Personal Data Protection Law Information Text

1. Data Controller

Pursuant to the Personal Data Protection Law No. 6698, your personal data may be processed by Sefa Visa as the data controller within the scope explained below.

2. Purpose of Processing Personal Data

Your personal data will be processed for the following purposes within the scope of personal data processing conditions and purposes specified in Articles 5 and 6 of PDPL:

• Conducting and concluding visa application processes
• Fulfilling legal and administrative obligations
• Contacting you and providing information
• Improving service quality and ensuring customer satisfaction
• Planning and conducting internal operations
• Ensuring work safety and travel security
• Conducting statistical evaluations and studies
• Managing customer relationship processes

3. Categories of Processed Personal Data

The categories of personal data processed for the purposes mentioned above are as follows:

• Identity Information: Name, surname, ID number, date of birth, place of birth, gender, marital status, nationality, passport information, etc.
• Contact Information: Phone number, email address, residential address, etc.
• Professional Information: Occupation, title, employer information, work history, etc.
• Educational Information: Education level, graduated school, language proficiency, etc.
• Financial Information: Bank account details, payment information, income status, etc.
• Travel Information: Travel dates, travel route, accommodation information, visa history, etc.
• Visual and Audio Records: Photographs, camera recordings, etc.

4. Transfer of Personal Data

Your personal data may be transferred to the following recipient groups within the conditions specified in Articles 8 and 9 of PDPL:

• Consulates, embassies, and other official institutions of countries where visa applications are made
• Visa application centers and related intermediary institutions
• Travel and accommodation service providers
• Authorized public institutions and organizations due to legal obligations
• Our business partners and suppliers who provide services on behalf of our company and have confidentiality obligations
• Organizations we cooperate with to provide services

Within the purposes mentioned above, your personal data may be stored on servers located abroad or transferred to institutions and organizations abroad for your visa processes. This transfer will be carried out with your explicit consent within the scope of Article 9 of PDPL or under other conditions provided by law.

5. Method and Legal Basis for Collecting Personal Data

Your personal data is collected through the following methods and legal bases:

• Verbally, in writing, or electronically through physical and electronic application forms
• Through call center, email, social media, and other communication channels
• Through cookies on our website
• Through camera and security systems in our company headquarters and offices

Your personal data is processed in the presence of any of the conditions specified in Articles 5 and 6 of PDPL. These conditions are:

• Your explicit consent
• Explicitly provided for by law
• Directly related to the establishment or performance of a contract
• Mandatory for fulfilling our legal obligation
• Mandatory for our legitimate interests, provided that it does not harm your fundamental rights and freedoms

6. Rights of the Personal Data Owner

Under Article 11 of PDPL, as personal data owners, you have the following rights:

• Learning whether your personal data is being processed
• Requesting information if your personal data has been processed
• Learning the purpose of processing your personal data and whether they are used in accordance with this purpose
• Knowing the third parties to whom your personal data is transferred domestically or abroad
• Requesting correction if your personal data is processed incompletely or incorrectly
• Requesting deletion or destruction of personal data within the framework of conditions provided in Article 7 of PDPL
• Requesting notification of the correction, deletion, or destruction operations to third parties to whom your personal data has been transferred
• Objecting to the occurrence of a result against you by analyzing your processed data exclusively through automated systems
• Requesting compensation for damages if you suffer damage due to unlawful processing of your personal data

To exercise these rights, you can contact us via [email protected]. Your application will be concluded free of charge as soon as possible and within 30 days at the latest.

7. Data Security

Our company takes all necessary technical and administrative measures to ensure appropriate security level to prevent unlawful processing of your personal data, prevent unlawful access to your personal data, and ensure the protection of your personal data. These measures include:

• Limiting access authorization to personal data and access controls
• Encryption of electronic data and storage in secure environments
• Monitoring personal data security and periodic security controls
• Training our employees on data security and raising awareness
• Storing personal data for the period required by legislation or processing purpose

8. Changes to the Information Text

Sefa Visa reserves the right to make changes to this information text. When changes are made to the information text, the updated text will be published on our website. Therefore, we recommend you visit our website regularly to access the most current information.

9. Contact

For your rights under PDPL and questions about the processing of your personal data, you can reach us through the following communication channels: