Privacy Policy | You Can Tell

YOUCANTELL.ORG

Clarification Text on the Processing of Personal Data

Law No. 6698 on the Protection of Personal Data was published in the Official Gazette dated 07.04.2016 and numbered 29677, coming into force. Prepared by taking into account international documents, comparative legal practices, and the needs of our country, this Law aims to ensure the processing and protection of personal data in accordance with modern standards. In this context, the purpose of the Law is to regulate the conditions for the processing of personal data, the protection of fundamental rights and freedoms of individuals in the processing of personal data, and the procedures and principles that must be followed by natural and legal persons processing personal data.

Our organization is obliged to comply with Law No. 6698 on the Protection of Personal Data, and all personal data processed within the scope of our activities fall under this law.

As YouCanTell.org, we act as the data controller and take the necessary precautions regarding the protection of personal data.

General Principles for the Processing of Personal Data

Our organization complies with the general principles stipulated by Law No. 6698 in the processing of personal data. Our general principles for processing personal data are as follows:

Compliance with the law and rules of honesty.
Accuracy and, where necessary, keeping data up to date.
Processing for specific, explicit, and legitimate purposes.
Being relevant, limited, and proportionate to the purposes for which they are processed.
Retaining data for the period stipulated in relevant legislation or as required for the purposes of processing.

Your personal data may be collected by our organization, either automatically or non-automatically, through various channels such as our offices, branches, dealers, call centers, websites, social media platforms, mobile applications, and similar means, both verbally, in writing, or electronically, depending on the service, product, or commercial activity offered by our organization and our business partners.

Furthermore, your personal data may be processed when you call our call center, visit our website, or attend training, seminars, events, and meetings organized by our organization.

Legal Grounds for Collecting Personal Data

Your personal data is collected by our organization in all types of verbal, written, or electronic environments for the purposes of providing the products and services we offer within the legally defined framework and for our organization to fulfill its contractual and legal responsibilities in a complete and accurate manner. Your personal data, collected for these legal reasons, may also be processed and transferred for the purposes specified in this document under the personal data processing conditions and purposes specified in Articles 5 and 6 of the Law on the Protection of Personal Data (KVK Law).

Your personal data is processed by our organization for the following purposes:

Improving the services provided, developing new services, and providing information about these services.
Providing commercial electronic communication approvals for current and prospective customers for the promotion and marketing of campaigns and services.Resolving customer issues and complaints.
Conducting statistical evaluations and market research.
Defining and implementing commercial and business strategies.
Managing relationships with member businesses and business partners.
Following up on accounting and payment transactions.
Ensuring compliance with legal processes and regulations.
Responding to information requests from administrative and judicial authorities.
Planning internal reporting and business development activities.
Performing financial control and reporting and making legal notifications.
Managing internal control and audit activities.
Ensuring information and transaction security and preventing misuse.
Ensuring the accuracy and updating of processed data for all processes listed above.

Transfer of Processed Personal Data

Our organization may share your personal data with domestic and international business partners, member businesses, banks, financial institutions, independent audit companies, and similar entities as permitted by the Law on Payment and Securities Settlement Systems, Payment Services, and Electronic Money Institutions and other relevant legislation. Stored data may be transferred under the personal data processing conditions and purposes specified in Articles 8 and 9 of the KVK Law. The records and documents related to transactions made by our organization with its customers must be stored for a certain period within the scope of legal regulations. If you request the deletion of your personal data, your request will be fulfilled once the legally required retention period has expired. During this process, your personal data will not be processed or shared with third parties, except for legal obligations arising from regulations.

Rights of Personal Data Owners under Article 11 of the KVK Law

As personal data owners, if you communicate your requests regarding your rights to our organization through the methods specified in this Clarification Text, our organization will conclude your request free of charge within 30 days at the latest, depending on the nature of the request. However, if the Personal Data Protection Board stipulates a fee, a fee may be charged based on the tariff set by our organization. In this context, personal data owners have the following rights:

To learn whether personal data has been processed.
To request information if personal data has been processed.
To learn the purpose of processing personal data and whether it has been used in accordance with that purpose.
To know the third parties to whom personal data is transferred domestically or abroad.
To request correction of incomplete or inaccurate personal data and to request that the third parties to whom the personal data was transferred be notified of the correction.
To request the deletion or destruction of personal data if the reasons for processing no longer apply, even if it has been processed in accordance with the provisions of the KVK Law and other relevant laws, and to request that the third parties to whom personal data was transferred be notified of the deletion.
To object to a result arising from the exclusive analysis of processed data through automated systems that is detrimental to the person.
To request compensation for damages incurred due to the unlawful processing of personal data.

In accordance with paragraph 1 of Article 13 of the KVK Law, you may submit your request regarding the exercise of your rights as stated above to our organization in writing or through other methods determined by the Personal Data Protection Board. As the Personal Data Protection Board has not yet determined any other methods, you must submit your application to our organization in writing in accordance with the KVK Law. In this context, the channels and methods for submitting your written application to our organization under Article 11 of the KVK Law are explained below.

To exercise your rights mentioned above, you can submit your request by filling out the form available at https://youcantell.org/kvkk-clarification-text.doc.

Explicit Consent Approval Form

In accordance with Law No. 6698 on the Protection of Personal Data and the Regulation on the Processing and Privacy of Personal Health Data, I have received training on the relevant legal regulations and the rights I have under these regulations, and I have read and reviewed the Clarification Text provided to me after the training. Within the scope of the relevant laws, I consent to the processing of my personal data, including personal information, special category personal data, and health data, provided verbally/written and/or electronically to “YouCanTell.org” for the provision of services and the planning of these services, as required by the nature of the work, and to the sharing of such data with other individuals and organizations with whom sharing is necessary under relevant legislation. I consent to the processing of my personal data and special category personal data, including health data, within the scope of the KVK Law and the Regulation on the Processing and Privacy of Personal Health Data, as detailed below.

The following personal and special category personal data will be processed:

Data that clearly belongs to a specific or identifiable person and is processed either automatically or non-automatically as part of a data recording system, including personal information such as name, surname, Turkish ID number, nationality, mother’s name, father’s name, place of birth, date of birth, and gender, as found on documents such as a driver’s license, ID card, or passport. Other data include criminal record, diploma, disability certificate (if applicable), military service status certificate, health report, blood group card, biometric data, and, if married, marriage certificate, tax number, social security number, credit card information, bank account details, signature, vehicle license plate, names of spouse and children, Turkish ID numbers, and emergency contact details, including name, surname, and phone number of the person to be contacted in case of emergency.
Communication data, including telephone number, address, email address, fax number, and IP address.
Marketing data, including purchase history, survey data, cookie records, and information obtained through campaigns.
Data obtained for security and workflow purposes, including card or non-card access system records, camera footage, and security checkpoint records for physical access to premises or use of organization vehicles, and access logs for computer use within the organization.
Data related to any requests or complaints directed to “YouCanTell.org.”

I have read the Clarification Text provided to me via the printed or electronic form on the website or sent to my mobile number through SMS. I have also read the rights I possess within this scope. I freely consent to the collection, storage, retention, reorganization, and sharing of my personal data, as well as its transfer to third parties within or outside the country in accordance with the KVK Law. I agree to the processing of my personal data, including sensitive and health-related data, in the manner specified in the KVK Law.