KVKK Clarification Text

NOTICE ON THE PROTECTION AND PROCESSING OF PERSONAL DATA

AND CONFIDENTIALITY POLICY

As Sıfır Ayrımcılık DERNEĞİ (hereinafter referred to as the ‘association’), we attach great importance to the processing of the data of our followers, subscribers, participants, stakeholders and employees in accordance with the law. With the Personal Data Protection and Processing Notice (‘Notice’), we aim to ensure compliance of personal data with the national and international legislation in force, in particular the Personal Data Protection Law No. 6698 (‘Law’) and the European Union General Data Protection Regulation (‘GDPR’).

In accordance with the KVKK , in order to securely store the personal dataof the addressee, member, donor, intern, supplier, grantee, training recipient, supported, programme partner and/or association employee/manager and to prevent any unlawful access or leakage to this data, we share the data we will obtain only with our reliable business and solution partners, stakeholders, suppliers, authorised persons, institutions and organisations at a minimum level and take security measures in accordance with the legislation in force.

Our aim is to inform you in the most transparent way about the ways your personal data are collected, the purposes of processing, the persons shared, the legal reasons and your rights in accordance with Article 10 of the Law No. 6698 on the Protection of Personal Data and in line with your satisfaction.

The activities carried out regarding the protection of personal dataof our addressee, member, donor, intern, supplier, visitor, grant recipient, training recipient, supported, programme partner and / or association employee / managers are described in the Zero Discrimination Association’s Addressee Policy, which has been written in parallel with the principles in this Policy , members, donors, interns, suppliers, visitors, grantees, trainees, programme partners are managed under the Personal Data Protection and Processing Policy and Zero Discrimination Association employees and managers are managed under the Personal Data Protection and Processing Policy.

Data security, transparency and individuals’ right to control over their personal data constitute the most important foundations for us in terms of compliance with the Law. In this context, we provide you with detailed information about the processing of your personal data with this Notice.
We reserve the right to make changes to the Notice in order to provide up-to-date information on practices and legal regulations within the framework of personal data protection. However, we will notify data subjects through appropriate channels in the event of material changes to the Notice.

DEFINITIONS

Explicit Consent: Consent on a specific subject, based on information and expressed with free will

Anonymisation: Making personal data impossible to be associated with an identified or identifiable natural person under any circumstances, even by matching with other data

Recipient Group: The category of natural or legal person to whom personal data is transferred by the data controller – Zero Discrimination Association

Employee Association Employees

Electronic Media: Media where personal data can be created, read, changed and written with electronic devices

Non-Electronic Media: All written, printed, visual, etc. media other than electronic media

Service Provider: A natural or legal person who provides services within the framework of a specific contract with the Personal Data Protection Authority

Relevant Person Natural person whose personal data is processed – Zero Discrimination Association

Relevant User: Persons who process personal data within the organisation of the data controller or in accordance with the authority and instructions received from the data controller, except for the person or unit responsible for the technical storage, protection and backup of the data – Zero Discrimination Association

Destruction: Deletion, destruction or anonymisation of personal data

KVKK Law on the Protection of Personal Data dated 24 March 2016 and numbered 6698 published in the Official Gazette dated 7 April 2016 and numbered 29677

Recording Medium: Any medium in which personal data processed by fully or partially automatic means or by non-automatic means provided that it is part of any data recording system

Personal Data: Any information relating to an identified or identifiable natural person

Personal Health Data: Any information relating to the physical and mental health of an identified or identifiable natural person and information about the health service provided to the person

Personal Data Owner: A natural person whose personal data is processed. For example; members, participants and employee candidates

Processing of Personal Data: Any operation performed on personal data such as obtaining, recording, storing, preserving, modifying, reorganising, disclosing, transferring, taking over, making available, classifying or preventing the use of personal data by fully or partially automatic means or by non-automatic means provided that it is part of any data recording system

Personal Data Processing Inventory: Inventory in which data controllers detail the personal data processing activities they carry out depending on their business processes by associating them with the purposes and legal grounds for processing personal data, data category, transferred recipient group and data subject group and by explaining the maximum retention period required for the purposes for which personal data are processed, the personal data foreseen to be transferred to foreign countries and the measures taken regarding data security

Personal Data Protection Board Personal Data Protection Board

KVK Institution: Personal Data Protection Authority

Zero Discrimination Association Suppliers: Parties providing services to Zero Discrimination Association on a contractual basis

Special Categories of Personal Data: Data relating to race, ethnic origin, political opinion, philosophical belief, religion, sect or other beliefs, clothing, membership of associations, foundations or trade unions, health, sexual life, criminal convictions and security measures, and biometric and genetic data

Periodic Destruction: The process of deletion, destruction or anonymisation to be carried out ex officio at recurring intervals specified in the personal data storage and destruction policy in the event that all of the conditions for processing personal data specified in the Law disappear

Policy Personal Data Retention and Destruction Policy

Data Processor: A natural or legal person who processes personal data on behalf of the Data Controller based on the authorisation granted by the Data Controller – Zero Discrimination Association

Data Recording System: The recording system in which personal data is structured and processed according to certain criteria

Data Controller: The natural or legal person who determines the purposes and means of processing Personal Data and manages the place where the data is systematically kept – Zero Discrimination Association

Data Controllers Registry Information System: The information system created and managed by the Presidency, accessible via the internet, which data controllers will use in the application to the Registry and other related transactions related to the Registry

VERBIS Data Controllers Registry Information System

Regulation: Regulation on Deletion, Destruction or Anonymisation of Personal Data published in the Official Gazette dated 28 October 2017

CONTACT PERSONS

Followers, Subscribers, Members and Participants

DATA CATEGORIES

1- Identity Information

Processed Personal Data:

Name – Surname, Date of Birth, Gender, Turkish Identity Number

Personal Data Processing Purposes:

To receive applications for activities such as trainings, meetings, seminars, festivals, corporate coaching, technical support, support point services, printed and online publications, in-kind and cash grants, partnership programmes, research, etc. organised within the framework of the projects carried out and to be carried out by Zero Discrimination Association,
To evaluate the applications made to the Zero Discrimination Association,
To ensure and carry out communication regarding the applications made to the Zero Discrimination Association programmes,
Procuring services from third parties such as travelling and accommodation necessary for the realisation of services within the Association,
Organising/supporting culture and art activities,
Creating grant programmes and partnerships
To ensure the recording of your data in accordance with the Law on Associations and all relevant legislation,
To ensure that activities are carried out in line with the objectives defined by the Zero Discrimination Association Charter
Providing opportunities such as participation, e-bulletin, benefiting from events
Providing information about the services of the Association
To provide the opportunity to benefit from the products, services and opportunities related to the fields of activity of the Association,
To be able to make analyses by evaluating personal data and information in statistical studies without disclosing their identity for the improvement of services
To inform the supporters, contracting authority, stakeholders and supporters of the association and its activities about the contents, opportunities and innovations,
To inform about the information, activities and services requested by the data subject,
To be able to process the personal data, preferences, transactions and browsing time and details of the data subject together with other data obtained from the channels where the data subject logs in using his/her username and password,
Manage application/application,
To ensure the security of personal data maintained by the Association and to transfer the data for preservation for this purpose,
To be able to make notifications (renewal, termination, etc.) regarding all kinds of activities and website memberships (renewal, termination, etc.) carried out by the Zero Discrimination Association and its associated STAKEHOLDERS AND PARTNERS, all kinds of communication that may be established with you, new services and products to be offered, and changes and innovations in personal data policies and communication conditions.

