Masumiyet Müzesi

Data Controller: İBilet Bilet Dağıtım ve Basım Tic. A.Ş

As iTicket, we show the utmost sensitivity to the matter of the security of your personal data. With this awareness in mind, we attribute great importance to the processing and retaining of all kinds of personal data which belong to all persons associated with us, including those who utilize our products and services, pursuant to The Law on the Protection of Personal Data numbered 6698 (“LPPD”). With the full comprehension of our abovementioned responsibility and acting as the “Data Controller” as defined under the LPPD, your personal data are processed as described below and within the limits ordered by the legislation, thus the noticeherein has been prepared in order to fulfil the disclosure obligation as per the Article 10 of the LPPD.

The Purpose and The Scope

As iBilet Bilet Dağıtım ve Basım Tic. A.Ş. (“iTicket” or “The Firm”), it is our priority to ensure the processing of the personal data of the consumers who purchase products or receive services, people who register on and visit our website online, our business partners, representatives and personnel of the business partners, our suppliers, representatives and personnel of the suppliers, agencies and personnel of the agency, in accordance with the applicable legislation, particularly pursuant to the Constitution of the Republic of Turkey and the LPPD and fulfilling our obligation to inform the data subjects whose their data are processed and the effective use of their rights.

The protection of personal data and the supervision of the fundamental rights and freedoms of natural persons whose personal data are collected are the basic principles of our policy regarding the processing of personal data. Therefore, iTicket carries out all its activities in which personal data are processed, by taking all necessary administrative and infrastructural measures in today's technology for the protection of personal data and by paying regard to the right to privacy, the confidentiality of communication, the freedom of thought and belief and the rights to use effective legal remedies.

This notice which is drafted taking the provisions of the LPPD and secondary local legislation regarding personal data, Convention 108 for the Protection of Individuals with regard to Automatic Processing of Personal Data, The EU General Data Protection Regulation (GDPR) and other international standards in this field into account, is applied to all kinds of personal data which belong to the consumers who purchase products or receive services, people who register on and visit our website online, our business partners, representatives and personnel of the business partners, our suppliers, representatives and personnel of the suppliers, agencies and personnel of the agency (“Data Subject(s)”) that are subjected to activity of processing of personal data by iTicket.

Which and for What Purposes of Your Personal Data are Processed?

Planning and managing the Company's activities, carrying out membership transactions, resolving consumer problems and complaints, promoting activities and services in line with consumer preferences and tastes, carrying out activities to increase consumer satisfaction, loyalty and commitment, analyzing consumer tastes and needs and developing personalized promotions, opportunities or campaigns, planning and managing advertising, promotion and other related activities within the Company, planning and execution of national and international solidarity and awareness activities, conducting studies to offer suggestions to consumers by contracted institutions and solution partners, informing consumers about our services, preparing ticket reports for the performance of the service offered to consumers to whom we sell tickets (distance sales contract established), compliance with the legislation, planning and managing employment needs, planning and managing relations with suppliers and other third parties in order to fulfill our other legal obligations, Monitoring and preventing unauthorized and unauthorized transactions contrary to the legislation, planning and fulfillment of risk management and quality improvement studies, advantageous payment systems, virtual pos integrations, ensuring and facilitating payment security, alternative payment systems offered by other data controllers / data processors that we offer or our commercial business partners, planning and execution of commercial and / or business strategies for the realization of commercial activities and their commercial activities, The following data of the Data Subjects are processed in order to plan and execute the activities necessary for the recommendation and promotion of the Company by customizing them according to your usage habits and needs, to manage all kinds of requests and complaints regarding our activities, to provide the necessary information in line with the audits of regulatory and supervisory institutions and official authorities, to follow up the accounting and sales transactions, to plan and execute corporate communication activities, and to execute / follow up the corporate and partnership law transactions and other legal affairs within the Company:

1) Website (iticket.com.tr) online visitors

1.1 Transaction Security Information
Personal Data Processed	The Purposes for Processing of Personal Data
● Website traffic information (Connection duration and time, pages visited etc.) ● Internet Protocol (IP) addresses and log records ● Pixel labels ● Cookie information (please see iTicket Cookie Policy) ● Information submitted during the event ticket search ● Port information ● Device MAC Address	● Execution/Supervision of its activities, Carrying out the activities in compliance with the legislation, ● Execution of Information Security Processes ● Execution of Consumer Relations Management Processes ● Execution of Activities for Consumer Needs and Satisfaction (such as speeding up the transactions on the website) ● Organization and Event Management ● Execution of Marketing Analysis Studies ● Execution of Advertising / Campaign / Promotion Processes ● Ensuring the Security of Data Controller Operations ● Providing Information to the Authorized Persons, Institutions and Organizations ● Provision and Delivery of Branded Services, Determination of the Effectiveness of Promotion and Advertising Campaigns
Legal Grounds for Processing of Personal Data	In order to achieve the above mentioned purposes, your personal data are processed by iTicket based on the legal causes stipulated by Article 5 of the LPPD as described below: ● Being expressly permitted by the law (such as the Law no. 5651) ● Based on our legitimate interests, ● Processing of personal data belonging to the parties of a contract is necessary provided that it is directly related to the conclusion or fulfillment of that contract.
The Method of Collection of Personal Data	Your personal data mentioned above are automatically collected via; ● Electronic forms from our websites, the mobile application, social media accounts, ● HTML-formatted tools and our website.

2) Consumers booking/purchasing event tickets

2.1 Transaction Security Information
Personal Data Processed	The Purposes for Processing of Personal Data
● Website traffic information (Connection duration and time, pages visited etc.) ● Internet Protocol (IP) addresses and log records ● Pixel labels ● Cookie information (please see iTicket Cookie Policy) ● Information submitted during the event ticket search ● Port information ● Device MAC Address ● Username and password	● Execution/Supervision of its activities, Carrying out the activities in compliance with the legislation, ● Execution of Information Security Processes ● Execution of Consumer Relations Management Processes ● Execution of Activities for Consumer Needs and Satisfaction (such as speeding up the transactions on the website) ● Organization and Event Management ● Execution of Marketing Analysis Studies ● Execution of Advertising / Campaign / Promotion Processes ● Ensuring the Security of Data Controller Operations ● Providing Information to the Authorized Persons, Institutions and Organizations ● Provision and Delivery of Branded Services, Determination of the Effectiveness of Promotion and Advertising Campaigns
Legal Grounds for Processing of Personal Data	In order to achieve the above mentioned purposes, your personal data are processed by iTicket based on the legal causes stipulated by Article 5 of the LPPD as described below: ● Being expressly permitted by the law (such as the Law no. 5651) ● Based on our legitimate interests, ● Processing of personal data belonging to the parties of a contract is necessary provided that it is directly related to the conclusion or fulfillment of that contract.
The Method of Collection of Personal Data	Your personal data mentioned above are automatically collected via; ● Electronic forms from our websites, the mobile application, social media accounts, ● HTML-formatted tools and our website.

