Clarification Text within the Context of the Personal Data Protection Law (Privacy Policy)

This Information Text has been prepared to inform you about the processing of your personal data by sercinkutucu.com, which acts as a data controller pursuant to the Personal Data Protection Law No. 6698 (“PDPL”), within the scope of your membership via emails or cource registerations to Serçin Kutucu’s web site as sercinkutucu.com

It reserves the right to make changes in the Policy in order to provide up-to-date information about our practices and legal regulations on the protection of Personal Data. In case the changes made in the policy are fundamental changes, the Data Owners will be informed through various channels.

Definitions

  • Explicit consent: It refers to the declaration of consent on a specific subject, based on information and freely declared by the Data Owners.
  • Anonymization: It means making the Personal Data incapable of being associated with an identified or identifiable natural person in any way, even by matching with other data.
  • Relevant person/Data owner: Refers to the real person whose personal data is processed.
  • Personal data: Denotes any information relating to an identified or identifiable natural person.
  • Sensitive personal data: It refers to data subject to a stricter protection regime within the context of the Law, which may cause the Data Owner to be victimized or exposed to discrimination in cases such as their disclosure or loss.
  • Processing of personal data: It refers to all kinds of operations performed on data such as classification or prevention of use, obtaining, recording, storing, preserving, changing, rearranging, disclosing, transferring, taking over, making available Personal Data fully or partially automatically or by non-automatic means provided that it is a part of any Data Recording System.
  • Data registration system: It refers to the registration system in which Personal Data is processed and structured according to certain criteria.
  • Data controller: Denotes the natural or legal person who determines the purposes and means of processing Personal Data and is responsible for the establishment and management of the Data Recording System.

Principles on Data Privacy

sercinkutucu.com acts in accordance with the general principles explained below within the scope of all Personal Data Processing activities.

  • Acting in accordance with the law and the rules of honesty: sercinkutucu.com acts in accordance with the legislation in force and abides by the rules of honesty in all Personal Data Processing processes.
  • Accuracy and timeliness: sercinkutucu.com provides the Data Owners with the opportunity to update their Personal Data and takes the necessary measures to ensure that the data is transferred to the databases correctly.
  • Processing for specific, clear and legitimate purposes: sercinkutucu.com limits its Personal Data Processing activities to specific and legitimate purposes and clearly informs the Data Owners about the said purposes through clarification texts..
  • Being connected, limited and proportional to the purpose for which they are processed: Personal Data are processed by sercinkutucu.com to the extent necessary for the purpose declared to the Data Owner at the time of their provision, in connection with this purpose and in a limited manner.
  • Retention for the period stipulated in the relevant legislation or required for the relevant purpose: sercinkutucu.com preserves Personal Data for this period, if a certain period of time is determined within the scope of the legislation in force. If such a period is not specified in the legislation, reasonable retention periods are determined by taking into account the purpose of data use and sercinkutucu.com procedures, and the data is kept limited to this period. Following the expiry of the aforementioned periods, the data is deleted, destroyed or anonymized in accordance with sercinkutucu.com procedures.

Your Personal Data Collected;

Your Personal Data collected by sercinkutucu.com (directly from you, from public domains or third parties) varies according to your role, position and legal obligations in your relationship with sercinkutucu.com. Your Personal Data collected can be listed as follows:

  • Identity Information (Turkish Republic) identity number, name-surname, passport number, identity card serial number, photo, place of birth, date of birth, age, place of registry, certificate of identity register copy, etc.)
  • Contact Information (E-mail address, phone number, mobile phone number, address, etc.)
  • Educational Information (Graduated schools, departments, received certificates, etc.)
  • Family Members and Relatives Information (Identity information, contact information and professional, educational information etc. about the children, spouses of the Data Owner)
  • Student- Alumni Transaction Information (an instruction associated with the person and a demand-dependent CDR (call detail record), call center records, credit card information, box office receipts, records recorded in channels for this, etc.)
  • Employee Candidate Information (resume, interview notes, personality test results, etc.)
  • Financial Information (credit card debt, loan amount, loan payments, interest amount and rate payable, debt balance, credit balance, etc.)
  • Legal Transaction and Compliance Information (data in documents such as court and administrative authority decisions, etc.)
  • Audit and Inspection Information (Information regarding all kinds of records and transactions related to the legal pursuit and assertion of our rights associated with the Data Owner, etc.)
  • Sensitive Personal Data (race, ethnicity, political opinion, philosophical belief, religion, sect or other belief, disguise and dress, association, foundation or union membership information, data on health and sexual life, criminal convictions and security measures) data, biometric data, genetic data)
  • Reputation Management Information (information associated with the person and collected to protect the reputation of sercinkutucu.com, etc.)
  • Visual and Audio Data (photos, camera recordings, audio recordings, etc.)

