Member Clarification Text

REGARDING THE PROCESSING OF PERSONAL DATA
MEMBER CLARIFICATION TEXT

Data Controller: Turkish Informatics Association ("TBD")
Ceyhun Atuf Kansu Caddesi 1246. Sokak 4/17 Balgat/Ankara

As Turkey Informatics Association, we have prepared this clarification text in order to inform you, our members, about the processing, storage and transfer of your personal data within the scope of the Law No. 6698 on the Protection of Personal Data ("KVKK") and related legislation.

Which Personal Data is Processed?

Identity Information
Processed Personal Data	Name, Surname Mother - Father Name Vehicle License Plate Information Gender Date of Birth Place of Birth Photo. District Signature Stamp Neighborhood/Village Information Identity Card Family Sequence Number Identity Card Volume No Province of Registration Identity Card Serial Number Passport Number T.C. Identity Number
Personal Data Processing Purposes	Execution of Audit/Ethical Activities, Execution of Training Activities, Execution of Activities in Compliance with Legislation, Execution of Financial and Accounting Affairs, Execution of Internal Audit / Investigation / Intelligence Activities, Execution of Communication Activities, Execution / Supervision of Business Activities, Organization and Event Management, Execution of Social Responsibility and Civil Society Activities, Execution of Contract Processes, Providing Information to Authorized Persons, Institutions and Organizations, Execution of Management Activities
Legal Grounds for Processing Personal Data	Your personal data may be collected by TBD in line with the realization of the above-mentioned purposes, as specified in Article 5 of the LPPD; Explicitly stipulated in the law, Provided that it is directly related to the conclusion or performance of a contract, it is necessary to process personal data of the parties to the contract, It is mandatory for the data controller to fulfill its legal obligation, Data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject are processed on the basis of legal grounds.
Methods of Collecting Personal Data	Information systems and electronic devices are collected when attending a meeting or event, through online electronic forms, other printed forms, e-mail, documents declared by the data subject, social media accounts and telephone.

Contact Information
Processed Personal Data	Cell Phone Number E-Mail Address Home Phone Number Fax Number Residence-Postal Address Work Phone Number Workplace Address Workplace Name-Title
Personal Data Processing Purposes	Execution of Audit/Ethical Activities, Execution of Training Activities, Execution of Activities in Compliance with Legislation, Execution of Internal Audit/Investigation/Intelligence Activities, Execution of Communication Activities, Execution/Supervision of Business Activities, Organization and Event Management, Execution of Social Responsibility and Civil Society Activities, Execution of Contract Processes, Providing Information to Authorized Persons, Institutions and Organizations, Execution of Management Activities
Legal Grounds for Processing Personal Data	Your personal data may be collected by TBD in line with the realization of the above-mentioned purposes, as specified in Article 5 of the LPPD; Explicitly stipulated in the law, Provided that it is directly related to the conclusion or performance of a contract, it is necessary to process personal data of the parties to the contract, Data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject are processed on the basis of legal grounds.
Methods of Collecting Personal Data	Information systems and electronic devices are collected when attending a meeting or event, through online electronic forms, other printed forms, e-mail, documents declared by the data subject, social media accounts and telephone.

Personal Information
Processed Personal Data	Curriculum Vitae Information Education Status Date of Withdrawal or Expulsion from Membership Membership Acceptance Date Position-Title Information Reference Information
Personal Data Processing Purposes	Execution of Audit/Ethical Activities, Execution of Training Activities, Execution of Activities in Compliance with Legislation, Execution of Finance and Accounting Affairs, Execution of Internal Audit / Investigation / Intelligence Activities, Execution / Supervision of Business Activities, Organization and Event Management, Execution of Social Responsibility and Civil Society Activities, Execution of Contract Processes, Providing Information to Authorized Persons, Institutions and Organizations, Execution of Management Activities
Legal Grounds for Processing Personal Data	Your personal data may be collected by TBD in line with the realization of the above-mentioned purposes, as specified in Article 5 of the LPPD; Explicitly stipulated in the law, Provided that it is directly related to the conclusion or performance of a contract, it is necessary to process personal data of the parties to the contract, Data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject are processed on the basis of legal grounds.
Methods of Collecting Personal Data	Information systems and electronic devices are collected when attending a meeting or event, through online electronic forms, other printed forms, e-mail, documents declared by the data subject, social media accounts and telephone.

Finance Information
Processed Personal Data	Bank Account Information Credit Card Information
Personal Data Processing Purposes	Conducting Audit/Ethical Activities, Conducting Training Activities, Conducting Activities in Compliance with the Legislation, Conducting Finance and Accounting Affairs, Conducting Internal Audit / Investigation / Intelligence Activities, Conducting / Supervising Business Activities, Organization and Event Management, Conducting Social Responsibility and Civil Society Activities, Conducting Contract Processes, Providing Information to Authorized Persons, Institutions and Organizations
Legal Grounds for Processing Personal Data	Your personal data may be collected by TBD in line with the realization of the above-mentioned purposes, as specified in Article 5 of the LPPD; Explicitly stipulated in the law, Provided that it is directly related to the conclusion or performance of a contract, it is necessary to process personal data of the parties to the contract, Data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject are processed on the basis of legal grounds.
Methods of Collecting Personal Data	Information systems and electronic devices are collected at the time of participation in a meeting or event, through online electronic forms, other printed forms, e-mail, documents declared by the data subject and by telephone.

Professional Experience Information
Processed Personal Data	Computer Usage Knowledge Work History and Details Diploma Information Educational Background and Details On-the-Job Training Information Certificates Transcript Information Foreign Language Knowledge
Personal Data Processing Purposes	Execution of Training Activities, Execution/Supervision of Business Activities
Legal Grounds for Processing Personal Data	Your personal data may be collected by TBD in line with the realization of the above-mentioned purposes, as specified in Article 5 of the LPPD; Provided that it is directly related to the conclusion or performance of a contract, it is necessary to process personal data of the parties to the contract, Data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject are processed on the basis of legal grounds.
Methods of Collecting Personal Data	Information systems and electronic devices are collected during participation in a meeting or event, through online electronic forms, other printed forms, e-mail, documents declared by the data subject and by telephone.

Audiovisual Recording Information
Processed Personal Data	CCTV Recordings Auditory Recordings
Personal Data Processing Purposes	Conducting Training Activities, Conducting/Supervising Business Activities, Organization and Event Management, Social Responsibility and Civil Society Activities
Legal Grounds for Processing Personal Data	Your personal data may be collected by TBD in line with the realization of the above-mentioned purposes, as specified in Article 5 of the LPPD; The explicit consent of the person concerned is processed based on the legal reason.
Methods of Collecting Personal Data	It is collected with visual recording devices.

Information on Family Members
Processed Personal Data	Names and Surnames of Family Members Number of Children
Personal Data Processing Purposes	Organization and Event Management, Social Responsibility and Civil Society Activities
Legal Grounds for Processing Personal Data	Your personal data may be collected by TBD in line with the realization of the above-mentioned purposes, as specified in Article 5 of the LPPD; Provided that it does not harm the fundamental rights and freedoms of the data subject, it is processed based on the legal reason that data processing is mandatory for the legitimate interests of the data controller
Methods of Collecting Personal Data	Information systems and electronic devices are collected when attending a meeting or event, through online electronic forms and social media accounts.

Professional and Trade Union Membership Information
Processed Personal Data	Professional and Trade Union Membership Information
Personal Data Processing Purposes	Organization and Event Management, Social Responsibility and Civil Society Activities
Legal Grounds for Processing Personal Data	Your personal data may be collected by TBD in line with the realization of the above-mentioned purposes, as specified in Article 5 of the LPPD; Provided that it does not harm the fundamental rights and freedoms of the data subject, it is processed based on the legal reason that data processing is mandatory for the legitimate interests of the data controller.
Methods of Collecting Personal Data	Information systems and electronic devices are collected upon attendance at a meeting or event and through online electronic forms and social media accounts.

Specially Qualified Persons Data

Sensitive personal data are data relating to a person's race, ethnic origin, political opinions, philosophical beliefs, religion, sect or other beliefs, appearance and dress, membership of associations, foundations or trade unions, health, sexual life, criminal convictions and security measures, and biometric and genetic data.

Special categories of personal data require higher protection than other categories of data. It is regulated in accordance with the KVKK that separate information is required to process such data.

Health Information
Processed Personal Data	Blood Type Information
Personal Data Processing Purposes	Conducting Audit/Ethical Activities, Conducting Internal Audit/Investigation/Intelligence Activities, Conducting Activities in Compliance with Legislation, Conducting Social Responsibility and Civil Society Activities, Conducting Contract Processes, Providing Information to Authorized Persons, Institutions and Organizations
Legal Grounds for Processing Personal Data	Your health data will be collected by TBD in line with the realization of the above-mentioned purposes, as specified in Article 6 of the LPPD; "Personal data relating to health and sexual life can only be processed by persons or authorized institutions and organizations under the obligation of confidentiality for the purposes of protecting public health, preventive medicine, medical diagnosis, treatment and care services, planning and management of health services and financing, without seeking the explicit consent of the person concerned" are processed on the basis of legal grounds. If it is necessary to process your health data other than the reasons listed in Article 6 of the KVKK, your health data will be processed by obtaining your explicit consent.
Methods of Collecting Personal Data	When attending a meeting or event, it is collected through online electronic forms, other printed forms, e-mail, documents declared by the data subject and by telephone.

Association Membership Information
Processed Personal Data	Member Association Information Member Number
Personal Data Processing Purposes	Conducting Audit/Ethical Activities, Conducting Training Activities, Conducting Activities in Compliance with the Legislation, Conducting Internal Audit/Investigation/Intelligence Activities, Conducting/Supervision of Business Activities, Organization and Event Management, Conducting Social Responsibility and Civil Society Activities, Conducting Contract Processes, Providing Information to Authorized Persons, Institutions and Organizations
Legal Grounds for Processing Personal Data	Your Association Membership data will be processed by TBD in line with the realization of the above-mentioned purposes, as specified in Article 6 of the LPPD; "Personal data other than health and sexual life listed in the first paragraph can be processed without the explicit consent of the person concerned in cases stipulated by law" on the basis of legal grounds. In case it is necessary to process your Association Membership data other than the reasons listed in Article 6 of the KVKK, your health data will be processed by obtaining your explicit consent.
Methods of Collecting Personal Data	Information systems and electronic devices are collected when attending a meeting or event, through online electronic forms, other printed forms, e-mail, documents declared by the data subject, social media accounts and telephone.

Foundation Membership Information
Processed Personal Data	Foundation Membership Information
Personal Data Processing Purposes	Conducting Training Activities, Conducting/Supervising Business Activities, Organization and Event Management
Legal Grounds for Processing Personal Data	Your Foundation Membership data will be processed by TBD in line with the realization of the above-mentioned purposes, as specified in Article 6 of the LPPD; "Personal data other than health and sexual life listed in the first paragraph can be processed without the explicit consent of the person concerned in cases stipulated by law" on the basis of legal grounds. If it is necessary to process your Foundation Membership data other than the reasons listed in Article 6 of the KVKK, your health data will be processed by obtaining your explicit consent.
Methods of Collecting Personal Data	It is collected through information systems and electronic devices, other printed forms, e-mail and documents declared by the data subject.

To Whom and For What Purposes Can Your Personal Data Be Transferred?

Your personal data,

Authorized Public Institutions and Organizationsfor the purposes of carrying out activities in accordance with the legislation, carrying out social responsibility and civil society activities, carrying out contract processes and informing authorized persons, institutions and organizations within the scope stipulated by the legal regulation,
Suppliersfor the purposes of conducting activities in accordance with the legislation, carrying out social responsibility and civil society activities and carrying out contract processes,
Real or Private Legal Entitiesfor the purposes of conducting activities in accordance with the legislation, carrying out social responsibility and civil society activities and executing contract processes
Business Partnersfor the purposes of supervision of the execution of Business Activities, organization and event management and execution of social responsibility and civil society activities

Only as much as is necessary for the realization of the relevant purpose may be transferred by complying with the rules in Article 8 of the KVKK regarding Transfer or Article 9 regarding Transfer Abroad and by taking the necessary technical and administrative measures.

It may be shared publicly through social media accounts for the purposes of conducting activities in accordance with the legislation, carrying out social responsibility and civil society activities and carrying out contract processes.

How Long Is Your Personal Data Stored?

If a period of time is specified in the law or relevant legislation for the storage of your personal data, the data in question must be kept for at least this period. If a period of time is not stipulated in the law or the relevant legislation; It is stored for reasonable periods of time determined in connection with the purposes of processing, provided that it is limited and measured.

What Are Your Rights Regarding Your Personal Data as a Data Subject?

Regarding your personal data;

Learn whether your personal data is being processed,
Request information if your personal data has been processed,
To learn the purpose of processing personal data and whether they are used in accordance with their purpose,
To know the third parties to whom your personal data is transferred domestically or abroad,
To request correction of your personal data in case of incomplete or incorrect processing,
To request the deletion or destruction of your personal data within the framework of the conditions stipulated in the KVKK legislation,
When you request the correction of incomplete or incorrect data and the deletion or destruction of your personal data, to request that this situation be notified to third parties to whom we transfer your personal data,
Object to the occurrence of a result to the detriment of the person himself/herself by analyzing the processed data exclusively through automated systems and
In case you suffer damage due to unlawful processing of personal data, to demand the compensation of this damage

you have rights.

5. How Can You Exercise Your Rights as a Data Subject?

If you wish to submit your applications and requests regarding your personal data Contact Person Application Form through;

By sending an e-mail to kvkk@tbd.org.tr,
By applying in person with a valid identity document,
By sending it to Ceyhun Atuf Kansu Caddesi 1246. Sokak 4/17 Balgat/Ankara with a wet signature and a copy of your identity card,
By signing with mobile signature or secure electronic signature and sending an e-mail to kvkk@tbd.org.tr,

You can forward it to TBD.

Pursuant to the Communiqué on the Procedures and Principles of Application to the Data Controller, the application of the Data Subject must include the name, surname, signature if the application is in writing, Turkish ID number (if the applicant is a foreigner, his/her nationality, passport number or ID number, if any), residential or workplace address for notification, e-mail address for notification, telephone number and fax number, if any, and information on the subject of the request.

The Relevant Person must clearly and comprehensibly state the matter requested in the application to be made in order to exercise the above-mentioned rights and containing explanations regarding the right requested to be exercised. Information and documents related to the application must be attached to the application.

Although the subject of the request must be related to the applicant's person, if acting on behalf of someone else, the applicant must be specifically authorized and this authority must be documented (power of attorney). In addition, the application must contain identity and address information, and documents confirming the identity must be attached to the application.

Requests made by unauthorized third parties on behalf of someone else will not be evaluated.

How long will your requests regarding the processing of your personal data be answered?

Your requests regarding your personal data will be evaluated and responded to as soon as possible and within 30 days at the latest from the date of receipt by TBD. If your request is accepted or rejected with an explanation of the reasons, our response will be sent to you by mail or e-mail to the address you specified in your application, if possible, in the same manner in which your request was made.