2.2 Identifying Information
Personal Data Processed	The Purposes for Processing of Personal Data (with respect to distance sales contract to be concluded)
● Name-surname ● Date of birth ● Republic of Turkey ID Number ● Gender ● City Information	● Execution of Emergency Management Processes ● Execution/Supervision of its activities, Carrying out the Activities in Compliance with the Legislation, ● Execution of the Production of Goods / Services, Operation and Sales Processes ● Execution of Storage and Archive Activities ● Execution of Marketing Analysis Studies ● Execution of Consumer Relations Management Processes ● Execution of Activities for Customer Satisfaction ● Organization and Event Management ● Execution of Advertising / Campaign / Promotion Processes ● Providing Information to the Authorized Persons, Institutions and Organizations ● Execution of Finance and Accounting Affairs ● Providing Information to the Authorized Persons, Institutions and Organizations
Legal Grounds for Processing of Personal Data	In order to achieve the abovementioned purposes, your personal data are processed by iTicket based primarily on the legal causes stipulated by Article 5 of the LPPD as described below: ● Being expressly permitted by the law (such as the Law no. 5651, Regulation on Service Providers and Intermediary Service Providers in Electronic Communication, Regulation on Commercial Communications and Commercial Electronic Messages.) ● It is necessary for compliance with a legal obligation which the data controller is subject to ● Processing of personal data belonging to the parties of a contract is necessary provided that it is directly related to the conclusion or fulfillment of that contract.
The Method of Collection of Personal Data	Your personal data mentioned above are collected through; ● Printed and electronic forms, ● The documents declared by the consumer, ● Social media platforms.

2.3 Contact Information
Personal Data Processed	The Purposes for Processing of Personal Data (with respect to distance sales contract to be concluded and the provisions of the Regulation on Commercial Communications and Commercial Electronic Messages)
● Address information ● E-mail address ● Mobile phone number ● Social media contact information	● Execution/Supervision of its activities, Carrying out the Activities in Compliance with the Legislation, ● Execution of Finance and Accounting Affairs ● Execution of the Production of Goods / Services, Operation and Sales Processes ● With the Purposes of Execution of Storage and Archive Activities ● Execution of Marketing Analysis Studies ● Execution of Consumer Relations Management Processes ● Execution of Activities for Customer Satisfaction ● Organization and Event Management ● Execution of Communication Advertising / Campaign / Promotion Processes ● Providing Information to the Authorized Persons, Institutions and Organizations
Legal Grounds for Processing of Personal Data	In order to achieve the abovementioned purposes, your personal data are processed by iTicket based primarily on the legal causes stipulated by Article 5 of the LPPD as described below: ● Being expressly permitted by the law, ● It is necessary for compliance with a legal obligation which the data controller is subject to ● Processing of personal data belonging to the parties of a contract is necessary provided that it is directly related to the conclusion or fulfillment of that contract.
The Method of Collection of Personal Data	Your personal data mentioned above are collected through; ● Printed and electronic forms, ● The documents declared by the consumer, ● Social media platforms.

2.4Financial Information
Personal Data Processed	The Purposes for Processing of Personal Data (with respect to distance sales contract to be concluded)
● Credit card and bank name information ● Credit card expiry and security number information ● Bank account number and IBAN information ● Bank account balance information ● Tax identification number and tax office name ● Proof of payment ● Receipt ● Billing information	● Execution/Supervision of its activities, Carrying out the Activities in Compliance with the Legislation, ● Execution of Finance and Accounting Affairs ● Execution of the Production of Goods / Services, Operation and Sales Processes ● Execution of Audit Activities ● Follow-up and Execution of Legal Affairs ● Execution of Contractual Processes with the Consumer ● Execution of Storage and Archive Activities ● Fulfilment of Legal Obligations ● Providing Information to the Authorized Persons, Institutions and Organizations ● Execution of Advertising / Campaign / Promotion Processes ● Implementation of Audit & Measures for Security and Fraud Prevention
Legal Grounds for Processing of Personal Data	In order to achieve the abovementioned purposes, your personal data are processed by iTicket based primarily on the legal causes stipulated by Article 5 of the LPPD as described below: ● Being expressly permitted by the law, ● It is necessary for compliance with a legal obligation which the data controller is subject to ● Processing of personal data belonging to the parties of a contract is necessary provided that it is directly related to the conclusion or fulfillment of that contract.
The Method of Collection of Personal Data	Your personal data mentioned above are collected through; ● Printed and electronic forms, ● The documents declared by the consumer.

