This clarification text has been prepared by the data controller Ömer Balkan Bilişim Hizmetleri within the scope of Article 10 of the Law No. 6698 on the Protection of Personal Data and the Communiqué on the Procedures and Principles to be Followed in Fulfillment of the Disclosure Obligation.
Dear customers; Within the scope of the Law No. 6698 on the Protection of Personal Data (“Law”), which entered into force on April 7, 2016, personal data is defined as any information relating to an identified or identifiable natural person and the protection of your personal data and being informed about your personal data is one of your fundamental rights in accordance with the Constitution of the Republic of Turkey (“Constitution”). In this respect, since ensuring the security and processing of your personal data is of great importance and sensitivity for Ömer Balkan Bilişim Hizmetleri as well as an obligation, your data is processed and protected by Ömer Balkan Bilişim Hizmetleri within the framework of the Constitution of the Republic of Turkey and the Law.
Article 10 of the Law imposes an obligation on the “Data Controller” to inform the relevant persons about the identity of the data controller and its representative, if any, during the acquisition of personal data, the purposes for which personal data will be processed, to whom and for what purposes the processed personal data may be transferred, the method and legal reason for collecting personal data and other rights listed in Article 11 of the Law, and with this clarification text, it is aimed to inform you about the personal data processing activities carried out by “Ömer Balkan Bilişim Hizmetleri”, which has the title of data controller under the “Law”.
The data controller is defined in Article 3-i of the Law as the natural or legal person who determines the purposes and means of processing personal data and is responsible for the establishment and management of the data recording system, and Ömer Balkan Bilişim Hizmetleri is the data controller in terms of data related to our valued customers / potential customers.
Your personal data detailed in the table below are obtained and processed by Ömer Balkan Bilişim Hizmetleri through fully/partially automatic and non-automatic methods.
The purposes and legal reasons for processing your personal data processed by Ömer Balkan Bilişim Hizmetleri are given in the table below.
| Legal Reason |
Personal Data Category |
Processing Purpose |
| Explicitly stipulated in the law (Art. 5/2-a of LPPD) |
Identity Data |
- To comply with legal and administrative measures.
- Reporting suspicious transactions to MASAK.
- To comply with the information retention, reporting and information obligations stipulated by all judicial and administrative authorities in accordance with the relevant legislation, and to ensure that the requests or decisions of these authorities are fulfilled.
- Notifying these authorities in order to investigate, detect and prevent violations of the contract and the law.
- Verification of customer identity.
- Performing account opening transactions.
- Carrying out activities in accordance with the legislation.
- To comply with legal and administrative measures.
- Suspicious transaction detection and fraud prevention, follow-up of fraud processes, customer identification and detection of suspicious transactions, identification of customers who perform suspicious transactions.
- Preparation of information and documents that will be the basis for the business and transactions to be carried out
|
| Communication Data |
- Complying with the information retention, reporting and information obligations stipulated by all judicial and administrative authorities in accordance with the relevant legislation, and ensuring that the requests or decisions of these authorities are fulfilled.
- Notifying these authorities in order to investigate, detect and prevent violations of the contract and the law.
- Verification of your customer identity.
- Evaluation of account opening requests.
- Conducting activities in accordance with the legislation.
- To comply with legal and administrative measures.
- Reporting suspicious transactions to MASAK.
- Suspicious transaction detection and fraud prevention, follow-up of fraud processes, customer identification and detection of suspicious transactions, identification of customers performing suspicious transactions.
|
| Customer Transaction Data |
- To comply with legal and administrative measures.
- Reporting suspicious transactions to MASAK.
- Suspicious transaction detection and fraud prevention, follow-up of fraud processes, customer identification and detection of suspicious transactions, identification of customers who perform suspicious transactions.
- Complying with the information retention, reporting and information obligations stipulated by all judicial and administrative authorities in accordance with the relevant legislation, and ensuring that the requests or decisions of these authorities are fulfilled.
- Tracking the points and rankings earned from competitions and tournaments.
- Distribution of awards to users.
|
| Finance Data |
- Complying with the information retention, reporting and disclosure obligations stipulated by all judicial and administrative authorities in accordance with the relevant legislation, and ensuring that the requests or decisions of these authorities are fulfilled.
- To comply with legal and administrative measures.
- Reporting suspicious transactions to MASAK
|
| Process Security |
- Complying with the information retention, reporting and disclosure obligations stipulated by all judicial and administrative authorities in accordance with the relevant legislation, and ensuring that the requests or decisions of these authorities are fulfilled.
- In order to comply with legal and administrative
|
| Audiovisual Recording Data |
- To comply with the information retention, reporting and disclosure obligations stipulated by all judicial and administrative authorities in accordance with the relevant legislation, and to ensure that the requests or decisions of these authorities are fulfilled.
- To comply with legal and administrative measures.
