As “Pluspay Finansal Teknoloji Hizmetleri A.Ş.”, pursuant to Article 10 of Personal Data Protection Law No. 6698 (“KVKK”), we would like to inform you about the processing of your personal data, the transfer of the personal data we process, the methods and legal grounds for collecting your personal data, and your other rights listed in Article 11 of the KVKK.
For the purposes explained below, we may process, record, store, classify and update your personal data in accordance with the law and the rules of good faith, and disclose or transfer it to third parties where permitted by legislation and/or limited to the purpose for which it is processed.
Data controller and representative
Under the Law, “Pluspay Finansal Teknoloji Hizmetleri A.Ş.”, operating at “Yenisahra Mahallesi Yavuz Selim Cad. No:15 Kat:4/5/6 Ataşehir İstanbul” (hereinafter referred to as “Pluspay”), is the Data Controller.
Your personal data that we process
The following personal data is processed when you use our company's products and services:
Your Identity Information (identifying data such as your first name, surname and Turkish national identification number), Your Contact Information (your address, mobile phone number, email address and other contact details), Your Financial Data (financial data such as your bank account number, IBAN, credit card information, payment information and billing information), Customer Transactions (such as order and request information and information on counter receipts), Marketing (such as shopping history, surveys, cookie records and information obtained through campaigns), Transaction Security (such as website browsing information, IP address, website login/logout information and password details), and other personal data you provide directly in connection with your requests, suggestions and complaints.
Purpose of processing personal data
Your personal data is processed to enable you to use the services offered by Pluspay, in accordance with the fundamental principles set out in the Personal Data Protection Law (KVKK) and relevant legislation, based on your explicit consent and/or the other grounds specified in Article 5/2 of the KVKK, particularly the legislation to which we are subject. Pluspay's purposes for processing personal data are;
Your personal data will be processed within the conditions and purposes for processing personal data set out in Articles 5 and 6 of Law No. 6698, for the purposes of fulfilling the requirements of our Company's commercial activities, carrying out work with our business partners and managing referral relationships, fulfilling information sharing, reporting and notification obligations imposed by public institutions and authorities, fulfilling statutory obligations to retain information and documents, conducting our communications, market research and procurement operations, conducting finance and accounting activities, managing goods / services procurement processes, managing goods / services sales processes, providing after-sales support for goods / services, managing customer relationships, conducting customer satisfaction activities, managing advertising / campaign / promotional processes, managing organizations and events, following up on requests / complaints, conducting product / service marketing processes, managing contract processes and conducting performance evaluations.
Methods and legal grounds for collecting personal data
Your personal data may be collected through Pluspay’s head office, offices and other physical locations where you can contact its business partners, the call center, the web, websites and similar electronic transaction platforms, social media or other publicly accessible channels, in writing, verbally, through audio or video recordings, or in other physical or electronic formats.
We process the personal data collected through the methods above based on one or more of the following legal grounds:
Where processing is required by the laws and regulations in force in the Republic of Türkiye (your data may be processed where relevant legislation, particularly the Code of Obligations, the Commercial Code, the Consumer Protection Law, Law No. 5651 on the Regulation of Publications on the Internet and Combating Crimes Committed through Such Publications, and the Tax Procedure Law General Communiqué, makes data processing necessary and mandatory). Where processing the personal data of the parties to a contract is necessary, provided it is directly related to establishing or performing that contract. Where it is mandatory to fulfill a legal obligation (this provides a legal basis for processing purposes such as meeting lawful requests under secondary legislation and regulatory and supervisory activities, conducting and concluding alternative dispute resolution procedures and litigation, and responding to court requests). Where you have made your personal data public. Where processing your personal data is necessary for our legitimate interests, provided it does not harm your fundamental rights and freedoms. For detailed information, see the “Personal Data Processing and Protection Policy”.
Recipients of processed personal data and purposes of transfer
Our company processes your personal data lawfully and fairly, ensuring that it is accurate and up to date where necessary, collected for specific, clear, and legitimate purposes, relevant, limited, and proportionate to those purposes, and retained only for the period prescribed by applicable legislation or required for the purposes for which it is processed.
To maintain our company’s activities and business processes, your personal data may be transferred to our domestic and/or overseas business partners with whom we collaborate or carry out projects; our shareholders, suppliers and insurers; notaries, banks and financial institutions; consultancy firms providing support in legal, accounting, tax and similar matters; legally authorized public bodies and private persons; and domestic and/or overseas service providers that process personal data on our company’s behalf and provide storage, archiving, information technology support (such as servers, hosting, CRM software and cloud computing) and similar services. Such transfers may take place within the personal data processing conditions specified in Articles 8 and 9 of Law No. 6698 and for the purposes stated above.
Rights of the data subject whose personal data is processed
As a data subject, you have the following rights under Article 11 of the Law:
To learn whether your personal data is being processed, to request information if your personal data has been processed, to learn the purpose of processing and whether your personal data is used in accordance with that purpose, to know the third parties to whom your personal data is transferred domestically or abroad, to request correction if your personal data has been processed incompletely or inaccurately, to request deletion or destruction of your personal data, to request that third parties to whom your personal data has been transferred be notified of its correction, deletion or destruction, to object to a result against you arising from analysis of processed data exclusively through automated systems, and to request compensation for damage suffered due to unlawful processing of your personal data. Under Article 4 of Personal Data Protection Law No. 6698, the personal data we collect and process must be accurate and, where necessary, up to date. Therefore, if your personal data changes, you can provide your current and accurate personal information using the methods set out below.
If you would like to contact us about your requests
To submit a written request, you may complete the “KVKK Application Form” available on our website at https://www.pluspay.com.tr/ and deliver a copy bearing your handwritten signature in person, together with proof of identity, or through a representative holding a notarized power of attorney showing authorization to apply in relation to the rights listed in Article 11. You may also send it through a notary to “Yenisahra Mahallesi Yavuz Selim Cad. No:15 Kat:4/5/6 Ataşehir İstanbul”.
For requests submitted electronically;
You may sign the KVKK Application Form using an electronic or mobile signature with a “secure electronic signature” certificate as defined in Electronic Signature Law No. 5070 and send it to our Company's Registered Electronic Mail (KEP) address. Alternatively, you may send the form to muhasebe@pluspay.com.tr using an email address you have previously provided to our Company and that is registered in our systems.
(We may request additional verification, such as sending a message to your registered email address or calling you, to confirm that the application is yours and protect your rights. If a third party applies on behalf of a data subject, the data subject must provide that person with a notarized power of attorney granting specific authority.)
Requests submitted to our Company will be answered in writing or electronically as soon as possible, depending on the nature of the request, and no later than thirty days.