Personal clients

Collecting personal data

PwC Turkey only requests personal data necessary for the purposes agreed upon.

When data about other real persons (e.g. family members) is required in order for PwC Turkey to perform the service it has undertaken as per the contract between PwC Turkey and its real person client, the real person client who is a party to the contract is expected to inform these other real persons whose data they provide and to carry out the required legal obligations.

Given the diversity of the services we provide to personal clients (click here for information on our services), we process personal data, including as appropriate for the services we are providing:

Processing Personal Data

PwC Turkey processes personal data for the following purposes:

1. Providing professional services

PwC Turkey provides a wide variety of professional services (please refer to this link for information on our services). 

Personal data is needed to be processed in order to provide services and prepare deliverables. For instance, we examine payroll data as a part of the audit process, and we use personal data to provide services under people management and organisation advisory and to carry out tax and payroll services. 

The personal data processed within the each legal grounds stated below:

•  execution of the contract,
• Legal obligations
• stipulations in relevant laws
• data processing is mandatory for the establishment, use or protection of a right

In order to process sensitive personal data, relevant stipulations in laws or explicit consent are to be taken as legal basis.

1. Administration, management and development of activities and services

PwC Turkey processes personal data to conduct its professional services and activities for the following purposes:

• planning and executing data access authorisations of partners and/or suppliers, managing relationships with partners and/or suppliers;
• ensuring that data is accurate and up-to-date;
• analysing trends including those related to PwC management, generating criteria concerning services provided, relationship maps, sales intelligence and processes responding to commercial account targets;
• using and updating IT systems, account management, internal financial reporting and provision of IT services (including storing, hosting, maintenance and support activities);
• executing processes and operations, finance operations, communications, market research and social responsibility activities and purchasing operations (requests, proposals, evaluations, orders, budgeting, contracts) that aim to determine and apply trade and business strategies;
• informing authorities as required by legislation;

• hosting events;

• finance and/or accounting and tracking legal matters including lawsuits and enforcement proceedings.

The personal data processed within the each legal grounds stated below:

• compliance with legal obligations
• legitimate interests.

PwC Turkey may process personal data to carry out the obligations laid out by relevant legislation, to manage and develop businesses and services and to protect its legitimate interests, on the condition that the basic rights and freedoms of the relevant person are not harmed.

2. Security, quality and risk management activities

PwC Turkey has taken security measures to protect its information and client information (including personal data). These measures include detecting, investigating and resolving security threats. Personal data is processed in the course of security monitoring, and automatic scans etc. is carried out to detect harmful e-mails. Services provided to customers to improve service quality are monitored in such a way that personal information in the related client file is also processed. There are policies and procedures in place to manage risks related to client contracts and to monitor service quality.

PwC Turkey processes personal information as part of the client engagement and acceptance procedure. The procedures we execute in the scope of legislation related to the prevention of laundering crime revenue includes carrying out searches using publicly available sources to identify high-risk individuals and companies and to determine whether there is any obstacle related to a certain client (e.g. sanctions, issues related to company directors such as legal, official or other problems).

The personal data processed within the each legal grounds stated below:

• stipulations in relevant laws,
• compliance with legal obligations.
•  legitimate interests,

To ensure network and information security, manage risks, monitor service quality and protect PwC Turkey’s legitimate interests, as long as the rights and freedoms of relevant persons are not harmed, in cases where it is explicitly stipulated in relevant laws, or where data processing is obligatory to establish, use or protect a right, personal data should be processed.

4. Complying with legal regulations and regulations of occupational organisations PwC Turkey is a member of

Like every professional service provider, PwC Turkey is subject to administrative and occupational obligations. To ensure compliance of services with said obligations, certain records need to be retained and these records contain personal data.

PwC Turkey processes personal data to fulfill their professional obligations (eg compliance with money laundering regulations).

The personal data processed within the each legal grounds stated below:

• stipulations in relevant laws
• compliance with legal obligations,

Data operators used by PwC Turkey (eg IT service providers) and locations where information processing takes place are described herein .

While providing services in accordance with the agreement with the client, support is received from other institutions or organizations, if required by the project.

Back