2.4 Financial Information
Personal Data Processed (By Our Business Partners)	Purposes of Personal Data Processing (Based on the payment services or campaigns to be used)
● Credit card/debit card front face information ● Payment institutions, electronic money institutions, e-commerce payment systems membership information ● Information to be provided by solution partners and payment service providers regarding financial status ● (Sensitive) payment data ● Transaction-based approval/rejection information within credit limits, credit scores	● Execution of Advertising / Campaign / Promotion Processes ● Implementation of Audits & Measures for Security and Fraud Prevention ● Cross-selling by Payment Service Providers, Target Audience Identification, Conducting Activities to Enhance User Experience by Tracking User Movements, and Personalizing Based on Their Needs ● Execution of Marketing / Personalized Marketing / Targeting and Retargeting Activities ● Planning and Execution of User Satisfaction Activities / Planning and Execution of User Relationship Management Processes

2.4 Financial Information

Personal Data Processed (By Our Business Partners)

Purposes of Personal Data Processing (Based on the payment services or campaigns to be used)

● Credit card/debit card front face information

● Payment institutions, electronic money institutions, e-commerce payment systems membership information

● Information to be provided by solution partners and payment service providers regarding financial status

● (Sensitive) payment data

● Transaction-based approval/rejection information within credit limits, credit scores

● Execution of Advertising / Campaign / Promotion Processes

● Implementation of Audits & Measures for Security and Fraud Prevention

● Cross-selling by Payment Service Providers, Target Audience Identification, Conducting Activities to Enhance User Experience by Tracking User Movements, and Personalizing Based on Their Needs

● Execution of Marketing / Personalized Marketing / Targeting and Retargeting Activities

● Planning and Execution of User Satisfaction Activities / Planning and Execution of User Relationship Management Processes

Special Categories of Personal Data

Health Information
Personal Data Processed	The Purposes for Processing of Personal Data
● Information regarding the status of disability, ● Blood type information, ● Used device and prosthesis information ● Information regarding continuously used medication ● HES Code ● Covid-19 vaccination and PCR test information	● Execution of Emergency Management Processes ● Execution of the Activities in Compliance with the Legislation ● Follow-up of Requests / Complaints ● Execution of Price Policy ● Providing Information to the Authorized Persons, Institutions and Organizations ● Execution of Storage and Archive Activities ● Fulfillment of Legal Obligations ● Execution of Contractual Processes with the Consumer
Legal Grounds for Processing of Personal Data	In order to achieve the abovementioned purposes, your personal data are processed by iTicket, for the purpose of “protection of public health” as stipulated by Article 6/Paragraph 3 of the LPPD and through obtaining your explicit consent as per Article 6 of the LPPD as a result of the legal obligations laid out by statutory or authorized public enterprises.
The Method of Collection of Personal Data	Your personal data mentioned above are collected through; ● Printed and electronic forms, ● The documents declared by the consumer.

3) Suppliers, business partners, agencies and their personnel

3.1 Identifying Information
Personal Data Processed	The Purposes for Processing of Personal Data
● Name - Surname ● Date of birth ● Republic of Turkey ID Number	● Execution of Other-Employee Health, Occupational Health and Safety Activities ● Execution/Supervision of work activities, Carrying out the Activities in Compliance with the Legislation ● Execution of Finance and Accounting Affairs ● Planning of Human Resources Processes ● Execution of the Production of Goods / Services, Operation and Sales Processes ● Execution of Consumer Relations Management Processes ● Execution of Activities for Customer Satisfaction ● Organization and Event Management ● Execution of Marketing Analysis Studies ● Execution of Advertising / Campaign / Promotion Processes ● Execution of Storage and Archive Activities ● Providing Information to the Authorized Persons, Institutions and Organizations ● Execution of Management Activities
Legal Grounds for Processing of Personal Data	In order to achieve the above mentioned purposes, your personal data are processed by iTicket based primarily on the legal causes stipulated by Article 5 of the LPPD as described below: ● Being expressly permitted by the law, ● It is necessary for compliance with a legal obligation which the data controller is subject to, ● ● Processing of personal data belonging to the parties of a contract is necessary provided that it is directly related to the conclusion or fulfillment of that contract.
The Method of Collection of Personal Data	Your personal data mentioned above are collected through; ● Printed and electronic forms, ● The documents declared by the consumer.