Follow-up and Execution of Legal Affairs
Carrying out activities to ensure the continuity of the Association
Execution and Supervision of Association activities
Execution of Human Relations Management Processes
Execution of Storage and Archive Activities
Execution of Contract and Membership Processes
Follow-up of Requests / Complaints
Planning and Execution of Commercial and/or Business Strategies
Providing Information to Authorised Persons, Institutions and Organisations

2- Contact Information

Processed Personal Data:

E-Mail Address, Billing & Delivery Addresses, Mobile Phone Number

Personal Data Processing Purposes:

To receive applications for activities such as trainings, meetings, seminars, festivals, corporate coaching, technical support, support point services, printed and online publications, in-kind and cash grants, partnership programmes, research, etc. organised within the framework of the projects carried out and to be carried out by Zero Discrimination Association,
To evaluate the applications made to the Zero Discrimination Association,
To ensure and carry out communication regarding the applications made to the Zero Discrimination Association programmes,
Procuring services from third parties such as travelling and accommodation necessary for the realisation of services within the Association,
Organising/supporting culture and art activities,
Creating grant programmes and partnerships
To ensure the recording of your data in accordance with the Law on Associations and all relevant legislation,
To ensure that activities are carried out in line with the objectives defined by the Zero Discrimination Association Charter
Providing opportunities such as participation, e-bulletin, benefiting from events
Providing information about the services of the Association
To provide the opportunity to benefit from the products, services and opportunities related to the fields of activity of the Association,
To be able to make analyses by evaluating personal data and information in statistical studies without disclosing their identity for the improvement of services
To inform the supporters, contracting authority, stakeholders and supporters of the association and its activities about the contents, opportunities and innovations,
To inform about the information, activities and services requested by the data subject,
To be able to process the personal data, preferences, transactions and browsing time and details of the data subject together with other data obtained from the channels where the data subject logs in using his/her username and password,
Manage application/application,
To ensure the security of personal data maintained by the Association and to transfer the data for preservation for this purpose,
To be able to make notifications (renewal, termination, etc.) regarding all kinds of activities and website memberships (renewal, termination, etc.) carried out by the Zero Discrimination Association and its associated STAKEHOLDERS AND PARTNERS, all kinds of communication that may be established with you, new services and products to be offered, and changes and innovations in personal data policies and communication conditions.

Follow-up and Execution of Legal Affairs
Execution of Business Continuity Ensuring Activities
Execution and Supervision of Business Activities
Execution of Human Relations Management Processes
Execution of Storage and Archive Activities
Execution of Contract and Membership Processes
Follow-up of Requests / Complaints
Planning and Execution of Commercial and/or Business Strategies
Providing Information to Authorised Persons, Institutions and Organisations

Legal Grounds for Processing Personal Data

Your personal data within this scope (Identity and Contact Data Zero Discrimination Association for the realisation of the above-mentioned purposes by the relevant legislation and Article 5 of the KVKK;

It is clearly stipulated in the laws and relevant legislation,
Provided that it is directly related to the conclusion or performance of a contract, it is necessary to process personal data of the parties to the contract,
Data processing is mandatory for the establishment, exercise or protection of a right,
It is mandatory for the data controller to fulfil its legal obligation and
Data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject

It is processed based on legal reasons. For cases that do not fall within the scope of the above purposes, your personal data are processed based on your explicit consent specified in the Consent Text.

Methods of Collection of Personal Data:

The above-mentioned personal data (Identity and Contact Data) are collected through telephone calls, customer documents, contracts, job request and information form, order records, e-mail, verbal, written or electronic media, automatic or non-automatic methods.

Personal data may also be collected through other (‘Digital Media’) such as the Company’s websites (‘Site’), software and applications (‘Application’) offered for use on computers or some smart devices, social media accounts (‘Social Media’) managed by persons authorised to provide services on behalf of the Company.

3- Legal Transaction Information

Processed Personal Data:

In case of dispute, information in the case file, dunning notices, information in correspondence with judicial and administrative authorities

Personal Data Processing Purposes:

Follow-up and Execution of Legal Affairs
Execution and Supervision of Association Activities
Providing Information to Authorised Persons, Institutions and Organisations
Execution of Activities in Accordance with the Legislation
Execution of Storage and Archive Activities
Execution of Risk Management Processes
Execution of Contract Processes
Follow-up of Requests / Complaints
Ensuring the Security of Data Controller Operations

Legal Grounds for Processing Personal Data

Your personal data within this scope, in order for the Zero Discrimination Association to fulfil the above-mentioned purposes, as specified in the relevant legislation and Article 5 of the KVKK;

It is mandatory for the data controller to fulfil its legal obligation,
Data processing is mandatory for the establishment, exercise or protection of a right and
Data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject

Data Collection Methods:

The personal data mentioned above are collected through official letters from judicial and administrative authorities and other printed / electronic documents.

4- Transaction Information Participating in Association Activities

Transaction Information

Processed Personal Data:

Invoice, Promissory Note, Cheque Information, Request Information, Comments Participating in Association Activities

Personal Data Processing Purposes:

Execution of Supply Chain Management Processes
Execution and Supervision of Association Activities
Providing Information to Authorised Persons, Institutions and Organisations
Execution of Activities in Accordance with the Legislation
Execution of Finance and Accounting Affairs
Execution of Storage and Archive Activities
Execution of Contract Processes
Execution of Association Relationship Management Processes
Execution of Satisfaction Oriented Activities
Follow-up of Requests / Complaints
Execution of Marketing Processes of Products / Services

Legal Grounds for Processing Personal Data

Your personal data within this scope may be processed by the Zero Discrimination Association for the realisation of the above-mentioned purposes in accordance with the relevant legislation and Article 5 of the KVKK;

Provided that it is directly related to the conclusion or performance of a contract, it is necessary to process personal data of the parties to the contract,
Data processing is mandatory for the establishment, exercise or protection of a right,
It is mandatory for the data controller to fulfil its legal obligation,
Data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject,

Methods of Collection of Personal Data:

The above-mentioned personal data are collected through printed/electronic forms, customer documents, contracts, order records, e-mails, requests on the website, SAP programmes, verbal written or electronic media, automatic or non-automatic methods.

