Privacy Notice Text on Personal Data Processing in Scope of Intertech inter-API Portal Processes

1. Purpose and Scope

This Privacy Notice Regarding Data Processing in scope of Intertech inter-API Processes (“Privacy Notice”) has been prepared in accordance with the Law on Protection of Personal Data (LPPD) numbered 6698 in order to inform you on your personal data processed during your visits to and use of inter-APİ portal at api.intertech.com.tr, methods of collecting your personal data, legal basis and purpose of processing your personal data, persons/institutions where your personal data are transferred to, purpose of transfer and your rights.

As İnter-Tech Bilgi İşlem ve Pazarlama Ticaret A.Ş. (Intertech), we act as Data Controller in accordance with the LPPD, and we take the necessary measures during the processing and preservation of your personal data in accordance with the principle of protecting fundamental rights and freedoms, especially privacy.

The table below shows information on our Company that processes your personal data.

Title : İnter-Tech Bilgi İşlem ve Pazarlama Ticaret A.Ş.

Address : Sanayi Mahallesi, Teknopark Bulvarı 1/3C, PK: 34906, Kurtköy – Pendik / İstanbul

Central Registry System No/ Registry No. : 0478006528100012 / 232834

2. Your Processed Personal Data and Methods of Collection

Your personal data in the data categories of Identity (name, surname), Communication (e-mail address) and Customer Transaction (inter-APİ portal and API services usage information, request information) can be accessed from electronic media, in partially automated ways, through our website during your registration to the inter-API portal, when you fill out an online form and use our inter-API portal and API services.

If you use the inter-API portal and our API services on our website, we may obtain your personal data in the Transaction Security data category (portal password information, IP address, website login and exit information, etc.) in order to ensure transaction security.

We do not have absolute control over the information you share, and we kindly ask you not to share your personal data and sensitive personal data that you do not want to be obtained by Intertech.

3. What we use your personal data for and the legal basis for doing so

Your personal data in the Identity, Communication, Transaction Security and Customer Transaction data categories can be processed for your membership and subscription to the inter-APİ portal at api.intertech.com.tr, to use our inter-API portal and API services and to carry our your requests from Intertech, for the purposes of improving our portal and services, improving experiences, in this context, carrying out communication, approval and information processes regarding our products and services, as well as customer relations management processes, contacting you, managing legal processes, conducting control activities, legal storage, reporting and providing information, pursuant to subparagraph (c) of paragraph 2 of Article 5 of the LPPD, based on the legal reason that "it is necessary to process the personal data of the parties to the contract, provided that it is directly related to the establishment or performance of a contract";

In order to carry out the information security processes of your personal data in the Transaction Security data category and to carry out our activities in accordance with our obligations arising from the legislation to which we are subject, we may process information in accordance with subparagraph (ç) of the 2nd paragraph of the 5th article of the LPPD, “it is mandatory for the data controller to fulfill its legal obligation” and Pursuant to subparagraph (f)* and based on legal reasons "where data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject".  

(*It is in our legitimate interest to improve the experiences on our digital channels, including our website and mobile applications, and to provide you with easier, faster and error-free access.)

4. To whom and for what purpose the processed personal data can be transferred

Your personal data will be transferred to Microsoft Corporation to be stored on servers located abroad (in countries where Microsoft Azure cloud media services are available) using the "Microsoft Azure" infrastructure so that you can use the inter-API portal and we can fulfill your requests, and can be processed within the scope of articles 8 and 9 of the LPPD within the framework of the stated purposes.

Only our employees with limited access can access your personal data at Intertech for the above-mentioned purposes and to the extent required by their duties. To the extent permitted by the legislation to which we are subject, your personal data can be transferred to companies and individuals within the group of companies (DenizBank Financial Services Group**) to which Intertech is included, in accordance with the principle of proportionality, and within the scope of our information and reporting obligations, and they are not passed on to third parties other than the institutions and organizations that are legally authorized to receive information.

(**You may reach information regarding the company group Intertech is a member of, our main shareholder and our subsidiaries and affiliates from https://www.denizbank.com/hakkimizda/denizbankin-iliskili-kuruluslari link.)

5. Your Rights

Pursuant to article 11 of the Personal Data Protection Law, you have the following rights related to your personal data;

a)    to learn whether your personal data are processed or not,

b)    to request information if your personal data are processed,

c)    to learn the purpose of your data processing and whether this data is used for intended purposes,

d)    Finding out third parties in Turkey and abroad to whom personal data has been transferred,

e)    to request correction if your personal data were processed incompletely or inaccurately and to request that third persons, to whom your personal data are transferred, get notified about the transactions carried out within this scope

f)     Despite being processed as per the provisions of the Law numbered 6698 and other relevant laws, in the event that reasons requiring the processing have disappeared, to request the erasure or destruction of your personal data and to request that third persons, to whom your personal data are transferred, get notified about the transactions carried out within this scope,

g)    to object to the processing, exclusively by automatic means, of your personal data, which leads to an unfavorable consequence for you,

h)    to request compensation for the damage arising from the unlawful processing of your personal data.

Within the scope of your rights specified in Article 11 of the Law on Protection of Personal Data No. 6698, in accordance with the provisions of the "Communiqué on the Procedures and Principles of Application to the Data Controller", you can forward your requests to "Sanayi Mahallesi, Teknopark Bulvarı 1/3C,PK: 34906, Kurtköy – Pendik / İstanbul" address, together with the documents proving your identity, in writing and with a wet signature, or notary public, or forward it to “intertech@hs04.kep.tr” address using your registered e-mail (KEP) address, or to info@intertech.com.tr via your personal e-mail address with a secure electronic signature/mobile signature or the e-mail address you have previously notified to our Company and registered in our systems.