3.2 Contact Information
Personal Data Processed	The Purposes for Processing of Personal Data
● Address information ● Business and dispatch address information ● Electronic notification and registered electronic mail address (KEP) information ● E-mail address ● Mobile phone number	● Execution of Other-Employee Health, Occupational Health and Safety Activities ● Execution/Supervision of work activities, Carrying out the Activities in Compliance with the Legislation ● Execution of Finance and Accounting Affairs ● Planning of Human Resources Processes ● Execution of the Production of Goods / Services, Operation and Sales Processes ● Execution of Consumer Relations Management Processes ● Execution of Activities for Customer Satisfaction ● Organization and Event Management ● Execution of Marketing Analysis Studies ● Execution of Advertising / Campaign / Promotion Processes ● Execution of Storage and Archive Activities ● Providing Information to the Authorized Persons, Institutions and Organizations ● Execution of Management Activities
Legal Grounds for Processing of Personal Data	In order to achieve the above mentioned purposes, your personal data are processed by iTicket based primarily on the legal causes stipulated by Article 5 of the LPPD as described below: ● Being expressly permitted by the law, ● It is necessary for compliance with a legal obligation which the data controller is subject to ● Processing of personal data belonging to the parties of a contract is necessary provided that it is directly related to the conclusion or fulfillment of that contract.
The Method of Collection of Personal Data	Your personal data mentioned above are collected through; ● Printed and electronic forms, ● The documents declared by the consumer.

3.3Financial Information
Personal Data Processed	The Purposes for Processing of Personal Data
● Bank account number and IBAN information ● Tax identification number and tax office name ● Proof of payment ● Receipt ● Billing information	● Execution/Supervision of work activities, Carrying out the Activities in Compliance with the Legislation ● Execution of Finance and Accounting Affairs ● Execution of the Production of Goods / Services, Operation and Sales Processes ● Organization and Event Management ● Execution of Storage and Archive Activities ● Fulfillment of Legal Obligations ● Providing Information to the Authorized Persons, Institutions and Organizations
Legal Grounds for Processing of Personal Data	In order to achieve the abovementioned purposes, your personal data are processed by iTicket based primarily on the legal causes stipulated by Article 5 of the LPPD as described below: ● Being expressly permitted by the law, ● It is necessary for compliance with a legal obligation which the data controller is subject to ● Processing of personal data belonging to the parties of a contract is necessary provided that it is directly related to the conclusion or fulfillment of that contract.
The Method of Collection of Personal Data	Your personal data mentioned above are collected through; ● Printed and electronic forms, ● The documents declared by the consumer.

3.4 Legal Transactions Information
Personal Data Processed	The Purposes for Processing of Personal Data
● Signature ● Signature circular ● Certificate of good standing ● Information relating to special agents and merchant assistants	● Execution/Supervision of work activities, Carrying out the Activities in Compliance with the Legislation ● Execution of the Production of Goods / Services, Operation and Sales Processes ● Organization and Event Management ● Execution of Storage and Archive Activities ● Fulfilment of Obligations Arising from the Legislation and Carrying out the Activities in Compliance with the Legislation ● Execution of Finance and Accounting Affairs ● Ensuring the Security of Movable Property and Resources ● Providing Information to the Authorized Persons, Institutions and Organizations
Legal Grounds for Processing of Personal Data	In order to achieve the above mentioned purposes, your personal data are processed by iTicket based primarily on the legal causes stipulated by Article 5 of the LPPD as described below: ● Being expressly permitted by the law, ● It is necessary for compliance with a legal obligation which the data controller is subject to ● Processing of personal data belonging to the parties of a contract is necessary provided that it is directly related to the conclusion or fulfillment of that contract.
The Method of Collection of Personal Data	Your personal data mentioned above are collected through; ● Printed and electronic forms, ● The information and documents declared by the person concerned.

