Version: 2.0Last Updated: July 8, 2021
1. Who is the Data Controller?
Pursuant to the Law No. 6698 on the Protection of Personal Data (“KVK Law”), the data controller of your personal data is ODTÜ Geliştirme Vakfı Bilgi Teknolojileri Sanayi ve Ticaret A.Ş. (“Company”), registered with the Ankara Trade Registry under number 431524 and located at Mustafa Kemal Mahallesi Dumlupınar Bulvarı No:280G/1104 Çankaya/ANKARA, Türkiye.
2. What is Personal Data?
Within the scope of the KVK Law, personal data means any information relating to an identified or identifiable natural person (Personal Data). Special categories of personal data, a specific type of personal data, means your data relating to race, ethnic origin, political opinion, philosophical belief, religion, sect or other beliefs, appearance and dress, membership of associations, foundations or trade unions, health, sexual life, criminal convictions and security measures, as well as your biometric and genetic data (“Special Categories of Personal Data”).
3. What is the Legal Reason for Collecting Your Personal Data?
Your personal data is collected in any verbal, written or electronic medium, for the purposes set out in this General Clarification Text, so that the products and services we offer as the Company can be provided within the applicable legal framework and so that our Company can fully and accurately fulfil its contractual and legal obligations in this context.
4. How is Your Personal Data Collected?
Depending on the service, product or commercial activity provided by our Company, your personal data may be collected verbally, in writing or electronically, by automated or non-automated means, through the call centre, the website, social media channels, mobile applications and similar channels.
5. For What Purposes Do We Process Your Personal Data?
Your collected personal data will be processed within the personal data processing conditions and purposes set out in Articles 5 and 6 of the KVK Law, for the purposes of: carrying out the work necessary for you to benefit from the products and services offered by our Company, by our Company and its units; customising and recommending the products and services offered by our Company according to your preferences, usage habits and needs; offering you personalised advertisements, campaigns and other benefits based on analysis by our Company; sending commercial electronic messages in line with your consent preferences; sending post; conducting surveys and telesales; performing statistical analyses; ensuring the legal and commercial security of our Company and of persons in a business relationship with our Company; determining and implementing our Company’s commercial and business strategies; and ensuring the execution of our Company’s human resources policies.
6. To Whom and for What Purposes May We Transfer Your Personal Data?
Your collected personal data may be transferred to our business partners, our shareholders, and public institutions and private persons authorised by law, within the personal data processing conditions and purposes set out in Articles 8 and 9 of the KVK Law, for the purposes of: carrying out the work necessary for you to benefit from the products and services offered by our Company, by our business units; customising and recommending the products and services offered by our Company according to your preferences, usage habits and needs; offering you personalised advertisements, campaigns and other benefits based on analysis by our Company; sending commercial electronic messages in line with your consent preferences; sending post; conducting surveys and telesales; reporting and evaluating your shopping data; performing statistical analyses; ensuring the legal and commercial security of our Company and of persons in a business relationship with our Company; determining and implementing our Company’s commercial and business strategies; and ensuring the execution of our Company’s human resources policies. Subject to the necessary security measures, your personal data may be kept in Türkiye or transferred abroad for the purposes stated above.
7. What Are Your Rights as a Data Subject Listed in Article 11 of the KVK Law?
If you, as a data subject, submit your requests concerning your rights to our Company using the methods set out below, our Company will conclude your request free of charge within thirty days at the latest, depending on the nature of the request.
However, if a fee is stipulated by the Personal Data Protection Board, the fee in the tariff determined by our Company will be charged. In this context, data subjects have the right to:
- learn whether their personal data is processed,
- request information if their personal data has been processed,
- learn the purpose of processing their personal data and whether it is used in accordance with that purpose,
- know the third parties in Türkiye or abroad to whom their personal data is transferred,
- request the correction of their personal data if it has been processed incompletely or inaccurately, and request that the third parties to whom the personal data has been transferred be notified of this,
- request the erasure or destruction of their personal data if the reasons requiring its processing no longer exist, even though it has been processed in accordance with the KVK Law and other relevant laws, and request that the third parties to whom the personal data has been transferred be notified of this,
- object to a result arising against them through the analysis of the processed data exclusively by automated systems,
- request compensation for damages if they suffer damage due to the unlawful processing of their personal data.
Pursuant to Article 13(1) of the KVK Law, you may submit your request regarding the exercise of the rights above to our Company in writing or by other methods determined by the Personal Data Protection Board.
As the Personal Data Protection Board has not yet determined any method, you must submit your application to our Company in writing in accordance with the KVK Law.
Accordingly, the channels and procedures through which you can submit your written applications to our Company under Article 11 of the KVK Law are explained below.
To exercise the rights above, you may deliver your request in person, together with documents identifying you, to “ODTÜ Geliştirme Vakfı Bilgi Teknolojileri Sanayi ve Ticaret A.Ş. (METUnic) Mustafa Kemal Mahallesi Dumlupınar Bulvarı No:280G/1104 Çankaya/ANKARA, Türkiye”, and/or send it by registered mail with return receipt, through a notary and/or by other methods specified in the KVK Law.