Entrepreneurship Program Personal Data Disclosure
Pursuant to the Personal Data Protection Law No. 6698 (the “Law” or “KVKK”), your personal data may be processed by Burgan Bank A.Ş. (the “Bank”), acting as data controller, for the receipt, review, and evaluation of the startup/project application you submit within the scope of the Bank’s entrepreneurship activities and for the purposes specified in this Disclosure Text.
This Disclosure Text has been prepared to inform you about the procedures and principles governing the processing of your personal data for receiving and evaluating startup/project applications, communicating with applicants, evaluating startups/projects against the Bank’s entrepreneurship and investment criteria, conducting evaluation and interview processes, assessing investment and/or collaboration opportunities for eligible startups/projects, and carrying out the related processes.
Personal Data That May Be Processed
Identity, Contact, Transaction Security, Legal Transaction, Visual and Audio Records, Intellectual Property Information, Finance, Professional Experience, and Startup/Project and Application Information (including startup/project information submitted by you, your role in the project, information in the startup/project presentation and application form that can be associated with you, and evaluation, interview, and process information relating to your application) may be processed.
Please do not share sensitive personal data or personal data belonging to third parties that is not necessary for evaluating your application in project documents or other materials submitted to the Bank.
Methods of Collecting Personal Data
Your personal data may be obtained through the following automated or non-automated methods.
Direct collection methods:
- The Bank’s website and electronic channels through which startup/project applications are submitted,
- Email, telephone, online meetings, and other remote communication channels,
- In-person meetings,
- Photo and video recordings that may be made at events, meetings, and similar organizations.
Indirect collection methods:
- Third parties providing support, outsourced, or consultancy services,
- References identified by the applicant or other third parties.
Purposes and Legal Grounds for Processing Personal Data
| Personal Data Category | Purposes of Processing | Legal Ground |
|---|---|---|
| Identity, Contact, Professional Experience, Startup/Project and Application Information, Transaction Security, Intellectual Property Information | Collecting startup/project applications; contacting and informing the applicant about the application process; evaluating the applicant’s professional experience, entrepreneurial background, and role in the project. | Processing is directly related to the establishment or performance of a contract; processing is necessary for the Bank’s legitimate interests, provided that fundamental rights and freedoms are not harmed; processing is necessary for the Bank to fulfil its legal obligations. |
| Identity, Contact, Professional Experience, Finance, Startup/Project and Application Information, Transaction Security, Legal Transaction, Intellectual Property Information | Evaluating the nature, business model, financial structure, growth potential, and compatibility of the startup/project with the Bank’s entrepreneurship and investment criteria; assessing investment and/or collaboration opportunities; carrying out required preliminary review, evaluation, and legal processes if an investment or collaboration decision is made; planning, conducting, monitoring, and reporting entrepreneurship and investment activities. | Processing is directly related to the establishment or performance of a contract; processing is necessary for the Bank’s legitimate interests, provided that fundamental rights and freedoms are not harmed; processing is necessary for the Bank to fulfil its legal obligations. |
| Identity, Contact, Transaction Security, Legal Transaction, Visual and Audio Records, Intellectual Property Information, Finance, Professional Experience, Startup/Project and Application Information | Ensuring compliance with statutory retention obligations; responding to data subject applications in accordance with legislation and carrying out the required actions; retaining personal data for the general limitation period as evidence in potential future disputes. | Processing is expressly provided for by law; processing is necessary for the Bank to fulfil its legal obligations; processing is necessary for the establishment, exercise, or protection of a right. |
| Visual and Audio Records | Conducting and recording events, meetings, organizations, and similar activities held under the program; using photo and video recordings to announce and promote events/program activities as part of corporate communications. | Explicit consent. |
Recipients and Purposes of Personal Data Transfers
Your personal data may be transferred to third parties in Türkiye or abroad in a purpose-related, limited, and proportionate manner, in accordance with the processing conditions set out in the Law, the purposes stated in this Disclosure Text, the Bank’s obligations under the Banking Law and other applicable legislation, and the requirements of Articles 8 and 9 of the Law:
- To legally authorized public institutions, organizations, and judicial authorities to fulfil official requests, provide legally required information, and conduct complaint and legal processes,
- To support/outsourced service providers, consultancy firms, and law firms so that they can provide services to the Bank,
- When necessary, to business partners/project stakeholders involved in evaluating eligible startups/projects and conducting investment and/or collaboration processes,
- To social media platforms and print/digital communication channels for corporate communication, promotion, and announcement activities relating to the Bank’s entrepreneurship activities.
Your Rights
Under Article 11 of the Law, you have the right to:
- Learn whether your personal data is processed,
- Request information if your personal data has been processed,
- Learn the purpose of processing and whether your data is used in accordance with that purpose,
- Know the third parties in Türkiye or abroad to whom your personal data has been transferred,
- Request correction of incomplete or inaccurate data and notification of the correction to third parties to whom the data has been transferred,
- Request deletion or destruction of your personal data when the reasons requiring processing cease to exist and notification of this action to third parties to whom the data has been transferred,
- Object to an outcome against you resulting from the analysis of your data exclusively by automated systems,
- Claim compensation if you suffer damage due to unlawful processing of your personal data.
You may submit a written request concerning these rights through the registered electronic mail address burganbank@hs03.kep.tr, through an email address previously declared by you and verified and recorded in the Bank’s systems, or by any other method that the Personal Data Protection Board may specify in the future.
Your application must include your name and surname and, if submitted in writing, your signature; your Turkish identity number if you are a Turkish citizen, or your nationality, passport number, or identity number if you are a foreign national; your residential or workplace address for notices; your email address, telephone and fax number, if any, for notifications; and the subject of your request.
Your request will be concluded free of charge as soon as possible and no later than thirty (30) days. If processing your request requires a separate cost, the fee determined by the Personal Data Protection Board may be charged.