İş Bankası = Türkiye İş Bankası A.Ş.,
API = Application Programming Interface,
API Portal = The API Portal of İş Bankası,
User = The user who wants to benefit from the API Portal of İş Bankası
Content = All kinds of data, visual/auditory contents, writings, designs, videos, graphics, photographs, software, codes, brands, trade names and without being limited to these, all kinds of applications, all versions of such applications and all kinds of related works, included in the content of API Portal and the web site,
1) API Portal Usage
1.2. All kinds of changes to be made in the API Portal, shall become effective at the time when they are published, unless there is any indication to the contrary by İş Bankası and upon entry by the User to API Portal, shall be deemed to have been accepted by the User.
2) Rights and Obligations of the User
2.1. User agrees, declares and undertakes that, upon entry by it to the API Portal, it shall be obliged to comply with all rules and restrictions regarding use of API Portal.
2.3. User agrees that, at the time of communicating via “contact us” menu, it shall provide correct, complete and up-to-date information.
2.5. User demands to use API Portal and APIs, at its free will and in line with its interests. User agrees and declares that it understands the fact that it shall not be obliged to pay any fee due to inclusion of API in any media that belongs to User, intended to provide use of APIs or by which API is offered to the End User.
2.6. User agrees and declares that it understands the fact that APIs may be offered by İş Bankası in limited manner at the testing and production phases, and that aid limit and usage shall be determined by İş Bankası.
2.7. User agrees that it shall inform İş Bankası regarding the media through which it shall offer APIs to End User; that the APIs may be offered to End User only by the media which is/are notified to İş Bankası and approved in writing.
2.8. User agrees that they shall not impair, change the content of APIs obtained by them from the API Portal, and they shall offer API contents to the End User, in the form they are offered by İş Bankası and with the latest edition thereof.
2.9. User declares, agrees and undertakes that İş Bankası shall be entitled to make its own product developments, not being limited to the issues included in the content and may also purchase Product from third persons, from a different User; that such Products may be similar/identical to the software contained in API Portal, and that, in such case, it shall not raise any right, claim, proposal or demand against İş Bankası.
2.10. User agrees and declares that, when offering API to End User, it shall not demand from the End User any information relating to authentication mechanisms of İş Bankası and/or relating to card/product details and at the phase of forming an account, it shall not demand from the End User to define such information before or after use. In the software developed by using İş Bankası APIs, User shall not by any means take İş Bankasıauthentication references (one-time password, single password, smart phone) card numbers and information.
User agrees, declares, undertakes that it has the right to use, in a legally valid manner, the products and software subject to the Agreement, which originate from API Portal contents; that it is not subject to any restriction, under any name whatsoever, with regards to exercising and/or re-exercising the rights and that it is not in violation of any intellectual and industrial property rights that belong to third persons; that, regarding claims arising from violation of third party intellectual property rights, all responsibility shall be borne by itself exclusively and it shall hold İş Bankası harmless against any claims of right and loss to be raised in this regard; that, in case İş Bankası suffers any loss, makes any payment including administrative fine, due to aforesaid violations, it shall compensate losses of, and the payments made by, İş Bankası, together with all kinds of subsidiaries thereof, upon first written demand of İş Bankası.
3) Rights and Powers of İş Bankası
3.1. All rights on the Content included in API Portal, arising from national and international intellectual and industrial property law, shall directly belong to İş Bankası and/or are used by İş Bankası based on license.
3.3. İş Bankası shall be authorised to monitor, observe all kinds of content offered at API Portal and to supervise compliance thereof with the ethical principles set by İş Bankası.
3.4. İş Bankası shall record the material information such as when related system is utilised during use of API Portal services, size and frequency of data transfers, etc., automatically on API Portal servers and shall be authorised to keep such information. İş Bankası shall have the right to record automatically on API Portal, the IP address of the User, details of the date and time of connection to API Portal and the address and/or web pages to which any demand is sent through API Portal. İş Bankası shall have the right to share said data recorded automatically on API Portal, with related third persons, within the scope of legal requirements, security and performance evaluations.
3.5. İş Bankası reserves the right to change and/or abolish the use of the API Portal structure, operation, content, use at the time of recording to API Portal and any kinds of services and products which may be accessed via API Portal, without making any prior notice and without assuming any obligation.
3.7. In case İş Bankasıdemands to purchase the rights of all kinds of works, products and process prototypes formed by the User by using İş BankasıAPIs/to start production phase to be deemed appropriate by it such as partnership etc.; first proposal shall be made to İş Bankasıby the User. User may also give proposals to other banks or institutions. (User shall not be obliged to declare the names of other banks and institutions to which it gives an offer, to İş Bankası). In case the proposal given by other banks or institutions, is higher than the proposal of İş Bankası; İş Bankası increases its proposal to the same level with other banks and institutions, İş Bankası shall have the right to purchase the rights relating to the Product.
