Papel Commercial Customer Clarification Text

Data Category

Personal Data

Identity Data

Name-surname, previous surname, parents' name, Turkish ID number, date of birth, name-surname, parents' name, Turkish ID number, date of birth, nationality, identity information on the identity card and/or driver's licence of the person making the application and/or company partners, VKN and title of the person who is the customer, Foreign identification number.

Contact Data

Telephone number, e-mail, address of the applicant, mobile phone and e-mail address of the authorised person, workplace address, workplace/mobile phone number of the workplace, mobile phone and e-mail address of the card customer, registered e-mail address.

Financial Data

Customer's IBAN and card number information, bank account information, prepaid card information, income and asset information, etc.

Audio and Visual Data

Voice Recording Data.

Occupational Data

Data on work and occupation, information to determine the type of workplace, introductory and explanatory information and documents related to the enterprise.

Risk Data

Information processed for the management of commercial, technical, administrative risks, etc. (e.g. data obtained from the Credit Bureau and Interbank Card Centre and the Merchant Registration System).

Customer Transaction Data

Call centre voice recordings, past transaction records, invoice information, promissory note information, order information, etc.

Marketing Data

Your information obtained through marketing activities.

Legal Transaction Data

With the permission of KVKK and IYS, judicial administrative authority requests, information in the case file, etc.

Process Security Data

Shopping history information, Survey, Cookie records, Information obtained through campaigns, etc.

Category of Personal Data Processed

Processing Purposes

Legal Reasons

Identity, Communication, Customer Transaction, Finance, Transaction Security, Risk;

In order to conclude agreements regarding the payment methods you have requested within the scope of your corporate account application, to receive and evaluate your applications and requests and to provide you with our products and services, to carry out, execute and develop the necessary transactions in order to provide our products and services to you, execution of the contracts that we have concluded with you regarding the execution of operational processes or that we have concluded with third parties in order to provide you with these products and services, to improve our services and to manage operational requirements, to fulfil our contractual and legal obligations, to perform accounting and financial transactions in order to protect our customers from risks and damages with our website, application and other platforms where we offer our products / services;

Pursuant to Article 5/2 (a) of the KVKK, it is explicitly stipulated by law, pursuant to Article 5/2 (c) of the KVKK, it is necessary to process personal data belonging to the parties to the contract, provided that it is directly related to the establishment or performance of a contract, pursuant to Article 5/2 (ç) of the KVKK, it is mandatory for the data controller to fulfil its legal obligation, pursuant to Article 5/2 (e) of the KVKK, data processing is mandatory for the establishment, exercise or protection of a right;

Identity, Communication, Legal Action, Audio and Visual, Customer Action;

To carry out communication and information processes regarding our products and services that you benefit from as your corporate account customer; to manage all requests and complaints including notifications such as customer relations, experience, satisfaction, complaints, objections, requests, suggestions, to inform you about the terms of use and other contractual and legal obligations, to prevent fraud and unauthorised access, and to follow up and execute all legal processes;

Pursuant to Article 5/2 (a) of the KVKK, it is explicitly stipulated by law, pursuant to Article 5/2 (c) of the KVKK, it is necessary to process personal data belonging to the parties to the contract, provided that it is directly related to the establishment or performance of a contract, pursuant to Article 5/2 (ç) of the KVKK, it is mandatory for the data controller to fulfil its legal obligation, pursuant to Article 5/2 (e) of the KVKK, data processing is mandatory for the establishment, exercise or protection of a right;

Identity, Communication, Transaction Security, Legal Transaction, Customer Transaction, Professional, Risk, Finance;

To check the national and international lists published in accordance with the legislation on Prevention of Laundering Proceeds of Crime and Financing of Terrorism and Prevention of Financing the Proliferation of Weapons of Mass Destruction, to fulfil the obligations regarding identification and customer recognition, to record information such as business occupation, income status, purpose of making transactions, especially identification and address determination and confirmation, to make suspicious transaction notifications, to carry out compliance processes in accordance with foreign legislation;

Pursuant to Article 5/2 (a) of the KVKK, it is explicitly stipulated by law, pursuant to Article 5/2 (c) of the KVKK, it is necessary to process personal data belonging to the parties to the contract, provided that it is directly related to the establishment or performance of a contract, pursuant to Article 5/2 (ç) of the KVKK, it is mandatory for the data controller to fulfil its legal obligation;

Identity, Communication, Legal Action, Risk Management, Finance, Customer Transaction, Transaction Security;

