FOUNDATION FOR THE RESEARCH AND PRESERVATION OF TURKISH SUFI MUSIC AND FOLKLORE: PRIVACY NOTICE AND STATEMENT ON DATA PROTECTION
In accordance with the Law on the Protection of Personal Data No. 6698 (hereinafter referred to as the “KVKK” or the “Law”), the processing and storage of personal data and/or special category personal data are of great importance. For this reason, as the FOUNDATION FOR THE RESEARCH AND PRESERVATION OF TURKISH SUFI MUSIC AND FOLKLORE (hereinafter referred to as the “FOUNDATION”), we act in accordance with the KVKK regarding the protection, storage and processing of your personal data and/or special category personal data. We frequently collect data from you via the internet. Personal data and/or special category personal data collected and recorded whilst you visit our website are processed in accordance with the Law on the Protection of Personal Data. In this context, the Turkish Sufi Music and Folklore Research and Preservation Foundation, in its capacity as the data controller, collects and retains your data within the legal limits. We would also like to point out that all personal data and/or special category personal data collected whilst visiting our website are also protected under our Privacy Policy. You may review our Privacy Policy (LINK TO BE PROVIDED), which is available on our website. This information notice, has been prepared by the Turkish Sufi Music and Folklore Research and Preservation Foundation in its capacity as data controller, in accordance with Article 10 of the Personal Data Protection Act No. 6698 and the Communiqué on the Procedures and Principles to Be Followed in Fulfilment of the Obligation to Provide Information.
In accordance with the Copyright Law (FSEK) and Law No. 5651, users are hereby informed that the website may contain links providing access to other websites or content; the Foundation bears no responsibility for the control, accuracy or adequacy of such links; and the Foundation does not in any way endorse these sites or guarantee the accuracy of the information they contain, and that the Foundation bears no responsibility for the content on these sites; users hereby acknowledge and declare that the Foundation shall not be held liable for any material or immaterial, positive or negative, or potential damage or expense that may arise from the use of these sites.
The user or users acknowledge that the website may contain any text, information, comments, opinions, news, images, pictures, diagrams, graphics or other materials belonging to the Foundation or to a third party or organisation, and acknowledge and declare that the Foundation holds the legal rights to such materials as set out in the Law on Intellectual and Artistic Works, and that these may not be copied, altered, reproduced, published, sold or made available for use, or interfered with, without the Foundation’s permission.
1. WHAT IS PERSONAL DATA?
Personal data is defined in the Law on the Protection of Personal Data No. 6698 as ‘any information relating to an identified or identifiable natural person’. As can be understood from the definition, any information that makes you identifiable constitutes personal data. In addition to the above, political opinions, religious denomination, race, religion, membership of associations or foundations, health information, philosophical beliefs, convictions, criminal records, information on criminal convictions and biometric data are classified as special categories of personal data.
2. LEGAL BASIS
The Personal Data Protection Act No. 6698 stipulates that data subjects must be informed prior to any data processing activities. This requirement, referred to as the ‘duty to provide information’, is set out in Article 10 of the Personal Data Protection Act: “At the time of obtaining personal data, the data controller and any authorised person shall inform the data subjects of: the identity of the data controller and, where applicable, their representative; the purposes for which the personal data will be processed; to whom and for what purposes the processed personal data may be transferred; the method and legal basis for the collection of personal data; and the other rights listed in Article 11.” Under Article 3 of this Act, the data controller is defined as “natural or legal persons who determine the purposes and means of processing personal data and are responsible for the establishment and management of the data recording system”. Similarly, a ‘data processor’ is defined as ‘a natural or legal person who processes personal data on behalf of the data controller, acting on the authority granted by the data controller’. In this context, the data controller is the FOUNDATION whose website you are visiting. The details of the data controller are as follows.
Data Controller: FOUNDATION FOR THE RESEARCH AND PRESERVATION OF TURKISH SUFİ MUSIC AND FOLKLORE
Address: DERVİŞALİ MAH., NURETTİN TEKKE STREET, NO. 13, FATİH/ ISTANBUL
Tel :
Email : info@ttmfav.org.tr
3. SCOPE OF THE INFORMATION OBLIGATION OF THE DATA CONTROLLER, THE FOUNDATION FOR THE RESEARCH AND PRESERVATION OF TURKISH SUFI MUSIC AND FOLKLORE
In accordance with the above, the data controller is the FOUNDATION. In its capacity as the data controller, the FOUNDATION hereby informs and clarifies to you, in this Privacy Notice, who may process your personal data and for what purposes, to whom it may be transferred and for what purposes, the method and legal basis for the collection of data, and the rights you hold as a data subject regarding the protection of your personal data.
PURPOSES FOR WHICH YOUR DATA IS PROCESSED BY THE FOUNDATION
Your personal data is processed within the limits set out in the Law on the Protection of Personal Data No. 6698 and in accordance with the principles of the law. Within the framework of the law, our data processing purposes as the FOUNDATION are as follows:
To improve the quality of the services provided to you,
To ensure you are promptly informed of innovations within the FOUNDATION and the services offered,
To keep you informed about our developing services and to provide clarification where necessary,
To ensure you can benefit fully from the services provided by our FOUNDATION,
To establish the Foundation’s corporate identity on a solid foundation and ensure its operational efficiency,
To achieve the objectives of our internal policies and thereby enhance the satisfaction of our stakeholders,
To ensure data security,
To develop the services provided by the Foundation via the internet,
To resolve any issues that arise promptly,
To enable us to contact those who submit requests and complaints to the FOUNDATION,
To ensure compliance with the provisions of the Privacy Policy (LINK TO BE PROVIDED) on our website.
PRINCIPLES GOVERNING THE PROCESSING OF YOUR DATA
Retaining data for the period prescribed by the relevant legislation or for as long as necessary for the purpose for which it is processed;
Processing data in accordance with the law;
Ensuring the data remains up to date;
Acting in accordance with the principles of fairness;
Ensuring data is not used for purposes other than those for which it was processed;
Ensuring processing is proportionate and limited to the purpose for which it was processed;
Processing in accordance with public morality, customs and traditions;
Processing in accordance with the provisions of all relevant legislation, in particular the provisions of the Personal Data Protection Act No. 6698; The Foundation for the Research and Preservation of Turkish Sufi Music and Folklore has adopted these principles.
6-METHODS OF DATA PROCESSING
A) CIRCUMSTANCES IN WHICH YOUR PERSONAL DATA MAY BE PROCESSED
The Foundation may process your personal data in two circumstances. These two circumstances are: explicit consent and cases of compliance with the law (cases where explicit consent is not required).
B) CASES WHERE EXPRESS CONSENT IS NOT REQUIRED
The Law on the Protection of Personal Data No. 6698 stipulates that, in certain cases, express consent is not required for the processing of personal data. These cases, set out in the second paragraph of Article 5 of the Law, are as follows:
Where expressly provided for by law.
Where it is necessary to protect the life or physical integrity of the data subject or another person, in cases where the data subject is unable to express their consent due to practical impossibility or where their consent is not legally valid.
Where the processing of personal data belonging to the parties to a contract is necessary, provided that it is directly related to the conclusion or performance of the contract.
Where it is necessary for the data controller to fulfil its legal obligations.
Where the data has been made public by the data subject themselves.
Where the processing of data is necessary for the establishment, exercise or defence of a legal claim. • Where the processing of data is necessary for the legitimate interests of the data controller, provided that this does not infringe upon the fundamental rights and freedoms of the data subject.
METHOD AND LEGAL BASIS FOR COLLECTING YOUR DATA
In line with evolving technological conditions, our Foundation collects data from various channels. Our website is one of the channels through which we collect personal data automatically. Personal data and/or special category personal data collected via the Foundation’s website are processed on the basis of one or more of the legal grounds set out in Articles 5 and 6 of Law No. 6698, or on the basis of explicit consent. We wish to state that, depending on the category and type of data processed, the data subject is provided with an information notice; these notices explain the purpose for which the data will be processed, to whom and for what purpose the processed data may be transferred, the method and legal basis for data collection, and the rights held by the data subject, and that explicit consent is obtained where necessary.
8. TRANSFER AND PROTECTION OF DATA
A) TRANSFER
Your data is transferred to third parties where necessary, in accordance with the Personal Data Protection Act No. 6698. For each piece of data transferred, the Information Notice provided prior to data collection contains a detailed explanation of the purposes for which the data may be transferred and to whom. However, in all circumstances, the Foundation acts in accordance with Articles 8 and 9 of Law No. 6698 when transferring data. Furthermore, it takes the necessary technical and organisational measures.
B) PROTECTION
The Personal Data Protection Act No. 6698 is primarily aimed at protecting data and preventing unauthorised transfers. As a FOUNDATION, we are taking the necessary technical and administrative measures—primarily in accordance with the provisions of the relevant Act—to prevent the transfer of data to unauthorised third parties. In this context, in-house policies in particular are being brought into line with the Law on the Protection of Personal Data, and all relevant technical software and hardware designed to protect personal data are utilised for this purpose. To ensure all of this, we endeavour to prevent both our employees and third parties with whom we do business from acting in contravention of our Privacy Policy (LINK TO BE PROVIDED).
9. RIGHTS OF THE DATA SUBJECT
A) GENERAL INFORMATION ON THE RIGHT TO SUBMIT A REQUEST
Article 11 of the Personal Data Protection Act No. 6698 sets out the rights of the data subject. Under the Act, the data subject is referred to as the ‘data subject’, and the right to make certain requests regarding the processing of their data is provided for. In accordance with this article, the data subject’s rights to make requests are as follows:
To find out whether personal data has been processed,
To request information regarding the processing of personal data, if it has been processed,
To find out the purpose of the processing of personal data and whether it is being used in accordance with that purpose,
To know the third parties to whom personal data has been transferred, whether within or outside the country,
To request the rectification of personal data if it has been processed incompletely or incorrectly,
To request the erasure or destruction of personal data in accordance with the conditions set out in Article 7 of the Act, entitled ‘Erasure, Destruction or Anonymisation of Personal Data’,
To request that third parties to whom personal data has been transferred be informed that the incomplete or incorrectly processed data has been rectified, or that the data has been erased or destroyed at the data subject’s request,
To object to a decision being made solely through the automated processing of personal data that adversely affects the data subject,
To request compensation for any damage suffered as a result of the unlawful processing of personal data.
You may submit requests regarding your rights arising from the Personal Data Protection Act, as explained above, to our Foundation in accordance with the procedures set out in this Information Notice.
Your requests will be responded to by the FOUNDATION as soon as possible or within thirty days at the latest. Applications must be made by the data subject in person. The FOUNDATION will only consider applications made by the data subject and will only disclose information regarding the applicant. B) APPLICATION PROCEDURE You may submit your requests regarding the rights set out above to the TURKISH SUFİ MUSIC AND FOLKLORE RESEARCH AND PRESERVATION FOUNDATION, acting in its capacity as the data controller, in writing or via a registered electronic mail (KEP) address, a secure electronic signature, mobile signature, or an email address previously notified to the data controller by the data subject and registered in the data controller’s system. To exercise your rights regarding personal data, you may review the information on our website and use the “Information Request Form Pursuant to the Personal Data Protection Act No. 6698” (LINK TO BE PROVIDED) available on our website.
C) INFORMATION REQUIRED IN YOUR APPLICATION The information required in your application is as follows:
Your First Name and Surname:
Your Turkish ID Number:
If you are a foreign national, your nationality and passport number:
If submitting a written application, your wet signature at the bottom of the Request Form
Content of your request in accordance with Article 11 of the Personal Data Protection Law:
Your telephone number:
Your email address:
Your address for service of notice:
Data Controller: FOUNDATION FOR THE RESEARCH AND PRESERVATION OF TURKISH SUFI MUSIC AND FOLKLORE
Address: DERVİŞALİ MAH., NURETTİN TEKKE STREET, NO. 13, FATİH/ISTANBUL
Tel:
Email: info@ttmfav.org.tr