GENERAL EXPLANATIONS
GENERAL EXPLANATIONS
Pursuant to Law No. 6698 on the Protection of Personal Data (“Law”) and the General Data Protection Regulation (“GDPR”), certain rights have been granted to data subjects (hereinafter referred to as the “data subject”) as defined under these regulations.
According to Article 13(1) of the Law, applications regarding these rights must be submitted to our Company, the data controller, in writing or through other methods determined by the Personal Data Protection Board (“Board”). In this context, written applications must be sent to our Company via registered and reply-paid mail using this form.
Applications submitted electronically must be made via your registered email address or through the KEP system.
Below, you can find detailed instructions for submitting written applications to our Company through various methods:
|
Application Method |
Application Address |
Information to Be Specified |
Additional Documents Required |
|
Registered & Reply-Paid Mail |
Selami Ali Mah. Cumhuriyet Cad. No:46/38, Üsküdar, İstanbul |
The envelope should be labeled: “Personal Data Protection Law Information Request” |
As specified in Sections 2 and 4 |
|
Via KEP Address |
contactdanismanlıkticltd@hs01.kep.tr |
The subject line should read: “Personal Data Protection Law Information Request” |
As specified in Sections 2 and 4 |
|
Company Email Address |
The subject line should read: “Personal Data Protection Law Information Request” |
As specified in Sections 2 and 4 |
The channels specified above are in accordance with Article 13(1) of the Law and Articles 11–25 of the GDPR. Other methods to be determined and announced by the Board will also be accepted after such announcements are made.
Applications submitted to us will be answered “as soon as possible and at the latest within thirty days” from the date of receipt, as per Article 13(2) of the Law and Articles 11–25 of the GDPR. Responses will be sent via the communication method selected in this form.
In accordance with the nature of your request, you must provide the requested information and documents completely and accurately. Failure to do so may prevent our Company from fully and effectively investigating your request. Incomplete information will result in your request being paused until the missing information is provided. Our Company reserves all legal rights in this matter.
INFORMATION FOR IDENTIFYING THE APPLICANT AND CONTACTING THEM
To identify the “Applicant” and conduct the necessary internal investigation within our Company, the following information is required. The contact information below will also be used to request additional information if needed, to inform you about the process, and to securely deliver the results of your request.
|
Field |
Information |
|
Full Name |
|
|
Turkish ID Number |
|
|
Relationship with Our Company |
☐ Customer ☐ Employee ☐ Visitor ☐ Business Partner ☐ Other: ……………… |
|
Address |
|
|
Mobile Phone Number |
|
|
Email Address |
|
|
Are you an EU resident? |
☐ Yes ☐ No |
|
Is your relationship with the Company terminated? |
☐ Yes ☐ No |
REQUESTS OF THE APPLICANT
The rights you may request from our Company as the data controller, under Article 11 of the Law and Articles 15–22 of the GDPR, are listed below. Based on your selection, we will provide a response according to Article 13(3) of the Law.
KVKK and GDPR-Based Rights
|
Request No |
Subject of Request |
Selection |
|
1 |
I would like to know whether your Company is processing my personal data. |
☐ |
|
2 |
If my personal data is being processed, I would like to get information about this activity. |
☐ |
|
3 |
I would like to learn the purpose of processing and whether the data is used in accordance with its purpose. |
☐ |
|
4 |
If my personal data is transferred to third parties domestically or abroad, I would like to know them. |
☐ |
|
5 |
I believe my personal data is processed incompletely or incorrectly, and I request correction. |
☐ |
|
6 |
I believe the purposes for processing no longer exist and request the following for my data (choose one): |
|
|
|
• Deletion |
☐ |
|
|
• Anonymization |
☐ |
|
7 |
I request correction of my incomplete/incorrect data by third parties to whom it was transferred. |
☐ |
|
8 |
I request deletion/anonymization by third parties to whom my data was transferred (choose one): |
|
|
|
• Deletion |
☐ |
|
|
• Anonymization |
☐ |
|
9 |
I object to results against me arising from automated data analysis. |
☐ |
|
10 |
I have suffered damages due to unlawful processing and request compensation. |
☐ |
GDPR-Specific Rights
|
Request No |
Subject of Request |
Selection |
|
1 |
Access: I request a copy of my personal data and processing activities. |
☐ |
|
2 |
Rectification: I request the correction of incomplete or inaccurate data. |
☐ |
|
3 |
Erasure (“Right to be Forgotten”): I request deletion of my personal data. |
☐ |
|
4 |
Restriction of Processing: I request the restriction of processing my data. |
☐ |
|
5 |
Data Portability: I request transfer of my data to myself or another controller. |
☐ |
|
6 |
Objection to Legitimate Interest Processing (e.g., marketing, analytics). |
☐ |
|
|
Objection to Automated Decision Making (e.g., profiling, personalized ads). |
☐ |
|
7 |
Withdrawal of Cookie Consent. |
☐ |
|
8 |
Withdrawal of Marketing Consent. |
☐ |
ADDITIONAL INFORMATION AND DOCUMENTS BASED ON REQUEST TYPE
|
Request No |
Request Subject |
Additional Information |
Additional Documents |
|
1 |
Learning whether data is processed |
None |
None |
|
2 |
Information on data processing activities |
None |
None |
|
3 |
Purpose and appropriateness of processing |
None |
None |
|
4 |
Data transfer to third parties |
None |
None |
|
5 |
Request for correction of incorrect/incomplete data |
Specify the incorrect data |
Supporting documents (e.g., ID, utility bill, etc.) |
|
6 |
Deletion/anonymization due to the end of processing purpose |
Reason for request and justification |
Supporting documents |
|
7 |
Correction by third parties |
Specify the incorrect data |
Supporting documents |
|
8 |
Deletion/anonymization by third parties |
Reason for request and justification |
Supporting documents |
|
9 |
Objection to automated decisions |
Specify relevant transaction or result |
Documents supporting your claim |
|
10 |
Request for compensation due to unlawful processing |
Specify the violation |
Supporting documents |
STATEMENT OF THE APPLICANT
I hereby request that my application, made in accordance with Article 13 of the Personal Data Protection Law, be reviewed and that I be informed accordingly.
I declare and undertake that the information and documents I have provided in this application are accurate and up-to-date and pertain to me personally.
I give consent for the information and documents provided in this form to be processed by your Company, limited to the purpose of evaluating, responding to my application, delivering the response, and verifying my identity and address in accordance with Article 13 of the Law and the GDPR.
☐ I request the response to be sent to the residential address I provided in Section 2 of this form.
☐ I request the response to be sent to the email address I provided in Section 2 of this form.
OTHER DECLARATIONS
…….
Data Subject (Applicant):
Full Name:
Application Date:
Signature: