Central Union of Türkiye Tarım Kredi Cooperatives
Privacy Policy and Information Notice
Regarding the Protection of Personal Data
Identity of the Data Controller
Title : Central Union of Türkiye Tarım Kredi Cooperatives
Website : https://www.tarimkredi.org.tr
Telephone : +90 (312) 216 40 00/01
Email : iletisim@tarimkredi.org.tr
Address : Söğütözü Neighborhood, 2185th Street No:20F Inner Door No:7, Çankaya/ANKARA
General Principles of Data Protection
We process your personal data in accordance with the general principles of data protection law. These principles are as follows:
- Processing personal data lawfully, fairly and transparently,
- Processing personal data for specific, explicit and legitimate purposes,
- Processing personal data limited to the stated purposes,
- Ensuring that personal data is accurate and kept up to date,
- Retaining personal data for the period necessary for the purpose of processing,
- Storing personal data securely.
What Types of Data Do We Collect?
As the Central Union of Türkiye Tarım Kredi Cooperatives (“Institution”), we process your personal data in line with the general principles set out in Article 4 of the Law on the Protection of Personal Data (“KVKK”) and Article 5 of the General Data Protection Regulation (GDPR). The personal data we process include:
- Identity information (name, surname, trade name for sole proprietorships, signature/signature circular, Turkish ID number, gender, date of birth, social media account information),
- Contact information (phone number, email address, business and residential address details, region of residence, call records, social media account information),
- Professional experience information (position/title, office, department, employer, CV, education information),
- Financial information (bank account/IBAN details, amount information, invoice details, tax office information, receivable-payable information, reconciliation details),
- Marketing information (communication preferences, cookie records),
- Legal transaction information (information contained in correspondence with judicial authorities, personal data in litigation/enforcement files, documents in mediation processes, notices, contract information, approval records),
- Customer transaction information (partnership information, credit/limit details, product information, asset information),
- Request and complaint information (content of requests, complaints and suggestions, petition content).
From Where Do We Obtain These Data?
We obtain the data we process through:
- Automated means via https://www.tarimkredi.org.tr and the forms available on this website,
- Non-automated or partially automated means via litigation/enforcement files and notifications,
- Non-automated means through documents and petitions submitted by you,
- Non-automated or partially automated means from relevant public institutions and organizations,
- Partially automated means via email,
- Non-automated means verbally,
- Non-automated means through physical documents delivered to us,
- Partially automated or non-automated means through applications,
- Non-automated means through contracts,
- Partially automated means through accounting systems.
For What Purposes Do We Process These Data and On What Legal Grounds?
We process your personal data in accordance with the data processing conditions set forth under the KVKK and the GDPR, including explicit consent, compliance with legal obligations, necessity for the performance of a contract, protection of legitimate interests, establishment or protection of a right, and other lawful bases defined in the relevant legislation.
We request and process your data for purposes such as verifying identity, conducting and supervising business activities, managing communication, fulfilling payment and invoicing processes, complying with legal obligations, following legal proceedings, managing contracts, handling requests and complaints, and maintaining accounting and reconciliation processes. The specific legal bases relied upon are indicated in parentheses in the relevant sections above.
With Whom Do We Share the Data?
We may share personal data we process with:
- Courts, mediators and authorized public institutions and organizations for the purpose of conducting legal and judicial processes,
- Authorized public institutions and organizations to fulfill our legal obligations,
- Law firms for the execution of legal processes,
- Domestic or, where necessary, foreign banks for the execution of payment processes,
- Tarım Kredi Holding, its group companies, cooperatives and regional unions, where necessary and subject to informing the relevant persons, for handling requests, complaints and communication processes,
- Independent auditors for audit processes,
- Relevant suppliers for the execution and supervision of business activities,
- Relevant real or legal persons for necessary correspondence and communication activities.
Except for the third parties listed above, we do not share your personal data with unrelated or unauthorized third parties.
Storage and Destruction of Personal Data
We process and retain your personal data in line with the purpose of processing, in a manner that is relevant, limited and proportionate, and in accordance with general principles. We take all necessary technical and administrative measures to ensure the security of stored personal data and supervise the compliance of third parties to whom the data are transferred.
Your personal data are retained by considering the purpose and legal grounds for processing, the retention periods required by applicable legislation, and our legal obligations. If, according to these criteria, we no longer need your personal data and are not legally required to retain them, such data will be deleted or destroyed.
Your Rights Under the KVKK
By applying to us, data subjects have the right to:
- Learn whether their personal data are processed,
- Request information if their personal data have been processed,
- Learn the purpose of processing and whether the data are used in accordance with that purpose,
- Know the third parties to whom personal data are transferred domestically or abroad,
- Request correction of incomplete or inaccurate data and request notification of such correction to third parties to whom the data have been transferred,
- Request deletion or destruction of personal data where the reasons requiring processing no longer exist and request notification of such action to third parties to whom the data have been transferred,
- Object to the occurrence of a result against themselves by analyzing processed data exclusively through automated systems,
- Request compensation for damages in case of unlawful processing of personal data.
You may submit your requests regarding your rights in accordance with the Communiqué on the Principles and Procedures for Application to the Data Controller. Your requests will be evaluated and concluded as soon as possible and no later than thirty (30) days, free of charge. If the evaluation requires additional costs, the fee determined by the Personal Data Protection Board will apply. You may also contact us for detailed information regarding our data processing activities.