1. Data Controller

TEB Yatırım Menkul Değerler A.Ş. (“TEB Yatırım” or “the Company”), in accordance with the Personal Data Protection Law No. 6698 (“the Law”), processes your personal data as a data controller in relation to your overseas investment transactions as our customer in overseas markets via the TEB Yatırım PRIME GO website (‘Site’) available at https://intweb.tebyatirim.com.tr/.

This Privacy Notice has been prepared to inform you about the personal data we process. We kindly request that you read this Privacy Notice carefully.

2. Your Processed Personal Data, the Purpose of Processing Your Data, and the Legal Basis

Articles 5 and 6 of the Law list the legal grounds for processing personal data. Below, we have outlined which personal data we process, for what purposes, and on what legal grounds within the scope of those purposes:

 

Processed Personal Data Purposes of Processing Legal Grounds
  • Identity (Name, Surname )
  • Customer Transactions (Customer account number, order/instruction information, number of transactions)
  • Finance (Bank account number, IBAN)
  • Transaction Security (User log records, IP address information, website entry and exit records, device ID information, username and password)
  • Ensuring that you can execute and monitor your investment transactions through your investment account,
  • Assigning you a username and password to enable your access to the platforms,
  • Ensuring the management of your investment portfolio,
  • The execution of withholding tax procedures relating to your earnings,
  • Making correction entries for errors occurring in daily transactions,
  • The assessment and finalization of your limit requests,
  • Ensuring that you can view your investment portfolio.
Article 5/2(c) of the Law

Processing of personal data of the parties of a contract is necessary, provided that it is directly related to the establishment or performance of the contract.

  • Identity (Name, Surname),
  • Customer Transactions (Customer number, order/instruction information, number of transactions)
  • Finance (Bank account number, IBAN)
  • Transaction Security (User log records, IP address information, website entry and exit records, device ID information, username and password)
  • Contacting you as part of customer relations,
  • The examination and auditing of our business activities,
  • Conducting work aimed at developing and improving customer experience through services, examining and auditing business processes,
  • Preparing financial reports in accordance with customer requirements,
  • Improving the quality of our Company's services in foreign investment transactions and ensuring customer satisfaction.
Article 5/2(f) of the Law

Processing of data is necessary for the legitimate interests pursued by the data controller, provided that this processing shall not violate the fundamental rights and freedoms of the data subject.

  • Identity (Name, Surname),
  • Customer Transactions (Customer number, order/instruction information, number of transactions)
  • Finance (Bank account number, IBAN)
  • Transaction Security (User log records, IP address information, website entry and exit records, device ID information, username and password)
  • Risk Management Information (Information regarding suspicious, irregular or non-compliant transactions on TEB Yatırım platforms)
  • Legal Proceedings (Information contained in the lawsuit/enforcement file in the event of a potential dispute, correspondence with the authorized institutions or organizations )
  • Where authorized institutions or organizations (Capital Markets Board (“CMB”), the Investor Compensation Centre (“ICC”), the Turkish Capital Markets Association (“TCMA”), Borsa Istanbul A.Ş. (“BIST”), Istanbul Takas ve Saklama Bankası A.Ş. (“Takasbank”) and the Merkezi Kayıt Kuruluşu A.Ş. (“MKK”), The Banking Regulation and Supervision Agency (“BRSA”), The Central Bank of the Republic of Turkey (“CBRT”), The Ministry of Trade, The Financial Crimes Investigation Board (“MASAK”), The Revenue Administration (“GİB”), The Union of Chambers and Commodity Exchanges of Turkey (“TOBB”)) request information from our Company or where we are required to notify such institutions, fulfilling our legal obligations (e.g. reporting suspicious transactions to MASAK, reporting suspicious transactions related to information abuse or market fraud to the Capital Markets Board, conducting suitability and appropriateness tests for customers in accordance with the regulations),
Article 5/2(ç) of the Law

Data processing being necessity for the data controller to fulfill their legal obligations.

  • The protection and exercise of our rights and the conduct of legal proceedings in the event of a potential dispute
Article 5/2(e) of the Law

Data processing being necessity for establishing, exercising, or protecting a legal right

3. Transfer of Your Personal Data to Third Parties and Purposes of Transfer

Your personal data is transferred to third parties in compliance with Articles 8 and 9 of Law No. 6698. All necessary technical and administrative measures are taken when transferring data to third parties.

The table below lists the third parties to whom we transfer your personal data and the purposes of such transfers:

 

Third Parties to Whom Data is Transferred Purposes of Transfer
Authorized Institutions and Organizations Where authorized institutions or organizations (Capital Markets Board (“CMB”), the Investor Compensation Centre (“ICC”), the Turkish Capital Markets Association (“TCMA”), Borsa Istanbul A.Ş. (“BIST”), Istanbul Takas ve Saklama Bankası A.Ş. (“Takasbank”) and the Merkezi Kayıt Kuruluşu A.Ş. (“MKK”), The Banking Regulation and Supervision Agency (“BRSA”), The Central Bank of the Republic of Turkey (“CBRT”), The Ministry of Trade, The Financial Crimes Investigation Board (“MASAK”), The Revenue Administration (“GİB”), The Union of Chambers and Commodity Exchanges of Turkey (“TOBB”), The Risk Centre of the Turkish Banks Association (“TBB”) and similar organisations) request information from our Company or where we are required to notify such institutions, sharing for the purpose of fulfilling our legal obligations,
Suppliers, Service Providers and Business Partners Sharing data for the purpose of obtaining support from suppliers and service providers in the context of the supply of goods or services (for example, obtaining infrastructure support from an overseas supplier for the storage of your information, sharing information with our overseas investment company partner for customers conducting investment transactions abroad)

 

Your personal data is transferred outside of Turkey in accordance with the provisions of the Law and the Regulation on the Procedures and Principles Regarding the Transfer of Personal Data Abroad (‘Regulation’), which entered into force upon its publication in the Official Gazette dated 10/7/2024 and numbered 32598. When transferring personal data abroad, TEB Yatırım and the data recipient act in accordance with the requirements specified in Article 9 of the Law and the Regulation. In accordance with Article 9(4) of the Law, appropriate guarantees are provided for the transfer of personal data abroad, including the ability of the data subject to exercise their rights and to seek effective legal remedies in the country to which the transfer is made.

4. Methods of Collecting Personal Data

Your personal data is collected electronically through the investment transactions you carry out via the Site and is processed by automated and partially automated means.

5. Rights of the Data Subject

Article 11 of the Law regulates ‘the rights of the data subject’. All actual persons whose personal data is processed by TEB Yatırım have the right to apply to TEB Yatırım in accordance with the Law and to exercise their legal rights as set out in the Law.

When applying to TEB Yatırım to exercise your rights, you may submit your requests in writing or by email by completing the Personal Data Rights Exercise Form or using one of the methods outlined in the Comminuque On The Principles And Procedures For The Request To Data Controller

Address: İnkılap Mah. Sokullu Cad. No:7B Ümraniye/İstanbul

Email : kvkk-basvuru@tebyatirim.com.tr

KEP Address: tebyatirimmenkuldegerler@hs03.kep.tr