1. Our Company maintains the necessary channels, internal procedures, and administrative and technical arrangements in accordance with Article 12 of the KVKK (Law on the Protection of Personal Data) to evaluate the rights of personal data subjects and to provide them with the required information.
2. In the event that personal data subjects submit requests regarding the rights listed below to our Company in writing, our Company concludes the request free of charge as soon as possible and within thirty days at the latest, depending on the nature of the request. However, if the process entails an additional cost, a fee will be charged by our Company in accordance with the tariff determined by the Personal Data Protection Board. Personal data subjects;
3. In this context, data subjects are required to first submit their requests regarding the implementation of the Law (Art. 11) to the data controller. The Law prescribes a tiered application procedure for requests concerning the protection of personal data.
4. Data subjects are required to first apply to the data controller in order to exercise their rights. A complaint cannot be lodged with the Board without first exhausting this avenue.
5. The data controller must respond to the data subject’s request within 30 days. Data subjects whose applications are rejected, who find the response inadequate, or who do not receive a response within the specified timeframe may exercise their right to lodge a complaint with the Board.
6. The methods for submitting an application are limited to written submission, submission via registered electronic signature, and submission via fax. Applications made to the company through one of these channels are evaluated by the data controller.
7. The data subject’s right in this regard is, first and foremost, under Constitutional protection; ultimately, the data controller must respond lawfully to requests directed at them, provided the requests are made in accordance with the proper procedure. Therefore, the data controller cannot evade the obligation to respond.
8. Pursuant to Article 6 of the Communiqué on the Procedures and Principles of Application to the Data Controller, the data controller is obliged to take all necessary administrative and technical measures to conclude applications made by data subjects within the scope of this Communiqué in an effective manner and in accordance with the law and the principle of good faith. Accordingly, the data controller shall either accept the application or reject it by stating the grounds for rejection. The data controller shall notify the data subject of the response in writing or via electronic means.
9. The written response shall include:
a. Information regarding the data controller or their representative,
b. The applicant’s name and surname; and for citizens of the Republic of Turkey, the T.R. [Identity Number] identity number; nationality (for foreigners); passport number or identity number (if applicable); address of the place of residence or workplace serving as the basis for notification; e-mail address serving as the basis for notification (if applicable); and telephone and fax numbers,
c. The subject of the request,
d. The data controller’s explanations regarding the application,
must be included.
10. The data controller shall conclude the requests contained in the application free of charge as soon as possible and within thirty days at the latest, depending on the nature of the request. However, if the process entails an additional cost, the fee specified in Article 7 may be charged.
11. If the data subject’s request is accepted, the data controller shall fulfill the requirements of the request as soon as possible and inform the data subject.
12. Our Company operates a system ensuring that, in the event that personal data processed in accordance with Article 12 of the KVKK is obtained by others through unlawful means, this situation is notified to the relevant personal data owner and the KVK Board as soon as possible.
