Personal Data Saving Policy

LAW ON THE PROTECTION OF PERSONAL DATA

CHAPTER ONE

Purpose, Scope and Definitions
Purpose

ARTICLE 1 – (1) The purpose of this Law is to protect fundamental rights and freedoms of people, particularly the right to privacy, with respect to processing of personal data and to set forth obligations, principles and procedures which shall be binding upon natural or legal persons who process personal data.

Scope
ARTICLE 2 – (1) The provisions of this Law shall apply to natural persons whose personal data are processed as well as to natural or legal persons who process such data fully or partially through automatic means or provided that the process is a part of any data registry system, through non-automatic means.

Definitions
ARTICLE 3 – (1) For the purposes of this Law the following definitions shall apply:
a) Explicit consent: freely given, specific and informed consent,
b) Anonymizing: rendering personal data impossible to link with an identified or
identifiable natural person, even through matching them with other data,
c) President: President of the Personal Data Protection Authority,
ç) Data subject: the natural person, whose personal data is processed,
d) Personal data: all the information relating to an identified or identifiable natural
person,
e) Processing of personal data: any operation performed upon personal data such as
collection, recording, storage, retention, alteration, re-organization, disclosure, transferring,
taking over, making retrievable, classification or preventing the use thereof, fully or partially
through automatic means or provided that the process is a part of any data registry system,
through non-automatic means,
f) Board: the Personal Data Protection Board,
g) Authority: the Personal Data Protection Authority,
ğ) Processor: the natural or legal person who processes personal data on behalf of the
controller upon his authorization,
h) Data registry system: the registry system which the personal data is registered into
through being structured according to certain criteria,

2
ı) Controller: the natural or legal person who determines the purpose and means of
processing personal data and is responsible for establishing and managing the data registry
system.