DISCLOSURE TEXT ON THE PROTECTION OF PERSONAL DATA
We, Ziraat Gayrimenkul Yatırım Ortaklığı A.Ş (“Ziraat GYO”) would like to inform you, as the data controller, regarding the Law no. 6698 on Protection of Personal Data ("LPPD") published in the Official Gazette dated April 7, 2016 and numbered 29677, in order to protect the fundamental rights and freedoms of individuals, especially the privacy of private life in the processing of personal data, and to determine the obligations of natural and legal persons who process personal data, pursuant to Article 10 of the Law titled “Disclosure Obligation of the Data Controller”.
Purpose of Processing Personal Data, Collection Method and Legal Basis
Ziraat GYO automatically collects your identity, contact, CV, camera footage, professional experience, demographic information and education level information from you, in verbal, written or electronic form, during the establishment of your legal relationship with our Company and throughout the duration of the said relationship, through written or oral communication channels and may process them based on the following legal grounds; where it is expressly provided for by the laws as specified in Article 5/2(a) of the LPPD, it is necessary for the establishment or performance of a contract as specified in Article 5/2(c) of the LPPD, it is necessary for compliance with a legal obligation to which our Company is subject as specified in Article 5/2(ç) of the LPPD, personal data have been made public by the data subject himself/herself as specified in Article 5/2(d) of the LPPD, data processing is necessary for the establishment, exercise or protection of any right as specified in Article 5/2(e) of the LPPD, processing of data is necessary for the legitimate interests pursued by the data controller, provided that this processing shall not violate the fundamental rights and freedoms of the data subject as specified in Article 5/2(f) of the LPPD; and for reasons such as:
• Fulfilling our obligations arising from the legislation to which our company is subject, such as the Capital Market Law, the Law on the Prevention of Laundering of Crime Revenues;
• Compliance with information and reporting obligations, if requested by official and administrative authorities such as the Capital Markets Board, Financial Crimes Investigation Board, Ministry of Finance;
• Ensuring that our Company's activities are carried out in accordance with our Company's procedures and/or relevant legislation;
• Ensuring that the obligations under the contractual relationship are duly performed;
• Recording notifications such as complaints, objections, requests, suggestions, satisfaction in our system in order to serve you better;
• Planning and execution of business activities and operational processes;
• Execution and performance of customer relations;
• Ensuring that your data is kept accurate and up-to-date;
• Carrying out support services and obligations, customer satisfaction and corporate communication activities;
• Evaluating your requests and complaints received on Social Media and suggesting solutions;
• Planning and implementing corporate sustainability, corporate governance, strategic planning and information security processes;
• Recording the identity, address and other necessary information in order to determine the information of the transaction owner within the scope of the obligations arising from the legislation to which our company is subject.
Transfer of Your Personal Data
Your personal data may be transferred to public institutions and organizations such as CMB, MASAK, Ministry of Finance, our shareholder T.C. Ziraat Bankası A.Ş and its affiliates, third parties from whom we receive services to carry out our Company activities, cooperating institutions and program partners, within the scope of the provisions of the Law on the transfer of personal data and its transfer abroad, for the purposes and legal reasons set forth in article 1 of this Disclosure Text.
Storing Personal Data
Your personal data can be stored for as long as required for the purposes of their processing. If there is no other justification or legal reason, no international law or regulation, and the obligations arising from the contracts no longer exist, your personal data with no remaining purpose to process it, is destroyed or anonymized.
Rights of the Data Subject
You can exercise the following rights regarding the processing of your personal data with a request you make to Ziraat GYO. The requests submitted in this framework will be concluded by Ziraat GYO free of charge within thirty days at the latest. However, where the Personal Data Protection Board prescribes a fee, our Company will charge the fee set forth in the tariff. In this framework, personal data subjects are entitled:
• To learn whether personal data are processed or not,
• To request information if your personal data are processed,
• To learn the purpose of data processing and whether this data is used for intended purposes,
• To know the third parties to whom your personal data is transferred at home or abroad,
• To request the rectification of the incomplete or inaccurate data, if any,
• To request the erasure or destruction of personal data,
• To request that the third parties to whom personal data have been transferred be notified of the actions regarding the correction, erasure or destruction of personal data,
• To object to the processing, exclusively by automatic means, of personal data, which leads to an unfavorable consequence for the data subject,
• To request compensation for the damage arising from the unlawful processing of your personal data.
Within the scope of the Law No. 6698, you can request your rights regarding your personal data, with documents supporting your identity and your petition containing your request by sending it to Istanbul Financial Center Ziraat Towers Finanskent District Finans Street, B Blok No: 44/B, İnterior door number 12 Ümraniye /İSTANBUL in person, via a notary public or by sending it to ziraatgyo@hs01.kep.tr with secure electronic signature.
Applications within this scope will be accepted following the identity verification to be made by us, and interested persons will be answered in writing or electronically within legal periods.