Site usage rules

Personal Data is all kinds of information regarding an identified or identifiable natural person. Non-Processing of Personal Data, Obtaining, recording, storing and maintaining personal data by fully or partially automatic or non-automatic means, provided that it is part of any data recording system. It is any operation performed on data such as changing, rearranging, disclosing, transferring, taking over, making available, classifying or preventing its use. Relevant Person is the natural person whose personal data is processed. Explicit Consent is based on information on a specific subject and It is consent expressed with free will. Data Controller is the real or legal person who determines the purposes and means of processing personal data and is responsible for establishing and managing the data recording system. Data Processor is the real or legal person who processes personal data on behalf of the data controller based on the authority given by the data controller. Data Recording System is the personal data processed according to certain criteria. Recipient Group refers to the Ministry of Culture and Tourism or future business partners to whom personal data is planned to be transferred by the data controller.

4. DATA CONTROLLER AND ITS OBLIGATIONS

This Personal Data Protection and Processing Policy replaces the measures contained in the 10th article titled "Information Obligation of the Data Controller" and the 12th article titled "Data Security Obligations" of the Personal Data Protection Law No. 6698 ("KVKK"). Within the scope of the project titled "Encouraging the Participation of Young Women Artists in the Development of Local Cultural Policies", issues such as determining the categories of personal data to be processed, the purposes of processing the data, the means of collection and the establishment of the data recording system, to whom the data will be transferred and the retention periods within the scope of relevant laws. Home elderly care will be primarily responsible for the personal data processing activity, representing the Project on Encouraging the Participation of Young Women Artists in the Development of Local Cultural Policies and the website www.evdeyaslibakimi.com. For the personal data to be processed throughout this process, the Data Controller will: responsible; It takes all necessary technical and administrative measures to ensure the appropriate level of security in order to prevent unlawful processing and access of processed personal data and to ensure the preservation of personal data. In case personal data is processed by another natural or legal person based on the authority given, the Data Controller is jointly responsible with the data processors for taking the above-mentioned measures. In this regard, to carry out all necessary work; It meticulously carries out activities such as creating confidentiality agreements with the data processor and taking the necessary administrative and technical measures. The Data Controller does not refrain from making or having the necessary inspections carried out within its own organization in order to ensure the implementation of the provisions of the Law. This obligation continues after the end of the project. The processed personal data data obtained by others through illegal means

• Carrying out the audit and investigation activities to be carried out during the identification of the real person with the information declared by the relevant person who shared the data in the application form,

• Conducting verification processes of artists,

• Examining the accuracy of the applicant's profession and the information declared in the application form,

• To protect the efforts of the applicant in case the website www.sumerinsankaynaklari.com is used as broadcast content such as public service announcements, advertisements, and generics without any commercial purpose for the purpose of promoting and announcing it,

• To inform the relevant person who shares data about future projects as a result of research and analysis studies

8. PURPOSES OF TRANSFER OF PERSONAL DATA AND RECIPIENT GROUPS

Personal data; Within the framework of the provisions on the transfer of personal data specified in Articles 8 and 9 of the KVKK; In order to carry out the project and application processes; It can only be shared with public institutions and organizations, limited to the specified purpose.

9. BASIC PRINCIPLES REGARDING THE PROCESSING OF PERSONAL DATA

A number of basic principles are adopted by the Data Controller during the process of ensuring and maintaining compliance with the legislation regarding personal data processed through the Project; There are basic principles regarding the processing of personal data that have been accepted by international studies and are reflected in the practices of many countries. It is known that the Procedures and Principles Regarding the Processing of Personal Data in Article 4 of Law No. 6698 are regulated in parallel with the Convention No. 108 and the European Union Directive No. 95/46/EC.

Accordingly, the basic principles listed in the Law in the processing of personal data by data controllers are as follows:

• Complying with the law and the rules of honesty,

• Being accurate and up-to-date when necessary,

• Processing for specific, clear and legitimate purposes,

• Being related to the purpose for which they are processed, limited and proportionate,

• These are the principles of preservation for the period stipulated in the relevant legislation or necessary for the purpose for which they are processed.

