TurkcellPay Privacy Policy

1. Information We Collect

To provide our services, we may collect the following data:

• Identification Data: Name, surname, NIF/CIF, contact details (email, phone).
• Commercial and Financial Data: Company information, transaction history, cash flow data necessary for microfinance services.
• Technical and Usage Data: IP address, device type, connection data, activity logs on the platform and the digital wallet.
• Authentication Data: In the context of biometric security features, we process biometric data exclusively on the user's device (on-device). TurkcellPay does not store or have access to biometric templates on its servers.

2. Purposes of Processing

We use your data for the following legitimate purposes:

• To provide, operate, and maintain the payment gateway and microfinance management services.
• To authenticate users and ensure transaction security, including the use of NFC.
• To improve, personalize, and develop new features, including technical training on digital wallet implementation.
• To comply with applicable legal and regulatory obligations in Spain.
• To communicate with you for support, service updates, or relevant information.

3. Cookies and Similar Technologies

We use essential cookies and trackers for the secure operation of the platform and analytical cookies to understand service usage and improve your experience. You can manage your cookie preferences through your browser settings.

4. Legal Basis and Data Sharing

Processing is based on the performance of the service contract, compliance with legal obligations, and, where applicable, your consent. We may share data with:

• Payment service providers and financial institutions: Exclusively to execute requested transactions.
• Technology and hosting providers: Who help us operate the platform, under strict confidentiality agreements.
• Competent authorities: When required by law.

We do not sell or market your personal data to third parties for marketing purposes.

5. Your Rights

In accordance with data protection regulations (GDPR/LOPDGDD), you have the right to:

• Access, rectify, or delete your personal data.
• Object to or limit certain processing.
• Portability of the data you have provided to us.
• Withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
• File a complaint with the Spanish Data Protection Agency (AEPD).

6. Privacy Contact

To exercise your rights or make any inquiry related to the protection of your data, you can contact us through: