BiP Privacy Notice

Publication Date: 31.12.2024

Who We Are?

The BiP Application (“Application”) is provided by Turkcell İletişim Hizmetleri A.Ş. (hereinafter to be referred to as “BiP”, “we”, “us”, “our”).

BiP is committed to protect and respect your Personal Data in accordance with the applicable data protection legislation, including the provisions of General Data Protection Regulation (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of Personal Data and on the free movement of such data and other applicable laws (hereinafter referred to as the “Data Protection Legislation”).

This Privacy Notice (“Notice“) informs you about which information that makes your (“you”, “your” or “user”)  identity specific or identifiable (“Personal Data“)  is collected, used and shared.  For the interpretation of undefined terms stated in this Notice, we refer to the definitions as used in the internal BiP terms of use of BiP (“Terms of Use”). For information about cookies please also read our BiP Cookie Policy.

How are Your Personal Data Collected?

BiP collects your Personal Data, directly from you when you provide us with information or when you transmit information through the Application, depending on the products or services you use. This includes information you provide when you register to use the Application, create an account, set up a profile, complete a form or correspond with us, and use the Application.

Which Personal Data are Collected?

Although the information in this section may differ from user to user due to circumstances such as differences of products and services that people use or their requests and consents, the categories of your Personal Data that are processed by BIP are as follows.

  • Identity and Contact Details:data such as your phone number, user name (nickname), GSM operator, passwords which are used to keep the Application safe.
  • Usage Information:Technical data collected from your device through technical equipment, the type of messages (text message, video, photo, sticker, emoji), active time, type of services used, usage habits related to the application interface, the last access to the application date, errors and information about the error that occurred during the use of the application, data related to the communication type (BiP Calls, instant messages etc.), the duration, time, type, parties and contacts of communication.

BiP does not collect any data related to the content of your communication made via the Application.

  • Personalization Information and Surveys: Nickname, Profile Photo, Status Information, Blocked Numbers. Data on the results of surveys conducted through the Application.
  • Location Data:The approximate location data of the users depending on whether you use the location related services and the settings of your device.
  • Device Data: Device model, operating system of the device, preferred phone language, information regarding which operator the users use, country information.
  • Backup Data: The communication data, if only the user requests data to be backed up by BiP.
  • Address Book Data:Phone numbers and Contact List stored on the user’s device.

 

Purposes and Legal Basis for Processing Your Personal Data

Your Personal Data is processed for the purposes and legal basis which are explained below, by our web site, mobile apps, SMS, e-mail, call center and interactive voice response (IVR) system, via wholly automated or partly automated means.

  • Where processing your Personal Data is necessary for the performance of a contract or in order to take steps at your request prior to entering into a contract;

BiP processes your Personal Data for the provision of the Application in accordance with our Terms of Use and quality standards.

We process; Identity and Contact Details, Usage Information, Personalization Information, Device Data, Back-up Data, Address Book Data,

For the purposes of; user registration, communication, complaint management, error/failure notice, prevention of unauthorized and fraudulent use, optimization of the Application and related services and enabling the device to work properly with the Application and its settings.

  • Where processing is necessary for the compliance with a legal obligation to which BiP is subject;

BiP processes your Personal Data when we comply with a legal obligation as set out below.

We process; Identity and Contact Details, Usage Information, Device Data, Personalization Data, Location Data, Address Book Data,

For the purposes of; replying to a valid request as an order from authorized public institutions and organizations, execution of the complaint management processes, resolution of possible disputes arising from the laws or secondary legislation to which BIP is subject and in order to protect the rights or security of the parties.

  • Where processing is necessary for the purposes of the legitimate interests pursued by BiP or by a third party:

BiP processes your Personal Data when processing is necessary for our legitimate interests, except where such interests are overridden by the interests or fundamental rights and freedoms of users. When we process Personal Data for our legitimate interests, we identify these interests and establish the balance between those and data subjects’ rights. Your right to privacy and all fundamental rights are our top priority.

We process: Identity and Contact Details, Usage Information, Device Data, Personalization Information, Location Data,

For the purposes of: measurement of the service quality, service analysis, business, product and strategy development, intra-company evaluation, supervision and control, risk management, prevention of unauthorized and fraudulent use, management of the customer survey process, measurement and development of the service quality.

  • Upon Your Request

BiP processes your Personal Data for the purposes described below when you have given us your consent or when you opt for some of the features of the application:

Depending on whether you use the location related services and you set the settings of your device; your devices location data is processed for the purposes of allowing you to share your location with other users and supervising and controlling location services in the “Explore” area.

Similarly, in case you wish to share photos or videos from your phone’s gallery to other users or take a photo in BiP, your photos and videos is processed for the purposes of enabling you to share visual and audio recordings.

When you use the auto translate services, your personal information is not shared, only the words you send are processed by a third-party service provider. We would like to state that when you use these services, you are subject to these service providers’ own terms and conditions and privacy policies.

When you would like to back up your communication history, the messages that you received from or sent to another user shall be archived only upon your request.

Where are Personal Data Stored and Processed?

BiP servers are located in Turkey, all data regarding usage is stored in Turkey.

Within the scope of cooperation of operators outside of Turkey, in line with the use of BiP in their own countries, data related to users in these countries can be transferred to the relevant operator and stored on that operator’s servers.

