Information Notice on the Processing of Personal Data
| This Information Notice has been prepared by KAHSED, acting as the data controller, pursuant to Article 10 of the Law No. 6698 on the Protection of Personal Data (“Law No. 6698” or “KVKK”) and the Communiqué on the Procedures and Principles to Be Followed in Fulfilling the Obligation to Inform. The purpose of this Information Notice is to inform you about: the purposes for which your personal data are processed, the legal grounds, the methods of collection, the parties to whom your data may be transferred and the purposes of such transfers, and your rights under the KVKK. Contact details of the data controller are available in the “Contact” section of our website. 1. Scope This Information Notice covers the personal data processed by KAHSED within the scope of its activities, including: services provided via the website and mobile application, membership procedures, congress registration/participation processes, communication processes, and information security/technical operation processes (including log records). 2. Processed Personal Data Depending on the nature of the services and processes, KAHSED may process the following personal data: Identity and Contact Data: Name, surname, email address, phone number. Membership and Transaction Data: Membership/account information, membership status, application and transaction records, preferences and requests. Professional Information: Institution/workplace, title and similar information (depending on the service provided). Congress Registration and Participation Data: Information provided for congress registration, participation information. Finance and Payment Data: Documents submitted for payment verification (e.g., bank receipt) and, where necessary, information related to invoicing/payment processes. Identity Verification Information: Only where mandatory and required by the relevant transaction, your Turkish ID Number (T.C. Kimlik No) or Passport Number may be requested within the scope of payment/participation verification or fulfilling obligations arising from legislation. Communication Content: Message contents and attachments you submit via the contact form, email, and similar channels. Technical Data: Logs regarding the use of the website and mobile application, IP address, access date/time information, device/application information, error logs, security logs, and similar technical data. 3. Purposes of Processing Personal Data Your personal data may be processed in accordance with the KVKK for the following purposes: Providing, managing, and improving the services offered via the website and mobile application, Conducting membership application and membership processes; creating and managing user accounts, Conducting registration/participation processes for congresses and similar events; planning and carrying out organizational activities; ensuring communication with participants, Responding to communication requests; providing information and managing support processes, Managing information security processes; preventing abuse; ensuring the security of systems and data, Fulfilling legal obligations and responding to requests from authorized institutions/organizations, Establishing, exercising, or protecting a right and managing potential disputes. 4. Method of Collecting Personal Data Your personal data may be collected, wholly or partly by automated means or by non-automated means, through the forms you fill in on the website and mobile application, membership/congress registration processes, communication channels, documents you submit, transactions carried out electronically, and technical records (logs). 5. Legal Grounds Your personal data may be processed based on the following legal grounds, primarily under Article 5 of the KVKK and relevant legislation: Processing is necessary, provided that it is directly related to the establishment or performance of a contract, for the personal data of the parties to the contract, Processing is mandatory for the data controller to fulfill its legal obligation, Processing is mandatory for the establishment, exercise, or protection of a right, Processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject, Processing is expressly provided for by law. Where necessary and where required by legislation, your explicit consent may also be obtained separately. 6. Transfer of Personal Data Your personal data may be transferred, limited to the purposes stated above and in compliance with the KVKK, to the following persons/organizations: Service providers providing infrastructure/hosting, technical maintenance, software support, cybersecurity, and similar services, Service providers used for communication processes (e.g., email and similar tools), Relevant institutions/organizations and service providers, where necessary, within the scope of payment verification and accounting processes, Legally authorized public institutions and organizations and legally authorized private legal persons. KAHSED takes the necessary technical and administrative measures to ensure the security of your personal data during transfer processes. 7. Cross-Border Transfer / Overseas Hosting The website and mobile application infrastructure and the information technology services used may be hosted domestically and/or abroad depending on the location of service providers. In this context, your personal data may be stored/processed in Türkiye or abroad and, where necessary, may be transferred to service providers. KAHSED takes the necessary technical and administrative security measures to protect your personal data and ensures that appropriate measures are implemented by service providers in terms of data security and confidentiality. 8. Retention Period Your personal data will be retained for the period prescribed in the relevant legislation or for as long as necessary for the purpose for which it is processed. At the end of these periods, your personal data will be deleted, destroyed, or anonymized in accordance with the KVKK and relevant legislation. In the event of potential legal disputes, retention may be carried out for the periods necessary for the establishment, exercise, or protection of rights. 9. Data Security KAHSED takes the necessary technical and administrative measures to ensure an appropriate level of security in order to prevent unlawful processing of and access to your personal data and to ensure the safeguarding of the data. 10. Rights of the Data Subject Pursuant to Article 11 of the KVKK, you have the following rights regarding your personal data: To learn whether your personal data are processed, To request information if your personal data have been processed, To learn the purpose of processing and whether they are used in accordance with that purpose, To know the third parties to whom your personal data are transferred domestically/abroad, To request correction if your personal data are processed incompletely or inaccurately, To request deletion or destruction of your personal data within the framework of the conditions set out in the KVKK, To request notification of the transactions carried out to third parties to whom personal data have been transferred, To object to the occurrence of a result against you by reason of analysis of your data exclusively through automated systems, To request compensation for damages if you suffer damage due to unlawful processing of your personal data. 11. Application Method You may submit your applications within the scope of the KVKK to KAHSED through the channels in the “Contact” section of our website. Your applications will be evaluated and concluded in accordance with the KVKK and relevant legislation. |
