AHBAP ASSOCIATION DISCLOSURE TEXT & POLICY ON THE PROTECTION AND PROCESSING OF PERSONAL DATA

ENTRANCE

AIM:

As AHBAP ASSOCIATION (referred to as Ahbap), we show maximum sensitivity to the security of your personal data. The Law on Protection of Personal Data No. 6698 (referred to as KVKK or Law) entered into force on 7 April 2016; With this Enlightenment Text on the Protection and Processing of Personal Data of the Ahbap Association, it is aimed to fulfill the obligations regarding the protection and processing of personal data, to determine the principles to be followed, and to enlighten the data owners whose personal data is processed, in all respects, by the Ahbap Association and the Ahbap Platform, which has no legal personality. .

With this awareness, private and general personal data belonging to individuals, which will be coded/processed within the body of Ahbap, shall be legally enforceable in terms of the Ahbap Platform Volunteers/Volunteer candidates, namely the Ahbap and Candidate Ahbap, donors, scholarship holders, the needy, site members, Ahbap Market users and all applicants and members without discrimination. We attach great importance to processing, keeping and destroying in accordance with the destruction policy established in accordance with the law, in accordance with the secondary regulations enacted and/or to be put into effect under this law and the binding decisions taken and/or to be taken by the Personal Data Protection Board.

In line with the principles set by the law and all secondary legislation, we inform you that, as "Data Controller", your personal data will be processed in the manner and under the conditions set forth in this clarification text, and in this context, Ahbap Association and the organizations established within this association in accordance with the relevant legislation carry out all personal data processing activities within the scope of the law. . All your personal data are processed under the conditions specified in this disclosure text and within the limits ordered by the relevant legislation.

The concept of “personal data” in this document is used to include special categories of personal data. We would like to point out that we will not be responsible for the information and documents you transmit to us, other than the information requested from you during the application and/or registration, within the scope of KVKK and other legislation.

INFORMATION OF THE DATA SUBJECT

Registered in the Registry of Associations in accordance with the law, “Levent Mah. Krizantem Sok. No:40 BEŞİKTAŞ/İSTANBUL” is the data controller of the AHBAP ASSOCIATION.

All information systems established/managed by Ahbap and all information systems established/managed by Ahbap.org and/or ahbap.org in terms of all legal entity and/or non-existent entities to be established, including the Ahbap Platform established under the legal entity of the Ahbap Association and the Economic Enterprise of the Ahbap Association. The data controller is the Ahbap Association for all websites that serve under the subdomain name and probably belong to Ahbap.

PERSONAL DATA PROCESSING POLICY

DATA RELATED:

WHOSE PERSONAL DATA DO WE PROCESS?

In accordance with this policy, Ahbap relates to all personal data of individuals that are processed by automatic and/or non-automatic means. The persons whose personal data may be processed with this policy are listed below without limitation, and all rights regarding the processing of personal data transmitted by individuals by contacting Ahbap or by any other means are reserved.

Ahbap Association Members

Fellow Platform Volunteers / Volunteer Candidates

Ahbap Official Website(s) Members and All Users,

Ahbap Economic Enterprise Ahbap Market Site Users and Members,

The Needy Persons Applying Through All Kinds of Channels Belonging to Ahbap

Scholars

donors

All relevant natural persons, including those who share their data with Ahbap through legal/illegal means

PROCESSED PERSONAL DATA:

WHICH PERSONAL DATA DO WE PROCESS?

Identity Information (Name, Surname, T.R. Identity Number, Date of Birth, Place of Birth)

Contact Information (Phone, E-Mail Address, Social Media Usernames etc.).

Address Information (Home Address, Work Address, etc.)

Education, Business and Professional Life Information (Educational Status and Graduation Information, Occupation, Employment Status)

Personal Information (Marital Status, Child Information, Relevant Information if Guardian, etc.)

Bank Information (Sending scholarships for scholars, receiving donations for donors, bank information for those in need, etc.)

Documents Related to Income Status (For applicants requesting assistance: Income Certificate, Poverty Certificate, SGK Statement Records, Tax Plate, etc.)

Health Documents (For applicants requesting Health Assistance; prescription, official document showing medical need, doctor and hospital reports, etc.)

PROCESSING OF SPECIAL QUALITY PERSONAL DATA:

WHAT IS PRIVATE PERSONAL DATA AND HOW DO WE PROCESS IT?

Special importance is attached to sensitive personal data within the scope of the Law due to the risk of causing victimization or discrimination when processed unlawfully. This "special quality" personal data; Data related to race, ethnicity, political thought, philosophical belief, religion, sect or other beliefs, clothing, association, foundation or union membership, health, sexual life, criminal conviction and security measures, and biometric and genetic data.

Special categories of personal data are processed by our association in accordance with the principles set forth in this Policy, by taking all necessary administrative and technical measures, including the methods to be determined by the KVK Board, and in the presence of the following conditions. According to the provisions of the relevant law, sensitive personal data can only be processed with the explicit consent of the data subject. However, if there are provisions in other legal regulations, the data may be processed without the explicit consent of the data subject. In this regard, all our legal rights are reserved.

PURPOSE OF DATA PROCESSING:

FOR WHAT PURPOSES DO WE PROCESS YOUR DATA?

Your personal data is processed by Ahbap for the following purposes;

To record your data in accordance with the Law of Associations and any relevant legislation,

To carry out our activities in line with the purposes defined by the Duties Association Charter,

To provide opportunities such as participation, e-bulletin, benefiting from events through our websites and / or mobile applications and to perform all necessary actions to make them available to you,

To keep records of the Fellow Platform Volunteers and/or Volunteer Candidates, to be able to communicate,

Planning and management of e-commerce service activities within Ahbap Market,

To be able to provide support to those in need, to manage all related processes,

Providing scholarships to students applying for scholarships and managing all related processes,

In terms of the donors' information; The purpose of receiving donations and ensuring communication, fulfilling all legal obligations, being able to thank for the donation,

To be able to organize

Communicating with those in need within the scope of projects,

Informing about new projects and collaborations to be made,

Conducting relations with suppliers and other third parties,

Planning and execution of risk management and quality improvement studies,

Follow-up and execution of sponsorship processes,

Your personal data in the channels where your party logs in using your user name and password,

Managing application/application/website,

In order to ensure the fulfillment of legal obligations, as required or mandated by legal regulations,

For all other purposes specified in KVKK.

PERSONAL DATA PROCESSING POLICY:

HOW DO WE PROCESS YOUR PERSONAL DATA?

Your personal data; It is collected verbally, in writing or electronically by means of automatic and/or non-automatic methods such as e-mail, telephone, website and/or forms kept in paper form.

In this context, all your general and special personal data are made public by the data subject in accordance with the 2/d-e-f clauses of Article 5 of the Law, and data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject, based on legal reasons. is processed.

In terms of documents that are not presented physically and/or on the official website of Ahbap; Ahbap is not responsible for the personal data sent by the data subject through e-mail and all other online communication channels, and in such cases, Ahbap cannot be held responsible for any transfers that may occur abroad if the data providers are not located in Turkey.

THOSE WHO HAVE ACCESS TO PERSONAL DATA:

WHO CAN ACCESS YOUR PERSONAL DATA?

THROUGH THE ASSOCIATION & PLATFORM;

Ahbap Association Board Members

Ahbap Platform General Coordinatorship

Ahbap Platform Heads and Members of Relevant Boards

Ahbap Platform City Boards and Members

Ahbap Association & Business Enterprise Employees

EXCEPT ASSOCIATION & PLATFORM;

Association Consulting Company

Company Employees Working on Association Software

Association Contracted Legal Consultancy Office & Association Contracted Lawyer

Association Contracted Accounting Consultancy & Association Contracted SMM

TRANSFERRING PERSONAL DATA:

TO WHOM AND FOR WHAT REASONS DO WE TRANSFER YOUR PERSONAL DATA?