5- Transaction Security Information

Processed Personal Data:

IP Address Information, Website Login and Logout Information, User Name Information, Password Information (Password information is stored encrypted).

Personal Data Processing Purposes:

Execution of Information Security Processes
Conducting Audit / Ethical Activities
Execution and Supervision of Business Activities
Execution of Storage and Archive Activities
Ensuring the Security of Data Controller Operations
Providing Information to Authorised Persons, Institutions and Organisations
Execution of Activities in Accordance with the Legislation
Follow-up and Execution of Legal Affairs
Execution of Goods / Service Sales Processes
Follow-up of Requests / Complaints

Legal Grounds for Processing Personal Data

Your personal data within this scope, for the realisation of the above-mentioned purposes by the Zero Discrimination Association, as specified in the relevant legislation and Article 5 of the KVKK;

It is clearly stipulated in the laws and relevant legislation,
It is mandatory for the data controller to fulfil its legal obligation and
Data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject

Methods of Collection of Personal Data:

The personal data mentioned above are collected through information security systems and electronic devices.

6- Financial Information

Processed Personal Data:

Encrypted Credit Card Information, Bank Account / IBAN Number Information, Credit and Risk Information

Personal Data Processing Purposes:

Execution of Activities in Accordance with the Legislation
Follow-up and Execution of Legal Affairs
Execution of Finance and Accounting Affairs
Execution and Supervision of Association Activities
Execution of Storage and Archive Activities
Execution of Risk Management Processes
Execution of Contract Processes
Authorisation Providing Information to Persons, Institutions and Organisations

Legal Grounds for Processing Personal Data

Provided that it is directly related to the conclusion or performance of a contract, it is necessary to process personal data of the parties to the contract,
It is mandatory for the data controller to fulfil its legal obligation and
Data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject

Methods of Collection of Personal Data:

The above-mentioned personal data are collected through printed and electronic forms, contracts, commitments, e-mails and requests and messages on the website.

7- Physical Space Security

Processed Personal Data:

Camera Recordings

Personal Data Processing Purposes:

Prevention and Monitoring of Anti-Social Behaviour and Criminal Behaviour
Ensuring Physical Space Security
Conducting Internal Audit/Investigation/Intelligence Activities
Execution/Supervision of Association Activities
Ensuring the Security of Movable Property and Resources
Ensuring the Security of Data Controller Operations
Fulfilment of Legal Obligations / Exercise of Rights Arising from Legislation in Force
Providing Information to Authorised Persons, Institutions and Organisations

Legal Grounds for Processing Personal Data

Your personal data within this scope, for the realisation of the above-mentioned purposes by the Zero Discrimination Association, as specified in the relevant legislation and Article 5 of the KVKK;

It is clearly stipulated in the laws and relevant legislation,
It is mandatory for the data controller to fulfil its legal obligation and
Data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject

are processed on the basis of legal reasons. For cases that do not fall within the scope of the above purposes, your personal data are processed based on your explicit consent specified in the Consent Text.

Methods of Collection of Personal Data:

The above-mentioned personal data are collected at the premises of our company through a closed circuit camera system.

8- Visual and Audio Recordings

Processed Personal Data: Voice Recordings

Personal Data Processing Purposes:

Execution of Human Relations Management Processes
Carrying out activities for the satisfaction of those who participate in the activities of the Association
Execution of Human Relations Management Processes
Execution of Communication Activities
Execution of Storage and Archive Activities
Follow-up of Requests / Complaints
Execution of Marketing Processes of Products / Services
Conducting Marketing Analysis Studies

Legal Grounds for Processing Personal Data

Data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject

Methods of Collection of Personal Data:

The above-mentioned personal data are collected through electronic systems specialised for this purpose.

Transfer of Personal Data

Personal data belonging to individuals are transferred only to the extent necessary for the realisation of the relevant purpose, by complying with the rules in Article 8 of the KVKK titled ‘Transfer of Personal Data’ and by taking the necessary technical and administrative measures;

To our subsidiaries and affiliates limited to the above-mentioned purposes,

Again, within the scope of the contracts between us for the above-mentioned purposes, in accordance with the legislation (for the shipment of the product), the seller of the purchased product, (for the delivery of the product) cargo companies, (for the delivery of the product) banks (in order to receive the payment for the product) and (to provide information on delivery, etc.) to our business partners working in bulk SMS / e-mail delivery and (for after-sales services when necessary) to our suppliers and product authorised services,

In order to fulfil our legal obligations, it can be transferred to authorised persons and official institutions in accordance with legal regulations and legislation; and

It may be recorded in our programmes and/or systems provided by our infrastructure suppliers in the field of technology / offered for our use.

In the context of Article 9 of the Law on the Protection of Personal Data, your personal data is not transferred abroad.

B) Prospective Employees, Contacts and Members;

DATA CATEGORIES

1- Identity Information

Processed Personal Data:

Name – Surname, T.R. ID No, Marital Status, Date of Birth, Place of Birth, Signature

Personal Data Processing Purposes:

Execution of Employee Candidate/Intern/Student Selection, Placement and Application Processes
Execution of Activities in Accordance with the Legislation
Execution of Communication Activities
Planning Human Resources Policies and Processes
Planning Human Resources Processes
Execution of Business Activities
Execution of Storage and Archive Activities
Execution of Contract Processes
Ensuring the Security of Data Controller Operations

Legal Grounds for Processing Personal Data

Your personal data within this scope are processed by Zero Discrimination Association for the realisation of the above-mentioned purposes as specified in the relevant legislation and Article 5 of the KVKK;

Provided that it is directly related to the conclusion or performance of a contract, it is necessary to process personal data of the parties to the contract; and
Data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject

Methods of Collection of Personal Data:

The above-mentioned personal data are collected through CVs sent to our Company via e-mail, job application forms and Private Employment Agencies (İŞKUR, Kariyer.net etc.) and other channels (LinkedIn etc.).

2- Contact Information

Processed Personal Data:

E-Mail Address, Contact Address, Mobile Phone Number

Personal Data Processing Purposes:

Execution of Selection, Placement and Application Processes of Employee Candidates
Execution of Communication Activities
Planning Human Resources Policies and Processes
Execution of Business Activities
Execution of Contract Processes

Legal Grounds for Processing Personal Data

Your personal data within this scope are processed by the Zero Discrimination Association for the realisation of the above-mentioned purposes in accordance with the relevant legislation and Article 5 of the KVKK;

Provided that it is directly related to the conclusion or performance of a contract, it is necessary to process personal data of the parties to the contract; and
Data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject

Methods of Collection of Personal Data:

3- Personal Information

Processed Personal Data:

Military Service Status, Reference Information, Curriculum Vitae Information, Payroll Information, Work History Information, Disciplinary Investigation, Performance Evaluation Reports

Personal Data Processing Purposes:

Execution of Selection, Placement and Application Processes of Employee Candidates
Execution of Business Activities
Execution of Contract Processes
Execution of Wage Policy
Planning Human Resources Policies and Processes

