CLARIFICATION TEXT ON THE PROCESSING OF PERSONAL DATA
General Information About The Law
We would like to inform you about the Personal Data Protection Law (Law No: 6698 aka KVK Law), which was enacted on March 24, 2016 and released on April 7, 2016 in order to protect the fundamental rights and freedoms of individuals, especially the privacy of personal life, and to determine the obligations of real and legal persons who process personal data.
CYBERPARK as the data controller, present herein clarification text (Clarification Text) in order to inform you, which is prepared for the protection of personal data of our business partners and other parties with whom it is involved and for providing data security and data privacy.
Data Supervisor Enlightenment
As Ankara Teknoloji Geliştirme Bölgesi Kurucu ve İşletici A.Ş. (Bilkent CYBERPARK), where corporate information published on our website in detail, we will use your personal data in accordance with the relevant legislation in conjunction with our Data Supervisor (Tufan ÖZCANLI - Personal Data Manager) in accordance with the Personal Data Protection Law.
How can your personal data be processed?
In the scope of the Law, personel data shall be any and all kinds of data of an individual or identifiable natural person; processing means “obtaining, storing, preserving, changing, reorganizing, disclosing, transferring, taking over, making available, classifying personal data in a completely or partially automated or non-automated manner provided that is part of any data recording system or any processing of data such as the prevention of its use.
The Methods and Legal Reasons of Collection of Personal Data
Personal Data are collected by CYBERPARK on the basis of the ability of CYBERPARK to fulfill its obligations arising from contracts, technology and laws accurately in order to improve our products and services and for the purposes which is relating to fulfill our information retention, reporting and information obligations envisaged by judicial and administrative authorities (such as the Ministry of Industry and Technology and the Ministry of Internal Affairs), to carry out advertisement and promotion activities, to analyze our customer portfolio.
CYBERPARK shall protect Personal Data only for definite, clear and legal purposes and will be able to store it for the periods required for the purposes of processing of the Personal Data described above in the relevant section.
CYBERPARK shall not process the Personal Data in a manner incompatible with the purposes for which they are collected within the framework of this Clarification Text and KVK Law and shall erase, destruct or anonymize ex officio or upon demand by the data subject, upon disappearance of reasons which require the process erasure or destruction or anonymizing.
Information About People Or Organizations Where We Can Transfer Your Personal Data
Your Personal Data shall be transferred by CYBERPARK to its business partners, (including but not limited to) competent courts and/or enforcement offices, Rep. Of Turkey Ministry of Industry and Technology, TÜBİTAK, Ministry of Interior, governorates, other official authorities and institutions, Bilkent Holding A.Ş., companies and subsidiaries of Bilkent Holding A.Ş., companies that we are shareholder of, Program partner organizations, domestic / international organizations and other third parties with whom we receive services, to cooperate, to carry out our activities.
How is your personal information collected?
Rep. Of Turkey Ministry of Industry and Technology online portal, Bilkent CYBERPARK Information Management System (MIS), our website, our mobile applications, our employees of Leasing and Company Affairs, Entrepreneurship, Cooperation and Technology Transfer Office employees, Bilkent CYBERPARK Secretariat employees, Reporting, Data Analysis Management employees can collect your data. Your personal data can be collected in writing, verbally or electronically through abovementioned channels, visits, trainings and events or through channels such as digital marketing and call center, contracts, applications, e-mail, forms, offers, cookies etc. used by your computer to visit you during website visits.
Rights of Data Owner
According to article 20 of the Constitution of the Republic of Turkey, everyone has the right to be informed about him/her Personal Data and pursuant to Article 11 of KVK Law, the rights of the Personal Data owner include the right to “request information”.
In this context, CYBERPARK provides the necessary information if the Personal Data owner requests information, and CYBERPARK gives information to the Personal Data owner about how to use the right to request such information and how to evaluate the issues related to the request information.
Personal Data owners have the following rights under KVK LAW:
- to learn whether his/her Personal Data are processed or not,
- to request information if his/her Personal Data are processed,
- to learn the purpose of his/her Personal Data processing and whether this Personal Data is used for intended purposes,
- to know the third parties to whom his/her Personal Data is transferred at home or abroad,
- to request the rectification of the incomplete or inaccurate data, if any,
- to request the erasure or destruction of his/her Personal Data under the conditions laid
down in Article 7 of KVK LAW and in this context, to request notification to third parties to whom his/her personal data has been transferred,
- to object to the processing, exclusively by automatic means, of his/her Personal Data, which leads to an unfavourable consequence for the Personal Data subject,
- to request compensation for the damage arising from the unlawful processing of his/her Personal Data.
Application of Personal Data Owner
Bilkent CYBERPARK carries out the necessary channels, internal functioning, administrative and technical arrangements in accordance with the Law in order to provide necessary information to personal data owners. Accordingly, if personal data owners submit their requests regarding their rights mentioned above to Bilkent CYBERPARK, they will be informed free of charge within thirty days at least. The report will include reasoned positive / negative response according to the nature of the request. However, if the transaction requires a separate cost, Bilkent CYBERPARK may charge the fee at the tariff determined by the Personal Data Protection Authority. Personal data owners will be able to submit their requests regarding their rights mentioned above to Bilkent CYBERPARK via the “Bilkent CYBERPARK Data Owner Application Form” in Annex-1.
Applications shall be made in one of the following ways, together with documents that will identify the personal data owner:
- Filling the original signed document delivered by hand, via a notary or registered letter to Cyberpark, Cyberplaza B Blok Kat 1 06800 Bilkent, Ankara,
- The form is signed with a secure electronic signature issued under the Electronic Signature Law No. 5070 and sent to ankara.cyberpark@hs02kep.tr via registered e-mail,
- Sending a request to the e-mail address kisiselverilerim@cyberpark.com.tr, (In this case, in order to determine whether the applicant actually owns the personal data from the channel that the applicant is applying for, the applicant will be contacted over the registered phone to identify his identity and determine whether he/she has actually made this application. In this context, if the applicant's last order information is confirmed and the data subject and the applicant are matched, the application will be evaluated.)
- Following a method foreseen by the Personal Data Protection Authority.
In order for third parties who want to make an application request on behalf of personal data owners, a special power of attorney issued by the notary public on behalf of the person to apply must be found by the data owner. Bilkent CYBERPARK may request information from the relevant person in order to determine whether the applicant has personal data, and may ask a question about his application to the personal data owner in order to clarify the issues specified in the application. In cases where the application is rejected in accordance with Article 14 of the KVK Law, the answer is inadequate, or the application is not answered during its period; Data owner may apply to the Personal Data Protection Authority within thirty days from the date he/she learned Bilkent CYBERPARK’s answer, and in any case within sixty days from the date of application.
Kindly submitted.
Bilkent CYBERPARK
