Yapı Kredi Mobile Privacy Policy & Application Permission

Yapi ve Kredi Bankasi Anonim Şirketi Privacy Policy

We, as Yapı ve Kredi Bankası Anonim Şirketi ( “Yapı Kredi” or “the Bank”), would like to inform you on how we process your personal and other types of data, while you use our Yapı Kredi Mobile application (“the Application”), in order to improve your experiences and provide you a simpler usage of the Application by some functions of the Application, as well as on permissions we collect via the Application.

Usage of our Application is being conducted in compliance with all the legislations that the Bank is subject to, especially with the Law on Protection of Personal Data No.6698 (“the PPDL”). You may reach detailed information regarding the purposes of processing of your personal data by our Bank via the Yapı ve Kredi Bankası A.Ş. Policy on Protection and Processing of Personal Data, which is publicly announced on the web site at the address of www.yapikredi.com.tr.

Method and Legal Reason of Collecting Personal Data

Your personal data are collected by our Bank upon your usage of the Application via a variety of functions of the Application, based on the legal grounds of our Bank’s legitimate interest, execution or performance of a contract or your explicit consent, if available. Your personal data which are collected as per the said legal reasons, may also be processed within the scope of personal data processing conditions and purposes set forth in articles 5 and 6 of the PPDL for the purposes specified herein this Privacy Policy.

For What Purposes And To Whom Shall Your Personal Data Be Transferred?

As Yapı Kredi, we may transfer your personal data to our shareholders within or outside Turkey, our subsidiaries, legally authorized public/private institutions and corporations, our business partners and our suppliers, as per the scope of the purposes mentioned above and in compliance with the relevant legislations.

For What Purposes Shall Your Personal Data Be Processed?

As Yapı Kredi, we collect permissions for several purposes via different variety of functions based on different operating systems and we process your personal data via such functions. The main permissions and personal data that are collected are as following:

Required Permission Reason
Notifications To be able to send push notifications to your mobile phone.
Camera It is required for Eye Verify, Payment with Barcode, Withdraw via QR Code and Take a Profile Photo Functions.
Location Nearest Yapı Kredi needs to know your location to operate.
Photo It is required for Profile Photo - Choose From Library Function.
Microphone It is required for Eye Verify and Interactive Birthday Celebration functions.
Contacts To integrate Cash-to-Mobile with your phone contact list.
Required Permission Reason
Device ID and Call Information It is required for Remember Me Function.
Photo / Media / File It is required for uploading photo from gallery for profile.
Camera It is required for Eye Verify, Payment with Barcode, Withdraw via QR Code and Take a Profile Photo Functions.
Microphone It is required for Eye Verify and Interactive Birthday Celebration functions.
Identity To monitor the number of customers using mobile branch and to be able to send Push Notifications.
Location Nearest Yapı Kredi needs to know your location to operate.
Contacts To integrate Cash-to-Mobile with your phone contact list.
SMS To be able to automatically fill up the smart password input.
Phone Allow users to be able to call Yapı Kredi Call Center.
WiFi Access Information Nearest Yapı Kredi works more accurate.

What Are Your Rights As A Data Subject?

We hereby declare that you are entitled to the following rights, regarding your personal data, set forth under Article 11 of the Law:

  • To learn whether your personal data are being processed,
  • To request information if your personal data have been processed,
  • To learn the purpose of the processing of your personal data and whether they have been used accordingly,
  • To learn which third parties domestic or abroad your personal data has been transferred to,
  • To request rectification in case your personal data has been processed incompletely or inaccurately and to demand the operations in this regard be reported to third parties your personal data has been transferred to,
  • To request deletion or destruction of your personal data within the framework of the conditions stipulated in the relevant legislation,
  • To request the correction, deletion and destruction processes made in accordance with the relevant legislation be notified to the third parties to whom your personal data has been shared,
  • To object to negative consequences to you that are concluded, as a result of analysis of the processed personal data through solely automatic systems,
  • To demand compensation for the damages that you have suffered as a result of an unlawful processing of your personal data.

To exercise your rights listed above, you can submit your requests to our Bank;

  • via our Branches with identity verification,
  • via our Digital Channels or Call Center by performing identity verification,
  • via notary public to Yapı Kredi Plaza D Blok Levent Istanbul,
  • via secure electronic signature, to yapikredi@yapikredi.hs02.kep.tr ,
  • via your e-mail address registered in our Bank’s system.

The application must include the following;

  1. name, surname, and if the application is in writing, signature,
  2. for citizens of the Republic of Türkiye Turkish Republic identification number, for foreigners; nationality, passport number or identification number, if any
  3. residential or workplace address for notification,
  4. electronic mail address, telephone and facsimile number, if any
  5. subject of the request.

Your request will be concluded as soon as possible, within 30 days at the latest and in principle, free of charge. However, if the process requires additional costs, a fee may be demanded according to the tariff determined by the Personal Data Protection Board.

Date of last update: 17/05/2024