Cookie and Privacy

Our Cookies and Privacy Policy

Our Cookie and Privacy Policy: On this page, you can learn about the information and functions of our “Cookies and Privacy Policy”. We have also included information such as what a cookie is and what it does on our page. If you wish, we will provide you with information about our Cookie and Privacy Policy.

What is a cookie? Why is it used?

What is a cookie and why is it used: Cookies are a file structure consisting of very small textual expressions that are saved on your device for reasons that will be explained shortly, regardless of device type, when you visit a website.

Our Cookie and Privacy Policy: Cookies notify the site to the relevant site when you go to the relevant domain area, the pages you visit the most while you are browsing the website, and you will have a faster navigation to the pages you will visit, since the domain is ready.

Cookies do not collect information from your device or hardware and do not share it against your will.

Types of Cookies and Purposes of Use

Types of Cookies and Purposes of Use: There are 2 types of cookies, permanent and temporary. Since these cookies are temporary and permanent in their task structure, their lifetime can be defined as permanent or temporary in this way. Cookies can be deleted even if they are permanent, please do not forget that.

Temporary Cookies

Temporary cookies are created whenever you visit the website and are only valid until you close your browser.

Persistent cookies

Persistent cookies are created when you visit the website with the same logic. It remains until you delete it or it expires.

Persistent cookies are kept and stored for the purpose of storing your settings or personal preferences.

Types of cookies and their intended use

How Are Cookies Collected?

How Cookies are Collected: Data is collected and stored through your devices from which you access browsers. Since this collected information is stored specifically for the devices, confusion is avoided. You, valuable users, can delete this information at any time and close access to the information.

Our Privacy Policy

Our Privacy Policy: Your privacy is important to us and you, based on this, your privacy and security rights are our basic principle. We recommend that you take a look at the Law on the Protection of Personal Data for information on the subject.

Informing About User Posts and Contents

No content creator can make any material or moral requests from us regarding their content and publications, for whatever purpose. When people or businesses that subscribe to the subject accept the contract, they are deemed to have understood and accepted this situation.

If there is a request for a regulation or permanent removal regarding any complaint or suggestion regarding the content and publications, the request is examined and if the request is found on the spot, action can be taken.

To communicate, you can contact us via our contact page.

You can access this information and content on our About Us page.

PUBLIC ANNOUNCEMENT ON FULFILLING THE OBLIGATION TO LIGHTING

Data controllers have certain obligations within the framework of the Personal Data Protection Law No. 6698, the secondary legislation regarding the Law and the decisions made by the Personal Data Protection Board. One of these obligations is the obligation to inform in Article 10 of the Law.

While the obligation to inform is an obligation for data controllers, it is also a right for natural persons whose personal data are processed. The obligation to inform the person concerned about the processed personal data is an indispensable condition for the legal fulfillment of personal data processing.

Fulfillment of the obligation to inform is not an obligation based on the request of the person concerned. In addition, the data controller must fulfill the obligation of disclosure in each of the cases where the explicit consent of the data subject or one of the other personal data processing conditions is present when processing personal data. Because the obligation to inform is an obligation that must be fulfilled in all cases, regardless of both express consent and other personal data processing conditions listed in the Law.

As a result of the evaluation made on the information and documents conveyed to the Authority by the relevant data controllers upon notification and complaint applications made to our Institution, or on other documents foreseen to be examined and researched by the Board;

• The disclosure is not made by the data controller during the acquisition of the personal data from the data subject, made afterwards or not done at all,
• The lighting content does not cover the issues listed in Article 10 of the Law No. 6698,
• In lighting; The purpose of processing personal data is not limited to the processing activity, specific, clear or legitimate, expressions are used that lead to the opinion that personal data can be processed for other purposes that may come to the fore in the future,
• “Legal reason”, which is one of the minimum elements of illumination, and “purpose of processing” are used in the same sense or the element of legal reason is not included at all,
• In the texts used for the purpose of illumination, an understandable, clear and plain language is not used, general nature, suitable for different understanding, incomplete, misleading and wrong information are included,
• In the clarification process, the purpose of the transfer and the transferred recipient group or groups are not sufficiently included,
• The clarification texts are “privacy policies” or “data processing policies”, which are generally not limited to the processing activity, and are a general data processing document for the data controller,
• Illumination texts are not presented on a platform that can be easily accessed by the person concerned,
• When the layered lighting method is preferred, basic information is not presented at the first stage, appropriate ways and methods are not followed for access to detailed information, and generally directed to privacy policies or data processing policies, before directing the relevant persons to another channel for detailed information,
• Explicit consent and disclosure are presented together under the same title in the same text or platform,
• If the confirmation of the lighting is requested and the approval is not given, the service is not provided.

It has been determined that there are deficiencies and violations of the legislation such as

Data controllers should pay particular attention to the following issues while fulfilling their obligation to inform so that they do not face the sanctions specified in the Law due to the said deficiencies and violations of the legislation:

a) The proof of fulfillment of the obligation to inform belongs to the data controller.

b) The obligation to inform must be fulfilled by the data controller or the persons authorized by him during the collection of personal data from the data subject.

c) At a minimum, the information to be provided within the scope of the disclosure obligation shall be subject to the “identity of the data controller and its representative, if any, for what purpose the personal data will be processed, to whom and for what purpose the processed personal data can be transferred, the method of collecting personal data and the legal reason,” as stated in Article 10 of the Law. The rights of the relevant person listed in the article should be included.

d) According to the Communiqué on the Procedures and Principles to be Complied with in the Fulfillment of the Disclosure Obligation published in the Official Gazette dated 10.03.2018; in case the personal data is not obtained from the data subject due to the actual impossibility or inability to reach the data subject, within a reasonable period of time after the personal data is obtained, or during the first communication if the personal data will be used for communication with the data subject, at the latest, if the personal data is to be transferred, at the latest. At the time of the transfer of the data for the first time, the obligation to inform the person concerned must be fulfilled.

e) The purpose of processing personal data to be disclosed while fulfilling the obligation to inform must be limited to the processing activity, specific, clear and legitimate. Expressions that suggest that personal data may be processed for other purposes that may come to the fore in the future should not be used.

f) An understandable, clear and plain language should be used in the texts to be used while fulfilling the obligation to inform. In addition, general, vague, incomplete, misleading and incorrect information should not be included.

g) “Purpose of processing” and “legal reason” are separate elements that must be included in the notification to be made to the relevant persons while fulfilling the obligation to inform, and with the phrase “legal reason” for data collection, it is stated on which of the processing conditions specified in Articles 5 and 6 of the Law are processed. It should not be forgotten that it means

h) Privacy policies or data processing policies, which are not limited to the processing activity and are a general data processing document for the data controller, should not be used as clarification texts.

i) Attention should be paid to ensure that the lighting is easily accessible and noticeable, and methods that make it difficult for the relevant persons to access the lighting should not be used.

j) In cases where the transfer of personal data is in question, the purpose of the transfer and the transferred recipient group or groups should also be included in the clarification.

k) If the layered lighting method is preferred, it should be ensured that the basic information (for example, the identity of the data controller and the purpose of the data processing) is presented at the first stage, before the relevant persons are directed to another channel for detailed information, and it should be noted that the referred texts have a content limited to the processing activity.

In this context, data controllers must act in accordance with the Law No. 6698, the Communiqué on the Procedures and Principles to be Complied with the Fulfillment of the Disclosure Obligation, the Board decisions published on the Institution’s website, and the Fulfillment of the Illumination Obligation Guide prepared by our Institution, while fulfilling the obligation to inform.

It is announced to the public with respect.

ANNOUNCEMENT ON EXTENSION OF REGISTRATION TIMES TO VERBIS

With the Union of Chambers and Commodity Exchanges of Turkey (TOBB) regarding the extension of the registration period on the grounds that it is physically closed or the remote / rotational working model is applied, therefore, personal data processing inventory cannot be prepared by the data controllers and the registration obligation to the Data Controllers Registry (Registry) cannot be fulfilled in due time. As a result of the evaluation of the requests submitted to the Authority by various sector representatives, with the Decision of the Personal Data Protection Board dated 23/06/2020 and numbered 2020/482;

The deadline for real and legal person data controllers with more than 50 employees or an annual financial balance sheet total of more than 25 million TL and real and legal person data controllers residing abroad to fulfill their registration obligation to the Registry is 30.09.2020,

The deadline for real and legal person data controllers whose annual number of employees is less than 50 and whose annual financial balance is less than 25 million TL and whose main field of activity is to process sensitive personal data is to fulfill their obligation to register in the Registry, is 31.03.2021,

The deadline determined for the data controllers of public institutions and organizations to fulfill their obligation to register in the Registry is 31.03.2021,

to be extended,

Announcement of the aforementioned decision on the Institution’s website and publication in the Official Gazette.

it was decided unanimously.

It is announced to the public with respect.