Information Text On The Protection And Processing Of Personal Data

Our valued customers,

As Odea Bank A.Ş. we would like to inform you about the Law No. 6698 on the Protection of Personal Data ("KVKK"), which is designed to protect fundamental rights and freedoms.

a) Data Controller and Data Controller's Agent

Your personal data may be processed by Odea Bank Anonim Sirketi (the "Bank"), acting in the capacity of ​the data controller, in accordance with the Law Nr.6698 on the Protection of Personal Data (the "Law"), subject to the limitations specified below.

b) Personal Data & Purpose of Processing of Personal Data

Personal data includes any and all kinds of data which are defined as private data under the Law, including any and all kinds of information, as well as medical and biometric data in relation to any identified or identifiable real person, including but not limited to ID, contact and financial data ("Personal Data").

Your Personal Data that have been collected shall be processed to ensure legal, technical and commercial occupational safety of our Bank and any related person engaged in business relation with our Bank, and to plan and carry out any and all activities necessary to customize the products and services, offered by the Bank, in line with the preferences, utilization habits and needs of the related persons, and recommend and promote them to the related persons, and to ensure that any and all activities, necessary to enable the related persons to benefit from such products and services, and all related business processes which are carried out by our business units, and also to ensure that any and all activities necessary for performance of the commercial and/or operational activities by our Bank, and all associated business processes which are carried out by our concerned business units, as well as in line with the terms & conditions and purposes for processing of personal data as specified in the sections 5 and 6 of the Law to plan and/or carry out the commercial and/or business strategies of the Bank.

All detailed information on the purposes of processing of Personal Data by our Bank is accessible under the Policy on Protection and Processing of Personal Data by Odea Bank A.S. ("Policy") publicly available on the website at https://www.odeabank.com.tr/ 

c) Recipients of Such Processed Personal Data and Purposes of Such Transmission

Your Personal Data that have been collected may be transmitted to our shareholders situated either at home or abroad and the legally-authorized bodies, as well as our business partners and suppliers in accordance with the terms & conditions and purposes for processing of the personal data, specified in sections 8 and 9 of the Law, to the extent as limited with the purposes set out under the Policy which has been disclosed to the public on the website address at https://www.odeabank.com.tr.

ç) Method for Collection of Personal Data, and Legal Reason(s) Thereto

Your Personal Data shall be collected by means of the head office, branches, Internet banking, kiosks, contact center, website and ATMs of our Bank, as well as the Identity and Address Sharing System, Credit Bureau, e-mail, web, fax, cargo/mail, SMS methods, and any other methods utilized or to be utilized in future by our Bank to establish communication with its clients, for the purposes described hereinabove. Your personal data, which have been collected for such purposes, shall be processed for the legal reasons as set out in the sections 5 and 6 of the Law.

d) Rights of Personal Data Owners Provided under Section 11 of the Law

In the event that you, as the personal data owners, submit a request regarding your rights to our Bank by means of the methods as set out under the Policy publicly available on the website at www.odeabank.com.tr, your such request shall be concluded by the Bank as soon as possible and within maximum thirty (30) days, depending on the nature of such request, without claiming for any fee therefor. However, in case such request requires any additional cost, the fee specified under the tariff, determined by the Personal Data Protection Board, shall be collected by the Bank. Accordingly, personal data owners are entitled;

• to inquire whether their personal data have been processed, or not; and
• to ask for information regarding any such processed personal data; and
• to be informed about the purpose of processing of any such data, and also about the fact that whether such data have been used as appropriate to the purpose thereto; and
• to be informed about the 3rd parties to which any such data has been transmitted either domestically or internationally; and
• to ask for correction of any imperfect or inaccurate data, in case of any imperfect or inaccurate processing thereof, and to ask for providing information regarding any processes, performed for such purpose, to the 3rd parties to which any such personal data has been transmitted; and
• to ask for deletion or disposal of any such personal data if the reasons requiring processing of any such data have disappeared in spite of the fact that any such personal data have been processed in accordance with the provisions prescribed under the Law and the other applicable laws, and to ask for providing information regarding any processes, performed for such purpose, to the 3rd parties to which any such personal data has been transmitted, if any such data have been processed imperfectly or inaccurately; and
• to raise an objection against such outcome in case of emergence of an outcome that is to the detriment of you upon the analysis of any such processed personal data solely by any automatic systems; and also
• to claim for compensation of any and all damage and/or loss they might have incurred in case any such personal data have been processed in breach of the law.

You can file an application with Odea Bank A.S., acting in the capacity of the data controller under the Law, on the below-given link:

Contact - Contact Form | Odeabank