Personal Data Protection (KVKK) Privacy Notice
FAHRETTIN TACAR EDUCATION FOUNDATION PRIVACY NOTICE ON THE PROCESSING OF PERSONAL DATA
Data Controller :
As Fahrettin Tacar Education Foundation (the “Foundation”), in our corporate capacity as “Data Controller”, we take the utmost care to ensure that the personal data in our possession belonging to natural and legal persons, including our donors, volunteers, beneficiaries of our services and employees, are processed and retained in accordance with the Constitution of the Republic of Türkiye, the international human rights conventions to which our country is a party, and the relevant legislation, primarily Law No. 6698 on the Protection of Personal Data (KVKK). With this awareness, and pursuant to Article 10 of the KVKK entitled ‘Data controller’s obligation to inform’, this privacy notice has been prepared to inform you of the identity of the data controller and its representative, if any, the purpose of data processing, to whom and for what purpose the processed data may be transferred, the method and legal basis of data collection, and your rights listed in Article 11 of the KVKK. Accordingly, in order to fulfil our obligation to inform, we set out below our explanations regarding the processing and protection of your personal data and special categories of personal data.
The personal data shared with our Foundation by donors, volunteers, all stakeholders and beneficiaries who support Fahrettin Tacar Education Foundation may be processed in accordance with the KVKK, in connection with and proportionate to our activities and service purposes; transferred to third parties within Türkiye; stored; used for profiling; and categorised. Within this framework, we process your personal data as explained below and within the limits prescribed by legislation.
1. Collection and Processing of Personal Data and Purposes of Processing
Dear donors, volunteers and stakeholders, your personal data may vary depending on the services provided and the activities carried out by our Foundation, and may be collected verbally, in writing or electronically, by automated or non-automated means, through our Foundation’s units, website, social media channels, mobile applications and similar channels. The personal data you share may be retained by Fahrettin Tacar Education Foundation within the framework of this Law and processed within the scope of the consent you have given.
Your personal data collected;
for the purposes of enabling you to benefit from the services offered by our Foundation; understanding your preferences, usage habits and needs regarding these services so as to respond to your requests more quickly; improving our communication with you in order to serve you better and offer better services and proposals; carrying out analyses for these purposes; informing you about our services; measuring your satisfaction with our services; and developing and diversifying our services in line with your requests and needs, as provided for in Articles 5 and 6 of the KVKK set out explicitly below;
ARTICLE 5 – Conditions for processing personal data
(1) Personal data may not be processed without the explicit consent of the data subject.
(2) Personal data may be processed without seeking the explicit consent of the data subject if one of the following conditions is met:
It is expressly provided for by law.
It is necessary to protect the life or physical integrity of the person, or of another person, where that person is unable to express consent due to actual impossibility or where their consent is not legally valid.
Processing the personal data of the parties to a contract is necessary, provided that it is directly related to the conclusion or performance of that contract.
It is necessary for the data controller to fulfil its legal obligation.
The data has been made public by the data subject themselves.
Data processing is necessary for the establishment, exercise or protection of a right.
Data processing is necessary for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject.
ARTICLE 6 – Conditions for processing special categories of personal data
(1) Data relating to a person’s race, ethnic origin, political opinion, philosophical belief, religion, sect or other beliefs, appearance and dress, membership of associations, foundations or trade unions, health, sexual life, criminal convictions and security measures, as well as biometric and genetic data, are special categories of personal data.
(2) Processing special categories of personal data without the explicit consent of the data subject is prohibited.
(3) Personal data listed in the first paragraph, other than data relating to health and sexual life, may be processed without seeking the explicit consent of the data subject in cases provided for by law. Personal data relating to health and sexual life may only be processed without seeking the explicit consent of the data subject by persons under an obligation of confidentiality or by authorised institutions and organisations, for the purposes of protecting public health, preventive medicine, medical diagnosis, the provision of treatment and care services, and the planning and management of health services and their financing.
(4) When processing special categories of personal data, it is also mandatory to take the adequate measures determined by the Board.
will be processed within this scope, within the conditions and purposes of personal data processing, in accordance with the law, legislation and the principle of good faith, in a manner that is relevant, limited and proportionate to the purposes of processing,
accurately and kept up to date, for specific, explicit and legitimate purposes.
2. To Whom and for What Purpose Processed Personal Data May Be Transferred
Your personal data collected and processed may be transferred within Türkiye for the purposes stated above, in accordance with the KVKK and the legislation in force, to Foundation officials and in cases provided for by the relevant legislation, within the framework of the personal data processing conditions and purposes set out in Articles 8 and 9 of the KVKK.
3. Rights of the Data Subject Listed in Article 11 of the KVKK
As data subjects, if you submit your requests regarding your rights to our Foundation using the methods set out below in this Privacy Notice, your request will be finalised free of charge within thirty days at the latest, depending on the nature of the request. However, if a fee is prescribed by the Personal Data Protection Board, the fee in the tariff determined by our Foundation will be charged.
In this context, the rights of data subjects:
a) To learn whether personal data is being processed,
b) To request information about it if personal data has been processed,
c) To learn the purpose of processing personal data and whether it is used in line with that purpose,
ç) To know the third parties, in Türkiye or abroad, to whom personal data is transferred,
d) To request the correction of personal data if it has been processed incompletely or inaccurately,
e) To request the deletion or destruction of personal data if the reasons requiring its processing no longer exist,
f) To request that the actions carried out under sub-paragraphs (d) and (e) be notified to third parties to whom the personal data has been transferred,
g) To object to any outcome to their detriment arising from the analysis of the processed data exclusively through automated systems,
ğ) To request compensation for damages if they suffer loss due to the unlawful processing of personal data.
Pursuant to Article 13(1) of the KVKK, you may submit your request to exercise the rights stated above to our Foundation in writing, or, if the Personal Data Protection Board determines a different method, in accordance with that method. We would like to remind you of the importance that, in this application, which you will make to exercise the rights you hold as a data subject and which includes your explanations regarding the right you wish to exercise, the matter you request must be clear and understandable; the subject you request must relate to you personally, or, if you are acting on behalf of someone else, you must be specifically authorised to do so and document your authority; and the application must include your identity and address details, with documents verifying your identity attached.
In our capacity as data controller, as Fahrettin Tacar Education Foundation, we hereby undertake;
1) To comply with all legal and statutory principles in the processing of personal data,
2) To always obtain explicit consent for personal data and special categories of personal data,
3) To take all necessary technical and administrative measures to ensure an appropriate level of security in order to prevent the unlawful processing of and access to personal data and to ensure the safekeeping of personal data,
4) To act in accordance with the data subject’s rights listed above and to remedy any possible damage related to these rights.
Fahrettin Tacar Education Foundation – FOUNDATION REGISTRY NO: 2856 00909 1428 5370 3436 – 80 / 000
Marmara Mah. Önder Cad. Büyükçarşı No: 6/58 Beylikdüzü / ISTANBUL