Protection of Personal Data

Dear customers,

We respect and attach great importance to your privacy. Therefore, we would like to inform you about your rights regarding the processing, transfer, storage and destruction and using and protecting of your personal data within the scope of the existing the Protection of Personal Data Act No. 6698 (“KVKK”) in order to protect your fundamental rights and freedoms.

Data Supervisor

KVKK defines us, Garanti Emeklilik ve Hayat A.Ş., as "Data Supervisor". According to existing regulations, carrying out certain actions as the Data Supervisor such as obtaining, recording, storing, updating, classifying and sharing with and transferring to your personal data with third parties within the scope of the regulations is considered as “data processing”. 

We, as data supervisor, are keeping and safeguarding all kinds of personal data, shared by you with us, in strict compliance with the applicable laws and regulations, and by taking all kinds of the technical and administrative actions and measures required for protection of your personal data under an appropriate security level.

Personel Data Collected by Us and Personel Data Collection Method

Personal data, varying according to the type, nature and past of the relations between our Company and the related person and depending on the method of acquisition of data and the following purposes, to be collected in the course of relations to be established by us with you in tandem with the products and services you are going to receive from our Company, and to be processed in compliance with the principles set down in the Law are generally as listed below, without however being limited thereto:

Identity Data and Information: Name, surname, mother’s and father’s name, T.R. identity number, ID card serial number, place of birth, date of birth, sex, marital status, information on spouse/children, status of citizenship, nationality, and civil registry information.

Communication Data: Together with such communication data as address, electronic mail, registered electronic mail address, mobile phone, fixed phone and facsimile number, all and any communication records relating to phone conversations, video conversations and electronic mail correspondences, and other audio and video data.

Data About Your Education, Business and Professional Life: Profession, job title, work experience, education level, and curriculum vitae information

Transaction Security Data:  Mother's maiden name, website log in – log out information IP addresses, codes and passwords needed for entry to digital channels, and positioning data processed for such purposes as security applications used in said channels and as performance of legal obligations

Marketing Data: Data on past shopping activities, public surveys, cookie records, and data obtained through campaigns, in line with a consent to be received from our customers, prospective customers and other natural persons who may be related thereto

Data on Commercial Life: Data on natural persons in such documents regarding legal entities as tax chart, trade registry gazette, certificate of authorization, trade registry documents, certificates of competency, signature circular and certificates of activity, and various other demographic information introducing data subject, such as tax liability status and other personal information

Insurance and Private Pension Data: Uniform numbers relating to products and services bought by the customer from our Company, insurance policy and private pension contract numbers and all kinds of detailed financial data regarding collection and payment activities, as generated by our Company.

Special Categories of Personal Data : Health report, disability and disablement status, blood group, devices and prostheses used on driver's license, membership to associations and foundations, criminal convictions and security measures.

Legal Information: Information contained in correspondences with juridical authorities, information contained in case files, and information kept in the course of proceedings relating to alternative dispute resolution ways, acquired by our Company due to the legal disputes involved in by our Company, and data contained in writs and subpoenas of any kind relating to administrative and juridical authorities sent and delivered to our Company.

Visual and Audio Records: Photo, camera and audio recordings.

Camera and Entrance – Exit Records: Such data as entrance and exit records and camera views relating to employees and visitors, kept for the sake of physical security in premises and offices of our Company and its affiliates.

Your personal data can be collected orally, in writing or electronically via several channels such as our General Directorate, Regional Offices, Agencies, all channels operated by Agencies (ATM, kiosk, internet branch, call center etc.), Brokerage Firms, Company internet branch, Company’s mobile branch and call center.

Personel Data Processing Purposes and Legal Reasons

Our Processing Purposes Legal Reasons
Know-your-customer processes, customer identity determination and confirmation, and recording the identity, address and other required information of our customers for the transactions to be executed by our customers.
  • - It is a legal requirement for performance by our Company of its legal liabilities.
  • -  It is clearly stipulated in the applicable laws
  • -  Data processing is required for establishment, use or protection of a right.
  • - In case of receipt of an explicit consent therefor.
To offer you our life & health insurance and private pension products within the scope of Insurance Law, Private Pension Savings and Investment System Law, Banking Law, Turkish Commercial Code, Turkish Civil Code and other legislation, related transactions, requirements, information obligation, fulfilling obligations related to internal systems and other obligations arising from legislation, carrying out operational processes related to products and service.
  • - It is a legal requirement for performance by our Company of its legal liabilities.
  • -  Processing of personal data belonging to parties of an agreement is required, providing that it is directly related to establishment or performance of an agreement.
  • - It is clearly stipulated in the applicable laws
  • - Data processing is required for legitimate interests of the Company, providing that the fundamental rights and freedoms of the related person are protected.
To create proposals and contracts for insurance and private pension products, make the requested changes in the insurance and private pension products, to communicate with customers about the contract conditions and the current status of the contract during the establishment and continuation of the insurance and private pension contract, to inform about the changes in the contract or legislation, to determine collateral and additional collateral for products, to perform risk assessments, to complete compensation applications, to settle disputes with our Company or our agencies, to obtain relevant information and documents from relevant parties and to communicate them to relevant authorities, to complete payment transactions, to follow payment transactions, to prevent abuses, to offer special premium and payment options, to calculate premiums, to carry out additional benefit services, if any, to follow provision processes, to fulfill our obligations regarding our products and services, to complete payment, fund and portfolio management transactions, to complete internet and mobile branch transactions and to carry out domestic and overseas reinsurance companies.
  • -  Processing of personal data belonging to parties of an agreement is required, providing that it is directly related to establishment or performance of an agreement.
  • -  It is a legal requirement for performance by our Company of its legal liabilities.
  • -  It is clearly stipulated in the applicable laws
  • - In case of receipt of an explicit consent thereor.
  • - Data processing is required for legitimate interests of the Company, providing that the fundamental rights and freedoms of the related person are protected.
To inform customers about our Company’s other products and services other than the ones already provided within the scope of the regulations, to plan and perform customized products/services/offers, to develop product, service, working model offers, to perform profiling and segmentation, to help our Company to create targets, scoring, risk analysis, and to improve customer relations management, to enable our Company to monitor and analyze its internal performance, to conduct statistical studies, to design service offering models, and to conduct market research, evaluating complaints, requests and suggestions, taking actions related to them and improving processes, carrying out activities for customer satisfaction.
  • - In case of receipt of an explicit consent therefor.
  • - Data processing is required for legitimate interests of the Company, providing that the fundamental rights and freedoms of the related person are protected.
To inform, as required by law, official organizations such as Republic of Türkiye Ministry of Treasury and Finance, Insurance and Private Pension Regulation and Supervision Agency (SEDDK), Insurance Information and Monitoring Center (SBM), The Financial Crimes Investigation Board (MASAK), The Pension Monitoring Center (EGM), The Capital Markets Board (SPK), Banking Regulation and Supervision Agency (BDDK), Credit Bureau (KKB), Insurance Arbitration Commission, Central Bank of the Republic of Türkiye (TCMB) and Turkey Insurance, Reinsurance and Pension Companies Association (TSB).
  • -  It is clearly stipulated in the applicable laws
  • -  It is a legal requirement for performance by our Company of its legal liabilities.
To keep all of the required records, documents and certificates, also including the processing of positioning information, for the sake of completion of transactions on paper, digital and via verbal environments.
  • - It is a legal requirement for performance by our Company of its legal liabilities.
  • - Processing of personal data belonging to parties of an agreement is required, providing that it is directly related to establishment or performance of an agreement.
To carry out relations with the Company's main shareholder, group companies and business/program partners.
  • - It is a legal requirement for performance by our Company of its legal liabilities.
  • - Processing of personal data belonging to parties of an agreement is required, providing that it is directly related to establishment or performance of an agreement.
To carry out the analysis, development and information security processes of company systems, to establish, manage and implement information systems infrastructures, to carry out reporting, audit and financial and accounting transactions within the Company.
  • - It is a legal requirement for performance by our Company of its legal liabilities.
  • - Data processing is required for legitimate interests of the Company, providing that the fundamental rights and freedoms of the related person are protected.
For the management, planning and execution of relations and processes with support/outsource service providers, business partners or suppliers.
  • - Processing of personal data belonging to parties of an agreement is required, providing that it is directly related to establishment or performance of an agreement.
  • - Data processing is required for legitimate interests of the Company, providing that the fundamental rights and freedoms of the related person are protected.
To develop the reputation and business relations of the Company and to determine its strategies, to plan and perform business activities and operational processes, to carry out corporate communication activities.
  • -  It is a legal requirement for performance by our Company of its legal liabilities.
  • - Data processing is required for legitimate interests of the Company, providing that the fundamental rights and freedoms of the related person are protected.
To carry out the case and enforcement proceedings to which the Company is a party and to follow other legal processes.
  • - It is a legal requirement for performance by our Company of its legal liabilities.
  • - It is clearly stipulated in the applicable laws.
For the sake of legal and physical security, and as a proof for the transactions executed by using the services, and as a requirement of our legal obligations, recording of camera views and photographs in our Company’s headquarters building and regional offices.
  • - It is clearly stipulated in the applicable laws. 
  • - It is a legal requirement for performance by our Company of its legal liabilities 
  • - Data processing is required for legitimate interests of the Company, providing that the fundamental rights and freedoms of the related person are protected.
For protection of transaction security in the course of use of digital channels, and for protection of our customers, Company and its system as a whole against fraud, swindling and other attacks that may be incurred by our customers in all types of physical or electronic media and environments, and for keeping the logs in the case of use of internet access
  • - It is a legal requirement for performance by our Company of its legal liabilities.
  • - Data processing is required for legitimate interests of the Company, providing that the fundamental rights and freedoms of the related person are protected.
For planning, supervision and implementation of our corporate sustainability, corporate governance, strategic planning and information security processes.
  • - It is clearly stipulated in the applicable laws.
  • - It is a legal requirement for performance by our Company of its legal liabilities.
  • - Data processing is required for legitimate interests of the Company, providing that the fundamental rights and freedoms of the related person are protected.

