Skip to main content

KVKK - (Personal Data Protection Law)

Purpose

ARTICLE 1 – (1) The purpose of this Law is to protect the fundamental rights and freedoms of persons, privacy of personal life in particular, while personal data are processed, and to set forth obligations of natural and legal persons who process personal data and procedures and principles to comply with for the same.

Scope

ARTICLE 2 – (1) The provisions of this Law shall apply to natural persons whose personal data are processed and natural or legal persons who process such data wholly or partly by automatic means or otherwise than by automatic means which form part of a filing system.

Definitions

ARTICLE 3 – (1) In practice of this Law, the terms used herein shall have the following meanings:

a) Explicit Consent: Freely given specific and informed consent;

b) Anonymization: Rendering personal data by no means identified or identifiable with a natural person even by linking with other data;

c) President: President of the Board of Protection of Personal Data;

ç) Data subject : Natural person whose personal data are processed;

d) Personal Data: Any information relating to an identified or identifiable natural person;

e) Processing of personal data: Any operation which is performed upon personal data such as collection, recording, storage, preservation, alteration, adaptation, disclosure, transfer, retrieval, making available for collection, categorization or blocking its use by wholly or partly automatic means or otherwise than by automatic means which form part of a filing system;

f) Board: The Board of Protection of Personal Data;

g) Authority: The Authority of Protection of Personal Data;

ğ) Data processor: Natural or legal person who processes personal data based on the authority granted by and on behalf of the data controller;

h) Filing system : Any recording system through which personal data are processed by structuring according to specific criteria;

ı) Data controller: Natural or legal person who determines the purposes and means of the processing of personal data, and who is responsible for establishment and management of the filing system.

Open chat
Hello, How can we help you?