PROTECTION OF PERSONAL DATA

Taking into consideration the security of our valuable customers, we, as Deniz Finansal Kiralama A.Ş. (“the Company”), would like to inform you about “the Law on Protection of Personal Data” introduced for protecting the privacy of personal life, fundamental rights and freedoms. Our objective is to provide you the most transparent information, for customer satisfaction purposes, on how your personal data is obtained, the purposes of processing such data, the related legal reasons and your rights.

In terms of all kinds of personal and biometric data, data of private features including health data (“Data”) you conveyed to our Company or our Company obtained within the framework of its procedures and transactions, as per the Law on Protection of Personal Data No. 6698 which entered into force on 7th of April, 2016, our Company Deniz Finansal Kiralama A.Ş., as Data Controller, may obtain, record, maintain, update personal data to continue its services within the scope of the law, reorganize and disclose, transfer and share data to/with third parties in cases and to the extent permitted by legislation, transfer, convey, share, classify, make anonymous and process the data in other formats prescribed in the law.

The purposes and legal reasons for processing your personal data includes providing our products and services and sustaining them without interruption within the scope of the Banking Law, Financial Leasing Factoring and Financing Companies Law and other legislation; recording the identity, address and other required information to identify the information of the transaction holder; issuing all records and documents that will be the foundation of the transaction in an electronic or paper media; complying with obligations of keeping, reporting information and notification envisaged by the local and international legislation, BRSA, CBRT, CMB, FCIB, Treasury Undersecretariat and other authorized bodies.

Your personal data may be collected automatically or manually, in writing or verbally or in electronic form through our Company’s Head office units, branches, online branch, call center and other similar channels.

Your personal data may be shared with the persons, bodies and institutions allowed by the Banking Law, Financial Leasing Factoring and Financing Companies Law and other legislation provisions as well as other third parties, authorities such as BRSA, CMB, CBRT, FCIB, Turkish Banking Association, Treasury Undersecretariat, our main shareholders, our direct or indirect domestic, international subsidiaries and consultants and institutions from which we receive services, which we work together or collaborate to carry out our activities.

Without prejudice to the article 28 titled “Exceptions” of the Law on Protection of Personal Data, as per the article 11 of the Law you have the right to a) query whether your personal data were processed, b) request information if your personal data was processed, c) learn the purpose of the processing of your personal data and whether it was used duly, ç) learn third parties domestic and abroad to whom your personal data was transferred, d) ask for the correction of any wrong or missing personal data, e) request the erasing or termination of your personal data as per terms given in article 7 of Law, f) request that the transactions done as per paragraphs (d) and (e) above by means of transferring your personal data to third persons be notified to you, g) object to any situation against your favor as your personal data are analyzed by exclusively automated systems and ğ) claim compensation for losses in case of any loss due to processing of your personal data by violation of Law.

Execution of your rights is possible after the enforcement date of the regulation which is 07.10.2016 and our rights are reserved to request costs to be incurred by our Company to fulfill your requests from you as per tariff given in article 13 under Law on Protection of Personal Data entitled “Applying to data controller”.

As per the legislation, it is a legal obligation to keep your information and documents by our Company for 10 years. If you request the deletion or termination of your personal data, your request shall be fulfilled at the end of 10 years. During this period, your personal data will not be processed by our Company, shared with third parties other than obligations resulting from national and international law, regulations and contracts and you shall not be contacted to be promoted or marketed any product.