Privacy Notice on the Processing of Personal Data
A. Who is the Data Controller?
As Mapfre Insurance A.Ş. (“Mapfre” or the “Company”), we attach great importance to the protection of your personal data. With this privacy notice, we aim to inform you about how we process your personal data in cases where policy offers are received through the Quotation Portal for Mandatory Motor Insurance (“Portal”), as the data controller.
B. Purposes and Legal Grounds for Processing Your Personal Data
Articles 5 and 6 of the Personal Data Protection Law (“Law”) regulate the legal grounds for processing of personal data. In the absence of at least one of the legal grounds specified in the Law for the processing of your data, your explicit consent is asked.
Your personal data are processed for the following purposes, based on the legal reason that it is necessary to process the personal data of the parties of a contract, provided that it is directly related to the establishment or performance of a contract:
- Preparing a policy proposal for our insurance product for which a policy proposal is requested,
- Confirmation of the identity information of the person who transacts/gives the order of transact,
- To be able to contact you within the scope of the offer you have requested and to provide feedback,
- To be able to calculate the premium for the insurance product you have requested,
- Delivery of the policy proposal to you,
- If our policy offer is accepted, to be able to carry out the policy preparation procedures,
- If our policy offer is accepted, to be able to issue the policy.
Your personal data are processed for the following purposes, based on the legal reason that data processing is necessary for the establishment, exercise or protection of a right:
- To protect and exercise our rights in case of a possible dispute and to carry out legal processes.
Your personal data are processed for the following purposes, based on the legal reason that fulfilling our legal obligations:
- Fulfilling our legal obligations in cases where authorized institutions or organizations make a request from our Company or when we are expected to notify these institutions (for example, sharing your personal data when a public institution requests a transaction that is suspected of illegal transaction).
In addition, if you provide your explicit consent, your personal data are processed for the purpose of informing you about our advertisements, promotions, events and campaigns in accordance with your communication preferences and sending commercial electronic messages to your contact information you have provided within this scope.
Your explicit consent for receiving commercial electronic message is asked separately, regardless of this privacy notice, and even if you give explicit consent, you always have the right to withdraw this consent.
C.What are Your Processed Personal Data?
Within the scope of the purposes and legal reasons in this privacy notice, your identity number, date of birth, e-mail address and mobile number are processed. Also, your personal data regarding IP address and user transaction records are also processed in accordance with your use of the Portal.
D.Whom is Your Personal Data Transferred to?
Your personal data shall be shared with our business partners and service providers within the scope of the purposes and legal grounds specified in the heading “B. Purposes and Legal Reasons for Processing Your Personal Data“. In case of the need to provide information to authorized institutions and organizations arises (for example, sharing with judicial authorities due to a dispute), it shall also be shared with authorized institutions and organizations. In the transfer of your personal data to third parties, compliance with the rules specified in the Law is ensured.
E.What are the Methods for Collection of Your Personal Data and the Legal Grounds of Collection?
Your personal data are collected by automated and partially automatic methods by filling out the forms on the Portal. Your personal data is processed based on the legal grounds that it is necessary to process the personal data of the parties to the contract, provided that it is directly related to the establishment or performance of a contract, that data processing is necessary for the establishment, use or protection of a right and that processing is necessary for the fulfilment of our legal obligations. If you have given your explicit consent for the receiving of commercial electronic messages, your personal data are processed based on the legal reason of your explicit consent within the scope of this process.
F.Which Rights Do You Have as a Data Subject?
Article 11 of the Personal Data Protection Law regulates the “rights of data subjects”. To exercise your rights within the scope of the Article 11 of the Law, you can send your requests to the e-mail address firstname.lastname@example.org using your e-mail address registered in our systems, or by mail, Torun Center, Fulya Mahallesi, Büyükdere Cad. No: 74/D Şişli/İstanbul.
To exercise your rights, you can also choose the methods specified in the “Communique on the Principles and Procedures for the Request to Data Controller“.