Akbank Mobile Privacy Policy & Application Permisson

Akbank Personal Data Protection Policy

We, as Akbank T.A.Ş (the “Bank” or “Akbank”) would like to inform you on how we process your personal and other types of data, while you use our Akbank application (“the Application”), in order to improve your experiences and provide you a simpler usage of the Application by some functions of the Application, as well as on permissions we collect via the Application.

Usage of our Application is being conducted in compliance with all the legislations that the Bank is subject to, especially with the Law on Protection of Personal Data No.6698 (“the PPDL”). We have prepared our Public Disclosure Text on Processing of Personal Data ("Disclosure Text") in order to inform the data subject about the processing, storage and transfer of your personal data within the framework of the Law on Personal Data Protection (LPPD) and legal regulations You may reach detailed information regarding the purposes of processing of your personal data by our Bank via the Akbank T.A.Ş. Policy on Protection and Processing of Personal Data, which is publicly announced on the web site at the address of www.akbank.com.tr.

Our Purpose of Processing Personal Data and The Reasons for Legal Compliance

Your personal data are collected by our Bank upon your usage of the Application via a variety of functions of the Application, based on the legal grounds of our Bank’s legitimate interest, execution or performance of a contract or your explicit consent, if available. Your personal data which are collected as per the said legal reasons, may also be processed within the scope of personal data processing conditions and purposes set forth in articles 5 and 6 of the PPDL for the purposes specified herein this Privacy Policy.

Your Personal Data and Methods of Collection

The table below shows the personal data processed by our bank in groups. Thus, you may familiarize yourself with the data processed by us.

Your Personal Data

Personal Data Category	Personal Data
Identity details	E.g.: Name Surname, TR ID No, gender, nationality, place of birth, date of birth, marital status.
Contact details	Contact details E.g. email address, home/work address, phone number.
Risk management information	E.g.: Salary information, asset-income information, education information, demographic information, opinion information created by our relevant branch, working style, working hours, data obtained from Identity Information Sharing System and Address Sharing System, Credit Bureau, Banks Association of Turkey Risk Center Data
Customer transaction details	E.g. credit information, deposit information, overdraft account information, credit card limit and balance information, deposit account transactions, loan payment transactions, customer information bank ("MBB") information.
Risk monitoring and follow-up information	debt information, delay and delay information, maturity information, information on related persons, assets (vehicle and title deed) information.
Audio and Visual Recordings	Your visual and audio data, especially call center audio recordings, camera recordings, photographs
Legal Action	Any information in correspondence with judicial authorities, information in the case file, etc.
Location	It is the location information where you are.
Marketing	Cookie records, pages viewed through bank applications, Shopping history information, Survey, information obtained through campaign work, etc.
Professional Experience	Diploma information, courses attended, vocational training information, Certificates, Transcript information, workplace working style and duration, etc.
Other	Demographic information, income information, asset information, reporting data

Your Sensitive Personal Data

Personal data included in this section consist of any data relating to the individuals' race, ethnic origin, political opinion, philosophical belief, religion, sect or other belief, clothing, membership to associations, foundations or trade unions, health, sexual life, convictions and security measures, and biometric and genetic data included in article 6 of the LPPD.

Personal Data Category	Personal Data
Health Data	Blood group information, Personal health information, etc.
Association, Foundation,	Association, foundation membership information
Criminal Conviction	Judicial decisions about the prohibition of issuing checks and opening a checking account
Biometric Data	Palm information, Fingerprint information, Retina scan information, Face recognition information etc.

Our Collection Methods

As AKBANK, we collect your personal data in written, verbal and visual format by electronic and physical methods, automatically, partially automatically or non-automatically.

Your personal data that we obtain through non-automatic or partially automated methods,

With the information and documentation you provide to our bank during your physical (branch, etc.) product/service/campaign applications,
Indirectly from your representatives (e.g. attorney, parent, guardian, etc.),
Your workplace consists of data provided (e.g., to confirm income information).