Legal Grounds for Processing Personal Data

Your personal data within this scope may be processed by the Zero Discrimination Association for the realisation of the above-mentioned purposes as specified in the relevant legislation and Articles 5 and 6 of the KVKK;

Provided that it is directly related to the conclusion or performance of a contract, it is necessary to process personal data of the parties to the contract,
Data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject; and
Explicit consent for reference information in the CV

Methods of Collection of Personal Data:

4- Professional Experience Information

Processed Personal Data:

Educational Background and Details, Employment Background and Details, Diploma Information, Foreign Language Information, Computer Usage Information, Position/Title Information

Personal Data Processing Purposes:

Execution of Selection, Placement and Application Processes of Employee Candidates
Planning Human Resources Policies and Processes
Execution of Business Activities
Execution of Contract Processes
Ensuring the Security of Data Controller Operations

Legal Grounds for Processing Personal Data

Provided that it is directly related to the conclusion or performance of a contract, it is necessary to process personal data of the parties to the contract; and
Data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject

Methods of Collection of Personal Data:

The above-mentioned personal data are collected through CVs sent to our Company via e-mail, job application forms and Private Employment Agencies (İŞKUR, Kariyer.net etc.), other channels (LinkedIn etc.) and your declarations.

5- Health Information

Processed Personal Data:

Disability Status, Blood Type Information, Personal Health Information, Used Device and Prosthesis Information, Smoking Information, Psychotechnical Driving Licence

Personal Data Processing Purposes:

Execution of Selection, Placement and Application Processes of Employee Candidates
Conducting Audit and Ethics Activities
Planning Human Resources Policies and Processes
Execution of Business Activities
Protection of Public Health, Preventive Medicine, Medical Diagnosis, Treatment and Care Services
Planning and Management of Health Services and Financing

Legal Grounds for Processing Personal Data

Your personal data within this scope may be used by the Zero Discrimination Association for the realisation of the above-mentioned purposes as specified in the relevant legislation and Article 6 of the KVKK;

Obtaining explicit consent
Provided that it is directly related to the conclusion or performance of a contract, it is necessary to process personal data of the parties to the contract,
It is mandatory for the data controller to fulfil its legal obligation and
Data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject

It is processed based on the legal reason.

Methods of Collection of Personal Data:

6- Criminal Conviction Information

Processed Personal Data:

Criminal Record Information, Criminal Status Information

Personal Data Processing Purposes:

Execution of Employee Candidate/Intern/Student Selection, Placement and Application Processes
Execution of Employee Candidate Application Processes
Planning Human Resources Policies and Processes
Execution of Activities in Accordance with the Legislation
Planning Human Resources Processes
Execution of Business Activities
Execution of Storage and Archive Activities
Execution of Contract Processes
Execution of Communication Activities
Ensuring the Security of Data Controller Operations

Legal Grounds for Processing Personal Data

Obtaining explicit consent
Provided that it is directly related to the conclusion or performance of a contract, it is necessary to process personal data of the parties to the contract,
It is mandatory for the data controller to fulfil its legal obligation and
Data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject

It is processed based on the legal reason.

Methods of Collection of Personal Data:

7- Dress Code Information

Processed Personal Data:

Height-Weight Information, Dress Code Information

Personal Data Processing Purposes:

Execution of Selection, Placement and Application Processes of Employee Candidates
Conducting Audit and Ethics Activities
Planning Human Resources Policies and Processes
Execution/Supervision of Business Activities
Execution of Occupational Health/Safety Activities

Legal Grounds for Processing Personal Data

Obtaining Explicit Consent

It is processed based on the legal reason.

Methods of Collection of Personal Data:

8- Audio and Visual Records

Processed Personal Data:

Voice Recordings

Personal Data Processing Purposes:

Execution of Association Relationship Management Processes
Execution of Satisfaction Oriented Activities
Execution of Goods / Services After Sales Support Services
Execution of Association Relationship Management Processes
Execution of Communication Activities
Execution of Storage and Archive Activities
Follow-up of Requests / Complaints
Execution of Marketing Processes of Products / Services
Conducting Marketing Analysis Studies

Legal Grounds for Processing Personal Data

Data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject

Methods of Collection of Personal Data:

The above-mentioned personal data are collected through electronic systems specialised for this purpose.

9- Physical Space Security

Processed Personal Data:

Camera Recordings

Personal Data Processing Purposes:

Prevention and Monitoring of Anti-Social Behaviour and Criminal Behaviour
Ensuring Physical Space Security
Conducting Internal Audit/Investigation/Intelligence Activities
Execution/Supervision of Business Activities
Ensuring the Security of Movable Property and Resources
Ensuring the Security of Data Controller Operations
Fulfilment of Legal Obligations / Exercise of Rights Arising from Legislation in Force
Providing Information to Authorised Persons, Institutions and Organisations

Legal Grounds for Processing Personal Data

Your personal data within this scope may be used by the Zero Discrimination Association for the realisation of the above-mentioned purposes in accordance with the relevant legislation and Article 5 of the KVKK;

It is clearly stipulated in the laws and relevant legislation,
It is mandatory for the data controller to fulfil its legal obligation and
Data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject

Methods of Collection of Personal Data:

The above-mentioned personal data are collected at the premises of our Company through a closed circuit camera system.

10-Other

Processed Personal Data:

Driver Licence Information, SRC

Personal Data Processing Purposes:

Conducting Audit / Ethical Activities
Execution of Activities in Accordance with the Legislation
Execution of Assignment Processes
Execution of Occupational Health/Safety Activities
Execution and Supervision of Business Activities
Ensuring the Security of Data Controller Operations

Legal Grounds for Processing Personal Data

It is clearly stipulated in the laws and relevant legislation,
Provided that it is directly related to the conclusion or performance of a contract, it is necessary to process personal data of the parties to the contract; and
Data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject

It is processed based on legal reasons.

Methods of Collection of Personal Data:

Transfer of Personal Data

Personal data belonging to employee candidates shall be transferred only to the extent necessary for the realisation of the relevant purpose, by complying with the rules in Article 8 of the KVKK titled ‘Transfer of Personal Data’ and by taking the necessary technical and administrative measures;

C) Programme Partner Authorities, Stakeholders, Suppliers, Supplier Authorities and Supplier Employees, Institutions and Organisations, Solution Partners and Donors;

DATA CATEGORIES

1- Identity Information

Processed Personal Data:

Name – Surname, T.R. Identity Number, Photocopy of Identity Card

Personal Data Processing Purposes:

Execution of Communication Activities
Execution and Supervision of Association Activities
Planning and Execution of Strategies
Follow-up of Requests / Complaints
Providing Information to Authorised Persons, Institutions and Organisations
Execution of Association Activities in accordance with the Legislation
Execution of Contract Processes

Legal Grounds for Processing Personal Data

Your personal data within this scope, for the realisation of the above-mentioned purposes by the Zero Discrimination Association, as specified in the relevant legislation and Article 5 of the KVKK;

It is clearly stipulated in the laws and relevant legislation,
Provided that it is directly related to the conclusion or performance of a contract, it is necessary to process personal data of the parties to the contract,
It is mandatory for the data controller to fulfil its legal obligation and
Data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject

Methods of Collection of Personal Data:

The personal data mentioned above are collected through business cards, contracts, face-to-face interviews and electronic forms.

