What is the Personal Data Protection Law No. 6698 (KVKK)?​

​

It is the law adopted on 24/3/2016 and entered into force on 7/4/2016, which determines the obligations of natural and legal persons processing personal data and the procedures and principles to be followed, to protect the fundamental rights and freedoms of individuals, especially the privacy of private life, in the processing of personal data.

​

What is Personal Data?

​

It means all kinds of information belonging to an identified or identifiable natural person.

​

What is Special Class Personal Data?

​

It refers to your data related to race, ethnicity, political thought, belief, sect or other beliefs, religion, philosophy, dress, association, foundation or union membership, health, sexual life, criminal conviction and security measure, and your biometric and genetic data. .

​

Who is the Relevant Person or Data Owner?

​

In the law, the term "relevant person" is used to express the real person whose personal data is processed. Within the scope of the law, only the data of real persons are protected. "Relevant Person" will be used in the prepared policy.

​

Who is the Data Controller?

​

Data controller refers to the natural or legal person who determines the purposes and means of processing personal data and is responsible for the establishment and management of the data recording system. In other words, it is the person who will answer the questions of "why" and "how" the processing will be done.

Legal entities are themselves “data controllers” within the scope of their activities in processing personal data, and the legal responsibility specified in the relevant regulations will arise on the person of the legal entity.

​

Who is the Data Processor?

​

It is the natural and legal person who processes personal data on behalf of the data controller based on the authority given by the data controller.

​

What is the Processing of Personal Data?

​

Obtaining, recording, storing, preserving, changing, rearranging, disclosing, transferring, taking over, making available, classifying or using personal data in whole or in part by automatic or non-automatic means provided that it is a part of any data recording system. Any operation performed on the data, such as blocking.

​

Who is the institution?

​

Refers to the Personal Data Protection Authority.

​

What is Anonymization?

​

Making the data previously associated with a person incapable of being associated with an identified or identifiable natural person in any way, even by matching them with other data.

​

​