T.C. SAKARYA CHAMBER OF COMMERCE
Personal Data Protection Law
Information Text
Purpose and Definitions
This information text has been prepared by Sakarya Chamber of Commerce [STB] as the data controller within the scope of Article 10 of the Law on the Protection of Personal Data No. 6698 and the Communiqué on the Procedures and Principles to be Followed in Fulfilling the Information Obligation.

In accordance with the said law, it is aimed to fulfill the obligation to inform and inform about which personal data will be processed and for what purpose, to whom and for what purpose the processed personal data can be transferred, the method and legal reason for collecting personal data, the rights of the relevant person listed in Article 11 of the law on personal data and the exceptions to the processing of personal data.

Your personal data will be recorded, stored, rearranged, shared with institutions legally authorized to request this data, and transferred to third parties in the cases and conditions stipulated by the KVKK, in connection with and limited to the purpose of processing, and within the framework of the purpose requiring processing.

You can review the personal data we process as STB, limited to the purposes of processing, below.

Collection, Processing and Purposes of Processing of Personal Data
Your personal data may vary depending on your relationship with STB; however, it may be collected verbally, in writing or electronically through automatic or non-automatic methods, STB units, website, social media channels, mobile applications and similar means. Your personal data may be created and updated and processed as long as your relationship with STB continues.

STB processes personal data for the following purposes within the framework of the legal reasons set forth in Articles 5 and 6 of the Personal Data Protection Law:

Implementation of the provisions of the Stock Exchange Transaction Regulation,
Detection of members' workplace information,
Implementation of the provisions of the Law No. 5174 on the Union of Chambers and Commodity Exchanges of Turkey and Chambers and Commodity Exchanges,
Control of license holder information,
Quality management,
Implementation of the provisions of the Income Tax Communiqué No. 164,
Distribution of the Sakarya Chamber of Commerce Magazine,
Execution of scholarship transactions provided to students,
Execution of Information Security Processes
Fulfillment of Obligations Arising from the Employment Contract and Legislation for Employees
Execution of Side Rights and Benefits Processes for Employees
Execution of Audit / Ethics Activities
Execution of Training Activities
Execution of Access Authorizations
Execution of Activities in Accordance with Legislation
Finance and Carrying out accounting activities
Providing physical location security
Conducting assignment processes
Following up and conducting legal affairs
Conducting internal audit/investigation activities
Conducting communication activities
Planning human resources processes
Conducting/auditing business activities
Conducting occupational health/safety activities
Organization and event management
Conducting storage and archive activities
Conducting contract processes
Following up requests/complaints
Providing security of data controller operations
Conducting talent/career development activities
Providing information to authorized persons, institutions and organizations
Conducting management activities
Creating and following up visitor records

If the processing activity carried out for the aforementioned purposes does not meet any of the other data processing conditions stipulated under the PDP Law, STB obtains explicit consent from the relevant person regarding the relevant data processing process.

To Whom and for What Purpose Can Personal Data Be Transferred?
STB may share the personal data required in line with the personal data processing conditions and purposes specified in Articles 8 and 9 of the PDP Law, limited to the data processing purposes specified above, with the relevant public institutions and organizations due to legal obligations. In addition, data may be shared with real persons or private law legal entities within the scope of fulfilling the data processing purposes. Your personal data other than those specified will not be shared with third parties.

Your special personal data may only be processed with your explicit consent or in cases stipulated by law. Health data is processed without your explicit consent only by persons or authorized institutions and organizations under a confidentiality obligation for the purposes of protecting public health, preventive medicine, medical diagnosis, treatment and care services, planning and management of health services and their financing (PDPL Art. 6).

In addition to these, your personal data that you have declared with the job application form or collected later through various means are processed and transferred in connection with the performance of your duty in order to fulfill the services we offer to citizens as STB.

Method of Collection of Personal Data and Legal Reason
Your personal data that you share with STB is collected verbally, in writing or electronically, and stored in electronic and/or physical environments, completely or partially by automatic means or non-automatic methods provided that it is part of the data recording system. Necessary security measures and infrastructure developments are implemented by STB to protect your personal data stored in electronic and physical environments in the environments where they are stored. Your personal data will be processed by taking all necessary information security measures, provided that it is not used outside the purposes and scope notified to you, and will be stored and processed for the legal retention period or, if no such period is foreseen, for the period required by the purpose of processing. When this period expires, your personal data will be removed from the STB data flows by deletion, destruction or anonymization methods.

Your special personal data can only be processed with your explicit consent and based on the legal grounds of “Prescribed by Laws” and “Signing of the Contract”, taking into account Articles 5 and 6 of the KVKK.

Rights of the Relevant Person
As STB, data owners whose personal data we process, your rights as the Relevant Person according to Article 11 of Law No. 6698 are as follows:

a. To learn whether personal data is processed,

b. To request information regarding the processing of personal data,

c. To learn the purpose of processing personal data and whether they are used in accordance with their purpose,

d. To know the third parties to whom personal data is transferred domestically or abroad,

e. To request correction of personal data if it is processed incompletely or incorrectly,

f. To request deletion or destruction of personal data within the framework of the conditions stipulated in Article 7,

g. To request notification of the transactions made pursuant to clauses (e) and (f) to third parties to whom personal data is transferred,

h. To object to the emergence of a result against the person by analyzing the processed data exclusively through automated systems,

i. To request compensation for the damages incurred due to the processing of personal data in violation of the law.

You can submit your requests within the scope of Article 11 of the Law regulating the rights of the relevant person using one of the options below.

The requests of the relevant person will be evaluated and decided free of charge as soon as possible and ultimately within thirty (30) days at the latest. If the evaluation and decision-making process requires an additional cost, the fee in the tariff determined by the Personal Data Protection Board will be taken as basis.