1. What is the PDPL?

The Personal Data Protection Law No. 6698 (PDPL) is a law enacted to protect the fundamental rights and freedoms of individuals — primarily the right to privacy — in the processing of personal data, and to establish the obligations of natural and legal persons who process personal data.

Under the Law, personal data is defined as “any information relating to an identified or identifiable natural person”; and processing is defined as “any operation performed on personal data such as collection, recording, storage, preservation, alteration, reorganisation, disclosure, transfer, acquisition, making available, classification, or blocking of use, whether carried out fully or partially by automated means or by non-automated means provided that it forms part of a data recording system.”

2. Purpose of the Disclosure Text and Haklara Destek Programme’s Role as Data Controller

In order to fulfil the disclosure obligation set out in Article 10 of the Personal Data Protection Law No. 6698 (PDPL) with respect to personal data relating to BELLEK Grant Management System (GMS) members, the following information is brought to the attention of BELLEK GMS users and third parties accessing the programme website (www.haklaradestek.org). Haklara Destek Programme reserves the right to update this Disclosure Text on the Protection of Personal Data at any time in line with any changes to applicable legislation.

3. Purposes of Processing and Transfer of Personal Data on Record

Your personal data is used for the following purposes:

• To verify the identity of members registering via the website or mobile applications
• To record address and other necessary information for communication purposes
• To communicate with BELLEK GMS users and provide necessary notifications
• To organise all records and documents that will serve as the basis for processing in electronic (internet/mobile, etc.) or paper form
• To provide information to public officials upon request and as required by legislation on matters relating to public security
• To improve the satisfaction of BELLEK GMS members and website users, and to organise training in electronic and/or physical environments
• To enable our contracted institutions, solution partners, and third-party internet platforms and digital programmes to make recommendations to BELLEK GMS users, and to inform BELLEK GMS members about our services
• To evaluate complaints and suggestions from BELLEK GMS users regarding the programme
• To fulfil our legal obligations and exercise our rights arising from applicable legislation
• To prevent fraud and other unlawful activities

The sharing of personal data belonging to BELLEK GMS users with third parties takes place within the scope of users’ consent and, as a rule, is not transferred to third parties without users’ approval. However, where required by our legal obligations and limited thereto, personal data will be shared with courts and other public authorities as necessary.

The necessary technical and legal measures are taken to prevent rights violations during the transfer of data to third parties.

4. Method and Legal Basis for Collecting Personal Data

Personal data is processed by Haklara Destek Programme in accordance with the consent of BELLEK GMS users and applicable legislative provisions. Personal data collected on the legal grounds set out above may be processed and transferred for the purposes specified in Articles 5 and 6 of the Law and in this Disclosure and Consent Text.

5. Rights of Users as Personal Data Subjects

Pursuant to Article 11 of the Law, data subjects have the right to:

• Learn whether their personal data is being processed
• Request information if their personal data has been processed
• Learn the purpose of processing their personal data and whether it is being used in accordance with that purpose
• Know the third parties to whom their personal data has been transferred, whether domestically or abroad
• Request the correction of incomplete or inaccurate personal data and request that the relevant third parties to whom the data has been transferred be notified of such correction
• Request the deletion or destruction of personal data where, despite having been processed in accordance with the Law and other applicable provisions, the reasons requiring its processing have ceased to exist, and request that the relevant third parties to whom the data has been transferred be notified accordingly
• Object to any outcome that is detrimental to the data subject arising from the analysis of processed data exclusively through automated systems, and to request compensation for damages suffered as a result of the unlawful processing of personal data

Requests concerning the exercise of these rights may be submitted by personal data subjects to bilgi@haklaradestek.org, to be evaluated within the framework of the Policy on the Processing and Protection of Personal Data under Law No. 6698 developed by Haklara Destek Programme. Haklara Destek Programme will evaluate such requests and conclude them within 30 days. Haklara Destek Programme reserves the right to charge a fee in accordance with the fee schedule determined by the Personal Data Protection Authority (where applicable).