top of page
GDPR Clarification Text

This information and clarification text has been prepared for the purpose of informing and enlightening the data owners of the Experiential Education Centre Association during the collection, acquisition, storage, storage, sharing and privacy protection of personal data in accordance with the law within the scope of the Law No. 6698 on the Protection of Personal Data and other relevant legislation.

In this context, this information text is submitted for your information and review in order to fulfil our disclosure obligation in accordance with Article 10 of the relevant law in terms of the conditions and purposes to be explained below and the data to be processed in accordance with the law.

Definition of Data Controller:

As defined in Article 3 of Law No. 6698, the data controller is defined as "the natural or legal person who determines the purposes and means of processing personal data and is responsible for the establishment and management of the data recording system".

In this context, the Experiential Training Centre Association is also responsible for the processing of personal data in the capacity of Data Controller, and the fulfilment of the obligation to inform and clarify is provided by this clarification text.

Legal Basis and Reasons for Processing Personal Data:

In case of obtaining personal data clearly defined in the Law No. 6698 on the Protection of Personal Data, these data are processed within the scope of Articles 5 and 6 of the relevant Law. In this context, your personal data will be processed based on the following legal reasons, and your explicit consent will be requested for the processing of your Personal Data in cases other than the specified legal reasons. 

These legal purposes in accordance with the Law;

  • In order to provide information when requested from authorised public institutions and organisations, in particular when requested by the Court and authorised public officials, 

  • Fulfilment of legal obligations and exercise of rights arising from the legislation in force, 

  • It is deemed necessary for the fulfilment of obligations arising from the establishment, performance and conclusion of the contract, 

  • The processing of personal data by our Region is mandatory for the establishment, exercise or protection of the rights of us or you or third parties,

  • Provided that the fundamental rights and freedoms of the person are protected, it is mandatory to process the data for the legitimate interests of our Region (carrying out satisfaction assessment activities of existing customers, organisation and event management, carrying out finance-accounting transactions, carrying out audit processes, carrying out occupational health and safety activities, fulfilling the obligation to notify the competent public institutions such as courts, etc.)

  • It is necessary for the protection of the life or physical integrity of the person who is unable to disclose his/her consent due to actual impossibility or whose consent is not legally valid,

  • Personal Data has already been made public by the data subject,

  • Processing of data is mandatory for the establishment, exercise or protection of a right,

are states. 

Personal Data other than the purposes listed above will be processed by obtaining the explicit consent of the data subject. Personal data acquired and processed within the framework of the Law may differ depending on the legal relationship between our Region and the data subject. Personal data may be collected by our Region in accordance with the law through different platforms (manual ways, verbal/written statements, electronic channels, forms on the website of the association or by entering information such as name, surname, business or private e-mail address or through pages logged in using username and password, website visits and usage, within the scope of events and activities carried out by our association). 

Personal Data acquired by our Association may be obtained, stored, updated and processed as long as the above conditions and/or explicit consent is available.
 

Collection of Personal Data, Purpose of Processing

Your Personal Data obtained by us through our website or other means mentioned above will be processed by us for the following purposes according to its nature: 

  • Carrying out the necessary planning, evaluation and studies by our business units in order to benefit our stakeholders from the products and services we offer as an association;

  • Carrying out advertising and marketing activities for the services we offer, providing information on similar issues, carrying out corporate communication activities,

  • Carrying out Marketing and Customer Relationship Management activities;

  • Organising and informing about corporate communication and other events, campaigns and invitations within this scope, conducting market research studies; 

  • Improving and personalising the digital platforms we offer to our customers and stakeholders, and if necessary, using cookies for this purpose;

  • Monitoring and evaluating the requests, suggestions and complaints received from the relevant persons, customer management and planning in this context, carrying out evaluation studies in all areas;

  • Ensuring the sustainability of all kinds of activities carried out within the scope of the activities of the Association, making improvements and auditing the persons and companies with whom we have established contractual relations;

  • Ensuring the legal and commercial security of the persons with whom the Experiential Training Centre Association has a business-service relationship,

  • Planning and execution of occupational health and safety processes;Exercising legal rights by using the information in question, using the information on the transaction history as evidence in case of dispute after the termination of the existing legal relationship with the relevant person / institution;

  • Conducting planning, reporting, visitor/customer statistics and similar examinations within the scope of its activities and/or ensuring compliance with the relevant domestic legislation, providing information requested by public institutions and organisations, fulfilling reporting obligations.

  • Confirming the identity information of the persons, visitors who make transactions on the website / mobile applications or on whose behalf transactions are made, and recording the address and other necessary information required for communication,

  • Ensuring the security of the website and other electronic systems and physical environments established by the Association

 

Rights of the Data Subject 

The rights of natural/legal persons whose personal data are processed in accordance with Article 11 of the GDPR are as follows;

  • To learn whether personal data is being processed,

  • Request information if personal data has been processed,

  • To learn the purpose of processing personal data and whether they are used in accordance with their purpose,

  • To know the third parties to whom personal data are transferred domestically or abroad,

  • To request correction of personal data in case of incomplete or incorrect processing and to request notification of the transaction made within this scope to third parties to whom personal data is transferred,

  • Although it has been processed in accordance with the provisions of the GDPR and other relevant laws, to request the deletion or destruction of personal data in the event that the reasons requiring its processing disappear and to request notification of the transaction made within this scope to third parties to whom personal data is transferred,

  • To object to the emergence of a result to the detriment of the person himself/herself by analysing the processed data exclusively through automated systems,

  • In case of damage due to unlawful processing of personal data, to demand compensation for the damage.

In order to exercise the above-mentioned rights, the distinctive identity / registration information and the right to be exercised and the explanations regarding this matter will be processed as a written request, in accordance with Article 11 of the KVK Law No. 6698, to the headquarters address of the Experiential Education Centre Association, "Şerifali, Büyük Yavuz Sk. No:31, 34775 Ümraniye / İstanbul Türkiye" by registered letter with return receipt requested.

Evaluation of the Data Subject's Requests

Pursuant to paragraph 1 of Article 13 of the GDP Law No. 6698, after the requests regarding the exercise of the above-mentioned rights are submitted to our association in writing or by other methods determined by the Personal Data Protection Board, your application will be finalised free of charge as soon as possible (However, if the transaction requires an additional cost, the fee in the tariff determined by the Board may be charged) and will be returned via your contact information you have provided to us.

Links to third party websites (links)

Our Association's website may contain links to third party websites. Our association does not accept any responsibility for the privacy policies of these sites and in no way guarantees that the data protection practices of these websites comply with all relevant legislation and regulations.

bottom of page