YapiKredi
Download Yapı Kredi Mobile
Nearest ATMs and
Branches BSRA Notifications

Yapı Kredi Mobile Privacy Policy & Application Permission

Yapi ve Kredi Bankasi Anonim Şirketi Privacy Policy

As Yapı ve Kredi Bankası A.Ş. (hereinafter referred to as “Yapı Kredi” or the “Bank”), we would like to inform you about the processing of your personal data and other information, as well as the permissions we obtain through the Yapı Kredi Mobile / World Mobile applications (hereinafter referred to as the “Mobile App”), for the purpose of enhancing your experience with certain features of the Mobile App and enabling you to use the Mobile App more conveniently.

The use of the Mobile App is carried out in compliance with the applicable legislation, primarily the Personal Data Protection Law No. 6698 (“Law”).

Your Collected Personal Data

Within the scope of the Bank’s operations, your personal data listed below may be processed.

Personal Data Category Individual Personal Data
Identification Information Name-surname, gender, date of birth, place of birth, ID number, age
Contact Information Address, cell phone number, email address
Transaction Security Information Device information, security-related restrictions, internet access logs (for everyone accessing the internet via the Bank’s network), authentication information (password, token), system and application user account information (usernames, email accounts, last login dates, IP information)

Purposes For Which Personal Data Will Be Processed and the Legal Basis

The personal data collected within the scope of this Privacy Notice will be processed for the purposes (“Purposes”) and legal grounds set out below and within the scope of the personal data processing conditions and purposes specified in Article 5 of the Law.

Based on the legal ground that it is clearly stipulated by law and is mandatory for the data controller to fulfill its legal obligation

  • Your identity, contact, and transaction security data for the purpose of complying with requests from public authorities,
  • Your identity, contact, and transaction security data for the purpose of providing information to authorized institutions as required by law,
  • Your identity, contact, and transaction security data to ensure compliance with retention obligations prescribed by law,
  • Your identity, contact, and transaction security data to respond to data subject requests in accordance with the law and to carry out the necessary procedures,
  • Your identity, contact, and transaction security data for fulfillment of the Bank’s legal obligations under the laws to which the Bank is subject,

Based on the legal ground that processing of personal data of the parties of a contract is necessary, provided that it is directly related to the establishment or performance of the contract

  • Your identity, contact, and transaction security data for the purpose of completing your registration process for the Mobile App,
  • Your identity, contact, and transaction security data for the purpose of enabling you to use the products and services available on the Mobile App,

Based on the legal ground that processing of data is necessary for the legitimate interests pursued by the data controller, provided that this processing shall not violate the fundamental rights and freedoms of the data subject

  • Your identity, contact, and transaction security data, in order for our business units to carry out the necessary work and execute the relevant business processes so that you can use the products and services offered by our bank through the Mobile App,
  • Your identity, contact, and transaction security data, for the purpose of planning and executing our Bank’s commercial and/or business strategies,
  • Your identity, contact, and transaction security data, within the scope of the permissions you grant via your device for the mobile app, for the purpose of providing you with the relevant products and services.

As Yapı Kredi, we request various permissions through different functions of the Mobile App depending on the relevant operating system and process your personal data through these functions. The principal permissions, data collected and purposes of use are set out below:

App Permissions Reason For Permission
Notifications This permission is required for smart assistant notifications to be sent to your device.
Location This permission is required to enable the provision of the nearest Yapı Kredi ATMs and branches and, depending on your preference, to enable the notification of promotions relevant to your location.
Contacts This permission is required for the “Mobile Money Transfer” feature to sync with your phone's contacts.
Camera This permission is required for the functions “Withdraw/Deposit Money Using a QR Code,” “Pay Bills Using a Barcode,” and “Take a Profile Photo.”
Microphone This permission is required for the "Login with EyeID" and "Interactive Birthday Celebration" features.
Photo This permission is required to select a profile photo from the gallery.
Permission for Behavioral Analysis Applications This permission is required for the measurement and analysis of the performance of our marketing campaigns, for the matching of you with our campaigns, and for the evaluation of your interaction with our mobile application.
App Permissions Reason For Permission
Identity This Permission is required so that the number of customers using the Mobile Branch may be monitored and real-time notifications may be sent to you.
Contacts This Permission is required so that the Mobile Money Transfer feature may be synced with your phone’s contact list.
Location This permission is required to locate the nearest Yapı Kredi ATMs and branches and, based on your preferences, to notify you about campaigns relevant to your location.
SMS This permission is required to automatically fill in the Smart Password received on your device on the screen.
Phone This permission is required to call the Yapı Kredi Customer Contact Center through the “We’re Here for You” menu.
Photo/Media/Files This permission is required to select a profile photo from the gallery.
Camera This permission is required for the functions of withdrawing/depositing money via QR code, paying bills via barcode, and taking a profile photo.
Wifi Connection Information This permission is required to allow the “Nearest Yapı Kredi” feature to determine your location more accurately.
Device ID and Call Information This permission is required for the "Remember Me" feature to function.
Microphone This permission is required for the "Login with EyeID" and "Interactive Birthday Celebration" features.
Permission for Behavioral Analysis Applications This permission is required for the measurement and analysis of the performance of our marketing campaigns, for the matching of you with our campaigns, and for the evaluation of your interaction with our mobile application.

To Whom and for What Purposes Personal Data May Be Transferred

Our Bank may transfer personal data to suppliers from whom we receive services in order to fulfill the Purposes specified above. Any transfers of personal data to suppliers are carried out in accordance with the legal grounds underlying the Purposes specified above, for the purpose of providing support and consulting services necessary to fulfill those Purposes.

In addition, your personal data collected for the fulfilment of the Purposes set out above may be transferred to our business partners, affiliates and shareholders for the purpose of conducting our business activities, based on the legal grounds relating to the establishment or performance of a contract and our legitimate interests. Your personal data may also be transferred to legally authorized public institutions and legally authorized private entities for the purposes of fulfilling statutory reporting and information requests, conducting legally required audit activities, carrying out legal proceedings and ensuring compliance with applicable legislation, based on the legal grounds that processing is expressly provided for by law and is necessary for the fulfilment of our legal obligations. Such transfers will be carried out in accordance with the personal data processing conditions stipulated under Article 5 of the Law and the rules governing the transfer of personal data under Article 8 of the Law.

Method of Collecting Personal Data

Your personal data is collected through our Mobile App and our internal banking systems.

Your Rights

To exercise your rights as listed in Article 11 of the Law:

  • Through our branches, following identity verification,
  • Through our Digital Channels or Call Center, following identity verification,
  • via a notary public to the address Yapı Kredi Plaza, Block D, Levent, Istanbul,
  • via secure electronic signature to yapikredi@yapikredi.hs02.kep.tr,
  • by using the email address registered in our Bank’s system,

you may submit your requests to our Bank.

The application must include:

  1. first name, last name, and, if the application is in writing, a signature;
  2. for citizens of the Republic of Turkey, the Republic of Turkey ID number; for foreign nationals, nationality, passport number, or, if available, an ID number;
  3. the residential or business address to be used for service of process;
  4. if available, the email address, telephone number, and fax number to be used for notifications; and
  5. the subject matter of the request.

Your request will be processed free of charge as soon as possible and no later than thirty (30) days. If the processing of your application incurs additional costs, a fee based on the schedule established by the Board may be charged to you.