As “Pluspay Finansal Teknoloji Hizmetleri A.Ş.”, pursuant to Article 10 of Personal Data Protection Law No. 6698 (“KVKK”), we would like to inform you about the processing of your personal data, the transfer of the personal data we process, the methods and legal grounds for collecting your personal data, and your other rights listed in Article 11 of the KVKK.
For the purposes explained below, we may process, record, store, classify and update your personal data in accordance with the law and the rules of good faith, and disclose or transfer it to third parties where permitted by legislation and/or limited to the purpose for which it is processed.
Data controller and representative
Under the Law, “Pluspay Finansal Teknoloji Hizmetleri A.Ş.”, operating at “Yenisahra Mahallesi Yavuz Selim Cad. No:15 Kat:4/5/6 Ataşehir İstanbul” (hereinafter referred to as “Pluspay”), is the Data Controller.
Your personal data that we process
The following personal data is processed when you use our company's products and services:
- Your Identity Information (identifying data such as your first name, last name, and Turkish identity number),
- Your Contact Information (your address, mobile phone number, email address, and other contact details),
- Your Financial Data (financial data such as your bank account number, IBAN, credit card details, payment information, and billing information)
- Customer Transactions (such as order and request information and information on counter receipts)
- Marketing (such as purchase history, surveys, cookie records, and information obtained through campaigns)
- Transaction Security (such as website browsing information, IP address, website login/logout information, and password and passcode information)
- Other personal data you provide directly in connection with your requests, suggestions, and complaints.
Purpose of processing personal data
Your personal data is processed to enable you to use the services offered by Pluspay, in accordance with the fundamental principles set out in the Personal Data Protection Law (KVKK) and relevant legislation, based on your explicit consent and/or the other grounds specified in Article 5/2 of the KVKK, particularly the legislation to which we are subject. Pluspay's purposes for processing personal data are;
- Fulfilling the requirements of our Company’s commercial activities,
- Carrying out work with our business partners and managing referral relationships,
- Fulfilling information-sharing, reporting and notification obligations prescribed by public institutions and authorities,
- Fulfilling information and document retention obligations arising from legislation,
- Conducting our communication, market research and purchasing operations,
- Conducting Finance and Accounting Activities,
- Conducting Goods / Services Purchasing Processes,
- Conducting Goods / Services Sales Processes,
- Providing After-Sales Support Services for Goods / Services,
- Conducting Customer Relationship Management Processes,
- Conducting Customer Satisfaction Activities,
- Conducting Advertising / Campaign / Promotion Processes,
- Organization and Event Management,
- Following Up Requests / Complaints and Conducting Product / Service Marketing Processes,
- Conducting Contract Processes,
- Conducting Performance Evaluation Processes. Personal data will be processed for these purposes within the personal data processing conditions and purposes specified in Articles 5 and 6 of Law No. 6698.
Methods and legal grounds for collecting personal data
Your personal data may be collected through Pluspay’s head office, offices and other physical locations where you can contact its business partners, the call center, the web, websites and similar electronic transaction platforms, social media or other publicly accessible channels, in writing, verbally, through audio or video recordings, or in other physical or electronic formats.
We process the personal data collected through the methods above based on one or more of the following legal grounds:
- Processing is required by the laws and regulations in force in the Republic of Türkiye (your data may be processed where relevant legislation makes data processing necessary and mandatory, particularly the Code of Obligations, the Commercial Code, the Consumer Protection Law, Law No. 5651 on the Regulation of Publications on the Internet and Combating Crimes Committed through Such Publications, and the General Communiqué on the Tax Procedure Law).
- Processing the personal data of the parties to a contract is necessary, provided that it is directly related to the establishment or performance of that contract,
- Processing is necessary to fulfill a legal obligation (this provides a legal basis for processing purposes such as responding to lawful requests under secondary legislation and regulatory and supervisory activities, conducting and concluding alternative dispute resolution procedures and litigation, and complying with court requests).
- You have made your personal data public,
- Processing your personal data is necessary for our legitimate interests, provided that it does not harm your fundamental rights and freedoms. For details, see the “Personal Data Processing and Protection Policy”.
Recipients of processed personal data and purposes of transfer
Our company processes your personal data lawfully and fairly, ensuring that it is accurate and up to date where necessary, collected for specific, clear, and legitimate purposes, relevant, limited, and proportionate to those purposes, and retained only for the period prescribed by applicable legislation or required for the purposes for which it is processed.
To maintain our company’s activities and business processes, your personal data may be transferred to our domestic and/or overseas business partners with whom we collaborate or carry out projects; our shareholders, suppliers and insurers; notaries, banks and financial institutions; consultancy firms providing support in legal, accounting, tax and similar matters; legally authorized public bodies and private persons; and domestic and/or overseas service providers that process personal data on our company’s behalf and provide storage, archiving, information technology support (such as servers, hosting, CRM software and cloud computing) and similar services. Such transfers may take place within the personal data processing conditions specified in Articles 8 and 9 of Law No. 6698 and for the purposes stated above.
Rights of the data subject whose personal data is processed
As a data subject, you have the following rights under Article 11 of the Law:
- Learn whether personal data is being processed,
- Request information if your personal data has been processed,
- Learn the purpose of processing your personal data and whether it is used in accordance with that purpose,
- Know the third parties to whom your personal data is transferred, domestically or abroad,
- Request correction of your personal data if it has been processed incompletely or inaccurately,
- Request the deletion or destruction of your personal data,
- Request that third parties to whom your personal data has been transferred be notified of its correction, deletion or destruction,
- Object to an outcome that is detrimental to you resulting from analysis of your processed data exclusively through automated systems,
- Request compensation if you suffer damage as a result of unlawful processing of your personal data.
Under Article 4 of Personal Data Protection Law No. 6698, the personal data we collect and process must be accurate and, where necessary, up to date. If any of your personal data changes, you can notify us of your current, accurate information using the methods below.
If you would like to contact us about your requests
For requests submitted in writing;
Complete the “KVKK Application Form” available on our website at https://www.pluspay.com.tr/ and deliver a copy bearing your handwritten signature in person, together with proof of identity, or through a representative holding a notarized power of attorney showing authorization to apply in relation to the rights listed in Article 11. You may also send it through a notary to “Yenisahra Mahallesi Yavuz Selim Cad. No:15 Kat:4/5/6 Ataşehir İstanbul”.
For requests submitted electronically;
You may sign the KVKK Application Form using an electronic or mobile signature with a “secure electronic signature” certificate as defined in Electronic Signature Law No. 5070 and send it to our Company's Registered Electronic Mail (KEP) address. Alternatively, you may send the form to muhasebe@pluspay.com.tr using an email address you have previously provided to our Company and that is registered in our systems.
(We may request additional verification, such as sending a message to your registered email address or calling you, to confirm that the application is yours and protect your rights. If a third party applies on behalf of a data subject, the data subject must provide that person with a notarized power of attorney granting specific authority.)
Requests submitted to our Company will be answered in writing or electronically as soon as possible, depending on the nature of the request, and no later than thirty days.