaries, REM, etc.)

*Where the leased asset is a vehicle; within the scope of the notification required to be made to the Rental Vehicle Notification System administered by the General Directorate of Security, the trade name, tax identification number, address and contact details of the legal entity, the identity data of the authorized representative of the legal entity, and the commencement and expiry date information of the financial leasing agreement shall be transferred to the General Directorate of Security.

Based on the legal ground of being expressly provided for by the laws and being mandatory in order for the data controller to fulfil its legal obligation;

Ø Compliance with legal reporting and information requests,

Ø Conducting legal audit activities,

Ø Conducting legal proceedings,

Ø Fulfilling our obligations arising from legislation

Method for the Collection of Personal Data

Within the scope of the fulfilment of the Purposes set out above, your personal data is collected in electronic media through the completion of the online participation form/contact form/application form, the submission of the financial leasing application, open internet sources, applications made by way of an opinion/complaint/suggestion/information request, participation in campaigns/competitions, the call centre, our mobile applications, short message and e-mail channels, and in physical media through the meetings held and the forms used in the cases where you contact our Company.

Data Subject’s Rights Specified under Article 11 of the Law

In relation to your personal data, pursuant to Article 11 of the Law, in the event that you, as a data subject, submit your requests concerning your rights to our Company by means of the Data Subject Application Form available at https://www.ykleasing.com.tr/Files/leasing/Ilgili_Kisi_Basvuru_Formu.pdf , your request shall be concluded, depending on the nature of the request, as soon as possible and within 30 (thirty) days at the latest. However, in the event that the process additionally requires a cost, the fee in the tariff determined by the Personal Data Protection Board shall be charged by the Company.

YAPI KREDİ FİNANSAL KİRALAMA A.O. CUSTOMER EXPLICIT CONSENT TEXT

You may access the details regarding the processing of your personal data from the Yapı Kredi Finansal Kiralama A.O. Customer Privacy Notice.

Do you accept the processing and transfer thereof by Yapı Kredi Finansal Kiralama Anonim Ortaklığı for the following purposes?

	YES	NO
The sending of advertising, promotion, campaign and similar commercial electronic messages to the contact details you have shared with our Company and the processing of your identity and contact data for this purpose
The processing of your identity, contact and marketing data for the purpose of carrying out the marketing processes of the Company’s products and services, and recommending and promoting the products and services offered by customizing them in accordance with your likes, usage habits and needs, including profiling and analysis activities

Name Surname:

Date: Signature:

Mandatory Preferences

Functionality and Preference Cookies

Performance and Analysis Cookies

Targeting or Advertising Cookies

You are leaving YkLeasing.com.tr

Mandatory Preferences

Functionality and Preference Cookies

Performance and Analysis Cookies

Targeting or Advertising Cookies