BiP takes all reasonable steps to ensure that the Personal Data is secured and transfer of Personal Data takes place only where appropriate safeguards are in place that ensure the level of protection of parties.

With Whom and For What Purposes are the Personal Data Shared?

BiP may share the Personal Data it has obtained with the following parties in accordance with the purposes and regulations set out in this Notice. The information under this section may differ from person to person due to circumstances such as the products and services that people benefit from or their requests and consents.

Law enforcement, regulators and other parties for legal reasons: BiP is obliged to provide Personal Data within a legal obligation and in order to protect both its own rights, property or security and the rights, property or security of third parties with authorities. BiP reviews whether the requesting parties are authorized for such request before sharing your Personal Data.

Users: BiP and the user may share the Personal Data with other users (including Official Accounts) as part of the Application so users are able to interact with other users as permitted by the functionality of the service and their preferences and applicable law.  Where a User shares Personal Data of another individual, they take full responsibility for their actions in doing so.

If you activate automatic translation functionality, personal information will not be shared, the submitted words will be shared with a third-party service provider. BiP is not responsible for such third-party service providers. We would like to remind you that if you activate this feature, you will be subject to terms and privacy policies of these third-party service providers.

BiP assumes no responsibility for third party applications to which a link is provided via the Application and for transactions made with other users and/or third parties under the “Explore” function of the Application, to the extent where these applications are not under the control of BiP.

Your Rights Regarding Your Personal Data

The Application users have the right to:

  • Right of access – the right to be informed of, and request access to, the Personal Data BiP processes about you;
  • Right to rectification – the right to request that BiP amends or updates your Personal Data where it is inaccurate or incomplete;
  • Right to erasure – the right to request that BiP deletes your Personal Data;
  • Right to restrict – the right to request that BiP temporarily or permanently stops processing all or some of your Personal Data;
  • Right to object –
    • the right, at any time, to object to BiP processing your Personal Data on grounds relating to your particular situation;
    • the right to object to your Personal Data being processed for direct marketing purposes;
  • Right to data portability – the right to request a copy of your Personal Data in electronic format and the right to transmit that Personal Data for use in another party’s service; and
  • Right not to be subject to automated decision-making – the right to not be subject to a decision based solely on automated decision making, including profiling, where the decision would have a legal effect on you or produce a similarly significant effect.

In order to exert any of your rights stated above in relation to your Personal Data, please contact us using the contact details set out in the “Contact Us” section below. In order to help you find the data you would like to use your abovementioned rights, please provide as much information as you can about the data you would like to use your rights. Information provided shall be free of charge, unless the request is clearly unfounded or disproportionate, in which case a reasonable fee may be requested, or the request may be refused. Users also have the right to lodge a complaint with a local supervisory authority.

Alternatively, you can forward your questions and requests regarding your Personal Data via one of the following methods:

  • By sending an e-mail to kisiselverilerikoruma@hs03.kep.tr prepared in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller by using your e-mail address previously notified to BiP and registered in the company systems,
  • By sending an e-mail to kisiselverilerikoruma@bip.com prepared in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller by using your e-mail address previously notified to BiP and registered in the company systems,
  • By sending your written application prepared in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller to “Turkcell İletişim Hizmetleri A.Ş. Aydınevler Mahallesi İnönü Caddesi No:20 Küçükyalı Ofis Park B Blok – Maltepe/İstanbul” via notary public or regular mail,

Age Restriction

Users must be 16 years of age or older to subscribe, register or share any Personal Data to the Application and we do not intend to solicit, collect or process Personal Data of Users under the age of 16. In certain jurisdictions, the age may be older or younger than 16, in which case, you must satisfy that age in order to become a subscriber. If you believe we have inadvertently processed Personal Data of a User under the age of 16, please contact us at the details provided.  If we discover that we have inadvertently processed the Personal Data of any user under the age of 16, we reserve the right to delete it.

Retention Period of Personal Data

BiP shall retain Personal Data during the period necessary for the purpose(s) for which it has been collected and/or is being processed for up to 2 years unless a longer retention period is established by applicable laws. This includes the retention of Personal Data during a limited period determined as per the relevant legislation in case any dispute might arise from the Terms of Use. Please note that messages sent while a user is offline will be kept for a maximum of three weeks and will be deleted after the expiration of this period. BiP will securely delete Personal Data and ensure all recipients of Personal Data comply with the same obligation as soon as Personal Data is no longer necessary in relation to the purpose for which it was processed unless BiP is required to retain Personal Data for a longer period by law.

Automated Decision Making

We do not use Personal Data to make automated decisions about users.

About This Notice

BiP shall update and change the provisions of this Notice, e.g. in case of any change/update in the Data Protection Legislation, in which case the updated Notice will be brought under your attention by publishing it via the Application. Updates and changes in the Notice made by BiP shall be effective as of the date of its publication on the Application. The information in this Notice may differ from person to person due to circumstances such as products and services that people benefit from or their requests and consents.

Contact us

Questions, comments and requests regarding this Notice can be addressed via email at info@bip.com or in writing to the below e-mail or postal addresses:

Data Protection Officer
dpo@bip.com

Aydınevler Mahallesi İnönü Caddesi No:20/36 Küçükyalı Ofispark Maltepe/ İstanbul/ Türkiye.