ICBC TURKEY BANK A.Ş. DECLARATION FOR PROVIDING NFORMATION TO THE CUSTOMERS REGARDING PROCESSING OF PERSONAL DATA
We, as ICBC Turkey Bank A.Ş. (the “Bank”), in the capacity of Data Controller, would like to inform you about the Personal Data Protection Law no.6698 (the “Law” or “PDP”), published in the Official Gazette dated 7 April 2016 and issue number 29677, for the purposes of protecting fundamental rights and freedoms of individuals, mainly secrecy of private life, and setting forth obligations of legal persons, in processing of personal data, in accordance with article 10 titled “Data Controller’s Obligation to Provide Information”, of the Law.
1. Data Controller
According to the PDPL, your private personal data (hereinafter referred to as the “personal data”) shall be collected and processed by our Bank, ICBC Turkey Bank A.Ş., in the capacity of data controller, for the purposes and by the methods defined below.
For the purpose of preserving confidentiality of the personal information it shall obtain from the customers, relatives of the customers, guardians-curators-guardians of students, surety-reference person of customers, shareholders-representatives-authorised representatives of corporate-commercial customers, potential customers, parties to a lawsuit-file, beneficiaries, drawers, endorsers, obligors, visitors and other 3rd persons; our Bank keeps the system infrastructure and internet presentations and documents, at most secure level, and takes necessary security measures.
2. Collected Personal Data
Our Bank, for the purposes defined below and in compliance with the principles defined in the Law and in our Bank’s Policy on Protection and Confidentiality of Personal Data; processes following personal data generally, but without being limited to these. Data specified below, are provided for information purposes and may vary.
3. Methods of Collecting the Personal Data
The Bank may obtain your personal data by fully or partially automated means or by methods which is part of a data recording system, however which is not automated, via all kinds of written, verbal and electronic media. Our Bank collects your personal data through;
4. Purposes and Legal Reasons of Collecting the Personal Data
Your personal data collected by the Bank, shall be processed, in compliance with the fundamental principles defined in the PDPL, within the scope of;
Your personal data shall be shared based on following legal reasons, which are set forth in articles 5 and 6 of the Law;
5. Transfer of Processed Personal Data
Your personal data which shall be collected shall be transferred to our major shareholder and our affiliated partnerships and subsidiaries located in Turkey and abroad, our branches, correspondents banks abroad, official authorities/institutions and public authorities/institutions and private law persons (CBRT (Central Bank of the Republic of Turkey), BRSA (Banking Regulation and Supervision Agency), BAT (Banks Association of Turkey)-Risk Centre, KKB (Credit Bureau of Turkey), SSI (Social Security Institution), Consumer Arbitration Boards, Asset Management Companies, the Republic of Turkey Ministry of Treasury and Finance / Revenue Administration / Undersecretariat of Treasury, BKM (Interbank Card Centre), Takasbank (İstanbul Settlement and Custody Bank Joint Stock Company), MKK (Central Securities Depository), notaries etc.), real/legal persons from whom/which service and/or consulting is received, real/legal persons that perform audit service; within the framework of the terms and conditions and the purposes of processing personal data, defined in the Law, and being limited to the purposes specified above.
6. Rights of Related Person, Personal Data of whom are Processed
In case you, as the data subjects, present your requests relating to your rights, by the methods defined below; depending on the nature of request, the Bank shall finalise the process relating to a request, as soon as possible and at the latest within thirty (30) days. For the answer to be given, no fee shall be charged up to ten pages. For each page above ten pages, a transaction fee of 1 Turkish Lira, shall be charged. In case answer to an application is given in a recording environment such as CD, flash memory, fee which may be charged by our Bank shall not exceed the cost of relevant recording environment.
In this context, relating to your personal data, you shall have the right;
You can send your request relating to exercising your rights set forth above, in Turkish and in writing or by using registered electronic mail (REM) address, secure electronic signature, mobile signature or electronic mail address declared to the Bank in advance and which is recorded in our system; in accordance with the 1st paragraph of article 13 of the PDPL and the Communiqué on Procedures and Principles regarding Application to Data Controller, number 30356 and dated 10.03.2018. In application, information shall be given regarding the applicant person only and it shall not be possible to obtain any information regarding other family members and third persons. The Bank reserves the right to verify your identity, before giving an answer.
In your application;
a) Your name, surname and if application is made in writing, your signature,
b) For the citizens of the Republic of Turkey, your Republic of Turkey identity number, if your are foreigner your identity, your passport number or identity number, if any,
c) Your residence or workplace address which shall be taken as the basis for notices,
d) Your electronic mail address, phone and fax number, if any, which shall be taken as the basis for notices,
e) Subject of your request,
must be included, and the information and documents relating to relevant matter, must be also attached to the application.
You may deliver, in person, your applications which you want to make in writing, or you may send them via notary public, by attaching necessary documents, to our branches or to the Head Office of our Bank at the address of “Maslak Mah. Dereboyu / 2 Cad. No:13 34398 Sarıyer / İstanbul”, in the capacity of data controller. You can find the application form on our web site or at our Branches.
You can make your applications which you want to make by e-mail, to the e-mail address of kvkk@icbc.com.tr. You can make your applications which you want to make via REM (registered electronic mail), to our REM address of icbcturkey@hs02.kep.tr.
Depending on the nature of your request, information and documents which shall enable identification, should be provided to us completely and correctly. In case of failure to provide requested information and documents, there may be problems in conducting, completely and in qualified manner, the inquiries that shall be made by the Bank upon your request. The Bank declares that, in such case, it reserves its legal rights. Therefore, your application should be sent, completely and containing necessary information and documents depending on the nature of your application.
7. Request for Updating the Information
Personal data processed at your Bank, should be correct and up-to-date. Therefore, in case any change occurs in your information in the nature of personal data, you can declare such change to our Bank, via the means described in article 6.