Corporate

Clarification Texts

Adult Participant Clarification Text
Artist Clarification Text On The Processing Of Personal Data
Author Personal Data Processing Clarification Text
Business Partner Personal Data Processing Clarification Text
Corporate Donor Personal Data Processing Clarification Text
Corporate Stakeholder Personal Data Processing Clarification Text
Customer Personal Data Processing Clarification Text
Data Subject Application Form
Educator/Teacher Personal Data Processing Clarification Text
Individual Donor Personal Data Processing Clarification Text
Individual Stakeholder Personal Data Processing Clarification Text
Parent Personal Data Processing Clarification Text
Reviewer Personal Data Processing Clarification Text
Scholarship Recipient Personal Data Processing Clarification Text
Student/Child Personal Data Processing Clarification Text
Supplier Personal Data Processing Clarification Text
User Personal Data Processing Clarification Text
Visitor Personal Data Processing Clarification Text
Volunteer Personal Data Processing Clarification Text

ADULT PARTICIPANT PERSONAL DATA PROCESSING CLARIFICATION TEXT

In accordance with the Law on the Protection of Personal Data No. 6698 (“Law”), your personal data may be processed by the Suna and İnan Kıraç Foundation (“SVİKV” or the “Foundation”) as the data controller, within the scope outlined below.

Purposes and Legal Grounds for Processing Personal Data

Your collected personal data may be processed by our Foundation within the scope of the purposes stated below (“Purposes”) and in accordance with the conditions and purposes for processing personal data set forth in Article 5 of the Law, due to the establishment of a contractual relationship between you and the Foundation.

Based on the legal ground that processing is necessary for the establishment or performance of a contract:

Organizing educational and event activities,
Receiving workshop reservations and filling out registration forms,
Preparing workshop participation forms,
Planning and executing the development of activities offered to adult participants,
Planning and carrying out necessary operational activities to ensure that the Foundation’s activities are conducted in accordance with the Foundation’s procedures and/or relevant legislation.

Based on the legal ground that processing is necessary for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject:

Taking photographs and video recordings during educational programs and events,
Planning and execution of business activities,
Monitoring of financial and accounting transactions.

Based on the legal grounds that it is necessary for our Foundation, as the data controller, to fulfill its legal obligations and that it is explicitly stipulated by laws;

Fulfilling requests from official institutions,
Providing information to authorized bodies as required by legislation,
Ensuring compliance with retention obligations prescribed by the legislation,
Responding to data subject applications in accordance with legislation and carrying out necessary procedures,
Fulfilling legal obligations arising from the legislation applicable to our Foundation.

Based on Your Explicit Consent:

Although photographs and video recordings are not listed among the special categories of personal data specified under Article 6 of the Law, they may contain elements requiring special protection. Therefore, your photograph and/or video data may be processed by our Foundation within the scope of workshops, trainings, and events based on your explicit consent.

To Whom and for What Purpose the Processed Personal Data May Be Transferred

Your personal data may be transferred by our Foundation, for the purposes stated above, to legally authorized public institutions and authorized private persons, within the framework of the data processing conditions regulated under Article 5 and in accordance with the principles regarding the transfer of personal data outlined in Article 8 of the Law.

Other than this, your personal data is not directly transferred by our Foundation to third persons or institutions within or outside the country. However, if the databases of the applications (such as Google Drive, etc.) and systems used by our Foundation are located abroad, your data is legally deemed to have been transferred abroad.

Method of Collecting Personal Data

Your personal data is collected by our Foundation for the realization of the Purposes stated above, through the information you provide or through third parties, verbally or in writing, during in-person visits, via email, the Foundation’s internal systems, or our website in electronic format.

Rights of the Data Subject Under Article 11 of the Law

In accordance with Article 11 of the Law, you have the following rights regarding your personal data:

To learn whether your personal data is being processed,
To request information if your personal data has been processed,
To learn the purpose of the processing and whether it is being used in line with that purpose,
To know the third parties to whom your data is transferred, domestically or abroad,
To request correction if your data is incomplete or inaccurate, and request notification of such correction to third parties,
To request deletion or destruction of your personal data if the reasons for processing no longer exist, even if processed in accordance with the law, and request that such actions be notified to third parties,
To object to outcomes that are against you as a result of analysis exclusively by automated systems,
To request compensation if you suffer damage due to the unlawful processing of your personal data.

You may submit your requests regarding the above-mentioned rights by completing the Data Subject Application Form available at https://www.sunaveinankiracvakfi.org.tr/en/legal/protection-of-personal-data/129 and sending it to our Foundation. Depending on the nature of your request, it will be concluded as soon as possible and within thirty days at the latest, free of charge. However, if the process requires an additional cost, a fee may be charged in accordance with the tariff set by the Personal Data Protection Board.

ARTIST CLARIFICATION TEXT ON THE PROCESSING OF PERSONAL DATA

In accordance with the Personal Data Protection Law No. 6698 (“Law”), your personal data may be processed by the Suna and İnan Kıraç Foundation (“SVIKV” or “Foundation”) as the data controller, within the scope explained below.

Purpose and Legal Grounds for Processing Personal Data

Your collected personal data may be processed under the conditions and purposes for personal data processing stated in Article 5 of the Law, due to the contractual relationship established between you and our Foundation, for the following purposes (“Purposes”):

Based on the legal grounds of the necessity of processing personal data of the parties to a contract, provided that it is directly related to the establishment or performance of such contract:

Management of relations with artists,
Signing of contracts,
Planning and execution of business activities,
Planning and execution of operational activities necessary to ensure that Foundation operations are carried out in accordance with internal procedures and/or relevant legislation,
Issuance of expense slips.

Based on the legal ground of data processing being necessary for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject:

Planning and execution of business activities,
Monitoring of financial and accounting affairs,
Organization and publication of talks on social platforms,
Conducting interviews and publishing them on social platforms.

Based on the legal grounds of processing being necessary for the data controller to fulfill its legal obligations or explicitly required by laws:

Fulfilling requests from official institutions,
Providing information to authorized institutions as required by law,
Ensuring compliance with legal retention obligations,
Responding to data subject applications in accordance with the legislation and carrying out necessary procedures,
Fulfilling legal obligations arising from the laws applicable to our Foundation.

Based on your explicit consent:

During interviews conducted with you, if you voluntarily disclose sensitive personal data such as race, ethnic origin, political opinions, philosophical beliefs, religion, sect or other beliefs, or membership in associations, foundations, or unions, such data may be processed by our Foundation.
Although photographs are not explicitly listed as sensitive personal data under Article 6 of the Law, they may contain elements that require special protection. Therefore, your photograph may be processed by our Foundation based on your explicit consent for purposes such as managing digital platforms and creating registration forms for events.

To Whom and for What Purpose Processed Personal Data May Be Transferred

Your personal data collected may be shared for the purposes stated above, within the scope of our legitimate interests, with our contracted suppliers, business partners such as our Communication Agency for providing better services, and with legally authorized public institutions and private individuals in accordance with the personal data processing conditions set out in Article 5 of the Law and the rules on the transfer of personal data specified in Article 8 of the Law.

Apart from the aforementioned, your personal data is not directly transferred by our Foundation to any third party or institution either within or outside of Turkey. However, if the applications (e.g., Wetransfer, Outlook, WhatsApp, etc.) and systems used by our Foundation (e.g., servers) are based abroad, the transfer of your data may be considered as an international transfer under the Law.

Method of Collecting Personal Data

Your personal data is collected for the purpose of establishing and maintaining a working relationship with our Foundation, through written or verbal means, during face-to-face visits in physical settings, video calls, and via electronic means such as emails, internal systems of the Foundation, and phone calls.

Rights of the Data Subject under Article 11 of the Law

We inform you that, in accordance with Article 11 of the Law, you have the following rights regarding your personal data:

To learn whether your personal data is being processed,
To request information if your personal data has been processed,
To learn the purpose of processing your personal data and whether it is being used in accordance with that purpose,
To know the third parties in Turkey or abroad to whom your personal data has been transferred,
To request correction of your personal data if it is incomplete or incorrectly processed, and to request notification of such correction to third parties to whom the data has been transferred,
To request deletion or destruction of your personal data if the reasons requiring processing are no longer valid, even though it has been processed in accordance with the law, and to request notification of such actions to third parties to whom the data has been transferred,
To object to any outcome to your detriment resulting from the exclusive analysis of your personal data through automated systems,
To demand compensation if you suffer damage due to the unlawful processing of your personal data.