DOMESTIC TRANSFER OF PERSONAL DATA

As Ahbap, we act in accordance with the regulations stipulated in the KVKK and the decisions taken by the KVK Board regarding the transfer of personal data. Personal data and sensitive data are not transferred to third parties without the explicit consent of the person concerned, without prejudice to the reasons for compliance with the law in the legislation.

THIRD PARTIES TO WHOM PERSONAL DATA IS TRANSFERRED BY THE AHBAP

Personal data may be transferred to the following categories of persons within the scope of the rules set forth in this Policy:

Ahbap Officials,

Ahbap Business Partners,

Ahbap on Sale,

Affiliate Economic Enterprises,

Relevant Donors,

Fellow Collaborators in the Scope of the Project,

Legally Authorized Public Institutions and Organizations,

Legally Authorized Private Law Real/Legal Persons

3. Persons and institutions that can be transferred where the law deems appropriate.

TRANSFER OF PERSONAL DATA ABROAD

As a rule, personal data cannot be transferred abroad without the explicit consent of the person concerned. However, in case of existence of one of the reasons for compliance with the law in this Policy, third parties abroad:

Being in countries where there is sufficient protection declared by the KVK Board, or

Personal data may be transferred abroad without explicit consent, provided that the data controllers in Turkey and in the foreign country in question undertake an adequate protection in writing and have the permission of the KVK Board, if they are located in countries where there is no adequate protection.

In the absence of one of the above-mentioned cases, personal data may be transferred abroad by applying to the express consent of individuals. However, Ahbap's responsibility cannot be mentioned for the situations arising from the fact that the personal data sent via e-mail and/or various online platforms are not under the control of Ahbap and the hosting providers of the aforementioned channels are abroad.

STORAGE OF PERSONAL DATA

PERSONAL DATA STORAGE PERIOD

HOW LONG DO WE PROCESS/STORE YOUR PERSONAL DATA?

As a Ahbap, we do not keep your personal data for the period required for the purpose for which they are processed and for the minimum period stipulated in all other legal legislation to which our relevant/association is subject. In this context, our association first determines whether a period is foreseen for the storage of personal data in the relevant legislation, and if a period is determined, it acts in accordance with this period.

If there is no legal period, personal data are stored for the period necessary for the purpose for which they are processed. At the end of the specified storage periods, personal data is destroyed in accordance with the periodic destruction periods or the application of the data owner and with the determined destruction methods (deletion and / or destruction and / or anonymization).

STORAGE OF PERSONAL DATA:

HOW DO WE STORE YOUR PERSONAL DATA?

In case your personal data is automatically processed data:

It is stored in the data server and database of Ahbap.

In case your personal data is not processed by automatic means / is physically processed:

It is to be kept in specially prepared compartments in the association center belonging to the Ahbap. In addition, a separate and highly secure area is reserved for the storage of your sensitive data. Most of the physical documents are also scanned and stored safely in the data server of Ahbap.

SECURITY OF PERSONAL DATA:

HOW DO WE TAKE MEASURES TO PROTECT YOUR PERSONAL DATA?

As a Ahbap, we take the necessary measures according to the nature of the data to be protected in order to prevent the unlawful disclosure, access, transfer or security deficiencies that may occur in other ways, in accordance with Article 12 of the Law. In this context, our Bil-Tek Board and our legal team working within our association take administrative measures to ensure the necessary level of security in accordance with the guidelines published by the Personal Data Protection Board, and carry out audits or have them done.

In addition, technical and administrative measures taken for the protection of personal data are carefully implemented in terms of special quality personal data and necessary controls are provided.

Ahbap takes appropriate and necessary measures such as firewall, two-stage password, software systems and physical security measures in order to prevent the illegal processing of personal data, to prevent their unlawful access, and to ensure their preservation, in accordance with Article 12 of the KVKK. We prevent the unlawful processing of personal data by third parties. In case personal data is obtained by others illegally, KVKK art. The notification specified in 12 will be made by Ahbap in accordance with the legal regulations.

DISPOSAL POLICY

The Destruction Policy is operated in the ways stipulated by the Law and secondary legislation, and your personal data is destroyed in accordance with the legally determined cases. To summarize; In terms of data that are automatically processed and not physically available, they are destroyed by software means, while data that are processed by non-automatic means and that are physically available are destroyed by burning.

RIGHTS OF DATA SUBJECTS AND REMEDIES

RIGHTS OF DATA RELATED:

WHAT ARE YOUR RIGHTS?

Data subjects have the following rights:

Learning whether personal data is processed or not,

If personal data has been processed, requesting information about it,

Learning the purpose of processing personal data and whether they are used in accordance with its purpose,

Knowing the third parties to whom personal data is transferred at home or abroad,

Requesting correction of personal data in case of incomplete or incorrect processing and requesting notification of the transaction made within this scope to the third parties to whom the personal data has been transferred,

Requesting the deletion or destruction of personal data in the event that the reasons requiring its processing cease to exist despite the fact that it has been processed in accordance with the provisions of the law and other relevant laws, and requesting that the transaction carried out within this scope be notified to the third parties to whom the personal data has been transferred,

Objecting to the emergence of a result against the person himself by analyzing the processed data exclusively through automated systems,

To request the compensation of the damage in case of loss due to unlawful processing of personal data.

APPLICATION ROUTES

HOW TO USE YOUR RIGHTS?

Your applications in order to use your rights listed above and arising from the law;

A wet-signed copy that clearly states your demands can be sent to "Levent Mah. St. Krizantem. No: 40 BEŞİKTAŞ/İSTANBUL” address,

You can send it to [email protected] by using your KEP (Registered Electronic Mail) address, secure electronic signature, mobile signature or your e-mail address previously notified to Ahbap and registered in Ahbap's system.

If your application for these purposes requires an additional cost, you will have to pay the fee determined by the Communiqué on Application Procedures and Principles to the Data Controller issued by the Personal Data Protection Board. In case of a written response to your application, no fee will be charged for the first 10 (ten) pages. For each page above 10 (ten) pages, it will receive the processing fee stipulated by the Personal Data Protection Board. If the response to the application is given in a recording medium such as CD or flash memory, the fee that may be requested by the Ahbap will not exceed the cost of the recording medium.

In the application containing your explanations regarding the right you have as the personal data owner and you will make and request to use the above-mentioned rights; You will need to submit your special power of attorney certified by a notary public, if the issue you request is clear and understandable, the issue you request is about yourself or if you are acting on behalf of someone else.

In your applications, name-surname, signature, T.C. ID number, residence or workplace address, e-mail address, telephone and fax number, the elements of the request are mandatory in accordance with the "Communiqué on the Procedures and Principles of Application to the Data Controller". Applications that do not contain these elements will be rejected by AHBAP.

Your requests in your application will be finalized as soon as possible and within 30 (thirty) days at the latest, depending on the nature of the request.

EFFECT AND MODIFICATION

The illumination text prepared by Ahbap was first published on the official website of the law within the legal period given by the law, and this illumination text was finally updated on 21/05/2020 and announced to the public on the official website of Ahbap.

Ahbap reserves the right to make changes in the lighting text and all KVK policies in line with the legal regulations and changing/evolving conditions. The updated text will become effective immediately as of the date of publication.

AHBAP ASSOCIATION

DATA SPEAKER

Contact:

You can reach us through the following ways for your opinions, suggestions and requests for the use of your rights numbered above and arising from the law.

ADDRESS: Levent Mah. Krizantem Sok. NO: 40 BEŞİKTAŞ/İSTANBUL

E-MAIL: [email protected]