A. GENERAL OVERVIEW
We, HDI Sigorta A.Ş. (“HDI Sigorta”), show utmost sensitivity to the security of your personal data. With this awareness, we attribute great importance to processing and preserving all kinds of personal data belonging to all persons associated with HDI Sigorta, including those who benefit from our products and services, in the best possible manner and with diligence. In full realization of this responsibility, as the Data Controller under the Law on the Protection of Personal Data numbered 6698 (“the Law”) and related legislation, we process your personal data in the manner explained below and within the limits mandated by the legislation.
B. Purposes and Legal Grounds for Processing Personal Data
Your personal data and special categories of personal data* are processed by our Company for the purposes of:
- Fulfilling our obligations under the Insurance Law numbered 5684
- Establishing or executing contracts to which you are a party or beneficiary
- Offering our insurance products, services, and advantageous proposals
- Conducting legal affairs and procedures
based on the legal grounds stated in Article 5 of the Law, which are: (i) “explicitly provided for by the laws,” and/or (ii) “being necessary for the execution or performance of a contract, to which the data subject is party, or for the conclusion of a contract upon the request of the data subject,” (iv) “being necessary for the legitimate interests of the data controller, provided that it does not violate the fundamental rights and freedoms of the data subject,” and/or (v) “being mandatory for the data controller to fulfill its legal obligation.”
Your special categories of personal data within this scope are processed based on the legal grounds stated in Article 6 of the Law, which are: (i) “explicitly provided for by the laws,” (ii) "being mandatory for the establishment, exercise or protection of a right," (iii) "being mandatory for the protection of life or physical integrity of the data subject or of another person, who is incapable of giving consent due to de facto impossibility or whose consent is not legally valid," (iv) "provided that it is related to personal data made public by the data subject and in accordance with the data subject's will to make it public;" otherwise, it is processed with your explicit consent.
Furthermore, your personal data is processed with your explicit consent under Article 5 of the Law for the purposes of:
- Conducting our marketing, advertising, and campaign processes
- Conducting satisfaction surveys and interviews with you
C. Transfer of Personal Data
Your personal data may be shared within the scope of the above-mentioned purposes with official institutions such as the Insurance and Private Pension Regulation and Supervision Agency (SEDDK), the Insurance, Reinsurance and Pension Companies Association of Turkey (TSRŞB), the Insurance Information and Monitoring Center (SBM), the Social Security Institution (SGK), the Revenue Administration, Tax Offices, DASK, TARSİM, TOBB, and MASAK; independent audit companies, assistance companies, support service providers, medical consultants, actuaries, lawyers, agencies, banks, broker companies, reinsurance companies, insurance companies with which risk is shared, recourse-related insurance companies, recourse-related individuals and firms, adjusters, contracted services, and external researchers, both domestically and abroad.
Your personal data may be collected through various methods, including wholly or partly automated means, or non-automated means as part of a data recording system, in verbal, written, or electronic form, through our Company's regional directorates, call center, internet branch, digital channels, insurance intermediaries, and all channels they serve, including domestic/foreign affiliates, collaborating program partner institutions and organizations, official institutions, domestic/foreign banks, and other third parties.
D. Your Rights Regarding the Processing of Personal Data
You can submit your requests within the scope of Article 11 of the Law, which regulates the rights of the data subject, in accordance with the "Communique on the Procedures and Principles of Application to the Data Controller," by using your written request or Registered Electronic Mail (KEP) address, secure electronic signature, mobile signature, or the electronic mail address you previously notified to our Company and which is registered with our Company via the "Contact Us" section of our website. Alternatively, you can personally apply to HDI Sigorta by filling out the application form, sending the form with a wet signature to the address: Sahrayıcedit Mah. Batman Sokak HDI Sigorta Binası, No.6 34734 Kadıköy İstanbul, Türkiye (via Notary or registered mail with return receipt), or by sending the relevant form to the electronic mail address: hdisigorta@hs03.kep.tr.
If the response to your request is provided in writing, our Company will not charge a fee for up to ten pages; an operation fee of 1 Turkish Lira will be charged for each page over ten pages. If the response to the application is provided in a recording medium such as a CD or flash drive, the fee that may be requested by our Company cannot exceed the cost of the recording medium.
* You can access details about the categories of personal data processed by our Company and the purposes of processing from the VERBİS record publicly announced on the Personal Data Protection Authority’s website at https://verbis.kvkk.gov.tr/.