1. A) Principle of Compliance with Law and Honesty Rules

In accordance with the principle of compliance with the law and the rule of honesty, the Data Controller carries out transactions under the obligation to act in accordance with the legislation and the principles brought by other legal regulations in the processing of personal data. In accordance with the principle of compliance with the rule of honesty, the Data Controller always acts by taking into account the reasonable expectations and interests of the relevant persons while trying to achieve the goals of personal data processing. At this point, in principle, all necessary work is carried out by the Data Controller in order to prevent the emergence of consequences that the applicant concerned person does not expect to arise. Any information regarding the issue will be provided to the relevant person without delay.

1. B) The Principle of Being Accurate and Up-to-Date When Necessary

The Data Controller has an active duty of care in the necessary control and review studies to ensure that the personal data collected through the Project is accurate and up-to-date when necessary.

1. C) Principle of Processing for Specific, Clear and Legitimate Purposes

The principle that the purposes of processing personal data are specific, legitimate and clear is established with great care by the Data Controller. As a matter of fact, as an extension of this principle, the relevant disclosure texts and policies have been created by the Data Controller. Along with these texts in question; Legal terminology has been avoided as much as possible in order to ensure that personal data processing activities are clearly understandable by the relevant person and can be easily understood by the relevant persons in determining the legal processing condition based on which they are carried out.

1. D) The Principle of Being Related to the Purpose for Which They Are Processed, Limited and Proportionate

The Data Controller collects the processed personal data only for the purpose of achieving the specified purposes. At this point, the "data minimization policy" that must be followed by the data controllers by the Personal Data Protection Authority has also been adopted with great importance by the Data Controller.

1. E) The Principle of Preservation for the Period Envisaged in the Relevant Legislation or Necessary for the Purpose for which they are Processed

The Data Controller determines the periods required for the purpose of processing personal data within the scope of the legislation and preserves them as appropriate. All necessary work is being carried out to take the necessary administrative and technical measures for conservation.

10. RIGHTS OF THE RELATED PERSON AND ROUTES OF APPLICATION TO THE DATA CONTROLLER

Another obligation of Data Controllers arising from the Law is to inform the relevant person about his or her rights. In this context, according to Article 11 of the Law, the relevant persons can apply to the Data Controller;

– Learning whether personal data is processed,

-Requesting information if personal data has been processed,

-Learning the purpose of processing personal data and whether they are used for their intended purpose,

-Knowing the third parties to whom personal data is transferred at home or abroad,

-Requesting correction of personal data if they are incomplete or incorrectly processed,

- Requesting the deletion or destruction of personal data within the framework of the conditions stipulated in Article 7,

-Requesting that the transactions carried out in accordance with clauses (d) and (e) be notified to third parties to whom personal data are transferred,

- Objecting to the emergence of a result against the person by analyzing the processed data exclusively through automatic systems,

-They have the right to demand compensation for the damage in case of damage due to illegal processing of personal data.

The relevant person, who wishes to exercise his rights or submit his requests as stipulated in Article 11, fills out the Application Form on the website www.sumerinsankaynaklari.com to the Data Controller,

You can reach us by sending your request to the e-mail address info@sumerinsankaynaklari.com in accordance with the "Communiqué on the Procedures and Principles of Application to the Data Controller".

11. PROCEDURES FOR RESULTING THE RELATED PERSON'S REQUESTS RELATED TO KVKK

In the event that the applicant concerned person submits to us his/her requests regarding his/her rights stated in the 10th section of this Policy titled "Rights of the Personal Data Owner and Ways of Application to the Data Controller" in accordance with the procedure, the Data Controller will respond to the request as soon as possible and within 30 days at the latest, depending on the nature of the request. The relevant request will be finalized free of charge within thirty) days. However, if the transaction requires an additional cost in accordance with the second paragraph of Article 13 of the Law, a fee may be charged in accordance with the tariff determined by the Board. The data controller accepts the request or rejects it by explaining the reason and notifies the relevant person in writing or electronically. If the request in the application is accepted, the necessary action will be taken by the data controller. If the application is due to the error of the data controller, the fee collected will be refunded to the relevant person. In written applications, the date on which the document is notified to the data controller or his representative is the application date. In accordance with Article 7 of the Communiqué on the Procedures and Principles of Application to the Data Controller, if the application of the relevant person is to be responded to in writing, ten There is no charge per page. A processing fee of 1 Turkish Lira may be charged for each page over ten pages. If the response to the application is given on a recording medium such as a CD or flash memory, the fee that may be requested by the data controller cannot exceed the cost of the recording medium. Those responsible for home elderly care reserve the right to make changes to this Text, changes made An announcement will be made on www.evdeyaslibakimi.com.