CLARIFICATION TEXT ON THE PROCESSING OF PERSONAL DATA

Data Controller: iyzi Ödeme ve Elektronik Para Hizmetleri A.Ş. ("iyzico")

Contact Information:

iyzico Turkey:

Company Title: iyzi Ödeme ve Elektronik Para Hizmetleri A.Ş.
MERSİS Number: 0483034315700019
Address: Maslak Mah. AOS 55. Sok. 42 Maslak A Blok Sitesi No:2/140 Sarıyer İstanbul
Email: info@iyzico.com
Phone: +90 216 599 01 00

iyzico Europe:

Company Title: iyzi Payments, UAB
Registration Number: 304782968
Address: Mėsinių g. 5, LT-01133 Vilnius LITHUANIA
Email: info@iyzico.com
Phone: +90 216 599 01 00

As iyzi Ödeme ve Elektronik Para Hizmetleri A.Ş. ("iyzico" or the "Company"), we care about the protection of personal data. With this Clarification Text, we aim to inform the relevant individuals about the personal data processing activities carried out by iyzico within the scope of Law No. 6698 on the Protection of Personal Data (the "Law").

Purpose of Processing Users' Personal Data

The personal data of Users (our customers or visitors to our website) is processed:

In accordance with the law and the rules of good faith,
Accurately and up to date,
In a manner connected with, limited to, and proportionate to the purposes of processing,
For specific, explicit, and legitimate purposes.

As iyzico, we process Users' personal data in accordance with Articles 5 and 6 of the Law for the following purposes:

i. The carrying out of the necessary work by the business units to enable the relevant individuals to benefit from the services offered by iyzico, and the execution of the relevant business processes,

ii. The carrying out of the necessary work by the relevant business units for the realization of the commercial activities conducted by iyzico, and the execution of the related business processes,

iii. The planning and execution of iyzico's commercial and/or business strategies,

iv. Ensuring the legal, technical, and commercial-business security of iyzico and of the relevant individuals who are in a business relationship with iyzico,

v. The planning and execution of the activities necessary to customize, recommend, and introduce the services offered by iyzico to the relevant individuals according to their preferences, usage habits, and needs.

Transfer of Users' Personal Data

Users' personal data may be shared, within the purposes specified above and in accordance with Articles 8 and 9 of the Law and the applicable legislation, with Company officials, our subsidiaries resident domestically or abroad, our business partners, our suppliers, our shareholders, legally authorized public institutions and organizations, and private institutions.

Method of Collection and Legal Grounds for Personal Data

Users' personal data is collected electronically or, upon iyzico's request, physically. Personal data may be processed and transferred for the purposes specified in this Clarification Text, in accordance with Articles 5 and 6 of the Law.

Rights of Users as Personal Data Owners

Pursuant to Article 11 of the Law, Users who are data owners have the right to:

i. Learn whether their personal data is being processed,

ii. Request information if their personal data has been processed,

iii. Learn the purpose of processing their personal data and whether it is being used in accordance with its purpose,

iv. Know the third parties, domestic or abroad, to whom their personal data is transferred,

v. Request the correction of their personal data in the event that it has been processed incompletely or incorrectly, and request that the action taken in this regard be notified to the third parties to whom the personal data has been transferred,

vi. Request the deletion or destruction of their personal data in the event that the reasons requiring its processing cease to exist, even though it has been processed in accordance with the Law and other relevant legal provisions, and request that the action taken in this regard be notified to the third parties to whom the personal data has been transferred,

vii. Object to the emergence of a result against the person themselves through the analysis of the processed data exclusively by automated systems,

viii. Request compensation for damages in the event that they suffer damage due to the unlawful processing of their personal data.

As a personal data owner, you can exercise your rights by contacting us in writing through the contact information provided in this Clarification Text, or by other methods to be determined by the Personal Data Protection Board. When making this application, in order for us to identify you, you must fully state the information you provided when registering or benefiting from our services, and attach a copy of an official identity document.

iyzico will evaluate these requests and conclude them within 30 days. iyzico reserves the right to charge a reasonable fee for requests, based on the fee schedule determined by the Personal Data Protection Board.