Transfer To Personel Data

Transferees* Our Purposes of Transfer
Public entities and authorities who are legally authorized to get information (Republic of Türkiye Ministry of Treasury and Finance, SEDDK, SBM, MASAK, EGM, BDDK,KKB, SPK, TCMB etc.), juridical authorities, Insurance Arbitration Commission, Consumer Arbitration Committees, mediators, contracted lawyers of Company, independent audit and tax companies. For legal reporting purposes, regulation and supervision activities, management of complaint and legal processes, etc. legal reasons
Persons and entities permitted in the Insurance Law, the Law on Private Pension Savings and Investment System, the Banking Law, the Turkish Commercial Code and other legislation, entities deemed as financial institutions, specialized agencies evaluating compensation process, individuals and organizations that give expert opinion on the health status of the insured candidate and other third parties. For management of insurance and private pension activities and for performance of our legal obligations
Company's main shareholder, subsidiaries and group companies. (Örneğin T. Garanti Bankası A.Ş., Garanti Konut Finansmanı Danışmanlık Hizmetleri A.Ş., Garanti Faktoring A.Ş., Garanti Finansal Kiralama A.Ş., Garanti Ödeme Sistemleri A.Ş., Garanti Bilişim Teknolojisi ve Ticaret A.Ş.,  Garanti Yatırım Menkul Kıymetler A.Ş. ve Garanti Portföy Yönetimi A.Ş.) In order to carry out insurance and private pension services and to share information within the group in accordance with the relevant legislation.
Entities that intermediary, agent or brokerage of the Company, reinsurance organizations, program partners whom the Company receives or cooperates to carry out its activities. (Bupa Acıbadem Sigorta A.Ş., Eureko Sigorta A.Ş., Sencard Direkt Satış Sigorta Aracılığı A.Ş., Sigortaladım Sigorta ve Reasürans Brokerliği A.Ş.), domestic and overseas insurance, reinsurance and private pension companies. In order to carry out insurance and private pension services with business partners.
* For the purpose of processing, storage, administration or other use specified in this Public Disclosure Text by our company, you may transfer your personal data abroad in accordance with the legislation. In these transfers, necessary measures are taken to properly protect your personal data.

Your Rights Relating To Protection of Personel Data

Whenever you like, you may apply to our Company, and:

a) May ask whether your personal data are processed or not, and if so, for which purposes, and whether your personal data are used for the intended purposes or not, and if processed, may request detailed information thereabout; and

b) May learn the identity of third parties with whom your personal data are shared within Turkey or abroad in accordance with the laws; and

c) If you think your personal data are processed incompletely or inaccurately, may request completion or correction of them, as the case may be; and

d) May request deletion or destruction of your personal data within the frame of conditions stipulated in article 7 of the Law; and

 e) May request the transmission of your requests stated in subparagraphs (c) and (d) hereinabove to third parties to whom your personal data are transferred, so that such third parties also take the same actions in connection therewith; and

 f)  May raise an opposition against any consequences in your disfavor due to analysis of your personal data by automatic systems, or if you think that your personal data are recorded or used unlawfully, and if you have actually incurred damages due to that reason, may claim indemnification of your damages.

You may transmit your requests under KVKK:

    • By delivering the same in writing and by hand to our Head Offices, Regional Offices and agencies, or
    • By sending via a notary public, or
    • By delivering the same with secure electronic or mobile signature to our Registered Electronic Mail Address of garantiemeklilik.musterihizmetleri@hs02.kep.tr, by using your registered electronic mail address or your electronic e-mail address registered in our systems.

If any application filed by you for the aforementioned purposes requires an additional cost, you may need to pay a fee as specified in the tariff to be designated by the Personal Data Protection Board. Your requests in your application will be responded as soon as possible and in any case within no later than 30 (thirty) days, depending on the kind of your request.

The information you request will be notified to you in writing electronically or through contact information provided by you.

In case of any change in the personal data inventory, our Company is going to update this information text.