Information Notice

As BY İNVEST GYD, we value your security and, within this scope, we would like to inform you about the "Personal Data Protection Law", which has been established to protect the fundamental rights and freedoms of individuals, especially the privacy of private life, and to ensure the protection of personal data.

1. Personal Data Protection Law

The Personal Data Protection Law No. 6698 ("Law") was adopted on March 24, 2016, and entered into force. The Law was enacted to protect the fundamental rights and freedoms of individuals, particularly the privacy of private life, during the processing of personal data, and to regulate the obligations and procedures that natural and legal persons processing personal data must comply with. Therefore, this document is presented on behalf of BY İNVEST GYD Türkiye in order to fulfill the obligation of disclosure arising from Article 10 of the Law, and the "Personal Data Protection and Personal Data Sharing Consent" is submitted for the information and review of users/visitors.

2. Data Controller

With full awareness of our responsibility, as the "Data Controller" defined under the Personal Data Protection Law, we process your personal data within the scope explained below and within the limits required by the legislation. As BY İNVEST GYD, we will collect, use, and process your personal data in accordance with the relevant legislation in our capacity as the Data Controller under the Personal Data Protection Law. The Data Controller representative appointed by BY İNVEST GYD will be announced on the website www.byinvest.com.tr in accordance with the legislation after the legal infrastructure is established and the necessary registration is completed.

3. Collection and Processing of Personal Data

Your personal data may vary depending on the services provided by our Company and our Company's commercial activities; it may be collected verbally, in writing, or electronically through automated or non-automated methods, Company units and offices, Group Companies, websites, social media channels, mobile applications, and similar tools. Your personal data may be processed by being created and updated as long as you benefit from the products and services provided by our Company and Group Companies.

Additionally, your personal data may be processed when you use our call centers or website to benefit from the services of our Company or Group Companies, visit our Company or website, or participate in trainings, seminars, or organizations organized by our Company.

4. Transfer of Personal Data

Your collected personal data may be transferred to our business partners, suppliers, Group Companies, Company officials, shareholders, legally authorized public institutions, and private persons for the purposes of carrying out the necessary activities to benefit from the products and services provided by our Company and Group Companies, customizing services, ensuring legal and commercial security, determining and implementing commercial and business strategies, and executing human resources policies.

5. Data Collection Methods and Retention Period

Your personal data is obtained through any verbal, written, or electronic environment for the purpose of providing the products and services offered by the Company within the determined legal framework and in accordance with the purposes stated above.

Your personal data is stored for the periods specified in the relevant legislation and for the duration required by the purposes of processing. Within this scope, your personal data is generally retained for 5 (five) years, and upon the expiration of this period or the elimination of the purpose of processing, it is permanently deleted.

6. Your Rights Under the Law

Pursuant to Article 11 of the Law, your rights include applying to our Company to learn whether your personal data is being processed, requesting information if it has been processed, learning the purpose of processing, knowing the third parties to whom it has been transferred, requesting correction, requesting deletion or destruction, requesting notification of transactions carried out to third parties, objecting to analysis through automated systems, and requesting compensation for damages.