You may submit your applications regarding your rights listed above by filling out the Data Subject ApplicationForm available at https://www.sunaveinankiracvakfi.org.tr/en/legal/protection-of-personal-data/129 and submitting it to our Foundation. Depending on the nature of your request, it will be processed free of charge as soon as possible and within a maximum of thirty days. However, if the processing requires an additional cost, you may be charged a fee according to the tariff determined by the Personal Data Protection Board.

AUTHOR PERSONAL DATA PROCESSING CLARIFICATION TEXT

Purpose and Legal Grounds for Processing Personal Data

Your personal data, collected due to the establishment of a contractual relationship between you and our Foundation, may be processed for the following purposes (“Purposes”) under the personal data processing conditions and purposes set forth in Article 5 of the Law.

Based on the legal ground that processing is necessary for the establishment or performance of a contract:

Managing relationships with authors,
Execution of contract signing processes,
Signing and archiving of copyright forms,
Receiving author submissions via Dergipark,
Planning and execution of business operations,
Planning and execution of operational activities to ensure that Foundation procedures and/or legal requirements are fulfilled,
Issuance of expense slips.

Based on the legal ground that processing is necessary for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject:

Planning and execution of business operations,
Tracking of finance and accounting processes,
Organizing symposiums and handling related hotel/travel arrangements.

Based on the legal ground that processing is required for the data controller to fulfill its legal obligations and when explicitly provided for by law:

Responding to requests from official authorities,
Providing information to authorized institutions as required by legislation,
Ensuring compliance with statutory data retention obligations,
Responding to data subject applications in accordance with the law and executing the necessary operations,
Fulfilling the Foundation’s legal obligations as required by applicable legislation.

Based on your explicit consent:

Although photocopies of ID cards, driver’s licenses, and/or passports are not considered special categories of personal data under Article 6 of the Law, they may include elements requiring special protection. Therefore, for the purposes of organizing hotel and travel arrangements related to symposiums, your personal data consisting of ID, driver’s license, and/or passport photocopies may be processed by our Foundation with your explicit consent.

To Whom and for What Purpose Personal Data May Be Transferred

Your personal data may be transferred, within the framework of the purposes listed above and our legitimate interests, to our contracted suppliers (e.g., travel agencies), legally authorized public institutions, and private individuals, in accordance with the personal data processing conditions outlined in Article 5 and the data transfer principles in Article 8 of the Law.

Method of Collecting Personal Data

Your personal data is collected for the purpose of establishing and maintaining a business relationship with our Foundation, either in writing or electronically through email, internal Foundation systems, and our website.

Rights of the Data Subject Under Article 11 of the Law

In accordance with Article 11 of the Law, you have the following rights regarding your personal data:

To learn whether your personal data is being processed,
To request information if your personal data has been processed,
To learn the purpose of the processing and whether it is being used in line with that purpose,
To know the third parties to whom your data is transferred, domestically or abroad,
To request correction if your data is incomplete or inaccurate, and request notification of such correction to third parties,
To request deletion or destruction of your personal data if the reasons for processing no longer exist, even if processed in accordance with the law, and request that such actions be notified to third parties,
To object to outcomes that are against you as a result of analysis exclusively by automated systems,
To request compensation if you suffer damage due to the unlawful processing of your personal data.

BUSINESS PARTNER PERSONAL DATA PROCESSING CLARIFICATION TEXT

In accordance with the Law on the Protection of Personal Data No. 6698 (“Law”), your personal data may be processed by Suna and İnan Kıraç Foundation (“SVİKV” or “Foundation”) as the data controller, within the scope detailed below.

Purpose and Legal Grounds for Processing Personal Data

Your personal data, collected in the context of a business relationship between the organization you are employed by/represent and our Foundation, may be processed for the purposes (“Purposes”) listed below under the personal data processing conditions and purposes set forth in Article 5 of the Law.

Based on the legal ground that processing is necessary for the establishment or performance of a contract:

Managing relationships with business partners,
Planning and execution of business activities,
Conducting sample collaborations with business partners within the scope of activities,
Planning and execution of product/service procurement: submitting quotations, purchasing, borrowing, leasing, order forms, price offer and request processes,
Execution of copyright and licensing procedures,
Execution of contract signing procedures,
Creation of delivery records for goods/services and execution of delivery and shipment processes,
Execution of mutual campaign processes,
Monitoring finance and accounting operations, preparing payment lists, executing payment processes,
Ensuring the legal, technical, and commercial/workplace safety of individuals related to the Foundation and its business partners,
Execution of insurance-related processes within the scope of activities,
Establishing communication and correspondence,
Planning and execution of operational processes to ensure that Foundation activities are carried out in accordance with Foundation procedures and/or relevant legislation.

Based on the legal ground that processing is necessary for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject:

Conducting necessary work and processes by relevant departments for the execution of commercial activities between the Foundation and your organization,
Planning and execution of business activities,
Collection of dietary information from data subjects,
Organizing digital promotions, seminars, and hackathon events,
Conducting sample projects and research with business partners and focus groups within the scope of activities,
Creating participant lists for activities,
Taking photographs during workshops,
Photographing and video recording during events and interviews, managing approvals and sharing via social media and websites,
Tracking financial and accounting operations, managing payment and guarantee processes,
Execution of mutual campaign processes,
Establishing communication and correspondence,
Sending new publications and catalogs, managing email and newsletter delivery processes,
Managing promotional and advertising distribution processes,
Managing gift delivery processes,
Carrying out auditing and control processes within the scope of activities and legal obligations,
Managing data collection, analysis, and reporting processes within activities, and performing related reporting and communication.

Based on the legal ground that processing is necessary for the data controller to fulfill a legal obligation or where explicitly provided by law:

Planning and executing product/service procurement: submitting quotations, purchasing, borrowing, leasing, order forms, price offer and request processes,
Executing contract signing procedures,
Monitoring finance and accounting operations, declarations, payments, and guarantee processes,
Responding to official institution requests,
Providing information to authorized institutions as required by legislation,
Ensuring compliance with data retention obligations stipulated by law,
Managing insurance procedures,
Ensuring the legal, technical, and commercial/workplace safety of individuals related to the Foundation and its business partners,
Carrying out assessment, audit, and ethics processes related to activities and legal obligations,
Responding to data subject applications in accordance with the legislation and carrying out necessary procedures,
Fulfilling the Foundation’s legal obligations under applicable laws and regulations.

Based on the legal ground that processing is necessary for the establishment, exercise, or defense of a right:

Conducting project development and content creation activities, identifying institutions for collaboration,
Planning product/service procurement and obtaining support during the process: purchasing, borrowing, leasing, order forms, price offer and request procedures,
Executing contract signing and related procedures,
Executing delivery, shipping, logistics, and installation processes for goods/services,
Conducting evaluations of events organized within the scope of activities,
Establishing communication and correspondence,
Managing insurance processes,
Organizing travel and accommodation arrangements.

Based on Your Explicit Consent:

During interviews conducted with you, if you voluntarily disclose any special categories of personal data—such as race, ethnic origin, political opinions, philosophical beliefs, religion, sect, or membership in associations, foundations, or unions—these may be processed by our Foundation with your explicit consent.
Although photographs and video recordings are not explicitly defined as special categories of personal data under Article 6 of the Law, they may contain elements requiring special protection. Therefore, photographs and video recordings taken during workshops, events, and interviews may be processed by our Foundation with your explicit consent, particularly for sharing and archival purposes.

To Whom and for What Purpose Personal Data May Be Transferred

Your personal data may be transferred, for the purposes mentioned above, to our business partners such as shipping and insurance companies, our communication agency, as well as legally authorized public institutions and private individuals, in accordance with the personal data processing conditions in Article 5 and the data transfer rules outlined in Article 8 of the Law.

Other than this, your personal data is not directly transferred to any third party within or outside the country by our Foundation. However, if the databases of the applications and systems (servers) used by our Foundation are located abroad, your data will be deemed to have been transferred abroad under the law.

Method of Collecting Personal Data

Your personal data is collected by our Foundation within the scope of the purposes mentioned above through various channels, including information you or your affiliated institution provide directly, as well as through third parties either verbally or in writing. Data may also be collected during in-person meetings, via postal or courier services and physical forms, and through electronic means such as email, the Foundation’s internal systems, our website, call center, and telephone calls.

Rights of the Data Subject Under Article 11 of the Law

Under Article 11 of the Law, you have the right to:

Learn whether your personal data is being processed,
Request information regarding the processing of your personal data,
Learn the purpose of processing and whether the data is used in accordance with the intended purpose,
Know the third parties to whom your personal data is transferred domestically or abroad,
Request correction of your personal data if it is incomplete or incorrectly processed and request that such corrections be notified to third parties,
Request the deletion or destruction of your personal data if the reasons for processing are no longer valid, and request notification of such actions to third parties,
Object to results that may arise to your detriment due to analysis of your personal data by exclusively automated systems,
Request compensation if you suffer damage due to the unlawful processing of your personal data.

CORPORATE DONOR PERSONAL DATA PROCESSING CLARIFICATION TEXT

CORPORATE DONOR PERSONAL DATA PROCESSING CLARIFICATION TEXT

In accordance with the Law on the Protection of Personal Data No. 6698 ("Law"), your personal data may be processed by the Suna and İnan Kıraç Foundation (“SVİKV” or “Foundation”) as the data controller, within the scope described below.

Purpose and Legal Grounds for Processing Personal Data

Your personal data collected may be processed within the scope of establishing a donation relationship between the organization you are affiliated with and our Foundation, and for the purposes listed below ("Purposes") under the conditions and purposes of personal data processing specified in Article 5 of the Law.

Based on the legal grounds that processing is necessary for the establishment or performance of a contract, provided that it is directly related to the parties to the contract:

Management of relationships with Corporate Donors,
Planning and execution of business activities,
Establishing communication,
Registering a Corporate Donor/Representative within the Foundation,
Signing of contracts,
Receiving donations,
Planning and conducting meetings,
Organizing events,
Sending newsletters.

Based on the legal grounds that processing is necessary for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject:

Carrying out the necessary work by our relevant departments for the execution of donation activities conducted with the organization you are affiliated with and the related business processes,
Planning and execution of business activities,
Monitoring financial and accounting processes.

Based on the legal grounds that processing is necessary for the data controller to fulfill its legal obligations and where explicitly provided for by laws:

Fulfilling official institution requests,
Providing information to authorized organizations as required by legislation,
Ensuring compliance with data retention obligations stipulated by law,
Responding to data subject applications in accordance with the law and carrying out necessary processes,
Fulfillment of legal obligations arising from legislation applicable to our Foundation.

To Whom and for What Purpose Processed Personal Data May Be Transferred

Your collected personal data is not directly transferred to any third party or institution within or outside the country by our Foundation. However, in cases where the applications (such as Salesforce) and systems (servers) used by our Foundation have databases located abroad, your data is considered to have been legally transferred abroad.

Method of Personal Data Collection

Your personal data is collected verbally and in writing during face-to-face visits conducted physically for the purpose of establishing and maintaining a donation relationship with our Foundation, and electronically via email and our website.

Rights of the Data Subject Under Article 11 of the Law

Pursuant to Article 11 of the Law, you have the following rights concerning your personal data:

To learn whether your personal data is being processed,
To request information if your personal data has been processed,
To learn the purpose of processing your personal data and whether it is being used in accordance with that purpose,
To know the third parties in Turkey or abroad to whom your personal data has been transferred,
To request correction of your personal data if it is incomplete or incorrectly processed, and to request notification of such correction to third parties to whom the data has been transferred,
To request deletion or destruction of your personal data if the reasons requiring processing are no longer valid, even though it has been processed in accordance with the law, and to request notification of such actions to third parties to whom the data has been transferred,
To object to any outcome to your detriment resulting from the exclusive analysis of your personal data through automated systems,
To demand compensation if you suffer damage due to the unlawful processing of your personal data.

You may submit your applications regarding your rights listed above by filling out the Data Subject Application Form available at https://www.sunaveinankiracvakfi.org.tr/en/legal/protection-of-personal-data/129 and submitting it to our Foundation. Depending on the nature of your request, it will be processed free of charge as soon as possible and within a maximum of thirty days. However, if the processing requires an additional cost, you may be charged a fee according to the tariff determined by the Personal Data Protection Board.

CORPORATE STAKEHOLDER PERSONAL DATA PROCESSING CLARIFICATION TEXT

In accordance with the Law on the Protection of Personal Data No. 6698 (“Law”), your personal data may be processed by Suna and İnan Kıraç Foundation (“SVIKV” or “Foundation”) as the data controller, within the scope explained below.

Purposes and Legal Grounds for Processing Personal Data

Your personal data may be processed within the scope of the personal data processing conditions and purposes specified in Article 5 of the Law, based on the establishment of a business relationship between our Foundation and the organization you work for or represent, and for the purposes (“Purposes”) listed below:

Based on the legal ground that processing is necessary for the establishment or performance of a contract directly related to the parties of the contract:

Managing relations with the Corporate Stakeholder,
Planning and execution of business activities,
Establishing communication,
Creating a record in the Foundation’s system on behalf of the Corporate Stakeholder/Employee or Representative,
Signing of contracts,
Signing of the Conditional Donation Protocol,
Collecting participation forms for community gatherings,
Planning and conducting meetings with employees/representatives of the Corporate Stakeholder,
Organizing events, travel, and accommodation,
Sending gifts,
Sending e-newsletters.

Based on the legal ground that processing is necessary for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject:

Carrying out necessary operations by relevant departments of the Foundation for the execution of business activities with your organization,
Planning and execution of business operations,
Tracking finance and accounting processes.

Based on the legal ground that processing is necessary for the data controller to fulfill its legal obligations or when explicitly stipulated by law:

Fulfilling official institution requests,
Providing information to authorized institutions as required by law,
Ensuring compliance with statutory data retention obligations,
Responding to data subject applications in accordance with the legislation and carrying out necessary procedures,
Fulfilling legal obligations arising from applicable legislation.

To Whom and For What Purpose Processed Personal Data May Be Transferred

Your collected personal data may be transferred, within the scope of the above-stated Purposes and our legitimate interests, to our suppliers (such as event and travel agencies) and business partners, to legally authorized public institutions, and to legally authorized private individuals, in accordance with the personal data processing conditions outlined in Article 5 and the data transfer rules set out in Article 8 of the Law.

Other than this, your personal data is not directly transferred by our Foundation to any third party or institution within or outside the country. However, if the databases (servers) of applications and systems used by the Foundation (e.g., Salesforce, Google Drive, Survey Monkey) are located abroad, your data will be deemed transferred abroad under the law.

Method of Collecting Personal Data

Your personal data is collected for the purpose of establishing and maintaining a donation relationship between you and the Foundation, through verbal or written communication during face-to-face visits in physical environments, and via electronic means such as e-mail or through our website.

Rights of the Data Subject Under Article 11 of the Law

Under Article 11 of the Law, you have the following rights regarding your personal data:

To learn whether your personal data is being processed,
To request information if your personal data has been processed,
To learn the purpose of processing your personal data and whether it is being used appropriately for that purpose,
To know the third parties to whom your personal data is transferred, domestically or abroad,
To request correction of incomplete or inaccurate personal data,
To request deletion or destruction of your personal data under the conditions stipulated in the relevant legislation,
To request that correction, deletion, or destruction operations be notified to third parties to whom your data has been transferred,
To object to results against you arising from analysis of your data exclusively through automated systems,
To request compensation if you suffer damages due to unlawful processing of your personal data.

You may submit your applications regarding your rights listed above by filling out the Data Subject Application Form available at https://www.sunaveinankiracvakfi.org.tr/en/legal/protection-of-personal-data/129 and submitting it to our Foundation. Depending on the nature of your request, it will be processed free of charge as soon as possible and within a maximum of thirty days. However, if the processing requires an additional cost, you may be charged a fee according to the tariff determined by the Personal Data Protection Board.

CUSTOMER PERSONAL DATA PROCESSING CLARIFICATION TEXT

In accordance with the Law on the Protection of Personal Data No. 6698 (“Law”), your personal data may be processed by Suna and İnan Kıraç Foundation (“SVİKV” or the “Foundation”) as the data controller, within the scope set out below.

Purposes and Legal Grounds for Processing Personal Data

Your personal data may be processed for the purposes (“Purposes”) specified below and on the legal grounds set forth in Article 5 of the Law.

Based on the legal ground that processing is necessary for the establishment or performance of a contract:

Preparing or executing contracts,
Collecting customer registration forms, creating customer records, managing memberships,
Creating and modifying account cards,
Issuing and managing loyalty cards and related services,
Managing membership accounts (if applicable),
Communication,
Conducting sales and marketing activities related to our services,
Creating sales records, processing payments, and issuing invoices,
Managing deliveries,
Managing post-sale customer relations,
Tracking debts,
Performing reconciliation and generating reconciliation reports,
Conducting customer/visitor analysis within the Pera Loyalty Program,
Receiving, evaluating, and responding to requests and complaints,
Audit-related activities.

Based on the legal ground that processing is necessary for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject:

Preparing or executing contracts,
Receiving customer registration forms, opening current accounts,
Managing customer relations,
Issuing and managing loyalty cards and related services,
Monitoring financial transactions,
Tracking outstanding balances,
Conducting necessary internal operations to ensure that our services benefit the relevant individuals,
Carrying out sales and marketing activities for our services,
Capturing and monitoring camera footage for security purposes,
Communication,
Special day celebrations,
Managing post-sale customer relations,
Planning and executing customer satisfaction efforts, including reporting activities,
Conducting customer/visitor analysis within the Pera Loyalty Program.

Based on the legal ground that processing is necessary for compliance with a legal obligation or when explicitly required by law:

Processing payments and invoices,
Conducting audits,
Responding to official authority requests,
Providing information to authorized institutions as required by law,
Managing legal affairs,
Executing information security processes,
Ensuring compliance with statutory retention obligations,
Responding to data subject requests in accordance with legal provisions and taking the necessary actions.

To Whom and for What Purpose Personal Data May Be Transferred

Your collected personal data may be transferred, for the purposes mentioned above, to our business partners, to legally authorized public institutions and private persons, in accordance with the conditions of data processing outlined in Article 5 and the data transfer rules defined in Article 8 of the Law.

Apart from these, your personal data is not directly transferred to any third parties within or outside the country by the Foundation. However, if the databases of the applications and systems (servers) used by our Foundation are located abroad, your data will be deemed as transferred abroad under the law.

Method of Collecting Personal Data

Your personal data is collected by the Foundation for the fulfillment of the above-mentioned purposes through data provided by you verbally or in writing, during face-to-face meetings in physical environments, and through electronic means such as email, internal systems of the Foundation, or our website.

Rights of the Data Subject Under Article 11 of the Law

In accordance with Article 11 of the Law, you have the following rights concerning your personal data:

To learn whether your personal data has been processed,
To request information if your personal data has been processed,
To learn the purpose of the processing and whether the data has been used accordingly,
To know the third parties to whom your data has been transferred, domestically or abroad,
To request the correction of your data if it has been processed incompletely or inaccurately, and to request that these corrections be communicated to third parties,
To request the deletion or destruction of your personal data if the reasons for processing no longer apply, and to request that these actions be communicated to third parties,
To object to results that are to your disadvantage arising from analysis of your personal data solely through automated systems,
To request compensation for damages in case of unlawful processing of your personal data.

You may submit your applications regarding your rights listed above by filling out the Data Subject Application Form available at https://www.sunaveinankiracvakfi.org.tr/en/legal/protection-of-personal-data/129 and submitting it to our Foundation. Depending on the nature of your request, it will be processed free of charge as soon as possible and within a maximum of thirty days. However, if the processing requires an additional cost, you may be charged a fee according to the tariff determined by the Personal Data Protection Board.

EDUCATOR/TEACHER PERSONAL DATA PROCESSING CLARIFICATION TEXT

Purpose and Legal Grounds for Processing Personal Data

Based on the legal ground that processing is necessary for the establishment or performance of a contract:

Managing relationships with educators/teachers,
Execution of contract signing processes,
Establishing communication,
Providing information about the Suna’s Daughters project and inviting you to the Teacher Community,
Organizing events/activities,
Organizing meetings and trainings,
Receiving workshop reservations,
Planning and executing operational activities to ensure that Foundation operations are conducted in accordance with internal procedures and/or applicable legislation,
Making payments.

Based on the legal ground that processing is necessary for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject:

Planning and execution of business activities,
Conducting data collection, analysis, and reporting,
Performing evaluations following participation in programs organized by Suna’nın Kızları,
Organizing accommodation, transportation, and similar arrangements,
Monitoring financial and accounting transactions,
Organizing symposiums and related hotel/travel arrangements.

Based on the legal ground that processing is required for the data controller to fulfill its legal obligations and when explicitly provided for by law:

Responding to requests from official institutions,
Providing information to authorized institutions as stipulated by legislation,
Ensuring compliance with legal data retention obligations,
Responding to data subject applications in accordance with the legislation and executing the necessary procedures,
Fulfilling legal obligations imposed by legislation applicable to the Foundation.

Based on Your Explicit Consent:

Within the scope of the Foundation's activities, if you voluntarily provide information regarding your association, foundation, or union membership during data collection, analysis, and reporting processes, such special categories of personal data may be processed by our Foundation with your explicit consent.
Although photographs are not considered special categories of personal data under Article 6 of the Law, they may contain elements that require special protection. For this reason, photographs taken during events may be processed by our Foundation based on your explicit consent.

To Whom and for What Purpose Personal Data May Be Transferred

Your personal data may be transferred, for the realization of the above-mentioned purposes and within our legitimate interests, to our contracted consultants and business partners, and to legally authorized public institutions and private persons, in accordance with the personal data processing conditions outlined in Article 5 and the data transfer rules set forth in Article 8 of the Law.

Apart from these, your personal data is not directly transferred to any third party, either domestically or abroad. However, if the databases of the applications and systems (such as Google Drive, Survey Monkey, etc.) used by our Foundation are located abroad, your data will be deemed to have been transferred abroad under the law.

Method of Collecting Personal Data

Your personal data is collected for the purpose of establishing and maintaining a business relationship with our Foundation, through verbal or written communications, or electronically via email, internal Foundation systems, and our website.

Rights of the Data Subject Under Article 11 of the Law

In accordance with Article 11 of the Law, you have the following rights concerning your personal data:

To learn whether your personal data is being processed,
To request information if your personal data has been processed,
To learn the purpose of processing and whether your data is used in accordance with the intended purpose,
To know the third parties to whom your personal data has been transferred, domestically or abroad,
To request correction of incomplete or inaccurate data and request notification of such corrections to third parties,
To request deletion or destruction of your personal data if the reasons for processing no longer exist, even if processed in accordance with the law, and to request that third parties be informed of these actions,
To object to results that are against you arising from analysis of your personal data by exclusively automated systems,
To request compensation if you suffer damage due to the unlawful processing of your personal data.

You may submit your applications regarding your rights listed above by filling out the Data Subject Application Form available at https://www.sunaveinankiracvakfi.org.tr/en/legal/protection-of-personal-data/129 and submitting it to our Foundation. Depending on the nature of your request, it will be processed free of charge as soon as possible and within a maximum of thirty days. However, if the processing requires an additional cost, you may be charged a fee according to the tariff determined by the Personal Data Protection Board.

INDIVIDUAL DONOR PERSONAL DATA PROCESSING CLARIFICATION TEXT

In accordance with the Law on the Protection of Personal Data No. 6698 (“Law”), your personal data may be processed by the Suna and İnan Kıraç Foundation (“SVİKV” or “Foundation”) as the data controller, within the scope described below.

Purposes and Legal Grounds for Processing Personal Data

Your collected personal data may be processed for the purposes listed below (“Purposes”) and on the legal grounds stipulated in Articles 5 and 6 of the Law.

Based on the legal ground that data processing is necessary for the establishment or performance of a contract, provided that it is directly related to the parties to the contract:

Updating individual donor contact information,
Creating a donor profile within the Foundation,
Receiving donations,
Sending newsletters.

Based on the legal ground that processing is necessary for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject:

Managing individual donor relations,
Carrying out communication activities,
Sending birthday and special day greetings,
Monitoring financial transactions,
Following up and conducting legal affairs,
Executing information security processes.

Based on the legal grounds that processing is required by law and necessary for the data controller to fulfill its legal obligations:

Responding to requests from official institutions.
Providing legally required information to authorized entities,
Ensuring compliance with legal data retention obligations.
Responding to data subject applications in accordance with the law and executing the necessary processes.

To Whom and for What Purpose Personal Data May Be Transferred

Your collected personal data is not directly transferred to any third party or institution within or outside of Turkey by our Foundation. However, if the applications (such as Salesforce) and systems (servers) used by our Foundation store data in databases located abroad, your personal data is deemed legally transferred abroad.

Method of Collecting Personal Data

Your personal data is collected by our Foundation verbally or in writing, or electronically via email, in order to fulfill the Purposes stated above.

Rights of the Data Subject Under Article 11 of the Law

In accordance with Article 11 of the Law, you are entitled to the following rights concerning your personal data:

To learn whether your personal data is being processed,
To request information if your personal data has been processed,
To learn the purpose of the processing and whether your data is used in accordance with that purpose,
To know the third parties to whom your data is transferred, domestically or internationally,
To request correction if your data is incomplete or incorrectly processed,
To request the deletion or destruction of your personal data under the conditions set forth in the law,
To request notification to third parties to whom your personal data has been transferred regarding correction, deletion, or destruction,
To object to any result that is to your detriment arising from automated analysis of your data,
To request compensation if you suffer damages due to the unlawful processing of your personal data.

You may submit your applications regarding your rights listed above by filling out the Data Subject Application Form available at https://www.sunaveinankiracvakfi.org.tr/en/legal/protection-of-personal-data/129 and submitting it to our Foundation. Depending on the nature of your request, it will be processed free of charge as soon as possible and within a maximum of thirty days. However, if the processing requires an additional cost, you may be charged a fee according to the tariff determined by the Personal Data Protection Board.

INDIVIDUAL STAKEHOLDER PERSONAL DATA PROCESSING CLARIFICATION TEXT

In accordance with the Law on the Protection of Personal Data No. 6698 (“Law”), your personal data may be processed by Suna and İnan Kıraç Foundation (“SVIKV” or “Foundation”), as the data controller, within the scope outlined below.

Purposes and Legal Grounds for Processing Personal Data

Your personal data may be processed for the following purposes (“Purposes”) and legal grounds, under the data processing conditions and purposes specified in Articles 5 and 6 of the Law:

Based on the legal ground that processing is necessary for the establishment or performance of a contract directly related to the parties of the contract:

Conducting communication activities with the Individual Stakeholder,
Registering the Individual Stakeholder within the Foundation’s internal systems,
Signing of agreements,
Planning payment processes,
Sending e-newsletters,
Providing personal accident insurance.

Based on the legal ground that processing is necessary for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject:

Managing corporate stakeholder relations,
Conducting communication activities,
Taking photos and videos at events,
Monitoring financial transactions,
Managing and conducting legal processes,
Ensuring information security.

Based on the legal ground that processing is necessary for compliance with legal obligations or when explicitly stipulated by law:

Fulfilling requests from official institutions,
Providing legally required information to authorized institutions,
Complying with data retention obligations stipulated in legislation,
Responding to data subject requests in accordance with legislation and carrying out necessary procedures.

Based on your explicit consent:

Although photographs and video recordings are not listed among the special categories of personal data explicitly defined in Article 6 of the Law, they may contain sensitive elements and therefore require a higher level of protection. For this reason, photographs and/or video recordings taken within the scope of digital platforms and events may be processed by our Foundation based on your explicit consent.

To Whom and For What Purpose Processed Personal Data May Be Transferred

Your personal data may be transferred, in accordance with the purposes listed above and within the scope of our legitimate interests, to our suppliers and business partners such as insurance companies, as well as to legally authorized public institutions and private individuals, in compliance with the data transfer principles outlined in Article 8 of the Law.

Apart from the cases stated above, your personal data is not directly transferred to any third party or institution within or outside of Turkey. However, if the databases (servers) of the applications used by the Foundation (e.g., Salesforce, Google Drive) are located abroad, your data is legally considered to have been transferred abroad.

Method of Collecting Personal Data

Your personal data is collected by the Foundation via verbal or written communication, by mail/courier, or electronically via email, for the purpose of fulfilling the above-mentioned Purposes.

Rights of the Data Subject Under Article 11 of the Law

According to Article 11 of the Law, you have the following rights regarding your personal data:

To learn whether your personal data is being processed,
To request information if your personal data has been processed,
To learn the purpose of processing and whether it is being used in line with that purpose,
To know the third parties to whom your personal data is transferred domestically or internationally,
To request correction of incomplete or inaccurate data,
To request deletion or destruction of your personal data within the framework of applicable legislation,
To request notification of correction, deletion, or destruction to third parties to whom the data has been transferred,
To object to a result against you that arises solely from the analysis of your personal data by automated systems,
To request compensation if you suffer damage due to unlawful processing of your personal data.

You may submit your applications regarding your rights listed above by filling out the Data Subject Application Form available at https://www.sunaveinankiracvakfi.org.tr/en/legal/protection-of-personal-data/129 and submitting it to our Foundation. Depending on the nature of your request, it will be processed free of charge as soon as possible and within a maximum of thirty days. However, if the processing requires an additional cost, you may be charged a fee according to the tariff determined by the Personal Data Protection Board.

PARENT/GUARDIAN PERSONAL DATA PROCESSING CLARIFICATION TEXT

In accordance with the Law on the Protection of Personal Data No. 6698 (“Law”), your personal data and/or the personal data of the child for whom you are the parent/guardian may be processed by Suna and İnan Kıraç Foundation (“SVIKV” or “Foundation”) as the data controller, within the scope described below.

Purposes and Legal Grounds for Processing Personal Data

Your personal data may be processed by our Foundation, as a result of the establishment of a contractual relationship between you and the Foundation, for the following purposes (“Purposes”) within the scope of the personal data processing conditions and purposes set forth in Article 5 of the Law.

Based on the legal ground that processing is necessary for the legitimate interests of our Foundation, provided that it does not harm the fundamental rights and freedoms of the data subject:

Ensuring your child’s participation in workshops, trainings, and similar activities (“Events”) held by the Foundation,
Managing activities within the Event and conducting interviews with children via surveys, focus groups, and evaluation forms,
Taking photographs and video recordings during the Event, and creating related materials,
Preparing reports and conducting statistical activities,
Conducting screening surveys,
Managing scholarship activities,
Handling workshop reservations,
Creating emergency contact lists,
Organizing travel and managing consent processes,
Providing psychological support to parents,
Responding to any requests, questions, or complaints regarding the Event.

Based on the legal ground that processing is necessary to fulfill our legal obligations as the data controller:

Fulfilling requests from official authorities,
Ensuring data accuracy and up-to-date information,
Providing information to authorized institutions as required by legislation,
Complying with legal retention obligations,
Responding to data subject applications in accordance with legislation and carrying out necessary actions.

Based on your explicit consent:

Publishing visual and audio recordings of you and your child, and statements made during interviews, on the Foundation’s websites, social media accounts, and printed reports to promote, inform, and raise public awareness regarding the Event and interviews,
Transferring your child’s visual and audio recordings to our communication agency for sharing on the Foundation’s social media accounts within the scope of public promotion and awareness,
Processing your health data for the purpose of conducting screening surveys and compiling emergency contact lists,
In the context of providing psychological support, if you disclose such data, personal data that may include race, ethnic origin, political opinions, philosophical beliefs, religion, sect or other beliefs, health data, ID or driver's license photocopies may be processed by our Foundation with your explicit consent.

To Whom and For What Purpose Processed Personal Data May Be Transferred

Your personal data may be transferred, within the scope of the above-mentioned Purposes and our legitimate interests, to our Business Partners (such as UNICEF), to legally authorized public institutions, and to authorized private entities in accordance with our legal obligations.

With your explicit consent, visual content of the Event and interviews may also be transferred to our communication agency for the purposes of public promotion, information sharing, and awareness-raising, in compliance with the data transfer conditions set forth in Articles 8 and 9 of the Law.

Other than this, your personal data will not be directly transferred by the Foundation to any third party/institution within or outside the country. However, if the databases of the applications and systems used by the Foundation (such as Google Drive, Survey Monkey, etc.) are located abroad, the data is deemed to have been transferred abroad by law.

Method of Collecting Your Personal Data

Your personal data is collected through physical means such as surveys conducted during your child’s participation in Events, face-to-face interviews, focus groups, and evaluation forms; and through electronic means such as video or photo recordings of interviews and online activities.

Your Rights Under Article 11 of the Law

Under Article 11 of the Law, you have the following rights regarding your personal data:

To learn whether your personal data is being processed,
To request information if your personal data has been processed,
To learn the purpose of processing and whether your data is being used in accordance with that purpose,
To know the third parties to whom your personal data has been transferred, domestically or abroad,
To request the correction of incomplete or incorrect data and to request notification of such correction to third parties to whom the data was transferred,
To request deletion or destruction of your personal data in case the reasons for processing no longer exist, even if the data was processed lawfully, and to request notification of such action to third parties to whom the data was transferred,
To object to outcomes against you arising from automated analysis of your personal data,
To request compensation for damages in case of unlawful processing of personal data.

You may submit your applications regarding your rights listed above by filling out the Data Subject Application Form available at https://www.sunaveinankiracvakfi.org.tr/en/legal/protection-of-personal-data/129 and submitting it to our Foundation. Depending on the nature of your request, it will be processed free of charge as soon as possible and within a maximum of thirty days. However, if the processing requires an additional cost, you may be charged a fee according to the tariff determined by the Personal Data Protection Board.

REVIEWER PERSONAL DATA PROCESSING CLARIFICATION TEXT

Purpose and Legal Grounds for Processing Personal Data

Your personal data collected may be processed for the purposes listed below (“Purposes”), due to the establishment of a contractual relationship between you and our Foundation, within the scope of the personal data processing conditions and purposes specified in Article 5 of the Law.

Based on the legal ground that data processing is necessary for the establishment or performance of a contract, provided that it is directly related to the parties to the contract:

Managing relationships with reviewers,
Signing and archiving of reviewer forms,
Planning and execution of business activities,
Planning and execution of operational activities necessary for the proper execution of Foundation operations in accordance with internal procedures and/or relevant legislation.

Based on the legal ground that processing is necessary for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject:

Planning and execution of business activities,
Monitoring of financial and accounting transactions.

Based on the legal grounds that data processing is mandatory for the fulfillment of the Foundation's legal obligations and explicitly stipulated by law:

Responding to requests from public authorities,
Providing information to authorized institutions as required by legislation,
Ensuring compliance with statutory retention obligations,
Responding to data subject applications in accordance with legislation and conducting the necessary processes,
Fulfilling the Foundation’s legal obligations arising from applicable laws and regulations.

To Whom and for What Purpose Personal Data May Be Transferred

Your personal data collected may be transferred to legally authorized public institutions and authorized private persons, in accordance with the data processing conditions set out in Article 5 and the data transfer rules stipulated in Article 8 of the Law, in line with the Purposes mentioned above and where clearly provided for by law or necessary for the fulfillment of our legal obligations.

Other than that, your personal data is not directly transferred to any third party or institution within or outside Turkey. However, in cases where the applications (e.g., Google Drive) and systems (servers) used by our Foundation store data in databases located abroad, your personal data is deemed to have been legally transferred abroad.

Method of Collecting Personal Data

Your personal data is collected electronically via email for the purpose of establishing and maintaining a business relationship with our Foundation.

Rights of the Data Subject Under Article 11 of the Law

Pursuant to Article 11 of the Law, you have the following rights regarding your personal data:

To learn whether your personal data is being processed,
To request information if your personal data has been processed,
To learn the purpose of processing and whether your data is used in accordance with that purpose,
To know the third parties to whom your personal data is transferred, domestically or abroad,
To request correction if your personal data is incomplete or incorrectly processed and request notification of such to third parties,
Despite being processed in accordance with the Law and other relevant laws, to request deletion or destruction of your personal data if the reasons requiring processing are no longer valid and to request notification of such to third parties,
To object to any outcome to your detriment resulting from the analysis of your data exclusively through automated systems,
To request compensation for damages in case you suffer harm due to unlawful processing of your personal data.

SCHOLARSHIP RECIPIENT PERSONAL DATA PROCESSING CLARIFICATION TEXT

Purpose and Legal Grounds for Processing Personal Data

Based on the legal ground that processing is necessary for the establishment or performance of a contract:

Receiving scholarship applications,
Requesting, collecting, and archiving the necessary documents for the scholarship application,
Announcing the names of successful scholarship recipients via the Foundation’s website,
Preparing and signing the scholarship agreement,
Collecting scholarship payment information and managing payment processes,
Planning and executing scholarship program development,
Planning and executing operational processes to ensure Foundation activities comply with internal procedures and/or relevant legislation.

Based on the legal ground that processing is necessary for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject:

Planning and execution of business operations,
Monitoring of financial and accounting processes.

Based on the legal ground that processing is required for the data controller to fulfill its legal obligations and when explicitly provided for by law:

Requesting, collecting, and archiving necessary documents related to the scholarship application,
Publishing the names of successful scholarship recipients on the Foundation's website,
Collecting scholarship payment information and executing payment processes,
Responding to requests from public institutions,
Providing required information to authorized bodies as stipulated by law,
Ensuring compliance with statutory data retention obligations,
Responding to applications from data subjects in accordance with the law and executing the necessary procedures,
Fulfilling legal obligations imposed by applicable regulations to which the Foundation is subject.

To Whom and for What Purpose Personal Data May Be Transferred

Your personal data may be transferred, for the realization of the purposes listed above, to our Foundation’s scientific board member located abroad, Brigitte Pitarakis; to legally authorized public institutions and private persons, in accordance with the data processing conditions specified in Article 5 and the data transfer rules set forth in Article 8 of the Law.

Apart from this, your personal data will not be directly transferred to any third party within or outside the country. However, if the databases of the applications and systems (servers) used by the Foundation are located abroad, your data will be considered legally transferred abroad.

Method of Collecting Personal Data

Your personal data is collected for the purpose of establishing and managing the scholarship relationship between you and the Foundation, either in writing or verbally, and electronically via email, internal or external Foundation systems.

Rights of the Data Subject Under Article 11 of the Law

Pursuant to Article 11 of the Law, you have the following rights concerning your personal data:

To learn whether your personal data is being processed,
To request information if your personal data has been processed,
To learn the purpose of the processing and whether it is used in line with that purpose,
To know the third parties to whom your data has been transferred, domestically or abroad,
To request correction of incomplete or inaccurate data and request notification of such corrections to third parties,
To request deletion or destruction of your data if the reasons for processing no longer exist, even if processed in accordance with the Law, and request that such actions be notified to third parties,
To object to outcomes that are to your detriment resulting from analysis exclusively by automated systems,
To request compensation if you suffer damage due to the unlawful processing of your personal data.

You may submit your applications regarding your rights listed above by filling out the Data Subject Application Form available at https://www.sunaveinankiracvakfi.org.tr/en/legal/protection-of-personal-data/129 and submitting it to our Foundation. Depending on the nature of your request, it will be processed free of charge as soon as possible and within a maximum of thirty days. However, if the processing requires an additional cost, you may be charged a fee according to the tariff determined by the Personal Data Protection Board.

STUDENT/CHILD PERSONAL DATA PROCESSING CLARIFICATION TEXT

In accordance with the Law on the Protection of Personal Data No. 6698 ("Law"), your personal data may be processed by Suna and İnan Kıraç Foundation (“SVIKV” or “Foundation”), as the data controller, within the scope explained below.

Purposes and Legal Grounds for Processing Personal Data

Your personal data, collected due to the establishment of a contractual relationship between you and our Foundation, may be processed for the following purposes (“Purposes”) within the scope of the personal data processing conditions and purposes set forth in Article 5 of the Law.

Based on the legal ground that processing is necessary for the performance of a contract to which the data subject is party:

Organization of workshops, trainings, and events,
Planning and execution of mentorship programs,
Receiving reservations,
Collection and archiving of registration forms,
Organization and execution of exchange programs,
Execution of scholarship programs,
Collection of health data for emergencies,
Organization of travel and accommodation,
Provision of travel health insurance,
Planning and execution of activities offered to children/students for developmental purposes,
Planning and execution of operational activities necessary to ensure that the Foundation's activities are carried out in accordance with its internal procedures and/or applicable legislation.

Based on the legal ground that processing is necessary for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject:

Organization of workshops, trainings, and events,
Capturing photographs and video recordings during workshops, trainings, and events,
Sharing the photographs and video recordings on our website and social media platforms,
Conducting interviews through video recordings,
Creating podcast recordings,
Collection of dietary information,
Collection of health data for emergencies,
Organization of travel and accommodation,
Provision of travel health insurance,
Preparation, procurement, and delivery of uniforms,
Conducting and archiving evaluations and surveys,
Conducting data collection, analysis, reporting, monitoring, and evaluation processes related to the activities,
Planning and execution of business operations,
Monitoring financial and accounting processes.

Based on the legal grounds that processing is necessary for the data controller to fulfill its legal obligations and that it is explicitly stipulated by law:

Fulfilling requests from official institutions,
Providing information to authorized institutions as required by legislation,
Ensuring compliance with data retention obligations stipulated in the legislation,
Responding to data subject applications in accordance with legislation and carrying out necessary procedures,
Fulfillment of legal obligations arising from the legislation to which our Foundation is subject.

With your explicit consent:

Your health data may be processed by our Foundation within the scope of emergency procedures, provision of travel health insurance, and collection of dietary information, and your clothing data may be processed for the preparation, procurement, and delivery of uniforms.
Although photographs, video recordings, and copies of identification documents such as ID cards and driver's licenses are not listed among the special categories of personal data explicitly defined in Article 6 of the Law, they may contain elements that require special protection. Therefore, within the scope of workshops, trainings, and events, your photographs and/or video recordings may be processed by our Foundation based on your explicit consent.

To Whom and for What Purpose Personal Data May Be Transferred

Your collected personal data may be transferred to our contracted business partners (travel agencies, communication agencies, UNICEF, consultants, etc.), suppliers, public institutions legally authorized to receive such data, and private individuals legally authorized to receive such data, in line with the above-mentioned Purposes and in accordance with the personal data processing conditions set forth in Article 5 and the rules on data transfers stated in Article 8 of the Law.

Apart from the above, your personal data is not directly transferred by our Foundation to any third party/institution within or outside the country. However, if the applications used by our Foundation (such as Google Drive, Salesforce, etc.) and the databases of social media platforms and systems are located abroad, your data is deemed to have been transferred abroad by law.

Method of Personal Data Collection

Your personal data may be collected verbally or in writing, either provided directly by you or through third parties, during face-to-face visits in physical environments, via email, internal systems of the Foundation, or through our website, within the scope of fulfilling the Purposes specified above.

Rights of the Data Subject Under Article 11 of the Law

Pursuant to Article 11 of the Law, you have the following rights regarding your personal data:

To learn whether your personal data is being processed,
To request information if your personal data has been processed,
To learn the purpose of processing your personal data and whether it is used appropriately,
To know the third parties to whom your personal data is transferred, whether domestically or abroad,
To request correction if your personal data is processed incompletely or inaccurately and to request notification of such correction to third parties to whom the data has been transferred,
To request deletion or destruction of your personal data if the reasons for processing no longer exist, even if processed in accordance with the Law and other relevant legislation, and to request notification of such deletion or destruction to third parties to whom the data has been transferred,
To object to any result that is to your detriment, arising from analysis of your personal data exclusively through automated systems,
To request compensation for damage if you suffer damage due to unlawful processing of your personal data.

You may submit your applications regarding your rights listed above by filling out the Data Subject Application Form available at https://www.sunaveinankiracvakfi.org.tr/en/legal/protection-of-personal-data/129 and submitting it to our Foundation. Depending on the nature of your request, it will be processed free of charge as soon as possible and within a maximum of thirty days. However, if the processing requires an additional cost, you may be charged a fee according to the tariff determined by the Personal Data Protection Board.

SUPPLIER PERSONAL DATA PROCESSING CLARIFICATION TEXT

In accordance with the Law on the Protection of Personal Data No. 6698 (“Law”), your personal data may be processed by the Suna and İnan Kıraç Foundation (“SVİKV” or the “Foundation”), acting as the data controller, within the scope explained below.

Purpose and Legal Grounds for Processing Personal Data

Your personal data, collected in the context of a business relationship between the organization you are employed by/represent and our Foundation, may be processed for the following purposes (“Purposes”) under the personal data processing conditions and purposes outlined in Article 5 of the Law.

Based on the legal ground that processing is necessary for the establishment or performance of a contract:

Managing relationships with suppliers,
Planning and execution of business activities,
Carrying out procurement processes for goods/services, including order forms and quotation requests,
Execution of contract signing procedures,
Managing account registration, account card creation and modification, and reconciliation processes,
Creation of goods/services delivery records, execution of delivery and shipping processes,
Monitoring of finance and accounting operations, execution of payment and guarantee processes,
Ensuring the legal, technical, and commercial-operational security of the Foundation and the individuals with whom it has a business relationship,
Execution of insurance processes within the scope of activities,
Communication and correspondence,
Planning and execution of operational processes to ensure Foundation activities are conducted in accordance with internal procedures and/or applicable legislation.

Based on the legal ground that processing is necessary for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject:

Performing necessary activities and workflows by relevant departments to conduct the Foundation’s commercial relationship with the organization you are affiliated with,
Planning and execution of business activities,
Monitoring of financial and accounting transactions, payment and guarantee processes,
Communication and correspondence,
Carrying out audit processes within the scope of activities and legal obligations.

Based on the legal ground that processing is required for the data controller to fulfill its legal obligations and when explicitly provided for by law:

Execution of procurement processes including goods/services purchases, order forms, and quotation requests,
Execution of contract signing processes,
Monitoring of finance and accounting operations, declarations, payment and guarantee processes,
Responding to requests from public institutions,
Providing legally required information to authorized institutions,
Ensuring compliance with statutory data retention obligations,
Execution of insurance-related processes,
Ensuring the legal, technical, and commercial-operational security of the Foundation and affiliated individuals,
Execution of audit processes within the scope of legal obligations,
Responding to data subject applications in accordance with legal provisions and execution of necessary operations,
Fulfillment of legal obligations to which our Foundation is subject under applicable legislation.

To Whom and for What Purpose Personal Data May Be Transferred

Your personal data may be transferred for the realization of the purposes specified above to legally authorized public institutions and authorized private individuals in accordance with the personal data processing conditions outlined in Article 5 and the data transfer rules set forth in Article 8 of the Law.

Apart from the above, your personal data is not directly transferred by our Foundation to any third party within or outside Turkey. However, if the databases of the applications and systems (servers) used by our Foundation are located abroad, your data will be deemed to have been transferred abroad under the Law.

Method of Collecting Personal Data

Your personal data is collected by our Foundation for the realization of the purposes stated above through various channels, including the information provided directly by you or your affiliated organization, information conveyed verbally or in writing by third parties, face-to-face meetings, postal or courier services, and physical forms. It is also collected via electronic means such as email, internal Foundation systems, our website, call center, and telephone communications.

Rights of the Data Subject Under Article 11 of the Law

In accordance with Article 11 of the Law, you have the following rights concerning your personal data:

To learn whether your personal data is being processed,
To request information regarding the processing,
To learn the purpose of processing and whether it is being used in line with that purpose,
To know the third parties to whom your data has been transferred, domestically or abroad,
To request correction of your data if it is incomplete or inaccurate and to request that these changes be notified to third parties,
To request the deletion or destruction of your personal data if the processing purposes are no longer valid, even if processed lawfully, and to request that third parties be informed accordingly,
To object to outcomes against you that arise as a result of analysis through exclusively automated systems,
To request compensation if you suffer damages due to the unlawful processing of your personal data.

You may submit your applications regarding your rights listed above by filling out the Data Subject Application Form available at https://www.sunaveinankiracvakfi.org.tr/en/legal/protection-of-personal-data/129 and submitting it to our Foundation. Depending on the nature of your request, it will be processed free of charge as soon as possible and within a maximum of thirty days. However, if the processing requires an additional cost, you may be charged a fee according to the tariff determined by the Personal Data Protection Board.

USER PERSONAL DATA PROCESSING CLARIFICATION TEXT

Purposes and Legal Grounds for Processing Personal Data

Your collected personal data may be processed for the purposes (“Purposes”) listed below, in accordance with the personal data processing conditions and purposes stated in Articles 5 and 6 of the Law.

Based on the legal ground that processing is necessary for the establishment or performance of a contract, provided that it is directly related to the parties to the contract:

Updating user contact information,
Creating and managing a membership account where applicable,
Sending newsletters.

Based on the legal ground that processing is necessary for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject:

Managing user relations,
Tracking financial transactions,
Carrying out the necessary activities and related business processes by our relevant departments to ensure the benefit of individuals from the services provided by our Foundation,
Sending event notifications and invitations,
Managing and monitoring legal processes,
Executing information security processes.

Based on the legal ground that processing is necessary for the establishment, exercise, or protection of a right:

Receiving, evaluating, and resolving requests and complaints,
Retaining personal data for the statute of limitations period as evidence in potential future disputes.

Based on the legal ground that processing is required by law and necessary for the data controller to fulfill its legal obligations:

Responding to requests from official authorities,
Providing information to authorized institutions as required by legislation,
Ensuring compliance with data retention obligations prescribed by legislation,
Responding to data subject applications in accordance with legal procedures and carrying out the necessary operations.

Based on Your Explicit Consent:

Although photographs are not considered special categories of personal data under Article 6 of the Law, they may include elements that require special protection. Therefore, for the purposes of digital media management and event-related forms, your photographs may be processed by our Foundation only based on your explicit consent.

To Whom and for What Purpose Personal Data May Be Transferred

Your personal data collected may be transferred, for the purposes listed above and within the scope of our legitimate interests, to our supporting sponsor companies, business partners such as Biletix and our communications agency to provide you with better services, legally authorized public institutions and private entities, in accordance with the personal data processing conditions under Article 5 and the data transfer provisions in Article 8 of the Law.

Your personal data is not directly transferred to any third party within or outside the country. However, if the databases of the applications (e.g. Google Forms, Euromessage) and systems (servers) used by our Foundation are located abroad, your personal data is deemed to have been legally transferred abroad.

Method of Collecting Personal Data

Your personal data is collected by our Foundation verbally or in writing, or electronically via email or our website, for the fulfillment of the above-mentioned purposes.

Rights of the Data Subject Under Article 11 of the Law

Pursuant to Article 11 of the Law, you have the following rights regarding your personal data:

To learn whether your personal data is being processed,
To request information regarding such processing,
To learn the purpose of the processing and whether your data is used in accordance with that purpose,
To know the third parties to whom your data has been transferred, domestically or abroad,
To request correction of incomplete or inaccurate data and to request notification of such correction to third parties,
To request deletion or destruction of your personal data within the scope of legal conditions,
To request notification of such deletion or destruction to third parties to whom the data was transferred,
To object to results that are unfavorable to you arising from the analysis of your personal data exclusively through automated systems,
To request compensation in case you suffer damages due to the unlawful processing of your personal data.

VISITOR PERSONAL DATA PROCESSING CLARIFICATION TEXT

Purpose and Legal Grounds for Processing Personal Data

Your personal data may be processed for the purposes listed below (“Purposes”), in accordance with the conditions and purposes of personal data processing as specified in Article 5 of the Law.

Based on the legal ground that processing is necessary for the establishment or performance of a contract, provided that it is directly related to the parties to the contract:

Submission and collection of visitor event participation forms,
Planning and execution of activities aimed at improving the visitor experience,
Planning and execution of operational activities required to ensure that Foundation operations are conducted in accordance with Foundation procedures and/or relevant legislation.

Based on the legal ground that processing is necessary for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject:

Creating participant/guest lists for event organization,
Submission and collection of event participation forms,
Sending e-invitations prior to events, establishing communication,
Notifying reception of visitor details,
Recording visitor information,
Performing screening procedures,
Collecting visitor vehicle license plate information,
Taking photographs and video recordings during events and sharing them on social media platforms and the website,
Recording and monitoring security camera footage for safety purposes,
Planning and execution of business activities,
Monitoring of financial and accounting processes.

Based on the legal grounds that processing is necessary for the data controller to fulfill its legal obligations and when explicitly provided for by law:

Responding to requests from official institutions,
Providing legally required information to authorized institutions,
Ensuring compliance with data retention obligations stipulated by legislation,
Responding to data subject applications in accordance with the law and performing necessary actions,
Fulfilling legal obligations arising from the legislation to which the Foundation is subject.

Based on the legal ground of publicizing personal data by the data subject and being in accordance with the intent of such public disclosure:

Keeping a visitor guestbook,
Publishing the visitor guestbook.

Based on your explicit consent:

Although photographs and video recordings are not explicitly categorized as special categories of personal data under Article 6 of the Law, they may contain elements requiring special protection. Therefore, such photographs and/or video recordings taken during events may be processed by our Foundation only with your explicit consent.

To Whom and for What Purpose Personal Data May Be Transferred

Your personal data may be transferred, for the purposes stated above, to our business partners, suppliers, legally authorized public institutions, and private persons, in compliance with the conditions of data processing stated in Article 5 and the rules for data transfer specified in Article 8 of the Law.

Other than that, your personal data is not directly transferred by our Foundation to any third party or institution within or outside the country. However, if the databases of the applications and systems (servers) used by our Foundation are located abroad, your data is considered to have been legally transferred abroad.

Method of Collecting Personal Data

Your personal data is collected by our Foundation for the purposes stated above via verbal or written communication either directly from you, through your affiliated institution, or via third parties; as well as through in-person visits, electronically via email, internal Foundation systems, or through our website.

Rights of the Data Subject Under Article 11 of the Law

Under Article 11 of the Law, you have the following rights regarding your personal data:

To learn whether your personal data is being processed,
To request information if your personal data has been processed,
To learn the purpose of the processing and whether your data is used in line with that purpose,
To know the third parties to whom your data has been transferred, domestically or abroad,
To request correction if your personal data is incomplete or inaccurate and request that such corrections be notified to third parties,
To request deletion or destruction of your data if the reasons for processing are no longer valid, even if processed in compliance with the Law and relevant legislation, and to request that such actions be communicated to third parties,
To object to any outcome arising against you as a result of automated analysis of your personal data,
To request compensation if you suffer damages due to unlawful processing of your personal data.

VOLUNTEER PERSONAL DATA PROCESSING CLARIFICATION TEXT

VOLUNTEER PERSONAL DATA PROCESSING CLARIFICATION TEXT

Purposes and Legal Grounds for Processing Personal Data

Based on the legal ground that processing is necessary for the establishment or performance of a contract directly related to the parties to that contract:

Receiving volunteer applications,
Requesting, collecting, and archiving required documents within the scope of volunteer applications,
Preparing and signing volunteer agreements,
Collecting registration forms within the scope of workshop activities and services,
Planning and execution of activities for the development of volunteer services,
Planning and execution of operational activities necessary to ensure that Foundation activities are carried out in compliance with internal procedures and/or relevant legislation.

Based on the legal ground that processing is necessary for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject:

Planning and execution of business operations,
Monitoring financial and accounting processes.

Based on the legal grounds that processing is necessary for compliance with a legal obligation and is explicitly stipulated by law:

Fulfilling requests from official authorities,
Providing information to authorized institutions as required by legislation,
Ensuring compliance with data retention obligations stipulated in the legislation,
Responding to data subject applications in accordance with the law and taking necessary actions,
Fulfilling legal obligations arising from the legislation to which our Foundation is subject.

To Whom and For What Purpose Processed Personal Data May Be Transferred

Your personal data collected may be transferred, in line with the Purposes mentioned above, to legally authorized public institutions and legally authorized private persons in accordance with the personal data processing conditions set forth in Article 5 of the Law and the data transfer provisions set forth in Article 8.

Other than the above, your personal data is not directly transferred by our Foundation to any third party or institution, either domestically or abroad. However, if the databases (servers) of the applications and systems used by our Foundation are located abroad, your data is deemed to be transferred abroad by law.

Method of Personal Data Collection

Your personal data is collected through your written application and via email communication, for the purpose of establishing, maintaining, and sustaining the volunteer relationship between you and our Foundation.

Rights of the Data Subject under Article 11 of the Law

In accordance with Article 11 of the Law, you have the following rights regarding your personal data:

To learn whether your personal data is being processed,
To request information if your personal data has been processed,
To learn the purpose of processing and whether it is being used in accordance with that purpose,
To know the third parties to whom your personal data is transferred, whether domestically or abroad,
To request correction if your personal data is incomplete or inaccurately processed, and to request notification of such correction to third parties to whom the data has been transferred,
To request deletion or destruction of your personal data if the reasons for processing no longer exist, even if the data was processed in accordance with the Law and other relevant legislation, and to request notification of such deletion or destruction to third parties to whom the data has been transferred,
To object to any outcome that is to your detriment, resulting from analysis of your personal data exclusively through automated systems,
To request compensation if you suffer damage due to the unlawful processing of your personal data.

You may submit your applications regarding your rights listed above by filling out the Data Subject Application Form available at https://www.sunaveinankiracvakfi.org.tr/en/legal/protection-of-personal-data/129 and submitting it to our Foundation. Depending on the nature of your request, it will be processed free of charge as soon as possible and within a maximum of thirty days. However, if the processing requires an additional cost, you may be charged a fee according to the tariff determined by the Personal Data Protection Board.