Corporate Governance Approach

This text has been prepared by T. Vakıflar Bankası T.A.O. ('VakıfBank') in its capacity as the data controller, in accordance with Article 10 of Law No. 6698 on the Protection of Personal Data ('Law'), the Communiqué on the Procedures and Principles to be Followed in Fulfilling the Obligation to Inform ('Communiqué'), and the Guide on Cookie Practices ('Guide').
What is a Cookie?
A cookie is a type of identification file given to the visitors' computers or mobile devices by websites, in the form of small-sized data files. It enables the recognition of computers when the website is visited again. Websites, by reading these data files created by users when they first connect, gain the ability to work more efficiently, quickly recognize the users, and load user settings such as site language in a fast manner during subsequent visits. The use of these technologies is conducted in compliance with the legislation to which we are subject, primarily Law No. 6698 on the Protection of Personal Data ('PDPL').

Cookies help the website remember information about your visit (e.g., your preferred language and other settings). They can provide convenience on your next visit and make the site more practical and faster for you.

Through this Cookie Policy, we aim to provide information to members/visitors ('Data Subjects') on the purposes for which we use cookies during the administration of VakıfBank's websites and the types of cookies used, as well as how you can manage these cookies concerning the processing of personal data obtained during the use of cookies.

For detailed information on the processing of your personal data, you can read Clarification Text On The Protection And Processing Of Personal Data Of Turkiye Vakiflar Bankasi Turk Anonim Ortakligi

What Are the Types of Cookies?
Cookies are categorized into temporary and permanent cookies based on their validity periods. Temporary cookies are data files that are generated during a user's visit to a website, storing the user's preferences during that visit and automatically deleting when the visit ends and the user leaves the site. Temporary cookies are data files that are generated during a user's visit to a website, storing the user's preferences during that visit and automatically deleting when the visit ends and the user leaves the site. The user preferences stored in this data file are read from it quickly during the user's next connection and are loaded, enabling the user to have a faster and more efficient website experience.

In VakıfBank websites and mobile applications, both temporary and persistent cookies can be used for the following purposes:

Ensuring site security management; for instance, avoiding the need for logged-in users to re-enter their passwords when visiting different pages on the site during the same session.
Ensuring the functions of the site or application work as intended; for example, remembering the user's username or search queries on their next visit to the site.
Monitoring and maintaining the performance of the site or application at a high level; these are cookies that collect information about page visit intervals, potential error messages, and the total time users spend on the respective pages, in addition to user behavior on the site, to enhance the performance of the bank's website.
Saving time for users by remembering their preferences; for instance, displaying pages or icons related to visitors' areas of interest based on the pages and products they have viewed.

Are Cookies Mandatory?
Internet browsers on computers or mobile devices allow cookies by default. These cookie settings enable websites to utilize this feature to enhance the user's experience. Users can adjust their cookie settings or completely block cookie usage through methods that differ according to the type of internet browser on their devices. The method for changing the selection of cookie usage varies depending on the type of browser and can be learned from the respective service provider when requested.

Similar to cookies used on other websites, users of VakıfBank have the option to selectively or entirely block the use of cookies when they so choose. However, the majority of our cookies are designed to ensure the proper functioning of the website or application, and blocking them may lead to the disruption of certain functions. Therefore, it is not recommended.

Cookies Used on Our Website
The types of cookies used on our website are as follows.
Essential Cookies
The use of a certain type of cookies is required for the proper functioning of our site. For example, the identity verification cookies that come into play when you log in to our website ensure that your session remains active as you navigate from one page to another on our site.

Other Cookies
Functionality and Preference Cookies
These cookies enhance the personalization of services provided on our site for you by recalling your preferences and selections.
Performance and Analysis Cookies
Through these cookies, we can analyze your use of our site and its performance, enabling us to improve the services we provide to you.
Targeting or Advertising Cookies
We do not use cookies for product and service promotion or marketing activities on our website.
Do VakıfBank Cookies Store My Confidential Information?
VakıfBank does not store users' confidential information through cookies. Cookies solely contain information pertaining to your browsing history and do not access files stored on your computer or mobile device.
How can cookie preferences be controlled?
Cookie use is predefined in many browsers. Users can change this selection status in the browser settings. Therefore, the user can also delete existing cookies and refuse the storage of future cookie uses. So, if cookie use is canceled, it may not be possible to benefit from some features in the Bank's systems.

Changing the cookie use selection method varies depending on the browser type, and the methods for some service providers are as follows.

Google Chrome	By clicking on the "lock sign" in the address section of your browser, you can allow or block cookies from the "cookies" tab.
Internet Explorer	By clicking on the security tab in the "Tools" section at the top right of your browser, you can manage cookies as "allow" or "do not allow".
Mozilla Firefox	Click on the "open menu" tab in the upper right corner of your browser. By clicking on the "Options" image, you can manage cookies using the "Privacy and Security" button.
Opera	By selecting "Advanced" in the "Preferences" section of your browser, you can manage cookies in the "cookies" section.
Safari	Select the "Safari" tab from the "Settings" section of your mobile phone and you can manage all your cookies from the "Privacy and Security" section.

