Protection of personal data information text
We, ICBC Turkey Bank A.Ş. (“ICBC Turkey”), as the Data Supervisor, would like to inform you, in accordance with article 10 titled (“Obligation of the Data Supervisor to Provide Information”), of the LPPD; regarding the Law no.6698 on Protection of Personal Data (the “LPPD”), published in the Official Gazette dated 7 April 2016 and issue no.29667, for the purposes of protecting basic rights and freedoms of persons, mainly the confidentiality of private life, in processing of personal data, and specifying the obligations of real and legal persons that process personal data.
In order to protect confidentiality of personal information obtained by ICBC Turkey from its clients and/or authorised representatives of a Client, from a potential client, personnel, senior management of the Bank and from 3rd persons; ICBC Turkey keeps the system infrastructure and the internet presentations and documents, at the highest security level.
Data supervisor
According to the Law no.6698 on Protection of Personal Data (“LPPD”), your personal data are collected and processed by ICBC Turkey, as the data supervisor, in the context explained below.
Purpose of processing personal data
ICBC Turkey, in addition to the information which it is required to obtain from its clients and the authorised representatives of its clients; processes, keeps and discloses only the personal data, which it considers to be necessary in order to provide best products and services targeted by it, to the extent permitted by relevant legal regulations. In this context, personal data are processed, within the scope of all national and international legislation, mainly the Banking Law no.5411, the Law no.5549 on Preventing Laundering Proceeds of Crime, for the purposes of offering banking services; performing the transactions in relation thereto, reporting activities of our Bank in Turkey, abroad (to our major shareholder Industrial and Commercial Bank of China Limited (ICBC)), to official authorities and 3rd persons and institutions and internally within the Bank; problem management and test processes, allocation and insurance activities, campaign period activities, credit activities and activities conducted to ensure security, activities relating to cash flow management and payments; securities, cheque, repo and transfer/remittance transactions; ledger calculations; trading activities, activities relating to lawsuits/execution proceedings and consulting services; activities relating to documents prepared in order to respond to information demands by official authorities; activities relating to suspicious transactions within the scope of MASAK regulations; screening the clients’ credit details; screening the clients’ account information; in internal control and compliance works, taking the clients’ data from the system; preparing reports relating to credit cards; performing the transactions required by the Bank and the Laws within the scope of the personnel’s hiring/employment/leaving the job processes; intelligence activities; activities relating to credit card, debit card, ATM, account statements and internet banking; activities conducted within the scope of ensuring customer satisfaction and identification; activities of preparation of relevant forms and agreements; activities conducted within the scope of audit; and in line with the know-your-customer principles, demands of the Bank’s guests and to provide internet access services for the personnel.
Method and legal reason of collecting personal data
ICBC Turkey may obtain the personal data of its clients and/or the authorised representatives of its clients, potential clients, personnel, senior management of the Bank and 3rd persons; by means of fully or partially automatic means and also by means which are part of a data recording system, which however, are non-automatic, via all kinds of written, verbal and electronic media, from said persons, third persons and legal authorities.
Your personal data are collected based on following legal grounds, as set forth in articles 5 and 6 of the Law;
Disclosure of processed personal data
ICBC Turkey may share the personal data may share the personal data with third persons in Turkey and abroad, from whom in receives services for the purposes of offering the services and products within the scope of the banking activities, direct and indirect shareholders of ICBC Turkey, its subsidiaries, affiliated companies, persons and institutions from which it receives services and/or consulting, its business partners with which it signs an agreement, third persons with which it conducts joint activities, official authorities and public institutions; provided that it should make a confidentiality agreement and should have the right to select those persons.
ICBC Turkey is required to keep the record and documents relating to transactions it shall make with its clients and/or with its clients’ authorised representatives, potential clients, personnel, senior management of the Bank and with 3rd persons; for a certain period within the scope of relevant legal regulations; and if you want your personal data be deleted or destructed or anonymised, such demand to be made by you may be performed by ICBC Turkey until the end of the period set forth in relevant legal regulations; however, during that period, your personal data shall not be processed by ICBC Turkey and shall not be shared with third persons, except for requirements arising from national and international legal regulations and agreements.
Rights of relevant person, personal data of whom are processed
As the personal data owners, if you present your demands by the means explained below, ICBC Turkey shall finalise relevant demand as soon as possible depending on the nature of demand, and in thirty days at the latest. In the response to be given, no fee shall be charged up to ten pages. For each page above ten pages, a transaction fee of 1 Turkish Lira shall be charged for each page. In case the response against an application, is given in a recording media such as CD, flash memory, fee which may be charged by our company, shall not exceed the cost of recording media.
In this context, personal data owners shall have the rights of;
You may send your demand with regards to exercising your rights specified above, to ICBC Turkey, in Turkish and in writing or by registered electronic mail (REM) address, secure electronic signature, mobile signature or by using the electronic mail address, declared before and which is recorded in the system, in accordance with the 1st paragraph of article 13 of the LPPD and the Communiqué on Procedures and Principles Regarding Application to the Data Supervisor, no.30356 and dated 10.03.2018. In applications, information shall be given only regarding the applicant person and it shall not be possible to obtain information regarding other family members and third persons. ICBC Turkey reserves the right to verify your identity, before giving an answer.
In your application;
a) your name, surname and if your application is in writing, your signature,
b) for the citizens of the Republic of Turkey, your Republic of Turkey identity number; if you are a foreigner, your nationality, your passport number or your identity number, if any,
c) your domicile address or address of your work place, eligible for notices,
d) your electronic mail address, phone and fax number, if any, eligible for notices,
e) subject of your demand,
should be indicated and the information and documents in relation to relevant matter, if any, should be attached to the application.
You may give your applications which you want to make in writing, by attaching required documents, to our branches or to the Head Office of our Company, as the data supervisor, at the address of “Maslak Mah. Dereboyu / 2 Cad. No:13 34398 Sarıyer / İstanbul”. You may access the application from here.
For your applications which you want to make by e-mail, you may make them to the e-mail address kvkk@icbc.com.tr. You may make your applications which you want to make by means of REM, to our REM address at icbcturkey@hs02.kep.tr.
Depending on the nature of your demand, information and documents which shall provide for identification, should be provided to us completely and correctly. If demanded information and documents are not provided, there may be problems in conducting, completely and in required quality, the researches to be made by ICBC Turkey based on your demand. ICBC Turkey declares that it reserves its legal rights, in such case. Therefore, your application should be sent completely and in the form containing demanded information and documents, depending on the nature of your demand.