2- Contact Information

Processed Personal Data:

E-Mail Address, Mobile Phone Number, Address

Personal Data Processing Purposes:

Execution of Communication Activities
Execution and Supervision of Association Activities
Planning and Execution of Training and Programme Strategies Conducted within the scope of the Association
Follow-up of Requests / Complaints
Providing Information to Authorised Persons, Institutions and Organisations
Execution of Activities in Accordance with the Legislation
Execution of Contract Processes

Legal Grounds for Processing Personal Data

Your personal data within this scope, for the realisation of the above-mentioned purposes by the Zero Discrimination Association, as specified in the relevant legislation and Article 5 of the KVKK;

It is clearly stipulated in the laws and relevant legislation,
Provided that it is directly related to the conclusion or performance of a contract, it is necessary to process personal data of the parties to the contract,
It is mandatory for the data controller to fulfil its legal obligation and
Data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject

Methods of Collection of Personal Data:

The personal data mentioned above are collected through business cards, contracts and face-to-face interviews.

3- Transaction Information

Processed Personal Data:

Request Information

Personal Data Processing Purposes:

Execution and Supervision of Association Activities
Providing Information to Authorised Persons, Institutions and Organisations
Execution of Activities in Accordance with the Legislation
Execution of Storage and Archive Activities
Execution of Contract Processes

Legal Grounds for Processing Personal Data

Your personal data within this scope, for the realisation of the above-mentioned purposes by the Zero Discrimination Association, as specified in the relevant legislation and Article 5 of the KVKK;

It is clearly stipulated in the laws and relevant legislation,
Provided that it is directly related to the conclusion or performance of a contract, it is necessary to process personal data of the parties to the contract; and
It is mandatory for the data controller to fulfil its legal obligation

Methods of Collection of Personal Data:

The personal data mentioned above are collected through printed / electronic forms, e-mails, contracts, SAP programmes.

4- Financial Information

Processed Personal Data:

Bank Account / IBAN Number Information, Invoice Information Request Information

Personal Data Processing Purposes:

Execution of Finance and Accounting Affairs
Execution and Supervision of Association Activities
Execution of Activities in Accordance with the Legislation
Execution of Risk Management Processes
Providing Information to Authorised Persons, Institutions and Organisations

Legal Grounds for Processing Personal Data

Your personal data within this scope, for the realisation of the above-mentioned purposes by the Zero Discrimination Association, as specified in the relevant legislation and Article 5 of the KVKK;

It is clearly stipulated in the laws and relevant legislation,
Provided that it is directly related to the conclusion or performance of a contract, it is necessary to process personal data of the parties to the contract; and
It is mandatory for the data controller to fulfil its legal obligation

Methods of Collection of Personal Data:

The above-mentioned personal data are collected through printed / electronic forms, contracts, undertakings and SAP programmes.

5- Legal Transaction Information

Processed Personal Data:

In case of dispute, information in the case file, dunning notices, information in correspondence with judicial and administrative authorities

Personal Data Processing Purposes:

Follow-up and Execution of Legal Affairs
Execution and Supervision of Association Activities
Providing Information to Authorised Persons, Institutions and Organisations
Execution of Activities in Accordance with the Legislation
Execution of Storage and Archive Activities
Execution of Contract Processes
Follow-up of Requests / Complaints

Legal Grounds for Processing Personal Data

Your personal data within this scope, for the realisation of the above-mentioned purposes by the Zero Discrimination Association, as specified in the relevant legislation and Article 5 of the KVKK;

It is clearly stipulated in the laws and relevant legislation,
It is mandatory for the data controller to fulfil its legal obligation and
Data processing is mandatory for the establishment, exercise or protection of a right

Methods of Collection of Personal Data:

The personal data mentioned above are collected through official letters from judicial and administrative authorities and other printed / electronic documents.

6- Location Information

Processed Personal Data:

Location Information

Personal Data Processing Purposes:

Execution of Relationship Management Processes
Execution of Activities for Participant Satisfaction
Execution of Training and Programme Processes Conducted within the scope of the Association
Execution of Goods / Service Sales Processes
Execution of Supply Chain Management Processes

Legal Grounds for Processing Personal Data

Data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject

Methods of Collection of Personal Data:

The personal data mentioned above are collected according to your preference in the internet browser you use and in our Company’s mobile application.

7-Visual and Audio Recordings

Processed Personal Data:

Voice Recordings

Personal Data Processing Purposes:

Execution of Internal Relations Management Processes
Conducting Activities for the Satisfaction of the Training and Programmes Conducted within the Scope of the Association
Execution of Support Services after Trainings
Execution of Communication Activities
Execution of Storage and Archive Activities
Follow-up of Requests / Complaints

Legal Grounds for Processing Personal Data

Data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject

Methods of Collection of Personal Data:

The above-mentioned personal data are collected through electronic systems specialised for this purpose.

8-Physical Space Security

Processed Personal Data:

Camera Recordings

Personal Data Processing Purposes:

Prevention and Monitoring of Anti-Social Behaviour and Criminal Behaviour
Ensuring Physical Space Security
Conducting Internal Audit/Investigation/Intelligence Activities
Execution/Supervision of Association Activities
Ensuring the Security of Movable Property and Resources
Ensuring the Security of Data Controller Operations
Fulfilment of Legal Obligations / Exercise of Rights Arising from Legislation in Force
Providing Information to Authorised Persons, Institutions and Organisations

Legal Grounds for Processing Personal Data

Your personal data within this scope, for the realisation of the above-mentioned purposes by the Zero Discrimination Association, as specified in the relevant legislation and Article 5 of the KVKK;

It is clearly stipulated in the laws and relevant legislation,
It is mandatory for the data controller to fulfil its legal obligation and
Data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject

Methods of Collection of Personal Data:

The above-mentioned personal data are collected in our company’s premises through a closed circuit camera system.

Transfer of Personal Data

Personal data belonging to business partner officials and employees are transferred only to the extent necessary for the realisation of the relevant purpose, by complying with the rules in Article 8 titled ‘Transfer of Personal Data’ or Article 9 titled ‘Transfer of Personal Data Abroad’ of the KVKK and by taking the necessary technical and administrative measures;

In order to fulfil our legal obligations, it can be transferred to authorised persons and official institutions in accordance with legal regulations and legislation; and

It may be recorded in our programmes and/or systems provided / made available to us by our infrastructure suppliers in the field of technology.