Processing of Special Categories of Personal Data

Special categories of personal data are processed by iTicket in accordance with the principles set forth in this notice and by taking all necessary administrative and technical measures, including the methods to be determined by the Board, and in particular in accordance with the Board’s decision dated 01/01/2018 and numbered 2018/10 and in the presence of the following conditions:

(1)Special categories of personal data apart from health and sexual life data may be processed without obtaining the explicit consent of the data subject, provided that it is explicitly permitted by the Laws, in other words the Law which related activity is subject to contains an unreserved provision that is permitting the processing of personal data. Otherwise, explicit consent of the data subject is to be sought for relevant special categories of personal data to be processed.

(2)Personal data relating to health and sexual life may only be processed without obtaining the explicit consent of the data subject for purposes of protection of public health, operation of preventive medicine, medical diagnosis, treatment and care services, planning and management of health services and financing by persons under the obligation of secrecy or authorized institutions and organizations. Otherwise, explicit consent of the data subject is to be sought for relevant special categories of personal data to be processed.

Use of Our Website by the Minors

The website is not intended for individuals under the age of 13 (thirteen), and personal information should not be shared by these individuals through our website. If a parent or legal guardian becomes aware that their child has provided us with personal information without his/her parent’s or guardian's consent (for example, by stating his/her age inaccurately); such parent or legal guardian should contact us via info@iticket.com.tr. If iTicket detects that it has received personal information of minors under the age of 13, it will ex officio remove such information and accounts believed to be owned by the minors under the age of 13.

To whom and for what purposes may your personal data be transferred?

Within the scope stipulated by the legal regulation, pursuant to the rules of the Law and by taking the necessary technical and administrative measures, your personal data can be transferred to the people listed below to carry out the activities in accordance with the legislation, to inform the authorized persons, institutions and organizations, to fulfill the obligations arising from the provisions of the legislation, to conduct follow-up and carry out the legal affairs, to provide the services we have undertaken and to control the quality of the services provided:

In accordance with all paragraphs of Articles 5 and 6/Paragraph 3 of the LPPD, as part of the legitimate interest of the relevant institution and limited to the stated purposes, to Authorized Public Institutions and Organizations and all kinds of judicial authorities and to the third parties whom we receive consultancy including our representatives, lawyers, tax and financial advisors and auditors that you have authorized, to the regulatory and supervisory institutions, to our solution partners, including public professional organisation, with whom we cooperate in order to develop or carry out our activities for the above mentioned purposes,

For the purposes of conducting business activities, conducting communication activities, conducting ticketing activities, tracking requests and complaints, organization and event management, and conducting goods/services purchasing and sales processes, providing information about your payment instrument for your payment and for use in your subsequent purchases; with banks, payment and settlement systems companies, electronic money institutions with operating permits, financing institutions, payment systems, virtual pos, etc.; for the purposes of campaign providers, gift and / or raffle organizers with whom we conduct business partnerships; private insurance companies, contracted organizations, direct / indirect domestic / foreign affiliates in accordance with Article 4 of KVKK private insurance companies, contracted organizations, our direct/indirect domestic/foreign affiliates in accordance with Article 4 of the LPPD; relevant third party natural person/legal entities resident in Turkey or abroad, such as program-service partner individuals and organizations from whom we receive services (including server and storage services)/ cooperate with to carry out our activities,

