TURKISH AIRLINES ELECTRONIC MONEY AND PAYMENT SERVICES INC. REMOTE CUSTOMER ACQUISITION INFORMATION TEXT

In accordance with the Personal Data Protection Law No. 6698 (“Law”), your personal data may be processed by Turkish Airlines Electronic Money and Payment Services Inc. (“TKPAY”) as the data controller, within the scope explained below.

Purposes for Processing Personal Data and Legal Reasons

Your collected personal data will be processed for the purposes specified below (“Purposes”) in accordance with the personal data processing conditions and purposes set out in Articles 5 and 6 of the Law.

Based on the legal reason that the processing of personal data of the parties to a contract is necessary, provided that it is directly related to the establishment or performance of a contract;

  • Your identity, communication and visual/audio recording data for the purpose of carrying out the necessary transactions regarding the establishment of a customer relationship with TKPAY,
  • Your identity, communication and visual/audio recording data for the purpose of structuring and executing contract processes,

Based on the legal reason that it is clearly prescribed by law and is necessary for the data controller to fulfill its legal obligations;

  • Your identity, communication and visual/audio recording data for the purpose of fulfilling official institution requests,
  • Your identity, communication and visual/audio recording data for the purpose of providing information to authorized institutions arising from legislation,
  • Your identity, communication and visual/audio recording data for the purpose of ensuring compliance with the storage obligations stipulated in the legislation,
  • Your identity, communication and visual/audio recording data for the purpose of carrying out identification and identity verification processes and checking the information and documents stipulated in the legislation,

Based on your explicit consent;

  • Processing of your biometric data (obtained by comparing your photo on your ID document with your photo to be taken during the remote identification process) for the purpose of biometric comparison of your face with the photo on the contactless chip if it can be obtained using near field communication from the ID document during remote identification, or with the photo on the ID document if it cannot be obtained, in accordance with article 22/1/ç of the Communiqué on Data Sharing Services of Payment and Electronic Money Institutions Information Systems and Payment Service Providers in the Field of Payment Services.

To Whom and For What Purposes Can Processed Personal Data Be Transferred?

Your collected personal data will be shared with our suppliers in order to fulfill the Purposes;

  • Within the scope of our legitimate interests, to carry out our business activities and to provide the technical infrastructure for the remote identification process.
  • To legally authorized public institutions such as BDDK, MASAK and legally authorized private persons for the purposes of fulfilling our obligations arising from the legislation and fulfilling legal reporting and information requests, as expressly provided for in the laws and to fulfill our legal obligations.

It may be transferred in accordance with the rules regarding the transfer of personal data specified in Article 8 of the Law, within the scope of the data processing conditions regulated in Article 5 of the Law.

Method of Collecting Personal Data

Your personal data is collected electronically within the scope of fulfilling the above-mentioned Purposes through the Identity Sharing System of the General Directorate of Population and Citizenship Affairs of the Ministry of Internal Affairs of the Republic of Turkey, through internal systems, our mobile application and our website.

Rights of the Relevant Person Listed in Article 11 of the Law:

We hereby inform you that you have the following rights in accordance with Article 11 of the Law regarding your personal data:

  • To learn whether your personal data has been processed,
  • To request information if your personal data has been processed,
  • To learn the purpose of processing your personal data and whether they are used in accordance with their purpose,
  • To know the third parties to whom your personal data has been transferred domestically or abroad,
  • To request correction of your personal data if they are processed incompletely or incorrectly and to request notification of the transaction made within this scope to the third parties to whom your personal data has been transferred,
  • To request deletion or destruction of your personal data if the reasons requiring processing are eliminated despite the fact that it has been processed in accordance with the provisions of the Law and other relevant laws and to request notification of the transaction made within this scope to the third parties to whom your personal data has been transferred,
  • To object to the emergence of a result against the person by analyzing the processed data exclusively through automated systems,
  • To request compensation for the damages incurred due to the unlawful processing of your personal data.

You can submit your applications regarding your rights listed above to TKPAY by filling out the Related Person Application Form, which you can access via info@tkpay.com. Depending on the nature of your request, your applications will be finalized free of charge as soon as possible and within thirty days at the latest; however, if the transaction requires an additional cost, you may be charged a fee according to the tariff determined by the Personal Data Protection Board.