We can obtain information about you with automatic methods and technical support;

Through your applications from digital (mobile banking, website, customer contact center, IVR, AT, etc.) environments
With the remote identification method (e.g. biometric face data) we perform through mobile banking channels,
Databases of public institutions and other organizations where your identity and address information are registered (e.g. Identity Sharing System ("KPS"), Address Sharing System ("APS")
Official institutions and organizations with credit score information (e.g. Credit Bureau ("KKB"), Banks Association of Turkey Risk Center ("TBB Risk Center")
Organizations from which we receive support services such as stores, dealers, electronic commerce sites that mediate the establishment of a contractual relationship with our Bank
From other Payment Account Providers through the mobile banking application in order to provide you with Open Banking Payment Services by our Bank,
Organizations with whom we cooperate in advertising and marketing for referral purposes, such as comparison websites,
Social networks and other technology providers (e.g., when you contact us through our ads),
From companies that provide data services, from which we receive reporting services in order to better understand our customers and evaluate general trends.
As a result of monitoring your online behavioral movements with the integration of different servers on which our Bank works on mobile applications and websites,
We collect the data we obtain through the expenditures you have made with your mobile phone or card (your location information).

Transferred Recipients

Your personal data may be transferred in a limited and measured manner in connection with the fulfillment of the processing purposes stated below, in accordance with our obligations regarding the provisions of the Law of Banking and the legislation to which we are subject, in order to carry out Banking activities, including but not limited to following reasons. In this section, we list the organizational structures we transfer and our transfer purposes.

Organizations	Our Objectives
Institutions and organizations that are legally authorized to receive information (e.g. BRSA, CMB, CBRT, MASAK, SSI, Message Management System, Credit Bureau, Interbank Card Center, Banks Association of Turkey),	In order to carry out risk management, risk monitoring activities and legal reporting, to carry out regulation and audit activities, to operate complaints and legal processes,
International or domestic card payment systems institutions and organizations, including payment processing service providers and other financial institutions that are members of the payment program (Mastercard INT. INC., Visa INC., JCB CO., LTD., Maestro, Electron),	In order to perform your payment transactions and to offer the products and services you have purchased from us
To our domestic and/or foreign branches and units and our shareholder(s), Our main shareholder (Hacı Ömer Sabancı Holding) and our subsidiaries,	In order to establish, conduct and termination a service relationship with the customer, In order to carry out credit evaluation, preparation of consolidated financial statements, risk management and internal audit activities,
To our business partners (e.g. program partner organisations, banks, financial institutions, fintechs),	In order to provide the banking products and services and payment services you request,
To the suppliers, independent audit companies, and law firms from which we receive external services	In order to provide support and consultancy services to the Bank,
With asset management companies, sales of bank receivables and prospective buyers	In order to carry out valuation studies in the sale of bank shares, but not limited to these, data is transferred to real and legal persons whose data transfer is mandatory within the scope of legal compliance reasons.
To the companies we are agency of	In order to carry out insurance transactions,

Rights of the Relevant Person

Your rights listed in Article 11 of the LPPD

We hereby declare that you are entitled to the following rights, regarding your personal data, set forth under Article 11 of the Law:

To learn whether the personal data are processed or not,
To request information if the personal data are processed,
To learn the purpose of personal data processing and whether this data is used for intended purposes,
To know the third parties to whom your personal data is transferred at home or abroad,
To request the rectification of the incomplete or inaccurate personal data, if any,
To request the erasure or destruction of personal data,
To request that the third parties to whom personal data have been transferred be notified of the actions regarding the correction, erasure or destruction of personal data,
To object to any unfavorable result that they suffer due to analysis of processed data only by means of automatic systems;
To request compensation for the damage arising from the unlawful processing of your personal data.

The requests submitted in this framework shall be concluded by AKBANK T.A.Ş. free of charge within thirty days at the latest. However, where the Personal Data Protection Board prescribes a fee, our Bank may charge the fee set forth in the tariff.

Meeting Your Demands

The LPPD gives the relevant persons the right to make a request regarding which personal data are processed in which processes and the current status of such data.

Pursuant to Article 13 of the LPPD, which regulates the "Application to the Data Controller", the relevant person / data subject must submit their requests regarding the implementation of the Law to the data controller in writing. Therefore, in order for your request to be evaluated, you must submit your application in writing.