D) Grant Recipients, Supported, Trained and Trainees

DATA CATEGORIES

1- Identity Information

Processed Personal Data:

Name – Surname, T.R. Identity Number, Signature Circular, Signature, Photocopy of Identity Card

Personal Data Processing Purposes:

Execution of Activities in Accordance with the Legislation
Execution of Finance and Accounting Affairs
Follow-up and Execution of Legal Affairs
Execution of Internal Audit Activities
Execution of Communication Activities
Execution of Risk Management Processes
Execution of Contract Processes
Follow-up of Requests / Complaints
Execution of Supply Chain Management Processes
Providing Information to Authorised Persons, Institutions and Organisations

Legal Grounds for Processing Personal Data

Provided that it is directly related to the conclusion or performance of a contract, it is necessary to process personal data of the parties to the contract,
It is mandatory for the data controller to fulfil its legal obligation and
Data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject

Methods of Collection of Personal Data:

The personal data mentioned above are collected through business cards, printed / electronic forms, call centre records, contracts, undertakings, e-mails, reports, SAP programmes and face-to-face interviews.

2- Contact Information

Processed Personal Data:

E-Mail Address, Contact Address, Mobile Phone Number

Personal Data Processing Purposes:

Execution of Finance and Accounting Affairs
Execution of Communication Activities
Execution of Contract Processes
Follow-up of Requests / Complaints
Execution of Management Activities

Legal Grounds for Processing Personal Data

Provided that it is directly related to the conclusion or performance of a contract, it is necessary to process personal data of the parties to the contract,
It is mandatory for the data controller to fulfil its legal obligation and
Data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject

Methods of Collection of Personal Data:

3- Legal Transaction Information

Processed Personal Data:

Information in Correspondence with Judicial Authorities, Information in Correspondence with Administrative Authorities, Information in Case File in Case of Dispute, Dunning Notices

Personal Data Processing Purposes:

Follow-up and Execution of Legal Affairs
Execution of Internal Audit Activities
Execution of Risk Management Processes
Ensuring the Security of Data Controller Operations
Providing Information to Authorised Persons, Institutions and Organisations

Legal Grounds for Processing Personal Data

Your personal data within this scope, in order for the Zero Discrimination Association to fulfil the above-mentioned purposes, as specified in the relevant legislation and Article 5 of the KVKK;

It is mandatory for the data controller to fulfil its legal obligation and
Data processing is mandatory for the establishment, exercise or protection of a right

Methods of Collection of Personal Data:

The personal data mentioned above are collected through official letters from judicial and administrative authorities and other printed / electronic documents.

4- Transaction Information

Processed Personal Data:

Request Information,

Personal Data Processing Purposes:

Follow-up and Execution of Legal Affairs
Execution of Internal Audit Activities
Execution of Communication Activities
Execution of Association Activities
Execution of Management Processes of Internal and Visitor, Grant Recipient, Supported, Trained and Trainee Relations
Execution of Risk Management Processes
Follow-up of Requests / Complaints

Legal Grounds for Processing Personal Data

Provided that it is directly related to the conclusion or performance of a contract, it is necessary to process personal data of the parties to the contract,
It is mandatory for the data controller to fulfil its legal obligation and
Data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject

Methods of Collection of Personal Data:

The personal data mentioned above are collected through printed / electronic forms, call centre records, e-mails, SAP programmes and face-to-face interviews.

5- Transaction Security Information

Processed Personal Data:

IP Address Information, Device MAC Address, User Name, Password and Passcode Information (Password and Passcode information is stored encrypted).

Personal Data Processing Purposes:

Execution of Information Security Processes
Conducting Audit / Ethical Activities
Prevention and Monitoring of Anti-Social Behaviour and Criminal Behaviour
Supervision of Association Activities
Execution of Risk Management Processes
Execution of Storage and Archive Activities
Ensuring the Security of Data Controller Operations

Legal Grounds for Processing Personal Data

Your personal data within this scope, in order for the Zero Discrimination Association to fulfil the above-mentioned purposes, as specified in the relevant legislation and Article 5 of the KVKK;

It is clearly stipulated in the laws and relevant legislation and
It is mandatory for the data controller to fulfil its legal obligation

Methods of Collection of Personal Data:

The personal data mentioned above are collected through information security systems and electronic devices.

6- Financial Information

Processed Personal Data:

Invoice Information, Bank Account Information, Current Account Information

Personal Data Processing Purposes:

Conducting Audit / Ethics Activities
Execution of Activities in Accordance with the Legislation
Execution of Finance and Accounting Affairs
Execution / Supervision of Association Activities
Execution of Contract Processes
Execution of Supply, Partnership Chain Management Processes
Execution of Management Activities

Legal Grounds for Processing Personal Data

Your personal data within this scope, for the realisation of the above-mentioned purposes by the Zero Discrimination Association, as specified in the relevant legislation and Article 5 of the KVKK;

Explicitly stipulated in the laws and relevant legislation
Provided that it is directly related to the conclusion or performance of a contract, it is necessary to process personal data of the parties to the contract; and
It is mandatory for the data controller to fulfil its legal obligation

Methods of Collection of Personal Data:

The above-mentioned personal data are collected through printed / electronic forms, contracts, undertakings and SAP programmes.

7- Vehicle Information

Processed Personal Data:

Vehicle Licence Plate Information

Personal Data Processing Purposes:

Prevention and Monitoring of Anti-Social Behaviour and Criminal Behaviour
Conducting Internal Audit/Investigation/Intelligence Activities
Execution/Supervision of Association Activities
Ensuring the Security of Movable Property and Resources
Ensuring the Security of Data Controller Operations
Fulfilment of Legal Obligations / Exercise of Rights Arising from Legislation in Force
Providing Information to Authorised Persons, Institutions and Organisations

Legal Grounds for Processing Personal Data

Data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject

Methods of Collection of Personal Data:

The above-mentioned personal data are obtained at the premises of our Company through the closed circuit camera system or through your verbal or written declarations.

8- Visual and Audio Recordings

Processed Personal Data: Voice Recordings

Personal Data Processing Purposes:

Execution of Association Relationship Management Processes
Execution of Satisfaction Oriented Activities
Execution of Communication Activities
Execution of Storage and Archive Activities
Follow-up of Requests / Complaints
Execution of Analysis Studies

Legal Grounds for Processing Personal Data

Data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject

Methods of Collection of Personal Data:

The above-mentioned personal data are collected through electronic systems specialised for this purpose.

9- Physical Space Security

Processed Personal Data:

Camera Recordings

Personal Data Processing Purposes:

Prevention and Monitoring of Anti-Social Behaviour and Criminal Behaviour
Ensuring Physical Space Security
Conducting Internal Audit/Investigation/Intelligence Activities
Execution/Supervision of Association Activities
Ensuring the Security of Movable Property and Resources
Ensuring the Security of Data Controller Operations
Fulfilment of Legal Obligations / Exercise of Rights Arising from Legislation in Force
Providing Information to Authorised Persons, Institutions and Organisations

Legal Grounds for Processing Personal Data

Your personal data within this scope, for the realisation of the above-mentioned purposes by the Zero Discrimination Association, as specified in the relevant legislation and Article 5 of the KVKK;

It is clearly stipulated in the laws and relevant legislation,
It is mandatory for the data controller to fulfil its legal obligation and
Data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject

Methods of Collection of Personal Data:

The above-mentioned personal data are collected at the premises of our Company through a closed circuit camera system.

Transfer of Personal Data

Personal data belonging to the officials of the supplier shall be transferred only to the extent necessary for the realisation of the relevant purpose, by complying with the rules in Article 8 titled ‘Transfer of Personal Data’ or Article 9 titled ‘Transfer of Personal Data Abroad’ of the KVKK and by taking the necessary technical and administrative measures;

To affiliates and subsidiaries limited to the purposes listed above and to our business partners in accordance with the legislation within the scope of the contracts between us,

In order to fulfil our legal obligations, it can be transferred to authorised persons and official institutions in accordance with legal regulations and legislation; and

It may be recorded in our programmes and/or systems provided / made available to us by our infrastructure suppliers in the field of technology.

E) Visitors

Data Categories

1- Identity and Contact Details

Processed Personal Data:

Name-Surname, T.R. Identity Number, Identification information of the institution on behalf of which you made a visit, Title, Telephone number

Personal Data Processing Purposes:

Execution of Communication Activities
Execution of Activities in Accordance with the Legislation
Physical Space Security
Execution of Communication Activities
Follow-up of Requests / Complaints
Ensuring the Security of Data Controller Operations
Providing Information to Authorised Persons, Institutions and Organisations
Creating and Tracking Visitor Records

Legal Grounds for Processing Personal Data

Data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject

Methods of Collection of Personal Data:

The above-mentioned personal data are collected by our company through your verbal or written declarations on your identity document.

2- Physical Space Security

Processed Personal Data:

Camera Recordings

Personal Data Processing Purposes:

Prevention and Monitoring of Anti-Social Behaviour and Criminal Behaviour
Ensuring Physical Space Security
Conducting Internal Audit/Investigation/Intelligence Activities
Execution/Supervision of Association Activities
Ensuring the Security of Movable Property and Resources
Ensuring the Security of Data Controller Operations
Fulfilment of Legal Obligations / Exercise of Rights Arising from Legislation in Force
Providing Information to Authorised Persons, Institutions and Organisations

Legal Grounds for Processing Personal Data

Your personal data within this scope, for the realisation of the above-mentioned purposes by the Zero Discrimination Association, as specified in the relevant legislation and Article 5 of the KVKK;

It is clearly stipulated in the laws and relevant legislation,
It is mandatory for the data controller to fulfil its legal obligation and
Data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject

Methods of Collection of Personal Data:

The above-mentioned personal data are collected visually by means of a closed circuit camera system in the premises of our company.

3- Vehicle Information

Processed Personal Data:

Vehicle Licence Plate Information

Personal Data Processing Purposes:

Prevention and Monitoring of Anti-Social Behaviour and Criminal Behaviour
Conducting Internal Audit/Investigation/Intelligence Activities
Execution/Supervision of Association Activities
Ensuring the Security of Movable Property and Resources
Ensuring the Security of Data Controller Operations
Fulfilment of Legal Obligations / Exercise of Rights Arising from Legislation in Force
Providing Information to Authorised Persons, Institutions and Organisations

Legal Grounds for Processing Personal Data

Data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject

Methods of Collection of Personal Data:

The above-mentioned personal data are collected at the premises of our company, through the closed circuit camera system, through your verbal or written statements.

4-Visual and Audio Recordings

Processed Personal Data: Voice Recordings

Personal Data Processing Purposes:

Execution of Visitor – Association Relationship Management Processes
Carrying out activities for the satisfaction of visitors, exhibitors, suppliers and co-operators
Execution of Support Services After Trainings and Programmes
Execution of Human Relations Management Processes
Execution of Communication Activities
Execution of Storage and Archive Activities
Follow-up of Requests / Complaints

Legal Grounds for Processing Personal Data

Data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject

Methods of Collection of Personal Data:

The above-mentioned personal data are collected through electronic systems specialised for this purpose.

5- Transaction Security Information

Processed Personal Data:

IP Address Information, Device Mac Address (Password information is stored encrypted.)

Purposes of Personal Data Processing:

Method and Legal Grounds for Collection of Personal Data

The Zero Discrimination Association will collect your personal data,

Training Application and Registration Forms
Seminar, Meeting Application and Registration Forms
Grant Scheme Application and Registration Forms
Support Point Request Forms
Zero Discrimination Association Websites Contact Forms
Zero Discrimination Association Websites Cookies
Zero Discrimination Association Websites E-Bulletin Registration Forms
Job Application Forms
Internship Application Forms
Volunteering Forms
Applications and forms for participation in online programmes used by Zero Discrimination Association for training and meetings
Services of third parties (Zoom, GoToWebinar, Google Meet, etc.) used for online meetings, conferences and training
Other forms with similar purpose
Execution of Information Security Processes
Conducting Audit / Ethical Activities
Execution of Access Authorisations
Execution of Activities in Accordance with the Legislation
Execution and Supervision of Association Activities
Execution of Storage and Archive Activities
Ensuring the Security of Data Controller Operations
Providing Information to Authorised Persons, Institutions and Organisations
Execution of Activities in Accordance with the Legislation
Follow-up and Execution of Legal Affairs
Follow-up of Requests / Complaints

Legal Reasons for Personal Data Processing;

Your personal data within this scope, for the realisation of the above-mentioned purposes by the Zero Discrimination Association, as specified in the relevant legislation and Article 5 of the KVKK;

It is clearly stipulated in the laws and relevant legislation,
It is mandatory for the data controller to fulfil its legal obligation and
Data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject

Methods of Collection of Personal Data:

The personal data mentioned above are collected through information security systems and electronic devices.

TRANSFER OF PERSONAL DATA

Your processed personal data may be transferred to our solution partners, affiliates and affiliated group companies, legally authorised public institutions and private persons within the framework of the personal data processing conditions and purposes specified in Articles 8 and 9 of the Law in order to manage access records, fulfil our obligations arising from the legislation and ensure the security of our Company’s premises.

Pursuant to Articles 8 and 9 of the LPPD Pursuant to Articles 8 and 9 of the LPPD, your personal data may be transferred to third parties (program partners, cooperating institutions, suppliers, contracting authority, association managers/employees, association economic enterprises, online service providers with headquarters in Turkey or abroad such as Google, Microsoft, Digital Ocean), legally competent public institutions and organisations (legally competent private law persons or foreign countries), institutions and organisations to which the contracting authority is affiliated, within the framework of the above-mentioned purposes, within the framework of the Personal Data processing conditions and purposes for the continuation of the activities of the Zero Discrimination Association.

