GDPR
INFORMATION NOTICE ON THE PROCESSING OF PERSONAL DATA
As [BBS Global Group Turizm Tic. San. Ltd. Şti.] (“BBS Global”), we place great importance on the protection of your personal data. Within the scope of the Law No. 6698 on the Protection of Personal Data (“KVKK”), we would like to inform you about the methods, purposes, and legal grounds for the processing of your personal data, to whom and for what purposes it may be transferred, and your rights under the applicable law.
In all our personal data processing activities, we act in compliance with KVKK and all relevant legislation and principles. We also take the necessary security measures to ensure that your personal data is processed safely.
1) DATA CONTROLLER
Within the scope of the KVKK, your personal data is processed by BBS Global as the data controller, limited to the purposes set out below.
2) PERSONAL DATA BEING PROCESSED
As BBS Global, we process the following personal data:
-
Identity Information: Name, Surname, Credit card information
-
Contact Information: Email address, Company phone number, Mobile phone number
-
Other Information: Username, Dealer code, Company name (if operating as a sole proprietorship)
3) SCOPE, PURPOSE, AND LEGAL BASIS OF PERSONAL DATA PROCESSING
Your personal data will be processed based on the legal grounds specified in Article 5 of the KVKK, as detailed below:
-
To authorize transactions on payment systems and maintain contractual relationships
Your identity, contact, and other data will be processed pursuant to Article 5/2 (c) of the KVKK, based on the necessity of processing for the performance of a contract. -
To generate customer account codes and enable payments
The same data will be processed under Article 5/2 (c) of the KVKK, based on its relevance to the establishment or performance of a contract. -
To provide notifications regarding completed payments
Your contact information will be processed again under Article 5/2 (c) of the KVKK based on contractual necessity.
4) METHOD OF COLLECTING PERSONAL DATA
Your personal data is collected automatically by BBS Global for the purpose of authorizing dealers within the payment systems licensed by BBS Global. Authorization of sub-dealers within these systems is carried out by the main dealers. Accordingly, BBS Global collects and processes the personal data of customers making payments via its contracted dealers and sub-dealers through automated means via the website https://www.bbstransfer.com.
5) TRANSFER OF PERSONAL DATA
Your personal data may be transferred to third parties for the following purposes, limited to what is necessary and in compliance with Articles 8 and 9 of the KVKK:
-
To fulfill internal company procedures, enable managerial reporting, complete payment transactions, and send payment records, your data may be transferred — with your explicit consent — to BBS Global's group companies located abroad whose servers are overseas.
-
To perform payment transactions and ensure efficient and sustainable operations, your data may be transferred to banks, financial institutions, and payment service providers under Article 5/2 (c) of the KVKK, based on contractual necessity.
-
In case of any legal dispute, your personal data may also be shared with our lawyers, courts, or enforcement offices, if necessary, to exercise BBS Global's right of defense, pursuant to Article 5/2 (e) of the KVKK, based on the necessity for the establishment, exercise, or protection of a legal right.
6) YOUR RIGHTS REGARDING PERSONAL DATA
Under Article 11 of the KVKK, any individual whose personal data is processed has the right to apply to our Company and request the following:
-
To learn whether personal data is being processed,
-
To request information if personal data has been processed,
-
To learn the purpose of processing and whether it is used appropriately,
-
To learn the third parties to whom personal data has been transferred domestically or internationally,
-
To request correction of personal data if it is incomplete or incorrect, and request notification of such to third parties,
-
To request deletion or anonymization of personal data if processing reasons cease to exist, and to request notification of such to third parties,
-
To object to outcomes against them that result from analysis through automated systems,
-
To claim compensation for damages arising from the unlawful processing of personal data.