KVKK
GENERAL EXPLANATIONS
Under the Personal Data Protection Law No. 6698 (“PDPL”), the data subjects defined as relevant persons (“hereinafter referred to as the “Applicant”) have the right to make certain requests regarding the processing of their personal data as stated in Article 11 of the PDPL.
According to the first paragraph of Article 13 of the PDPL; applications to our Company, which is the data controller, regarding these rights must be submitted to us in writing or by other methods designated by the Personal Data Protection Board (“Board”).
Within this framework, applications made “in writing” to our Company can be submitted by printing this form;
- By the Applicant’s personal application,
- Via a notary,
- By signing with the “secure electronic signature” defined in the Electronic Signature Law No. 5070 and sending it to the Company’s registered electronic mail address,
It can be submitted to us.
| Application Method | Address to Submit Application | Information to be Indicated on the Application Envelope |
|---|---|---|
| Personal Application (Applicant personally applies with an identity verifying document) | Zühtüpaşa Mahallesi Kavuklu Hamdi Çıkmazı No:5 Kadıköy/ISTANBUL | “Request for Information Within the Scope of the Personal Data Protection Law” will be written on the envelope. |
| Notification via Notary | Zühtüpaşa Mahallesi Kavuklu Hamdi Çıkmazı No:5 Kadıköy/ISTANBUL | “Request for Information Within the Scope of the Personal Data Protection Law” will be written on the notification envelope. |
Additionally, after other methods designated by the Board are announced, our Company will announce how applications can be received through these methods as well.
Applications submitted to us will be answered free of charge within thirty days from the date the request reaches us, depending on the nature of the request, pursuant to the second paragraph of Article 13 of the PDPL. However, if the process entails an additional cost, the fee determined by the PDPL Board may be charged. Our responses will be delivered to you in writing or electronically according to the provision of Article 13 of the related PDPL.
Our Company may accept the application or reject it by explaining the reasons based on the grounds listed below and notify the relevant person in writing or electronically. The personal data owner's application may be rejected under the following circumstances:
- If it obstructs the rights and freedoms of others,
- If it requires disproportionate effort,
- If the information is publicly available,
- If it endangers the privacy of others,
- If one of the cases excluded under the PDPL exists[1]
RIGHT OF THE PERSONAL DATA OWNER TO COMPLAIN TO THE BOARD
In accordance with Article 14 of the PDPL, the personal data owner may file a complaint to the PDPL Board within thirty days from the date of learning the data controller's response or within sixty days from the application date in cases of rejection of the application, insufficient answers, or failure to respond in time. A complaint to the Board cannot be made without applying to our Company first.
- [1] According to Article 28 of the PDPL, the following situations are outside the scope of the PDPL, therefore personal data owners cannot assert their application rights:
- Processing of personal data by anonymizing with official statistics for research, planning, and statistical purposes.
- Processing of personal data without violating national defense, national security, public safety, public order, economic security, private life privacy, or personal rights and without constituting a crime, for the purposes of art, history, literature, scientific endeavors, or freedom of expression.
- Processing of personal data by public institutions and organizations authorized by law for preventive, protective, and intelligence activities aimed at national defense, national security, public safety, public order, or economic security.
- Processing of personal data related to investigation, prosecution, trial, or enforcement proceedings by judicial authorities or enforcement bodies. According to the second paragraph of Article 28 of the PDPL, except for the right to claim compensation for damages, rights cannot be asserted in the following cases as well:
- Processing personal data necessary to prevent crime or for criminal investigation,
- Processing personal data made public by the data subject,
- Processing personal data by public institutions and organizations authorized by law or professional organizations with public institution status for the duties of supervision, regulation, disciplinary investigation, or prosecution,
- Processing personal data necessary for protecting the economic and financial interests of the State concerning budget, tax, and financial matters.
APPLICANT CONTACT INFORMATION:
| First Name | |
| Last Name |
- [1] According to Article 28 of the PDPL, the following situations are excluded from its scope, thus personal data owners cannot assert their rights to apply:
- Processing personal data by anonymizing with official statistics for research, planning, and statistical purposes.
- Processing personal data for purposes such as art, history, literature, or scientific purposes, or under the scope of freedom of expression, provided that it does not violate national defense, national security, public safety, public order, economic security, private life privacy, or personal rights, and does not constitute a crime.
- Processing personal data within preventive, protective, and intelligence activities conducted by public institutions and organizations assigned by law to ensure national defense, national security, public safety, public order, or economic security.
- Processing personal data in relation to investigation, prosecution, trial, or enforcement procedures by judicial authorities or enforcement bodies. According to the second paragraph of Article 28 of the PDPL, except for the right to claim compensation for damages, rights cannot be asserted in the following also:
- Processing personal data necessary to prevent crime or for criminal investigation,
- Processing personal data made public by the relevant person,
- Processing personal data by authorized public institutions and organizations or professional organizations with public institution status for auditing, regulating, disciplinary investigation, or prosecution tasks,
- Processing personal data necessary for the protection of the State’s economic and financial interests regarding budget, tax, and financial matters.
| Turkish ID Number | |
| Phone Number | |
| Email (If provided, we can respond faster.) | |
| Address: |
- Please specify your relationship with our Company. (Customer, business partner, job applicant, former employee, third-party company employee, shareholder, etc.)
| Customer Visitor |
Business Partner Other: ……………… |
| The Department you are in contact with within our Company: ........... Subject: ............ |
|
| I am a former employee Years I worked: ........... Other: ........... |
I submitted a job application / resume Date: ........... I am an employee of a third-party company Please specify the company and position you work for .............. |
- REQUESTS THAT CAN BE MADE BY THE PERSONAL DATA OWNER
Please select the subject of your application regarding your personal data from the options listed below:
| No | Subjects That Can Be Requested and Legal Basis | Your Choice |
|---|---|---|
| 1 | I want to learn whether my personal data is being processed within the Company. (PDPL Article 11/1 (a)) | |
| 2 | If my personal data is being processed, I request information about this data processing activity. (PDPL Article 11/1 (b)) | |
| 3 | If my personal data is being processed, I want to learn the purpose of this data processing and whether it is used in accordance with the processing purpose. (PDPL Article 11/1 (c)) | |
| 4 | I request information as to whether my personal data has been transferred to third parties domestically and/or abroad, and if so, information about these third parties. (PDPL Article 11/1 (ç)) | |
| 5 | I request the correction of my incomplete or incorrectly processed personal data with third parties to whom the Company / my personal data have been transferred. (If requested, correct and supplementary information / documents must be provided for the correction of personal data considered incomplete or incorrect.) (PDPL Article 11/1 (d)) | |
| 6 | I believe that the reasons requiring the processing of my personal data have ceased, and within this scope, I request that my personal data be; - Deleted - Destroyed - Anonymized. (Please indicate your choice by marking with an x.) (PDPL Article 11/1 (e)) Full Name Turkish ID Number Address Phone Number Email No Subjects That Can Be Requested and Legal Basis Your Choice 7 I want the correction of my incomplete or incorrectly processed personal data (Request No:5) also with third parties to whom they have been transferred. (PDPL Article 11/1 (f)) I also request; - Deletion - Destruction - Anonymization of my incomplete or incorrect personal data (Request No:5) with third parties. (Please indicate your choice by marking with an x.) (PDPL Article 11/1 (f)) |
Deletion Destruction Anonymization |
| 7 | I object to the result that arises against me by exclusively analyzing my personal data through automated systems. (PDPL Article 11/1 (g)) | |
| 8 | I request compensation for the damages I have suffered due to unlawful processing of my personal data. (PDPL Article 11/1 (h)) |
- Please select the method by which you want the response to your application to be communicated to you:
I want it sent to my address.
I want it sent to my email address.
(If you choose the email method, we will be able to respond more quickly.)
I want to receive it in person. (In the case of receiving by proxy, a notarized power of attorney or authorization document is required.)
This application form is prepared to identify your relationship with our Company and to fully determine your personal data processed by our Company, if any, in order to provide a correct and timely response to your related application. To eliminate legal risks that may arise from unlawful or unjust data sharing and especially to ensure the security of your personal data, our Company reserves the right to request additional documents and information for identity and authorization verification (such as copies of identity card or driver’s license). If the information provided in your requests within the scope of this form is inaccurate, outdated, or if unauthorized applications are made, our Company does not accept liability for claims arising from such wrong information or unauthorized applications.
Applicant (Personal Data Owner)
Full Name:
Application Date:
Signature: