KVKK (Personal Data Protection Law) Information

KVKK (Personal Data Protection Law) Information

DATA CONTROLLER

We give utmost importance to the security and privacy of your personal data as the Scientific and Technological Research Council of Turkey (TÜBİTAK). Through the position of “Data Controller” within the scope of the Personal Data Protection Law No. 6698 (KVKK), the collection, storage, processing of personal data, data transfer (in accordance with the legislation), length of data storage, rights of data owners, and similar considerations are explained in this information text.

COLLECTION, PROCESSING, PURPOSE AND TOOLS WITH REGARDS TO PERSONAL DATA

TÜBİTAK can process personal data to sufficiently continue its activities, in accordance with the principles and procedures stipulated by relevant laws, and regulations related to KVKK. Personal data regarding our stakeholders are collected by TÜBİTAK departments, website, social media, etc., either directly or indirectly, and may be collected through written, oral or electronic means. Personal data obtained with regards to KVKK can be processed for the following purposes:

Pursuing activities in accordance with the goals mentioned in the founding legislation of TÜBİTAK

Responding to information and similar requests from public institutions, organizations, and relevant stakeholders in a timely manner

Fulfillment of contractual and legal obligations

Tracking financial and/or accounting matters

Implementation of legal procedures and pursuing legal processes

Conducting human resources processes and activities

Planning, auditing, and implementation of information and security processes

Improvement processes for quality checks and standard inspections 

Ensuring the security of the institution and personnel

Coordinating procedures related to visitors and meetings participants

Diversifying and improving support processes

Assessing and acting on suggestions/wishes/complaints and requests by stakeholders and visitors to the institution through all channels, and to carry out improvement studies in accordance with the notifications.

As stated in PERSONAL DATA COLLECTION METHOD AND LEGAL REASONS Law, Articles 5 and 6:

In cases where explicit consent is required, when explicit consent of the person is concerned,

As explicitly stipulated in the law,

Given that it is directly related to the implementation or performance of a contract,

Given it is necessary to process the personal data of the parties to the contract,

Given it is mandatory for the data controller to fulfill its legal obligation,

Given that data processing is mandatory for the implementation, exercise or protection of a right,

Given that it does not harm fundamental rights and freedoms of the data subject, 

Given data processing is mandatory for the legitimate interests of the data controller, etc. — based on their duty and authority given in paragraph (t) of Article 234 of the Presidential Decree No. 4;

TÜBİTAK collects personal data within the framework stipulated in the provisions of Articles 6 and 8, from the relevant individual during the communication and/or establishment of the legal relationship with TÜBİTAK, and during the continuation of the said relationship, from the third parties including the solution partners with whom TÜBİTAK cooperates or contractually partners with, including call centers, camera and audio recordings, application forms, web sites membership, and contact forms, internet, mobile applications, websites, e-bulletin registration forms, cookies, social media and other public channels or organized trainings, meetings, organizations and similar events. Such personal data can be processed and transferred for the purposes specified in Article 2 of this text, while considering the conditions to process data through the relevant legislation.

PERSONAL DATA TRANSFERRING

If the gathered personal data is transferred within the country or abroad, TÜBİTAK complies with the provisions defined in Articles 8 and 9 of the said law. For TÜBİTAK to be able to carry out its services fulfill legal requirements effectively, data can be shared in necessary instances, with respect to relevant laws, regulations and protocols, and can be shared with authorized public institutions and organizations in the country, law enforcement forces, courts and enforcement offices, legally authorized private legal persons, related third parties. parties, natural and legal persons, service providers and their officials, project partners, and support service providers.

THE RIGHTS OF PEOPLE WHOSE PERSONAL DATA IS PROCESSED WITHIN THE SCOPE OF KVKK— people applying to TÜBITAK with regards to Article 11 of the said Law have the rights to:

Inquire whether personal data is processed,

If personal data has been processed, ask for further information

Learn the purposes of processing personal data and whether they are used appropriately

Finding out which third parties personal data is transferred to within the country,

Demand correction of personal data if it is incomplete or incorrectly processed, and request that third parties to which the data has been transferred to are notified

Request deletion and anonymization of personal data, while it is evaluated for its purpose, duration and legitimacy, and to request that third parties to which the personal data has been transferred to are notified 

Object to the results of processed data if it is processed through automatic means and the result is unfavourable 

Demand compensation for damages if  personal data is processed unlawfully and harm is caused as a result.

CONTACTING FOR REQUESTS

As per Article 11 of KVKK that regulates “the rights of the data subject", you can send your requests within the scope of Article 11 to TÜBİTAK’s address at TÜBİTAK Tunus Caddesi No:80 06100 Kavaklıdere / Ankara, after attaching identity information in accordance with the "Declaration on the Procedure and Principles of Application to the Data Controller". Alternatively, you can send an email with a secure electronic signature to tubitak.baskanlik@tubitak.hs03.kep.tr. The subject person must clearly indicate the issue requested in their application, with their rights mentioned above. Information and files related to the application must be attached to the application. Applications that are made in this manner will be accepted following the identity verification, and your request regarding your rights will be finalized as soon as possible, or within 30 (thirty) days at the latest, depending on the nature of the request. If the application is responded to in writing or through recording media such as CD and flash memory, a processing fee specified in Article 7 of the "Declaration on the Procedures and Principles of Application to the Data Controller" may be charged. You can contact TÜBİTAK via the contact information given below.

Directorate Address:  TÜBİTAK Tunus Caddesi No:80 06100 Kavaklıdere / Ankara

Telephone: 0312 468 5300

Fax: 0 312 427 6817

Email: kvkk@tubitak.gov.tr

Website: www.tubitak.gov.tr