- Reporting suspicious transactions to MASAK
|
| Legal Process Data |
- To comply with the information retention, reporting and disclosure obligations stipulated by all judicial and administrative authorities in accordance with the relevant legislation, and to ensure that the requests or decisions of these authorities are fulfilled.
- To comply with legal and administrative measures.
- Reporting suspicious transactions to MASAK
- Suspicious transaction detection and fraud prevention, follow-up of fraud processes, customer identification and detection of suspicious transactions, identification of customers who perform suspicious transactions.
|
| Provided that it is directly related to the establishment or performance of a contract, it is necessary to process the personal data of the parties to the contract (Art. 5/2-c of the LPPD) |
Identity Data |
- Execution of contract processes, provision of our services and verification of customer identity within this scope.slation, and to ensure that the requests or decisions of these authorities are fulfilled.
- Protection of customer accounts and archives, prevention of unauthorized access to customer accounts.
- Execution of contract processes.
- Conducting communication activities.
- Execution of customer support services processes.
- Carrying out custody and archive activities.
- Preparation of information and documents that will be the basis for the works and transactions to be carried out.
- Execution of operation processes.
|
| Communication Data |
- Execution of contract processes, provision of our services and verification of customer identity within this scope.
- Performing account opening transactions
- Execution of customer support services processes.
- Carrying out custody and archive activities.
- Preparation of information and documents that will be the basis for the business and transactions to be carried out.
|
| Customer Transaction Data |
- Execution of contract processes, provision of our services and verification of customer identity within this scope.
- Carrying out communication activities.
- Execution of customer support services processes.
- Carrying out custody and archive activities.
- Preparation of information and documents that will be the basis for the business and transactions to be carried out.
- Execution of operation processes.
|
| Finance Data |
- In order to comply with legal and administrative measures.
- Preparation of information and documents that will be the basis for the works and transactions to be carried out.
- Execution of contract processes.
- Provision of services.
- Making changes to customer account information.
|
| Process Security Data |
- Protection of customer accounts and archives, prevention of unauthorized access to customer accounts.
- Execution of customer support services processes.
- Carrying out custody and archive activities.
- Preparation of information and documents that will be the basis for the business and transactions to be carried out.
- Execution of operation processes.
|
| Audiovisual Recording Data |
- Provision of our services and verification of customer identity within this scope.
- Performing account opening transactions
- Confirming the identity of the customer performing transactions, making changes to customer account information.
- Protection of customer accounts and archives.
- Preparation of information and documents that will be the basis for the business and transactions to be carried out.
- Execution of contract processes.
- Resolution of existing and future legal disputes.
- Fulfilling our legitimate interests such as ensuring customer account security and system security; fulfilling obligations within the scope of money laundering legislation, preventing fraud and crimes.
- Conducting activities in accordance with the legislation.
|
| It is mandatory for the data controller to fulfill its legal obligation (Art. 5/2-ç of the LPPD) |
Identity Data |
- Provision of our services and verification of customer identity within this scope.
- Performing account opening transactions
- Confirming the identity of the customer performing transactions, making changes in customer account information.
- Preparation of information and documents that will be the basis for the business and transactions to be carried out.
- Complying with the information retention, reporting and information obligations stipulated by all judicial and administrative authorities in accordance with the relevant legislation, and ensuring that the requests or decisions of these authorities are fulfilled.
- Investigating, detecting and reporting to these authorities in order to prevent violations of the contract and the law.
- Resolving existing and future legal disputes.
- Ensuring customer account security and system security; fulfilling our legitimate interests such as fulfilling obligations within the scope of money laundering legislation, preventing fraud and crimes.
- Follow-up and execution of legal and litigation affairs, follow-up and execution of mediation affairs, follow-up and execution of enforcement affairs.
- Conducting communication activities.
- Execution of customer support services processes.
- Carrying out storage and archive activities.
- Follow-up of requests/complaints.
- Execution of operation processes.
- Reporting suspicious transactions to MASAK, suspicious transaction detection and fraud prevention, follow-up of fraud processes, customer identification and detection of suspicious transactions, identification of customers who perform suspicious transactions.
- Conducting activities in accordance with the legislation.
|
| It is mandatory for the data controller to fulfill its legal obligation (Art. 5/2-ç of the LPPD) |
Communication Data |
- Performing account opening transactions.
- Confirming the identity of the customer performing transactions, making changes to customer account information, upgrading customer account level.
- Preparation of information and documents that will be the basis for the business and transactions to be carried out.
- Complying with the information retention, reporting and information obligations stipulated by all judicial and administrative authorities in accordance with the relevant legislation, and ensuring that the requests or decisions of these authorities are fulfilled.
- Investigating, detecting and reporting to these authorities in order to prevent violations of the contract and the law.
- Resolving existing and future legal disputes.
- Ensuring customer account security and system security; fulfilling our legitimate interests such as fulfilling obligations within the scope of money laundering legislation, preventing fraud and crimes.
- Follow-up and execution of legal and litigation affairs, follow-up and execution of mediation affairs, follow-up and execution of execution affairs, follow-up and execution of enforcement affairs, follow-up and execution of enforcement affairs.
- Conducting communication activities.
- Execution of customer support services processes.
- Carrying out storage and archive activities.
- Follow-up of requests/complaints.
- Execution of operation processes.
- Reporting suspicious transactions to MASAK, suspicious transaction detection and fraud prevention, follow-up of fraud processes, customer identification and detection of suspicious transactions, identification of customers who perform suspicious transactions.
- Conducting activities in accordance with the legislation.
- Provision of our services and verification of customer identity within this scope.
|
| It is mandatory for the data controller to fulfill its legal obligation (Art. 5/2-ç of the LPPD) |
Customer Transaction Data |
- Preparation of information and documents that will be the basis for the works and transactions to be carried out.
- Investigating, detecting and reporting to these authorities in order to prevent violations of the contract and the law.
- Resolving existing and future legal disputes.
- Ensuring customer account security and system security; fulfilling our legitimate interests such as fulfilling obligations within the scope of money laundering legislation, preventing fraud and crimes.
- Follow-up and execution of legal and litigation affairs, follow-up and execution of mediation affairs, follow-up and execution of enforcement affairs.
- Conducting communication activities.
- Conducting customer support services processes.
- Carrying out custody and archive activities.
- Execution of contract processes.
- Follow-up of requests/complaints.
- Execution of operation processes.
- Execution of customer relations processes.
- Notification of suspicious transactions to MASAK, suspicious transaction detection and fraud prevention, follow-up of fraud processes, customer identification and detection of suspicious transactions, identification of customers performing suspicious transactions.
- Complying with the information retention, reporting and information obligations stipulated by all judicial and administrative authorities in accordance with the relevant legislation, and ensuring that the requests or decisions of these authorities are fulfilled.
|
| It is mandatory for the data controller to fulfill its legal obligation (Art. 5/2-ç of the LPPD) |
Finance Data |
- Complying with the information retention, reporting and disclosure obligations stipulated by all judicial and administrative authorities in accordance with the relevant legislation, and ensuring that the requests or decisions of these authorities are fulfilled.
- Carrying out customer support services processes.
- Carrying out storage and archive activities.
- Execution of contract processes.
- Follow-up of requests/complaints.
- Execution of operation processes.
- Conducting activities in accordance with the legislation.
- Notification of suspicious transactions to MASAK, suspicious transaction detection and fraud prevention, follow-up of fraud processes, customer identification and detection of suspicious transactions, identification of customers performing suspicious transactions.
|
| It is mandatory for the data controller to fulfill its legal obligation (Art. 5/2-ç of the LPPD) |
İşlem Güvenliği Verisi |
- Carrying out custody and archive activities.
- Reporting suspicious transactions to MASAK, suspicious transaction detection and fraud prevention, follow-up of fraud processes, customer identification and detection of suspicious transactions, identification of customers who perform suspicious transactions.
- Complying with the information retention, reporting and disclosure obligations stipulated by all judicial and administrative authorities in accordance with the relevant legislation, ensuring that the requests or decisions of these authorities are fulfilled.
- Follow-up and execution of legal and litigation affairs, follow-up and execution of mediation affairs, follow-up and execution of enforcement affairs.
|
| It is mandatory for the data controller to fulfill its legal obligation (Art. 5/2-ç of the LPPD) |
Görsel ve İşitsel Kayıt Verisi |
- To comply with the information retention, reporting and disclosure obligations stipulated by all judicial and administrative authorities in accordance with the relevant legislation, and to ensure that the requests or decisions of these authorities are fulfilled.
- To comply with legal and administrative measures.
- Reporting suspicious transactions to MASAK.
- Providing our services and verifying your customer identity within this scope.
- Performing account opening transactions.
- Confirming the identity of the customer performing transactions, making changes to customer account information, upgrading customer account level.
- Notifying these authorities in order to investigate, detect and prevent violations of the contract and the law.
- Resolving existing and future legal disputes.
- Conducting activities in accordance with the legislation.
|
| It is mandatory for the data controller to fulfill its legal obligation (Art. 5/2-ç of the LPPD) |
Hukuki İşlem Verisi |
- Complying with the information retention, reporting and information obligations stipulated by all judicial and administrative authorities in accordance with the relevant legislation, and ensuring that the requests or decisions of these authorities are fulfilled.
- Investigating, detecting and reporting violations of the contract and the law to these authorities in order to prevent such violations.
- Follow-up and execution of legal and litigation affairs, follow-up and execution of mediation affairs, follow-up and execution of enforcement affairs.
|
| Data processing is mandatory for the legitimate interests of the data controller (Art. 5/2-f of the LPPD) |
Identity Data |
- Keeping customer satisfaction at the highest level by measuring the performance of our systems.
- Planning commercial/business strategies.
- Ensuring the security of our website, mobile applications, other online applications and products.
- Follow-up of requests/complaints.
|