Request Application Form - International

ILBANK

GRIEVANCE APPLICATION INFORMATION

As İller Bankası Inc (“Institution”), acting in the capacity of data controller, we attach utmost importance to the security of your personal data. Accordingly, we hereby inform you (“Data Subject”) about the processing and protection of your personal data, as well as your rights under Law No. 6698 on the Protection of Personal Data (“Law”), within the scope of the opinion/complaint submission you are currently making.

Pursuant to the Law, personal data refers to any information relating to an identified or identifiable natural person. Data relating to an individual’s race, ethnic origin, political opinions, philosophical beliefs, religion, sect or other beliefs, appearance and attire, association, foundation or trade union membership, health, sexual life, criminal convictions and security measures, along with biometric and genetic data, constitute special categories of personal data. For the purposes of this Notice, personal data and special categories of personal data shall collectively be referred to as “data.” We hereby state that the data specified below shall, in all circumstances, be processed;

• In accordance with the LAW and the principles of good faith,
• By ensuring the accurancy and up-to-date nature of the personal data you have provided to us,
• For specified, explicit and legitimate purposes,
• In a manner that is relevant, limited and proportionate to the purposes for which it is processed,
• And retained only for the period prescribed in the applicable legislation or required for the purposes of processing.

A. YOUR PROCESSED DATA

Within the scope of the information request you are submitting to the Institution, the following personal data of yours are processed by the Institution:

Personal Data: Full Name, Turkish ID Number, E-mail Address, Phone Number, Preferred Method for Receiving the Response to Your Application (via e-mail or in writing), Submitted Documents and Photographs.

B. PURPOSES OF PROCESSING PERSONAL DATA

Within the scope of your opinion/complaint submission, your identity, contact, and address data are processed for the purposes of creating a record of your submission within our Bank, evaluating and responding to your opinion/complaint, taking corrective action regarding the matter you have reported, or resolving your complaint. Such processing is carried out on the basis of the necessity of data processing for the establishment, exercise, or protection of a right.

C. LEGAL BASIS AND METHOD OF COLLECTING PERSONAL DATA

Your personal data are processed due to the mandatory requirements arising from the Law No. 4982 on the Right to Information, its related regulations, and other applicable legislation; the necessity of processing for the Institution to fulfil its legal obligations; and the necessity of processing for the legitimate interests of the Institution, provided that such processing does not prejudice your fundamental rights and freedoms.

Your personal data may be collected through automated means such as electronic approval, e-mail, internet, telephone, digital channels, and other similar electronic or internet-based tools, as well as through non-automated means such as notifications and forms submitted to the Institution.

D. TRANSFER OF PERSONAL DATA

We do not transfer your personal data to any institution, organization, or individual other than authorized public bodies and institutions, and only for the purpose of fulfilling our legal obligations.

E. RIGHTS OF THE DATA SUBJECT

Pursuant to Article 11 of the Law, you have the following rights regarding your personal data processed by the Institution:

• To learn whether your personal data is being processed,
• To request information if your personal data has been processed,
• To learn the purpose of processing your personal data and whether they are used in accordance with such purpose,
• To know the third parties to whom your personal data is transferred, whether domestically or abroad,
• To request the correction of your personal data if it is incomplete or inaccurate,
• To request the deletion or destruction of your personal data within the framework of the conditions set forth in the relevant legislation,
• To request notification to third parties to whom your personal data has been transferred regarding any correction, deletion, or destruction carried out in accordance with the legislation,
• To object to the occurrence of a result against you arising from the analysis of your personal data exclusively through automated systems,
• To request compensation for damages in the event you suffer harm due to the unlawful processing of your personal data.

You may submit your requests regarding the rights listed above to the Data Controller in accordance with Article 5 of the Communiqué on the Principles and Procedures for the Application to the Data Controller, together with the necessary identification information and a description of the specific right you wish to exercise, through the following methods:

• In writing and with your wet signature,
• By e-mail sent from your registered electronic mail (KEP) address,
• By secure electronic signature or mobile signature.

Your request/grievance will be evaluated and finalized as soon as possible and, in any case, within 15 (fifteen) days depending on its nature. No fees are charged for applications.

CONTACT INFORMATION