This information notice has been prepared by Diren Sigorta, acting as the data controller, within the scope of the Law No. 6698 on the Protection of Personal Data (“Law”), applicable to our website www.dirensigorta.com, when you apply for and request an insurance policy.
You may access the detailed information notice regarding the processing of personal data related to the products offered by Diren Sigorta via the relevant product link on our website.
1. Purpose and Legal Basis for Processing Personal Data
Your personal data (including identity, contact, transaction security, customer transaction data, policy information, and, where applicable, proxy/authorized representative information included in the policy) may be processed by Diren Sigorta through www.dirensigorta.com, depending on the service you request.
Personal data may be processed under the following legal bases:
- a) Personal data processed for the purposes of risk assessment, determination of policy premiums and coverage, and creation of insurance offers for the establishment of insurance contracts, provided that such processing is directly related to the establishment and performance of the insurance contract, shall be processed pursuant to Article 5/2 of the Law, on the condition that processing of personal data belonging to the parties of a contract is necessary.
- b) Personal data processed for the purposes of fulfilling information and document retention obligations arising from laws and relevant legislation and recording transactions, shall be processed pursuant to Article 5/2(c) of the Law, on the condition that data processing is mandatory for the data controller to fulfill its legal obligations.
- c) Personal data processed for the purposes of enabling customer–agency interactions and conducting data analysis activities, shall be processed pursuant to Article 5/2(f) of the Law, on the condition that such processing is necessary for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject.
2. Method of Collecting Personal Data
Your personal data mentioned above are obtained within the scope of your policy application and consultancy request, as well as the information you provide in relation to your existing policy held with our company. Such data are processed and updated as part of a data recording system, in written and electronic environments, either fully or partially automatically, or non-automatically as part of an automatic system.
3. Transfer of Personal Data
Your personal data may be transferred, within the framework of reporting and audit requests, to supervisory and regulatory authorities, relevant public institutions, judicial authorities, natural and legal persons we represent, alternative dispute resolution bodies, authorized attorneys, and persons or institutions permitted under the provisions of the Law, as well as other authorized institutions and organizations as required by applicable legislation.
Such transfers shall be carried out to the extent permitted and required by the legislation and under the conditions stipulated therein.