Visa is providing this supplemental privacy notice to give individuals in Turkey the additional information required by the Law No. 6698 on Protection of Personal Data (Data Protection Law). These provisions, which should be read together with the statements in the Visa Global Privacy Notice, explain our practices with regard to data privacy in Turkey.
Important information: Turkey
Information about Visa
This information is being provided by Visa Inc. for itself:
Visa Inc.
900 Metro Center Boulevard
Foster City, CA 94404
USA
and its affiliates, including:
Visa Europe Limited
1 Sheldon Square
London, W2 6TT
Registration Number: Z8657396
Visa Europe Services LLC
Corporation Trust Center, 1209 Orange Street
New Castle, DE 19801
USA
You can contact the Visa Global Privacy Office within Turkey by emailing [email protected] or writing to us at:
Global Privacy Office
Visa Europe Limited
1 Sheldon Square
London, W2 6TT
United Kingdom
You can also contact the data controller representative of Visa in Turkey by writing to us at:
İlay Yılmaz
Ebulula Mardin Cad., Gül Sok. No. 2
Maya Park Tower 2, Akatlar-Beşiktaş 34335 Istanbul Turkey
[email protected]
The Purposes and Legal Basis for Processing
The Visa Global Privacy Notice explains the reasons why we process your Personal Information (as defined in the Global Privacy Notice). We only process Personal Information when we have a legal basis for the processing, as follows:
- To establish or fulfil a contract with you, or as needed to establish or fulfil a contract between you and a merchant or between you and the financial institution or other entity that issued your card, where Visa is providing payment services or acting as a data processor,
- For closely-related purposes, such as payment processing and financial account management, contract management, website administration, business continuity and disaster recovery, security and fraud prevention, corporate governance, reporting and legal compliance,
- With your consent, for example, to provide you with marketing communications, or,
- To comply with the laws that are applicable to us around the world.
We may also process your Personal Information for the purposes of our own legitimate interests or for the legitimate interests of others, provided that processing does not and shall not outweigh your rights and freedoms. In particular, we will process your Personal Information as needed to:
- Protect you, us or others from threats (such as security threats or fraud),
- Enable or administer our business, such as for quality control, consolidated reporting, and customer service,
- Manage corporate transactions, such as mergers or acquisitions, and
- Understand and improve our business or customer relationships generally.
Automated Decision-Making and Profiling
We use profiling and analytics to understand how individuals use their Visa cards and other products, for product development purposes and business intelligence purposes. These analytics help us understand and improve our products and better serve our clients and consumers. We also use analytics for security and anti-fraud purposes, such as to identify the unauthorised use of Visa cards.
We will not make automated-decisions about you that may significantly affect you, unless (1) the decision is necessary as part of a contract that we have with you, (2) we have your explicit consent, or (3) we are required by law to use the technology.
When You are Required to Provide Personal Information to Visa
You are not required by law to provide any Personal Information to Visa. For example, you always decide whether to participate in Visa promotions or to use Visa services. You are required to provide certain Personal Information to enable us to enter into a contract with you so that you can use our products and services or participate in promotions. Our registration forms indicate which data elements are required for our contracts.
When Visa provides payment processing services or acts as a data processor, we receive your Personal Information from third parties as needed to provide services or operate the Visa network.
Your Rights
You have choices about how Visa uses your Personal Information. You always have the right to object to our marketing communications. You can also object to having your Personal Information used to create anonymised and aggregated marketing reports. To exercise these choices and other choices, please visit the page Your Privacy choices. We may share your Personal Information with our service providers, who are required to protect it by law or contract and use it in accordance with our instructions.
Visa also respects the rights of Turkish residents with regard to their Personal Information as required by law. Where Visa is a data controller, this means:
- You generally have a right to know if Visa is storing your Personal Information. If we are, you have the right to request information with regard to such processing including the purposes of the processing, whether your information is used for such purpose or not; and the third parties within or outside your country to whom your Personal Information is transferred.
- If your information is incorrect or incomplete, you have the right to ask us to update it.
- You may also ask us to delete your Personal Information. If we are processing your Personal Information based on your consent, you have the right to withdraw your consent at any time.
- You have the right to object to the consequences, which are a result of the analysis of your Personal Information solely by automated means, if they negatively affect you.
To exercise these rights, please contact us via email to [email protected] or write to the Data Controller Representative at the address above and a member of our Privacy Team will assist you. Please understand that we may need to verify your identity before we can process your request.
If Visa is processing your Personal Information as a data processor, we will refer you to our client (such as to your Visa card issuer) for assistance with these requests. Visa supports its clients in responding to requests as required by law.
If you believe that we have processed your Personal Information in violation of applicable law, you may also file a complaint with the Visa Data Protection Officer, who can be reached by contacting the Visa Global Privacy Office. You may also file a complaint with the Turkish Personal Data Protection Authority (KVKK).
Data Retention
We will retain your Personal Information for as long as the information is needed for the purposes set forth above and for any additional period that may be required or permitted by law. The length of time your Personal Information is retained depends on the purpose(s) for which it was collected, how its used, and the requirements to comply with applicable laws. You may request that we delete your Personal Information by contacting us via email to [email protected] or writing to the Global Privacy Office at the address above. If we do not have a legal basis for retaining your information, we will delete it as required by applicable law.