In order to comply with the legislation to which Papel is subject and to cooperate with regulatory bodies and law enforcement agencies, to fulfil our obligations to provide information, record keeping, reporting and other obligations arising from the legislation (Law No. 6493, Banking Law No. 5411, Banking Law No. 5464, Bank Cards and Credit Cards Law No. 5464 and the legislation on Prevention of Laundering Proceeds of Crime and Financing of Terrorism, MASAK General Communiqué No. 5, Law No. 6563 on the Regulation of Electronic Commerce and its regulations, CBRT, BRSA, CMB, MASAK, GİB, Central Registry Agency Inc. No. 5 MASAK General Communiqué, Law No. 6563 on the Regulation of Electronic Commerce and its regulations, CBRT, BRSA, CMB, MASAK, RA, Central Registry Agency Inc, Ministry of Treasury and Finance, Credit Bureau, TBB Risk Centre and other authorities);

Pursuant to Article 5/2 (a) of the KVKK, it is explicitly stipulated by law, and pursuant to Article 5/2 (ç) of the KVKK, it is mandatory for the data controller to fulfil its legal obligation;

Identity, Contact, Customer Transaction, Audio and Visual Records;

For the management, planning and realisation of relationships and processes established with service providers, business partners, our representatives, companies we represent or suppliers;

Pursuant to Article 5/2 (c) of the KVKK, provided that it is directly related to the establishment or performance of a contract, it is necessary to process personal data belonging to the parties to the contract;

Identity, Communication, Finance, Marketing, Customer Transaction;

Regarding the products and services of Papel itself or its domestic and foreign direct and indirect subsidiaries and other shareholders, including its main shareholder, and their subsidiaries, affiliates, subsidiaries and the organisations with which it cooperates, in whose favour it acts as an intermediary or agent, or which are or are the representatives of Papel; in particular, products and services subject to payment services activities and products and services offered together with the aforementioned companies; To explain and market the aforementioned products and services, to plan and carry out marketing, promotion and communication activities, to offer offers through all channels including digital channels and social media channels, to carry out promotion, marketing, promotion, cross-selling and campaign activities and to design marketing and promotional activities specific to you, to carry out credit, behavioural scoring, market research, data analytics studies for marketing purposes to determine and develop suitable products and services to be offered to you, customer satisfaction;

Having your explicit consent in accordance with Article 5(1) of KVKK.

(If you withdraw your explicit consent, data processing and transfer activities will be terminated by Papel for the specified purposes).

Transferred Party

Transfer Purpose

Business Partners, Agents, Suppliers and External Service Providers;

Your personal data may be shared with cooperating companies, representatives, suppliers, outsourcing companies, cloud computing service providers, mobile service providers authorised by the Information and Communication Technologies and Communications Authority in order to ensure your transaction security and to provide and deliver the products and services we have offered you / you have requested from us, lawyers, law offices, notaries, company auditors, independent audit, rating and valuation companies in order to fulfil legal processes and our legal obligations.

Public Institutions and Organisations; System Integrations Shared through Public Institutions and Organisations;

Central Bank of the Republic of Turkey, Banking Regulation and Supervision Agency, Personal Data Protection Authority / Board, Capital Markets Board, MASAK, TÖDEB, Banks Association of Turkey, KOSGEB, Revenue Administration, Undersecretariat of Treasury, Information Technologies and Communication Authority, Social Security Institution, if we are legally obliged, Your personal data may be shared with legally authorised public or private institutions/organisations such as tax authorities, ministries, judicial authorities, police, public prosecutors' offices, courts and judicial authorities/investigation authorities such as arbitration/mediation bodies in order to fulfil our legal obligations. In addition, your personal data may be shared in order to process your applications correctly within the framework of customer identification obligations (Identity Sharing System, Address Based Population Registration System, etc.) and to make inquiries in the systems for your security.

Banks, Payment Service Providers, Card System Organisations and other Financial Institutions;

It may be shared with banks providing POS, Papel business partners, Papel representatives and persons, institutions and/or organisations on whose behalf and account we carry out representation activities in order to fulfil our obligations arising from representation activities. In addition, it may be shared with financial institutions that are members of the payment programme in order to carry out payment transactions or are involved in the payment making business required for certain types of payments in order to provide the products and services you have requested or to fulfil your request.

Risk Centres (such as BKM, KKB)

Your personal data may be shared for the purposes of risk management, management of risk monitoring activities and fulfilment of our legal obligations (for example, reporting your information to BKM to be recorded in the "merchant registration system" that BKM is obliged to create in accordance with the legislation).

Business Partners, Suppliers and External Service Providers;

In the presence of your explicit consent, your personal data in the categories of identity, communication, customer transaction, finance and marketing will be transferred to Papel's domestic and foreign service providers in order to design, plan and execute campaigns, promotions, product service promotion processes and to communicate for these purposes.