As a bank, requests from data owners are replied within 30 days. In this context, we would like to remind you that your written applications to be made in relation to this matter may be accepted following the verification of your identity by us.

To exercise your rights listed above, you can submit your requests to our Bank;

You can send it to our branches, Sabancı Center 34330 4.Levent/Beşiktaş-Istanbul address together with your identity documents and petition containing your request, and send it through a notary public,
You can send it to akbank@akbank.hs03.kep.tr with a secure electronic signature.
You may send your applications in writing through our digital channels. You can cancel your preference from the "personal data processing and campaign information" section on all digital channels, especially Akbank application.

You can forward your request to Customer Communication Center.

Your request will be concluded as soon as possible, within 30 days at the latest and in principle, free of charge. However, if the process requires additional costs, a fee may be demanded according to the tariff determined by the Personal Data Protection Board.

Account Deletion Request

If you wish to delete your account on the Akbank application or our website, you can submit your account deletion request using the methods below. The account deletion process is carefully designed to ensure that your user data is managed securely and in compliance with the law.

How to Submit an Account Deletion Request

To delete your account, please submit your request using one of the following methods:

You can send your application through our digital channels. You can submit your account deletion request on our application and our website from the "personal data processing and campaign information" section.
You can visit your nearest Akbank branch. After identity verification, you can submit your account deletion request.
You can forward your reques to Customer Communication Center.
You can send it to akbank@akbank.hs03.kep.tr with a secure electronic signature.
You can send your account deletion request through a notary to the address Sabancı Center 34330 4.Levent/Beşiktaş-Istanbul

Required Information for the Request

When submitting your request, please include:

a. Your full name and, if the application is in writing, your signature.

b. For Turkish citizens, your Turkish Republic identification number; for foreigners, your nationality, passport number, or identification number, if available.

c. Your residential or workplace address for notification.

d. Your email address, telephone, and fax number, if available.

e. The subject of your account deletion request.

Account Deletion Process

Receipt of Request: Once we receive your account deletion request, necessary reviews will be initiated. During this process, we may contact you to verify your request.
Data Deletion: Due to legal requirements, some data may need to be retained for a certain period. In such cases, we will inform you about the retention of these data.

By following these steps, we aim to ensure a smooth and compliant account deletion process while protecting your personal data.

Cookie Policy

You can delete the cookies already on your computer and prevent the saving/placement of cookies on your internet browser. Internet browsers are predefined to automatically accept cookies. Since managing cookies differs from browser to browser, you can refer to the help menu of the browser or application for detailed information.

For example;

You can manage it with the option through "Google Chrome -> Settings -> Advanced -> Privacy and Security -> Site Settings -> Cookies and Site Data -> Allow sites to save and read cookie data".

You can manage it from the menu through "Internet Explorer -> Settings -> Internet Options -> Privacy -> Advanced settings".

Most Internet browsers allow you to:

View and delete saved cookies
Block third-party cookies
Block cookies from certain sites
Block all cookies
Delete all cookies when you close the browser

If you choose to delete cookies, your preferences on the relevant website shall be deleted. In addition, if you choose to block cookies completely, many websites and digital platforms, including Akbank's websites, may not work properly.

To control cookies on your mobile device;

On Apple Devices;

You can clear your browsing history and cookies with the steps through "Settings -> Safari -> Clear History and Website Data".
To delete cookies and keep your history, you can follow the steps of "Settings -> Safari -> Advanced -> Website Data -> Delete All Website Data".

If you do not want historical data to be kept while visiting the sites;

You can activate private browsing by following the steps through "Safari -> icon -> Private -> Done".
You can block cookies with the steps through "Settings -> Safari -> Block All Cookies". However, some websites and features may not work properly when you block cookies.

On Android Devices;

You can clear your cookies with the option through "Chrome app -> Settings -> Privacy -> Clear browsing data -> Cookies, media licenses and site data -> Clear Data".
You can allow or block cookies with the option through "Chrome Application -> Settings -> Site Settings -> Cookies".

By following these steps, you can effectively manage and control the cookies on your devices, ensuring your privacy and preferences are maintained.