3.8. İş Bankası provides API Portal and API services on “as is” basis and does not give any warranty with regards to following elements;
a) services offered through API,
b) all kinds of content, data, products, software, information and other services, generally offered via internet,
c) other elements that occur upon processing of those specified in paragraph (b) above,
d) İş Bankasıdoes not give any warranty that services or the content or information included in services, are free of any failure, error, mistake, virus, or free of any kinds of elements that may change, damage, delete your device, data, computer programs.
3.9. İş Bankası shall not have any responsibility with regards to any disruption, failure, negligence, deletion, outage in API Portal and any kinds of services and products, services, that may be accessed together with it, or any delay in a transaction or communication, computer virus, communication failure, cyber theft, destruction or unauthorised access to, amendment or use of, records. İş Bankası shall not have any responsibility for any direct or indirect losses arising from use, or inability to use, API Portal and/or API and/or the services and contents arising from them, by Users (including but not limited to business / interest / reputation / data / program losses).
3.12. İş Bankası shall have the right to produce/conceive all kinds of Products and Services relating to its activities, including the Contents included in the API Portal, and/or to purchase others from the User or third persons, to establish partnership with the User or third persons.
4) Processing of Personal Data Information Text
4.1. Data Processor and Its Representative
According to Law no.6698 on Protection of Personal Data (“Law no.6698”), your personal data may be processed by İş Bankası as the data processor, within the scope explained below.
4.2. For Which Purposes Personal Data Shall Be Processed
Your personal data which you have shared via “Contact Us” menu. (name, surname, communication details) within the scope of personal data processing terms and conditions set forth in the Law no.6698, for the purposes of determining, by İş Bankası business units, of number uses of API Portal, maintaining membership, measuring sustainability and capacity of API Portal.
It records your IP address used when connecting API Portal system, with the details of connection date, time and the address demanded from the system and/or related pages. Said information is key information both for system security and for resolution of possible user problems and shall not be used for any other purpose.
4.3. To Whom and For Which Purposes May Processed Personal Data Be Transferred
Your processed personal data may only be transmitted to our related and authorised business units and legally competent public institutions and private persons, being limited to the purposes explained above, within the scope of personal data terms and conditions and purposes specified in articles 8 and 9 of the Law no.6698.
4.4. Method and Legal Reason of Gathering Personal Data
4.5. Rights of the Owner of Personal Data, Set Forth in Article 11 of the Law no.6698
If you, as the owner of personal data, send your demands relating to your rights, to our Bank by the methods regulated by “Türkiye İş Bankası A.Ş. Corporate Policy on Protection and Processing of Personal Data, shared with the public on the internet address www.isbank.com.tr, our Bank shall, depending on the nature of demand, conclude the demand free of any charge, as soon as possible and at the latest within thirty days. However, if the transaction requires an additional cost, our Bank shall charge the fee specified in the tariff set by the Personal Data Protection Board. In this context, owners of personal data shall have the rights;
• to be informed whether their personal data are processed or not,
• if their personal data are processed, to demand information in relation thereto,
• to be informed about the purposes of processing of personal data and whether they are used for intended purpose or not,
• to be informed about the third persons to whom personal data are transmitted in Turkey or abroad,
• if personal data are processed incompletely or incorrectly, to demand correction thereof and to demand notification of third persons to whom personal data are transmitted, the transaction made in this context,
• if, although they are processed according to the provisions of the Law no.6698 and other related laws, the reasons requiring to process them expire; to demand deletion or destruction of personal data and to demand notification of third persons to whom personal data are transmitted, the transaction made in this context,
• to raise objection against any consequence that may occur to the disadvantage of that person due to analysis of processed data exclusively by automatic systems,
• in case you suffer any loss due to illegal processing of personal data, to demand compensation of the loss.
5) Information Security and Confidentiality
User agrees and undertakes that it shall keep confidential all information and documents, trade secrets, which come to its knowledge relating to İş Bankası, during use of API Portal and thereafter, it shall keep them against third persons and shall not disclose, give them to third persons by any means, unless there is a legal requirement, and shall not use them for any purpose other than fulfilment of the obligations arising from the cooperation between them.
As a principle, personal information shared by the User, may not be disclosed. Legal obligations of İş Bankası, shall be considered out of this obligation.
6) Applicable Law and Jurisdiction
By using the API Portal, the User shall be deemed to have accepted that, in case any dispute occurs in relation to the API Portal, such dispute shall be subject to the Laws of the Republic of Turkey and shall be resolved according to said laws; that İstanbul Central (Çağlayan) Courts and Execution Offices shall have jurisdiction.