PDPL Information Text
1.INTRODUCTION
This information text has been prepared in accordance with Article 10 of the Law on the Protection of Personal Data No. 6698 (“Law”), in order to inform the relevant persons regarding the processing of personal data collected by the legal entity of T.R. KARAMAN PRIVATE ADMINISTRATION (“DATA CONTROLLER”), relevant directorates and units and service centers.
The DATA CONTROLLER shows utmost sensitivity and effort regarding the processing, protection and security of personal data.
Personal data may be collected by the DATA CONTROLLER through all kinds of auditory, written, visual or electronic methods.
In this context and in accordance with the Law, the personal data of the relevant persons may be processed by the DATA CONTROLLER in the capacity of the Data Controller for the work and transactions that must be carried out in accordance with the general principles listed in the Law.
2.PURPOSE OF PROCESSING PERSONAL DATA
Personal data is processed for the purposes specified in Articles 5 and 6 of the Law, including but not limited to the personal data processing conditions and purposes specified in the Law. Accordingly, the purpose of processing personal data is;
• To enable the DATA CONTROLLER to carry out the work and transactions for which he/she is obliged within the framework of the relevant legislation, to perform public service within the framework of his/her duties and responsibilities,
• To carry out the necessary studies to ensure maximum benefit from the services provided by the DATA CONTROLLER,
• To ensure the legal obligations and service security of the DATA CONTROLLER and stakeholders,
• To maintain the services and strategies of the DATA CONTROLLER,
• To fulfill the responsibilities pursuant to the laws and relevant legislations that impose rights, duties, work and transactions on the DATA CONTROLLER,
• To manage the human resources and employment policies of the DATA CONTROLLER,
• To provide support, grants, incentives, etc. performing transactions
• Carrying out press and publication activities
• Carrying out studies on artistic events, activities, etc.
• Increasing the quality of service and management and carrying out studies within this scope
The DATA CONTROLLER strives to take the necessary legal, technical and administrative measures at the highest level, in accordance with the principles specified in the law, in order to prevent the unlawful processing of personal data and unlawful access to data, and to store personal data securely.
3. PERSONAL DATA COLLECTION METHOD AND LEGAL REASON
The DATA CONTROLLER collects personal data in all kinds of audio, written, visual and electronic media and within the framework of the purposes specified in this disclosure text, in order to provide the services provided by the DATA CONTROLLER in accordance with the laws and relevant legislation, and to fully fulfill the DATA CONTROLLER's obligations arising from the contract and laws, and to carry out business activities, based on many legal reasons such as processing and processing in accordance with the conditions specified in the Law. The legal reasons are as follows;
• The existence of the explicit consent of the relevant person,
• It is clearly foreseen in the laws,
• It is mandatory for the protection of the life or physical integrity of the person who is unable to express his consent due to a de facto impossibility or whose consent is not legally valid, or of another person,
• It is necessary to process personal data belonging to the parties to the contract, provided that it is directly related to the establishment or execution of a contract,
• It is mandatory for the data controller to fulfill its legal obligation,
• It is made public by the relevant person,
• Data processing is mandatory for the establishment, exercise or protection of a right,
• Data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the relevant person
RIGHTS OF PERSONAL DATA SUBJECTS AND PROTECTION OF RIGHTS
Personal data owners, in accordance with Article 11 of the Law;
• To learn whether personal data has been processed,
• To request information about personal data if it has been processed,
• To learn the purpose of processing personal data and whether it is used in accordance with its purpose,
• To know the third parties to whom personal data is transferred domestically or abroad,
• To request correction of personal data if it is processed incompletely or incorrectly,
• To request deletion or destruction of personal data within the framework of the conditions stipulated in Article 7 of the Law,
• To request notification of transactions made pursuant to Articles 5 and 6 to third parties to whom personal data is transferred,
• To object to the emergence of a result against the person by exclusively analyzing the processed data through automatic systems,
• To request compensation for damages in the event of damages due to unlawful processing of personal data,
In order to exercise these rights, personal data owners shall apply to the DATA CONTROLLER in writing or through other methods to be determined by the Personal Data Protection Board, and the applications shall be processed according to the nature of the request.
