POSTA VE TELGRAF TEŞKİLATI ANONİM ŞİRKETİ

TO TÜRKİYE CARD HOLDERS

REGARDING THE PROCESSING OF PERSONAL DATA

ILLUMINATION TEXT

As the POSTA VE TELGRAF TEŞKİLATI ANONİM ŞİRKETİ ('PTT'), which has the title of 'data controller' in accordance with the Law on the Protection of Personal Data No. 6698 (“KVKK” or “Law”), we collect, process and transfer your personal data under the conditions detailed below.

With this text, PTT enlightens you, Turkey Card holder customers, who are defined as the 'relevant person' in the Law, on the collection, processing, transfer processes of your personal data and your rights under the Law.

1. Data Controller

Within the scope of Turkey Card, PTT determines the purposes and means of processing your personal data by acting as the 'data controller' defined in Article 3/1-(ı) of the Law during the processing of your personal data.

As the data controller, PTT is responsible for establishing and managing the data recording system and taking administrative and technical measures regarding data security. In this context, it may also process your data to third parties with the title of 'data processor' defined in Article 3/1-(ı) of the Law.

2. Collection Methods and Purposes of Your Personal Data

Your personal data is collected in writing, verbally or electronically, automatically or non-automatically, by applying personally through the PTT workplaces, website and mobile channels, through the Türkiye Card delivered to you, within the scope of the legal reasons and processing purposes explained below.

3. Processing of Your Personal Data, Legal Reasons and Purposes of Processing

Your personal data collected by PTT, PTT's Postal Services Law No. 6475, Law No. 5549 on the Prevention of Laundering Proceeds of Crime, all relevant national/international legislation and national/international authorized authorities (BTK, BRSA, CBRT, MASAK, TBB etc.) .) fulfilling the obligations arising from the secondary regulations published on the basis of these, as well as all contracts to which PTT is a party; Issuing Türkiye Cards on your behalf; For the purposes of carrying out the necessary operational activities of the PTT Headquarters Units, ensuring legal and commercial security and in accordance with the principles in Article 4 of the Law, 5/II. It is processed in accordance with the processing conditions set out in the article.

For more detailed information on this matter, under the "Confidentiality" tab at www.ptt.gov.tr, "PTT A.Ş. You can access it from the "Personal Data Protection and Processing Policy".

4. Persons and Purposes of Transfer of Your Personal Data

Your personal data collected by the PTT, for the purposes described in this text, are authorized by all national/international legislation referred to above and/or persons or organizations (BRSA) that have permission, right and authority to request and process personal information within the scope of the said legislation or agreements to which it is a party. , CMB, CBRT, MASAK, Risk Center of the Banks Association of Turkey, judicial and administrative authorities, other official institutions and organizations, and individuals) to third parties holding the title of business partner and data processor of the PTT. It can be transferred within the framework of the personal data processing conditions and purposes specified in article .

5. Your Legal Rights

As a personal data owner, in accordance with Article 11 of the Law, by applying to the PTT as a data controller;

- Learning whether your personal data is processed or not,

- If your personal data has been processed, requesting information about it,

- To learn the purpose of processing your personal data and whether they are used in accordance with the purpose,

- Knowing the third parties to whom your personal data is transferred, in the country or abroad,

- Requesting correction of your personal data if it is incomplete or incorrectly processed and requesting the notification of the transaction made within this scope to the third parties to whom the personal data has been transferred,

- To request the deletion or destruction of personal data within the framework of the conditions stipulated in Article 7 of the Law (in the case that the reasons requiring the processing of your personal data have disappeared, although it has been processed in accordance with the provisions of the Law and other relevant laws), and to notify the third parties to whom the personal data has been transferred. don't want,

- Objecting to the emergence of a result against you by analyzing your processed data exclusively through automated systems,

- Requesting the compensation of the damage in case you suffer damage due to the unlawful processing of your personal data you have rights. Exceptional cases stipulated in Article 28 of the Law are reserved.

You can submit your requests regarding these rights by filling in the "Application Form for the Processing of Personal Data of the POSTA VE TELGRAF TEŞKİLATI ANONİM ŞİRKETİ" under the 'Privacy' tab at ptt.gov.tr and using the methods in this form. Your request is free of charge as a rule, as soon as possible and in any case within thirty (30) days at the latest.

REGARDS,

POSTA VE TELGRAF TEŞKİLATI ANONİM ŞİRKETİ

PROCESSED DATA CATEGORIES