Table of Contents
Information Notice
Browse our PDPL Art. 10–compliant data protection information notice
Information Notice on Protection of Personal Data
This information notice explains how Ethis Kitle Fonlama Platformu A.Ş. processes your personal data in accordance with the Personal Data Protection Law No. 6698 (PDPL), ensuring transparency and compliance with Islamic finance principles.
Identity of the Data Controller
Pursuant to the Law on the Protection of Personal Data No. 6698 (“PDPL” or the “Law”), Ethis Kitle Fonlama Platformu A.Ş. (“Ethis” or the “Company”), as the data controller, processes your personal data within the scope described below.
Company Information
Purposes of Processing Personal Data
Within the scope of the personal data processing conditions specified in Articles 5 and 6 of the PDPL, your personal data is processed for the following purposes so that you can benefit from the services offered by our Company:
Provision of Platform Services and Fulfilment of Contractual Obligations
Fulfilment of Legal Obligations
Within the Scope of Our Legitimate Interests
Subject to Your Explicit Consent
Data Transfer & Recipients
In line with the purposes above and in accordance with Articles 8 (transfer within Turkey) and 9 (transfer abroad) of the PDPL, your personal data may be transferred to the following parties:
Authorized Public Institutions and Organizations
Your data may be shared, upon lawful request, with authorities such as the Capital Markets Board (CMB), MASAK, the Revenue Administration, and courts.
Suppliers and Business Partners
Data may be shared with third parties from whom we receive services—such as technical infrastructure providers, payment and e-money institutions, ID verification providers, independent auditors, and legal/financial advisors—to the extent necessary and under confidentiality commitments.
Entrepreneurs and Investors
As required by the funding process, necessary information (e.g., name, surname, contact details) may be shared between investors and entrepreneurs for establishing and performing the contractual relationship between them.
Ethis Global Sdn. Bhd.
Data may be transferred to our global business partner in Malaysia for legitimate interests such as global reporting, strategy development, and system management, by taking necessary technical/administrative security measures and ensuring the conditions in PDPL Article 9 (e.g., your explicit consent or other safeguards set by the Board) are met.
Method & Legal Basis of Data Collection
Collection Methods
Personal data is collected through automated or non-automated means such as electronic forms you fill in during Platform registration, contracts you sign, communication channels like email/telephone, and cookies used during your visit to our website.
Legal Basis
Data is processed on the legal grounds under PDPL Article 5, including contractual necessity, legal obligation, legitimate interests, explicit legal provisions, and—where required—your explicit consent.
PDPL Art. 5 Legal Grounds
Your Rights as a Data Subject
In accordance with Article 11 of the PDPL, you may exercise the following rights by applying to our Company as the data controller:
How to Exercise Your Rights
Response Timeline
Your application will be concluded free of charge as soon as possible and within thirty (30) days at the latest, depending on the nature of your request. However, if the transaction requires an additional cost, the fee in the tariff determined by the Board may be charged.