The listed Personal Data types do not cover all your processed data, and similar types of Personal Data to the data counted by sercinkutucu.com can be processed.

Purposes of Processing of Personal Data

Your Data will be processed to you to benefit from the services provided by sercinkutucu.com,

Take advantage of the benefits that sercinkutucu.com provides exclusively to its members such as sercinkutucu.com’s event and organization management processes, including conferences, symposiums, panels, panel discussions, forums, exhibitions, bazaars, concerts, sports competitions, trips in the country or abroad,

 

To Whom and For What Purpose the Processed Personal Data Can Be Transferred

For you to benefit from the services provided by sercinkutucu.com,

Take advantage of the benefits that sercinkutucu.comprovides exclusively to its members such as sercinkutucu.com’s event and organization management processes, including conferences, symposiums, panels, panel discussions, forums, exhibitions, bazaars, concerts, sports competitions, trips in the country or abroad,

Conduct the necessary studies and related processes by our relevant units in order to carry out the activities held down by sercinkutucu.com, including the fundraising within sercinkutucu.com in accordance with the legislation,

Within the scope of the personal data processing conditions and purposes specified in the 8th and 9th articles of the PDPL, for the purpose of carrying out the necessary studies by the relevant units in order to benefit the related persons of the products and services offered by sercinkutucu.com, carrying out the relevant processes and carrying out the promotional activities for the products and services of sercinkutucu.com.

Storage of Personal Data

While determining the storage periods of personal data, sercinkutucu.com makes determinations by considering the legislation in force and the purposes of processing the data subject to the process. In this context, if there are statute of limitations related to legal obligations regarding Personal Data Processing, they are definitely taken into account. In the event that the purpose of Personal Data Processing disappears, the data is deleted, destroyed or anonymized unless there is another legal reason or basis that allows the personal data to be kept.

Method and Legal Reason of Collecting Personal Data

Your personal data is collected in all kinds of verbal, written or electronic media, through a membership form or by other means, in line with the above-mentioned purposes. Provided that your personal data collected for this legal reason is clearly stipulated in the Laws, and is directly related to the establishment or performance of a contract, it is necessary to process the personal data of the parties to the contract, including the cases where it is mandatory for sercinkutucu.com to fulfill its legal obligations. It can also be processed and transferred for the purposes specified in the relevant parts of this text within the scope of the personal data processing conditions and purposes specified in Articles 5th and 6th.

Rights of Personal Data Owner Enumerated in Article 11 of PDPL

  • Without prejudice to the cases stipulated in Article 28 of the PDPL titled “Exceptions”, within the framework of Article 11 of the PDPL; personal data owners apply to sercinkutucu.com;
  • Learning whether personal data is processed or not,
  • If personal data has been processed, requesting information about it,
  • Learning the purpose of processing personal data and whether they are used in accordance with the purpose,
  • Knowing the third parties to whom personal data is transferred in the country or abroad,
  • Requesting correction of personal data in case of incomplete or incorrect processing and requesting notification of the transaction made within this scope to third parties to whom personal data has been transferred,
  • Even though it has been processed in accordance with the PDPL and other relevant law provisions, to request the deletion or destruction of personal data in the event that the reasons requiring its processing are eliminated, and to request the notification of the transaction made within this context to the third parties to whom the personal data has been transferred,
  • Objecting to the emergence of a result against the person himself by analyzing the processed data exclusively through automated systems,
  • In case of loss due to unlawful processing of personal data, the person has the right to demand the indemnify the loss.
  • In order to exercise your above-mentioned rights, you can send your request to sercinkutucu.com’s writing or by other methods determined by the Personal Data Protection Board.
  • Those who visit our website and send personal data through the necessary contact forms, pursuant to Article 10 of the Personal Data Protection Law No. 6698, titled “Information Obligation of the Data Controller”, by whom and for what purpose my personal data will be processed, to whom and for what purpose the processed personal data can be transferred, saying “I have read and understood this “Information Text” prepared on the method and legal reason for collecting personal data and my rights in Article 11 of the Law, and I have been informed in detail by sercinkutucu.com, which is the data controller”, and is deemed to have accepted it.