KVKK (Personal Data Protection)

This text is an informational translation; the Turkish text is authoritative.

İnsan Derneği (Human Association) shows the same sensitivity in the security of personal data that it shows in the regions where it continues its activities in cases of war, natural disaster and the like.

İnsan Derneği attaches great importance to ensuring that the personal data, both of a special and of a general nature, of our visitors in every medium are processed, retained and deleted in accordance with the Personal Data Protection Law No. 6698, the secondary regulations (regulations, communiqués, circulars) enacted and to be enacted under the Law, and the decisions taken and to be taken by the Personal Data Protection Board that are binding in nature. Aware of this responsibility, in our capacity as the “Data Controller” as defined in the Law, we process your personal data as explained below and within the limits mandated by legislation.

1. DATA CONTROLLER

İnsan Derneği is the “Data Controller”. Saray Mah. Fuatpaşa Cad. N:1 Merkez/Kütahya

2. PURPOSES OF PROCESSING PERSONAL DATA

İnsan Derneği needs to process personal data both when directly fulfilling its legal obligations and in cases where these obligations and the services provided indirectly require it. In this sense, your personal data are processed in connection with the following:

• Public Procurement Law legislation No. 4734

• Public Procurement Contracts Law No. 4735

• Labour Law No. 4857

• Stamp Tax Law No. 488

• Fees Law No. 492

• Press Law No. 5187

• Regulation on the Implementation of the Law on Private Security Services No. 5188

• Turkish Penal Code No. 5232

• Criminal Procedure Code No. 5271

• Fulfilling our obligations specified in the Social Insurance and General Health Insurance Law No. 5510 and in the secondary regulations issued under this Law,

• Corporate Tax Law No. 5520

• Law No. 5651 on the Regulation of Publications Made on the Internet and Combating Crimes Committed by Means of Such Publications

• Electronic Communications Law No. 5809

• Turkish Code of Obligations No. 6098

• Commercial Code No. 6102

• Fulfilling our obligations specified in the Occupational Health and Safety Law No. 6331 and in the secondary regulations issued under this Law

• Complying with the provisions of the letter of conformity with Tax Exemption Status No. 48107; and

• Fulfilling our obligations specified in the Labour Law No. 4857 and in the secondary regulations issued under this Law

• Fulfilling our obligations specified in the Social Insurance and General Health Insurance Law No. 5510 and in the secondary regulations issued under this Law

• Fulfilling our obligations specified in the Occupational Health and Safety Law No. 6331 and in the secondary regulations issued under this Law

• Fulfilling our obligations specified in the Personal Data Protection Law No. 6698 and in the secondary regulations issued under this Law

• Foundation Cultural Assets Tender Regulation dated 09.2008

Where necessary, in order to provide the information needed by the relevant public institutions and organisations, judicial or administrative authorities and law enforcement, your data is also processed within the limits specified in the Law, in compliance with the law and the rules of honesty, and in a manner that is always connected with, limited to and proportionate to these purposes.

3. TRANSFER OF PERSONAL DATA

Within the purposes listed above, and in accordance with the conditions set out in Articles 8 and 9 of the Law, your personal data may be transferred to natural and legal persons permitted by legislation, where necessary to other authorised public institutions and organisations, judicial and administrative authorities, law enforcement, institutions and organisations with which we have a business relationship, authorities concerned with education and humanitarian aid activities and the relevant ministries, humanitarian aid associations with the same purpose with which joint activities are carried out, project partners, and consultancy, technology and training companies from which outsourced services are received.

4. METHODS OF COLLECTING PERSONAL DATA AND LEGAL GROUNDS

Your personal data are collected by natural or legal persons who process data as authorised by İnsan Derneği, by automated and non-automated methods, orally, in writing or electronically, through means such as email, telephone, the website, various contracts, and forms and records kept on paper. In this context; Relevant person group / Personal data collected. Donor: full name, Turkish ID number, gender, year of birth, telephone number, email, address details, bank account details, log records. Volunteer: full name, ID / driving licence / passport details, gender, nationality, place of birth, date of birth, telephone number, email address, address details, blood group, bank account details, marital status, military service details, education information, log records, passport photograph, criminal record, contact person details for contacting in emergencies, health information, certificates, work experience. Person in need: full name, ID / passport details, gender, nationality, parents’ names, year of birth, place of birth, marital status, education information, signature, criminal record, telephone number, email address, passport photograph, address details, blood group, bank account details, contact person details for contacting in emergencies, population registry details of your family and of the persons you are obliged to support, information about your family situation, health information, documents that must be recorded, received from judicial or administrative authorities. Supplier institution representative: full name, telephone number, email address, address details, tax number, signature, bank details. Visitor: full name, Turkish ID number, telephone number, email, address details, entry-exit information, security records. Personal data of a special and general nature of these types are processed pursuant to Article 5(2)(a, c, ç, e, f) and Article 6(3) of the Law, provided that your fundamental rights and freedoms are not harmed, on the legal ground of the legitimate interests of İnsan Derneği. Apart from the data types listed above, your personal data of a general and special nature of the types of volunteers’ association and foundation memberships, membership information relating to civil society organisations and social media account information will be collected and processed with your explicit consent within the scope of Articles 5/1 and 6/2 of the Law. In this sense, the explicit consent text signed by you will form an integral part of the privacy notice.

5. RIGHTS OF DATA SUBJECTS UNDER THE LAW

By applying to İnsan Derneği at any time, you can: - learn whether your personal data are processed, the purpose of processing and whether they are used in line with that purpose, and, if they have been processed, request information about this, - learn the third parties, domestically and abroad, to whom your information is disclosed in accordance with the Law, - request correction if you think your information has been processed incompletely or inaccurately, - request the deletion or destruction of your information within the conditions provided in Article 7 of the Law, - request that your requests specified in items (c) and (d) be notified to the third parties to whom your information has been transferred and that they carry out the same operations, - object to a result arising against you from the analysis of your information by automated systems, or, if you believe it was recorded or used contrary to the law and you have suffered harm because of this, request compensation for the damage. - If your application made for these purposes requires an additional cost, you will be required to pay the fee determined by the Communiqué on the Procedures and Principles of Application to the Data Controller issued by the Personal Data Protection Board. If a written reply is given to your application, no fee will be charged up to the first 10 (ten) pages, and a transaction fee of 1 TL will be charged for each page over 10 (ten) pages. If the reply to your application is given on a recording medium such as a CD or flash drive, a fee equal to the cost of the recording medium will be charged to you. Your requests in your application will be concluded as soon as possible depending on the nature of the request and at the latest within 30 (thirty) days. To benefit from your rights under the Law, you may submit your applications in writing to İnsan Derneği, provided that they are in Turkish, and you may visit the website of the Personal Data Protection Authority for detailed information.