What are the Rights of the Data Subject?
Pursuant to Article 11 of PDP Law, you may make requests regarding the following issues regarding your personal data by applying to our Bank:

a. To learn whether personal data is being processed,
b. If personal data has been processed, to request information about it,
c. To learn the purpose of processing personal data and whether it is being used for that purpose,
d. To learn the third parties to whom personal data is transferred, whether domestically or abroad,
e. To request the correction of personal data if it is incomplete or incorrect and, in this context, to request the notification of this correction to the third parties to whom personal data has been transferred,
f. To request the deletion, destruction, or anonymization of personal data if the reasons requiring processing have ceased and, in this context, to request the notification of this process to the third parties to whom personal data has been transferred,
g. To object to an adverse result arising from the analysis of processed data exclusively through automated systems,
h. To request compensation for the damages you incur as a result of the unlawful processing of your personal data.

You may convey your requests pertaining to the aforementioned rights through the 'Personal Data Subject Application Form,' accompanied by identity verification documents. These can be submitted either in person at our branches or through a notary. Alternatively, you can send them securely with an electronic signature to the address 'Finanskent Mahallesi Finans Caddesi No:40/1 Ümraniye/İstanbul' or to the email address vakifbank@hs01.kep.tr. Our Bank will finalize your application requests free of charge within 30 (thirty) days at the latest, depending on the nature of the request, in compliance with Article 13 of the PPD Law. In case the request is rejected, the reason(s) for the rejection shall be notified to you in writing or electronically.
Application address :
Türkiye Vakıflar Bankası T.A.O.
Finanskent Mahallesi Finans Caddesi No:40/1 Ümraniye/İstanbul
Phone: +90 216 724 10 00
Fax: +90 216 724 39 09
Bank's Registered Electronic Mail (KEP) address: vakifbank@hs01.kep.tr

As VakıfBank, we continue our operations in harmony with the Corporate Governance Principles, in order to protect all stakeholders and in particular our shareholders, to act in line with their interests, and to create sustainable value for our country while growing. Accordingly, we continue our activities in line with the principles of equality, transparency, accountability and responsibility and in compliance with the Banking Law, Capital Market Legislation, Turkish Commercial Code and other relevant regulations.

In VakıfBank, the top management is structured in line with the Corporate Governance Principles. VakıfBank Board of Directors consists of nine members in total, including Chairman, Deputy Chairman, General Manager and six members. In accordance with the Corporate Governance Principles, there are three independent members in the Board of Directors. The Chairman and General Manager titles are held separately within the Board of Directors. The Chairman of the Board of Directors does not have executive duties as dictated by the regulations of the Banking Regulation and Supervision Agency.

The Bank is in compliance with the mandatory principles under both the Corporate Governance Communiqué and Banking Law No. 5411. Related party transactions are mandatory to be approved by the Board of Directors. As per the Article 50 of Banking Law No. 5411, it is obliged that in cases where loans will be made available to real and legal persons in the bank’s risk group, the necessary decision be taken by two thirds majority of the board of directors’ members and that the loan conditions not vary from the loans made available to other persons and groups and from market conditions, in favor of the borrower.

We believe that risks should be managed with proactive approaches, situations that may result in conflicts of interest should be prevented and ethical banking practices that increase transparency should be exercised for the implementation of effective corporate governance. We share information and documents with stakeholders explicitly through the Investor Relations section on our website. In addition to the financial risks that affect or may affect our organization, we also monitor non-financial risks such as the risks concerning our reputation and the environment. We manage risks through the internal control systems we have established and developed in accordance with national legislations and international regulations.

VakıfBank is against all kinds of bribery and corruption and also is determined to comply with the relevant laws, regulations and principles. Receiving bribes or bribing can never be accepted regardless of its purpose. It is essential that the business relationships shall not be continued with third parties (outsourcing companies and business partners) who wish to get service from VakıfBank via bribery. We take a “zero tolerance” policy to bribery and corruption. For the purpose of ensuring that employees adopt the principles of the Policy and works in compliance with these principles, continuous trainings are delivered. In case of a violation of the policy against Bribery and Corruption, disciplinary punishments may arise depending on the nature of the case. In such cases, the Board of Inspectors examines the case, and in case of non-compliant behavior, necessary sanctions are applied in accordance with the legislation.

Fighting the laundering of criminal proceeds, financing of terrorism and preventing the financial system from being used by criminals are among our primary areas of focus. Our employees are prohibited from engaging in any actions that would be considered as laundering of crime proceedings or would facilitate such activities.