In order to refund the ticket fee, to return the cancellation amount to the card you used for the purchase, your relevant financial information may also be shared with banks, payment and settlement system companies, licensed electronic money institutions, financial institutions, payment systems, virtual POS, and similar service providers; with campaign providers, gift and/or raffle organizers we collaborate with; in accordance with Article 4 of the KVKK (Personal Data Protection Law), with private insurance companies, contracted institutions; and due to the Company's involvement in the sale and distribution of event tickets with organizers, personal and/or sensitive personal data may be shared with organizers and/or other relevant third parties (such as car rental companies, courier/cargo companies, and other service providers related to the service, both in Turkey and abroad),

To the commercial electronic message medium service provider in order to make promotions, advertisements and offer benefits and opportunities in line with its shopping preferences, likings and habits of the consumer upon its approval on receiving commercial electronic messages,

To the associated business partners with the purposes of conducting information security processes, executing/auditing business activities, executing storage and archiving activities, executing finance and accounting affairs and conducting the processes of concluding contracts.

In addition to the above, personal data may be transferred to/stored in the foreign countries which are declared by the Board which have adequate protection, in encrypted form with the highest level of security and protocol methods, in the presence of any of the conditions in the paragraphs above.

How Long is Your Personal Data Retained?

If a period of time has been determined for data storage under the Law or other relevant legislation, your personal data must be retained until such period ends. If a period of time is not stipulated in the Law or in the relevant legislation; your personal data are stored for the periods designated for a limited and measured period of time in connection with the purposes of processing in accordance with our Destruction Policy, which is an annex to this notice.

What are Your Legal Rights as the Data Subject?

In accordance with the LPPD and relevant legislation concerning your personal data you are entitled to:

Learn whether your personal data are being processed,
Request further information on processing if your personal data have been processed,
Learn the purposes of processing of your personal data and whether your personal data are being processed in accordance with such purpose,
Learn the third-party recipients to whom your personal data are disclosed within the country or abroad,
To request correction of your personal data in case of incomplete or incorrect processing and to request notification of the transaction made within this scope to third parties to whom personal data has been transferred,
Request the erasure or anonymization of your personal data as per the prerequisites of the Law,
Request the notifying of the third parties whom are receiving your personal data on the processes of rectification, erasure or destruction,
Object to negative consequences about you that arise as a result of analysis of your personal data made by solely automatic means,
Demand compensation for the damages that you have suffered as a result of an unlawful processing operation.

How Can You Exercise Your Rights as a Consumer or a Data Subject?

The updated provisions of this notice will be immediately entering into force at the date they are published thus made public on the website. Even in the absence of an update, if you wish to access the content of this notice, as our consumer or a data subject, please kindly contact us via info@iticket.com.tr after filling out the Application Formwhich you will be subsequently contacted by a respective person.

In accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller, in case you want to submit an application as a Data Subject it is obligatory for your application to have the following information: name, surname, signature if the application is in writing, Republic of Turkey ID Number (if the applicant is a foreign national, his/her nationality, passport number or ID number), the place of residence or business address for formal notification, the e-mail address, telephone number and fax number for notification and information with regards to the subject of the request.

The applicant must clearly and comprehensibly state the subject requested in the application, which includes explanations regarding the abovementioned rights that he/she has requested to invoke. Information and documents related to the application must be attached to the application. Although the subject of the request must be related to the person of the applicant, if the applicant is acting on behalf of someone else, the applicant must be specifically authorized in this regard and this authority must be duly documented (power of attorney). Additionally, the application must contain identity and address information and documents confirming his/her identity must be attached to the application.

Requests made by unauthorized third parties on behalf of someone else will not be considered.

How Long Does It Take for Requests Regarding the Processing of Your Personal Data to be Answered?

Your claims regarding your personal data are evaluated and answered within 30 days at the latest from the date of receipt. In case your application is rejected, the reasons for rejection will be delivered to you via e-mail or with a document to be sent by Human Resources via registered mail/mail with return receipt requested.

Last Update Date: 05/12/2024