Personal data are transferred to the Contracting Authorities for reporting purposes within the categories mentioned above and within the scope of the projects carried out. The Contracting Authority may be resident in Turkey or abroad. Personal data obtained from the activities within the scope of the projects carried out with the financing of the European Commission are transferred to the Delegation of the European Union to Turkey and the European Commission, Directorate General for Neighbourhood and Enlargement Negotiations. These data are processed in accordance with the European Union General Data Protection Regulation. The clarification text can be accessed at https://ec.europa.eu/europeaid/prag/annexes.do?chapterTitleCode=A. With the KVKK Consent Declaration, consent is also given to this text.

STORAGE OF PERSONAL DATA

Our Company has established a Storage and Destruction Policy for the storage and deletion of personal data. Storage and destruction procedures regarding your personal data are carried out within the scope of this Policy. Accordingly, if a period of time is specified for the storage of data in the KVKK or in the relevant laws and other relevant legislation, the data in question must be kept for at least this period. In this context, if there are statute of limitations related to legal obligations regarding the personal data processing activity, it is taken into consideration. In the event that the purpose of personal data processing disappears, the data is periodically deleted, destroyed or anonymised in accordance with our ‘Policy on Deletion, Destruction or Anonymisation of Personal Data’ unless there is another legal reason or basis that allows the retention of personal data.

PERSONAL DATA PROCESSING PRINCIPLES

To act in accordance with the law and honesty rules
Accuracy and timeliness
Processing data for specific, explicit and legitimate purposes
To be relevant, limited and proportionate to the purpose for which personal data are processed
Our basic principles regarding our personal data processing activities are to keep your personal data for the period stipulated in the relevant legislation or required for the relevant purpose.

use of cookies

As a company, we use some technologies such as cookies, pixels, gifs (‘Cookies’) to improve your experience during your visits to our online channels. The use of these technologies is carried out in accordance with the legislation we are subject to, especially the Law and GDPR.

For detailed information about cookies, we kindly ask you to review the Cookie Clarification Text on our website (http://www.sifirayrimcilik.org/).

USE OF DIGITAL MEDIA

Your personal data obtained during your use of digital media may be processed for the purposes of operating and managing the site, conducting studies to improve and develop the user experience related to the site and application, tracking the ways in which the site is used, ensuring and supporting the use of location-oriented tools, managing your online accounts, if any, and informing you about the services available in your location. If you wish to benefit from the products or services offered within the scope of the application, your personal data will be processed only for the limited purpose of ensuring that you benefit from such products or services.

RIGHTS OF DATA SUBJECTS

According to Article 11 of the Law, data subjects have the following rights against the data controller

To learn whether personal data about him/her is being processed or not
To request information if personal data related to him/her has been processed
To learn the purpose of processing personal data and whether they are used in accordance with their purpose
To know the third parties to whom personal data are transferred domestically or abroad
To request correction of personal data in case of incomplete or incorrect processing
To request the deletion or destruction of personal data within the framework of the conditions stipulated in the relevant legislation
To request notification of the transactions made as a result of correction, deletion and destruction requests to third parties to whom personal data are transferred
To object to the occurrence of a result to the detriment of the person himself/herself by analysing the processed data exclusively through automated systems
In case of damage due to unlawful processing of personal data, you have the right to demand compensation for the damage.

EXERCISE OF RIGHTS BY DATA SUBJECTS

We respond to data subjects who wish to exercise such rights within the limits stipulated in the Law as soon as possible and within a maximum of thirty days as stipulated in the Law. In order for third parties to make an application request on your behalf, you must have a special power of attorney issued through a notary public on behalf of the person who will make the application.

Although your applications are processed free of charge as a rule, if a fee tariff is stipulated by the Personal Data Protection Board, a fee may be charged based on this tariff. In order to determine whether the applicant is the data subject, we may request information from the relevant person, and in order to clarify the matters specified in the application, we may ask the data subject questions about his/her application.

APPLICATION

You can submit your applications and requests regarding your personal data by using the Relevant Person Application Form;

After the application form is filled in, you can send a wet signed copy by registered mail (Nisbetiye mah. Fecri ebcioğlu sokak. Köşe apt. No:31 apartment :3 1. Levent /Istanbul ) by forwarding to the address,
After the application form is filled in and signed with your ‘secure electronic signature’ within the scope of the Electronic Signature Law No. 5070, by sending the form with secure electronic signature to the KEP([email protected] ) address via registered e-mail,
By applying in person with a document certifying the identity of the applicant and information and documents related to the subject of the application
You can make your application by sending the application form by using the e-mail address previously notified to the Company and registered in the Company’s system.

Pursuant to the Communiqué on the Procedures and Principles of Application to the Data Controller, it is obligatory to include the name – surname, signature if the application is in writing, T.R. identification number (passport number if the applicant is a foreigner), residential or workplace address for notification, e-mail address for notification, telephone number and fax number, and information on the subject of the request.

The data subject must clearly and comprehensibly state the requested matter in the application, which will be made by the data subject to exercise the above-mentioned rights and includes explanations regarding the right he/she requests to exercise. Information and documents related to the application must be attached to the application.

Your requests for your rights regarding your personal data are evaluated and answered within 30 days at the latest from the date of receipt by our Company. In the event that your application is evaluated negatively, the reasons for the reasoned rejection will be sent to you by e-mail or post to the address you specified in the application, if possible, through the procedure in which the request was made.

DATA SECURITY

In order to ensure the security of your personal data, we take reasonable technical and administrative measures to prevent unauthorised access risks, accidental data loss, deliberate deletion or damage to data.

We ensure data security by using software and hardware that includes virus and similar malware protection systems, firewalls and intrusion prevention systems. We use data loss prevention software.

We carry out access to personal data within the company within the framework of unit/role/application-based authorisations and in a controlled process in accordance with the nature of the data. An authorisation matrix has been established for employees.

In accordance with Article 12 of the Law, we ensure that the necessary audits are carried out to ensure the implementation of the provisions of the Law.

We ensure compliance of data processing activities with the Law through internal policies and procedures.

We subject access to special categories of personal data to stricter measures.

In case of access to personal data from outside the Company for reasons such as outsourcing, we obtain commitments by the external service provider to ensure compliance with the Law.

We take the necessary actions to inform all our employees, especially those who are authorised to access personal data, about their duties and responsibilities under the Law.

We organise confidentiality undertakings for the security of your personal data that we transfer as required by law, legislation or legitimate interest.

We ensure the security of environments containing personal data and endeavour to reduce personal data as much as possible.

ZERO DISCRIMINATION ASSOCIATION

Address Nisbetiye mah. Fecri ebcioglu street. Köşe apt. No:31 flat :3 1. Levent /Istanbul

Telephone: 0212 241 02 71

Fax : 0212 255 08 96

E-mail: [email protected]