Privacy Notice (KVKK)

1. Data controller

In accordance with Article 10 of Law No. 6698 on the Protection of Personal Data (“KVKK”), your personal data is processed by Santerna Insurance (the “Agency”) as data controller, as described below.

Address: Saray, Site Yolu Cd Anel İş Mrkz No:5 K: 1, 34295 Ümraniye/İstanbul. Phone: 0 (216) 706 69 87. Email: info@santernasigorta.com.

2. Personal data we process

Through our website and communication channels we may process:

• Identity and contact details: name, phone number, email address.
• Request details: the type of insurance you are interested in and any free text you write in the form or message.
• Security details: the page the request was sent from, browser information (user agent) and an irreversibly hashed form of your IP address. The IP address itself is not stored in the request record.
• Details that may be requested separately during quote and policy processes (for example date of birth, ID number, vehicle or home details). These are not requested in the first contact form on the site.

Please do not write special categories of personal data, such as health data, in the contact form or message. If such information is needed for a health insurance quote, it is processed only as far as necessary and with your separate explicit consent.

3. Purposes of processing

• Responding to your request and contacting you by phone, WhatsApp or email.
• Preparing, comparing and presenting insurance quotes.
• Acting as intermediary in policy issuance, renewal, endorsement, cancellation and claims processes at your request.
• Measuring and improving service quality and handling complaints and suggestions.
• Keeping the website secure and preventing misuse and automated submissions.
• Fulfilling legal obligations (insurance, tax, accounting, retention and reporting duties).
• Protecting our rights and conducting legal proceedings in case of a dispute.

4. Legal grounds

Your data is processed on the grounds in Article 5(2) of the KVKK: (c) it is directly related to the conclusion or performance of a contract, (ç) it is necessary to fulfil a legal obligation, (e) it is necessary to establish, exercise or protect a right, and (f) it is necessary for our legitimate interests, provided your fundamental rights and freedoms are not harmed. Ticking the consent box in the form is also taken as your explicit consent to be contacted; you may withdraw it at any time.

5. How we collect data

We collect data through the contact form on our website, phone, WhatsApp, email and visits to our office, by automated or non-automated means, in electronic or physical form.

6. Who we share data with

Strictly for the purposes above and in line with Articles 8 and 9 of the KVKK, your data may be shared with:

• The insurers we are an agent of, in quote and policy processes and at your request.
• Competent public authorities under insurance legislation (for example the Insurance and Private Pension Regulation and Supervision Agency and the Insurance Information and Monitoring Center) and judicial authorities.
• Service providers for IT, hosting, email, SMS and communication infrastructure.
• Advisers for legal, accounting and audit services.

Our hosting and communication service providers may have servers abroad. In that case the transfer is made under Article 9 of the KVKK with one of the safeguards required by law.

7. Retention

Your data is kept for as long as the purpose requires and for the periods set by the relevant legislation, then deleted, destroyed or anonymised. Open requests and communication records are generally kept for two years from the last transaction. Policy and accounting records may be kept for the periods set by law (generally up to ten years).

8. Your rights

Under Article 11 of the KVKK you may apply to the data controller to:

• Learn whether your data is processed and request information about it.
• Learn the purpose of processing and whether it is used accordingly.
• Know the third parties to whom it is transferred in Türkiye or abroad.
• Request correction of incomplete or incorrect data.
• Request deletion or destruction under the conditions in Article 7, and request that this be notified to third parties the data was transferred to.
• Object to a result against you arising from analysis exclusively by automated systems.
• Claim compensation if you suffer damage due to unlawful processing.

9. How to apply

Send your request with identifying information in writing to Saray, Site Yolu Cd Anel İş Mrkz No:5 K: 1, 34295 Ümraniye/İstanbul or by email to info@santernasigorta.com. Requests are answered free of charge within thirty days at the latest, depending on their nature; if the process requires a cost, the fee in the tariff set by the Personal Data Protection Board may be charged. If your application is rejected, the reply is insufficient or no reply is given in time, you may complain to the Personal Data Protection Board within thirty days of learning the reply and in any case within sixty days of applying.

10. Updates

This notice may be updated when necessary. The current version is always published on this page. Last updated: 30 October 2026. The Turkish version is the binding text.