Clarification Text within the Context of the Personal Data Protection Law (Privacy Policy)
This Information Text has been prepared to inform you about the processing of your personal data by UTRADER, which acts as a data controller pursuant to the Personal Data Protection Law No. 6698 (“PDPL”), within the scope of your membership to the International Trade Network Association (UTRADER).
It reserves the right to make changes in the Policy in order to provide up-to-date information about our practices and legal regulations on the protection of Personal Data. In case the changes made in the policy are fundamental changes, the Data Owners will be informed through various channels.
Definitions
Explicit consent: It refers to the declaration of consent on a specific subject, based on information and freely declared by the Data Owners.
Anonymization: It means making the Personal Data incapable of being associated with an identified or identifiable natural person in any way, even by matching with other data.
Relevant person/Data owner: Refers to the real person whose personal data is processed.
Personal data: Denotes any information relating to an identified or identifiable natural person.
Sensitive personal data: It refers to data subject to a stricter protection regime within the context of the Law, which may cause the Data Owner to be victimized or exposed to discrimination in cases such as their disclosure or loss.
Processing of personal data: It refers to all kinds of operations performed on data such as classification or prevention of use, obtaining, recording, storing, preserving, changing, rearranging, disclosing, transferring, taking over, making available Personal Data fully or partially automatically or by non-automatic means provided that it is a part of any Data Recording System.
Data registration system: It refers to the registration system in which Personal Data is processed and structured according to certain criteria.
Data controller: Denotes the natural or legal person who determines the purposes and means of processing Personal Data and is responsible for the establishment and management of the Data Recording System.
Principles on Data Privacy
UTRADER acts in accordance with the general principles explained below within the scope of all Personal Data Processing activities.
Acting in accordance with the law and the rules of honesty: UTRADER acts in accordance with the legislation in force and abides by the rules of honesty in all Personal Data Processing processes.
Accuracy and timeliness: UTRADER provides the Data Owners with the opportunity to update their Personal Data and takes the necessary measures to ensure that the data is transferred to the databases correctly.
Processing for specific, clear and legitimate purposes: UTRADER limits its Personal Data Processing activities to specific and legitimate purposes and clearly informs the Data Owners about the said purposes through clarification texts..
Being connected, limited and proportional to the purpose for which they are processed: Personal Data are processed by UTRADER to the extent necessary for the purpose declared to the Data Owner at the time of their provision, in connection with this purpose and in a limited manner.
Retention for the period stipulated in the relevant legislation or required for the relevant purpose: UTRADER preserves Personal Data for this period, if a certain period of time is determined within the scope of the legislation in force. If such a period is not specified in the legislation, reasonable retention periods are determined by taking into account the purpose of data use and UTRADER procedures, and the data is kept limited to this period. Following the expiry of the aforementioned periods, the data is deleted, destroyed or anonymized in accordance with UTRADER procedures.
Your Personal Data Collected;
Your Personal Data collected by UTRADER (directly from you, from public domains or third parties) varies according to your role, position and legal obligations in your relationship with UTRADER. Your Personal Data collected can be listed as follows:
- Identity Information (Turkish Republic) identity number, name-surname, passport number, identity card serial number, photo, place of birth, date of birth, age, place of registry, certificate of identity register copy, etc.)
- Contact Information (E-mail address, phone number, mobile phone number, address, etc.)
- Educational Information (Graduated schools, departments, received certificates, etc.)
- Family Members and Relatives Information (Identity information, contact information and professional, educational information etc. about the children, spouses of the Data Owner)
- Student- Alumni Transaction Information (an instruction associated with the person and a demand-dependent CDR (call detail record), call center records, credit card information, box office receipts, records recorded in channels for this, etc.)
- Employee Candidate Information (resume, interview notes, personality test results, etc.)
- Financial Information (credit card debt, loan amount, loan payments, interest amount and rate payable, debt balance, credit balance, etc.)
- Legal Transaction and Compliance Information (data in documents such as court and administrative authority decisions, etc.)
- Audit and Inspection Information (Information regarding all kinds of records and transactions related to the legal pursuit and assertion of our rights associated with the Data Owner, etc.)
- Sensitive Personal Data (race, ethnicity, political opinion, philosophical belief, religion, sect or other belief, disguise and dress, association, foundation or union membership information, data on health and sexual life, criminal convictions and security measures) data, biometric data, genetic data)
- Reputation Management Information (information associated with the person and collected to protect the reputation of UTRADER, etc.)
- Visual and Audio Data (photos, camera recordings, audio recordings, etc.)
The listed Personal Data types do not cover all your processed data, and similar types of Personal Data to the data counted by UTRADER can be processed.
Purposes of Processing of Personal Data
Your Data will be processed to provide the services to be ensured in line with the purposes and working subjects in the statute of UTRADER, fully and on time within the legal framework,
Fulfill our legal obligations under the Associations Law No. 5253 and other relevant legislation, establishing your membership in UTRADER,
For you to benefit from the services provided by UTRADER,
Take advantage of the benefits that UTRADER provides exclusively to its members such as UTRADER’s event and organization management processes, including conferences, symposiums, panels, panel discussions, forums, exhibitions, bazaars, concerts, sports competitions, trips in the country or abroad,
Conduct the necessary studies and related processes by our relevant units in order to carry out the activities held down by UTRADER, including the fundraising within UTRADER in accordance with the legislation,
Within the scope of the personal data processing conditions and purposes specified in the 5th and 6th articles of the PDPL, for the purpose of carrying out the necessary studies by the relevant units in order to benefit the related persons of the products and services offered by UTRADER, carrying out the relevant processes and carrying out the promotional activities for the products and services of UTRADER.
To Whom and For What Purpose the Processed Personal Data Can Be Transferred
Your Data will be processed to provide the services to be ensured in line with the purposes and working subjects in the statute of UTRADER, fully and on time within the legal framework,
Fulfill our legal obligations under the Associations Law No. 5253 and other relevant legislation, establishing your membership in UTRADER,
For you to benefit from the services provided by UTRADER,
Take advantage of the benefits that UTRADER provides exclusively to its members such as UTRADER’s event and organization management processes, including conferences, symposiums, panels, panel discussions, forums, exhibitions, bazaars, concerts, sports competitions, trips in the country or abroad,
Conduct the necessary studies and related processes by our relevant units in order to carry out the activities held down by UTRADER, including the fundraising within UTRADER in accordance with the legislation,
Within the scope of the personal data processing conditions and purposes specified in the 8th and 9th articles of the PDPL, for the purpose of carrying out the necessary studies by the relevant units in order to benefit the related persons of the products and services offered by UTRADER, carrying out the relevant processes and carrying out the promotional activities for the products and services of UTRADER.
Storage of Personal Data
While determining the storage periods of personal data, UTRADER makes determinations by considering the legislation in force and the purposes of processing the data subject to the process. In this context, if there are statute of limitations related to legal obligations regarding Personal Data Processing, they are definitely taken into account. In the event that the purpose of Personal Data Processing disappears, the data is deleted, destroyed or anonymized unless there is another legal reason or basis that allows the personal data to be kept.
Method and Legal Reason of Collecting Personal Data
Your personal data is collected in all kinds of verbal, written or electronic media, through a membership form or by other means, in line with the above-mentioned purposes. Provided that your personal data collected for this legal reason is clearly stipulated in the Laws, and is directly related to the establishment or performance of a contract, it is necessary to process the personal data of the parties to the contract, including the cases where it is mandatory for UTRADER to fulfill its legal obligations. It can also be processed and transferred for the purposes specified in the relevant parts of this text within the scope of the personal data processing conditions and purposes specified in Articles 5th and 6th.
Rights of Personal Data Owner Enumerated in Article 11 of PDPL
Without prejudice to the cases stipulated in Article 28 of the PDPL titled “Exceptions”, within the framework of Article 11 of the PDPL; personal data owners apply to UTRADER;
Learning whether personal data is processed or not,
If personal data has been processed, requesting information about it,
Learning the purpose of processing personal data and whether they are used in accordance with the purpose,
Knowing the third parties to whom personal data is transferred in the country or abroad,
Requesting correction of personal data in case of incomplete or incorrect processing and requesting notification of the transaction made within this scope to third parties to whom personal data has been transferred,
Even though it has been processed in accordance with the PDPL and other relevant law provisions, to request the deletion or destruction of personal data in the event that the reasons requiring its processing are eliminated, and to request the notification of the transaction made within this context to the third parties to whom the personal data has been transferred,
Objecting to the emergence of a result against the person himself by analyzing the processed data exclusively through automated systems,
In case of loss due to unlawful processing of personal data, the person has the right to demand the indemnify the loss.
In order to exercise your above-mentioned rights, you can send your request to UTRADER in writing or by other methods determined by the Personal Data Protection Board.
Those who visit our website and send personal data through the necessary contact forms, pursuant to Article 10 of the Personal Data Protection Law No. 6698, titled “Information Obligation of the Data Controller”, by whom and for what purpose my personal data will be processed, to whom and for what purpose the processed personal data can be transferred, saying “I have read and understood this “Information Text” prepared on the method and legal reason for collecting personal data and my rights in Article 11 of the Law, and I have been informed in detail by UTRADER, which is the data controller”, and is deemed to have accepted it.