In accordance with the Law No. 6698 on the Protection of Personal Data (“KVKK”), your personal data will be processed by our Association in the capacity of Data Controller, within the framework explained below, by being used, recorded, stored, updated, transferred, and/or classified depending on business purposes. In this context, our Association takes all technical and administrative measures to ensure the appropriate level of security in order to prevent the unlawful processing of your personal data, prevent unlawful access to them, and ensure their preservation, pursuant to the Law and Regulations enacted to protect fundamental rights and freedoms of individuals, especially the privacy of private life.
The target audience of this text consists of all natural persons whose personal data is processed by our Association, excluding our Association's employees or employee candidates who have applied for a job at our Association.
The personal data processed in the capacity of data controller include, without being limited to those specified herein: Name, surname, Turkish ID number, address, telephone number, e-mail address, signature, physical space/security image recording, call center/service quality voice recording, bank account number, cookie records.
Purposes and Legal Grounds for Processing Personal Data
Your personal data shared by you shall be processed for the purposes of:
• Benefiting you and/or the institutions and organizations you represent from the products and services offered by our Association, carrying out necessary studies including, but not limited to, determining and implementing the commercial and business strategies of our Association, conducting marketing activities, business development, and planning activities;
• Carrying out administrative operations regarding the communication conducted by our Association;
• Ensuring the physical security and audit of locations in use by our Association;
• Establishing business partner/customer/supplier (authorized persons or employees) relationships;
• Fulfilling contract requirements and financial reconciliation regarding products and services offered together with our business partners, suppliers, or other third parties;
• Executing the human resources policies of our Association;
• Calling our Association's call center or using its website;
• And/or participating in training sessions, seminars, or organizations organized by our Association.
Method of Collection and Storage of Personal Data;
Your personal data shared with our Association can be collected verbally, in writing, or electronically, through automatic or non-automatic methods, via offices, branches, call center, website, social media channels, mobile applications, and similar means. Your personal data shall be stored in electronic and/or physical environments. Necessary business processes design and technical security infrastructure developments are implemented to ensure that your personal data procured and stored are not subjected to unauthorized access, manipulation, loss, or damage in the environments where they are stored.
Provided that they are not used outside the purposes and scope notified to you, your personal data will be processed by taking all necessary information security measures and will be stored and processed for the legal retention period or, if no such period is stipulated, for the period required by the purpose of processing. When this period expires, your personal data shall be removed from our Association's data flows by means of deletion, destruction, or anonymization.
Transfer of Personal Data
Your personal data may be transferred, within the framework of laws and other legislation and for the explained purposes, to:
• Türk Telekomünikasyon A.Ş. and Türk Telekomünikasyon group companies;
• Companies authorized by us, operating on behalf and account of our Association, our representatives;
• Regulatory and supervisory institutions, public institutions or organizations explicitly authorized to request personal data by the laws to which it is subject;
• Business partnerships, supplier and contractor companies, banks, credit risk and financial institutions, and other real or legal persons within the scope of the specified purposes;
• Tax and similar advisors, mandatory persons related to legal follow-up processes, institutions and organizations, and third parties from whom we receive consultancy, including auditors, and without being limited to these, business partners, third parties from whom services are received, authorized persons and organizations domestically and abroad for the purposes stated above.
Your Rights Pursuant to Article 11 of the KVKK
By applying to our Association, you have the rights to:
1. Learn whether your personal data is processed or not;
2. Request information if your personal data has been processed;
3. Learn the purpose of processing of your personal data and whether they are used in accordance with their purpose;
4. Know the third parties to whom your personal data is transferred domestically or abroad;
5. Request correction of your personal data in case of incomplete or incorrect processing;
6. Request the deletion or destruction of your personal data within the framework of the conditions stipulated in Article 7 of the KVKK;
7. Request notification of the operations carried out pursuant to subparagraphs (e) and (f) to third parties to whom your personal data has been transferred;
8. Object to the occurrence of a result against you by analyzing your personal data exclusively through automated systems;
9. Request the compensation of the damage in case you suffer damage due to the unlawful processing of personal data.
Pursuant to the 1st paragraph of Article 13 of the KVKK Law, you can submit your request regarding the exercise of your above-mentioned rights to our Association in writing or by other methods determined by the Personal Data Protection Board.
To exercise your rights mentioned above, you can hand-deliver your request petition along with the necessary information identifying your identity, send it via a notary public or by other methods determined by the Personal Data Protection Board, or forward it to [email protected] with a secure electronic signature.
