Ahbap KVKK Policy

AHBAP ASSOCIATION ON THE PROTECTION AND PROCESSING OF PERSONAL DATA

CLARIFICATION TEXT & KVK POLICY 

1. INTRODUCTION
2. PURPOSE :

As AHBAP ASSOCIATION (referred to as AHBAP), we show the utmost sensitivity to the security of your personal data. Law No. 6698 on the Protection of Personal Data (hereinafter referred to as KVKK or Law) entered into force on 7 April 2016 and with this Ahbap Association Clarification Text on the Protection and Processing of Personal Data, it aims to fulfil the obligations regarding the protection and processing of personal data by Ahbap Association and Ahbap Platform, which is affiliated to Ahbap Association and does not have a legal entity, to determine the principles to be followed and to enlighten the data owners whose personal data are processed in every respect.

With this awareness, Ahbap Platform Volunteers/Volunteer candidates to be coded/processed within Ahbap, i.e. Ahbaps and Candidate Ahbaps, donors, scholarship holders, people in need, site members, In terms of Ahbap Market users and all applicants and members without discrimination, we attach great importance to the processing and preservation of personal data of private and general nature belonging to individuals in accordance with the law and the secondary regulations enacted and / or to be enacted in accordance with this law and the decisions taken and / or to be taken by the binding Personal Data Protection Board, and to be destroyed in accordance with the destruction policy established in accordance with the law.

In line with the principles determined by the law and all secondary legislation, we hereby inform you that your personal data will be processed in the manner and under the conditions specified in this clarification text in the capacity of "Data Controller", in this context, Ahbap Association and the formations established within this association in accordance with the relevant legislation carry out all personal data processing activities within the scope of the law. All your personal data are processed under the conditions specified in this clarification text and within the limits prescribed by the relevant legislation.

The concept of "personal data" in this document is used to include special categories of personal data. We would like to state that we will not have any responsibility within the scope of KVKK and other legislation regarding the information and documents you send us other than the information requested from you during the application and / or registration.

1. INFORMATION OF THE DATA CONTROLLER

Registered in the Associations Registry in accordance with the Law, "Levent Mah. Chrysanthemum Sok. No:40 BEŞİKTAŞ/İSTANBUL" is the data controller.

Ahbap Association is the data controller in terms of all legal entities and / or non-legal entities to be established, including Ahbap Platform and Ahbap Association Economic Enterprise established under the legal personality of Ahbap Association. 

1.  PERSONAL DATA PROCESSING POLICY
   1. DATA OFFICIALS: 

WHOSE PERSONAL DATA DO WE PROCESS? 

Pursuant to this policy, Ahbap is related to all personal data of individuals processed by automated and/or non-automated means. The persons whose personal data may be processed in accordance with this policy are listed below without limitation, and all rights regarding the processing of personal data that persons have communicated to Ahbap by contacting Ahbap or by any means are reserved.

1. Ahbap Association Members
2. Ahbap Platform Volunteers / Volunteer Candidates
3. Ahbap Official Website(s) Members
4. Ahbap Economic Enterprise Ahbap Market Site Users and Members,
5. People in Need Applying Through All Kinds of Channels Belonging to Ahbap
6. Scholarship Recipients
7. Donors
8. All relevant natural persons, including those who share their data with Ahbap through legal/illegal means

1. PROCESSED PERSONAL DATA: 

WHAT PERSONAL DATA DO WE PROCESS?

1. Identity Information (Name, Surname, T.R. ID No, Date of Birth, Place of Birth)
2. Contact Information (Telephone, E-Mail Address, Social Media Usernames, etc.)
3. Address Information (Home Address, Work Address, etc.)
4. Information on Education, Work and Professional Life (Education and Graduation Information, Occupation, Employment Status)
5. Personal Information (Marital Status, Information on Children, Information on Guardians, etc.)
6. Bank Information (For scholarship recipients, regarding the sending of the scholarship, for donors, regarding the receipt of donations, bank information of those in need, if necessary, etc.)
7. Documents Regarding Income Status (In terms of applicants requesting assistance: Income Certificate, Poverty Certificate, Social Security Institution Records, Tax Certificate, etc.)
8. Health Documents (In terms of applicants requesting Health Assistance; prescription, official document showing medical needs, doctor and hospital reports, etc.).

1. PROCESSING OF PERSONAL DATA OF SPECIAL NATURE:

WHAT IS SPECIAL CATEGORIES OF PERSONAL DATA AND HOW DO WE PROCESS THEM?

Sensitive personal data are given special importance under the Law due to the risk of causing victimisation or discrimination when processed unlawfully. These "sensitive" personal data are; race, ethnic origin, political opinion, philosophical belief, religion, sect or other beliefs, appearance and dress, association, foundation or trade union membership, health, sexual life, criminal conviction and security measures, and biometric and genetic data.

Sensitive personal data are processed by our association in accordance with the principles set out in this Policy and by taking all necessary administrative and technical measures, including the methods to be determined by the PDP Board, and in the presence of the following conditions. According to the provisions of the relevant law, personal data of special nature can only be processed with the explicit consent of the data subject. However, if there are provisions in other legal regulations, it can be processed without seeking the explicit consent of the data subject. In this respect, all our legal rights are reserved.

1. PURPOSE OF DATA PROCESSING:

FOR WHAT PURPOSE DO WE PROCESS YOUR DATA?

 Your personal data is processed by Ahbap for the following purposes;

1. To ensure that work is carried out in accordance with the Law on Associations and all relevant legislation,
2. To continue our activities framed by the Buddy Association Charter,
3. To provide opportunities such as participation, e-newsletter, benefit from events and to carry out all necessary actions to ensure your use,
4. Keeping records and communicating with Buddy Platform Volunteers and/or Volunteer Candidates,
5. Planning and maintaining the publication of Ahbap Market's e-commerce service,
6. Providing support to those in need who apply, and ensuring that all relevant content is available,
7. Providing scholarships in scholarship rates and the distribution of all related graphics,
8. In terms of donors' information; To ensure communication, to comply with all legal regulations, to express gratitude with donations,
9. Being able to organize
10. Communicating the relevant needy people within the scope of the projects,
11. Providing information for new projects and combining works,
12. Distributed with suppliers and other third parties,
13. Planning and carrying out risk management and quality improvement,
14. Tracking and distribution of sponsorship pieces,
15. You protect your personal information in the channels you log in using your username and password,
16. Application/application phase,
17. To ensure that legal regulations are fulfilled, as legal regulations change or are required,
18. With all other details specified in KVKK.

1. PERSONAL DATA PROCESSING POLICY: 

 HOW DO WE PROCESS YOUR PERSONAL DATA?

Your personal data; It is collected verbally, in writing or electronically by Ahbap through automatic and/or non-automatic methods such as e-mail, telephone, website and/or forms kept on paper.

In this context, all your general and special personal data have been made public by the relevant person himself in accordance with paragraphs 2/d-e-f of Article 5 of the Law and based on the legal grounds that data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the relevant person. is being processed.

In terms of documents not submitted through the official website of Ahbap and/or physically; Ahbap is not responsible for the personal data sent by the data subject via e-mail and all other online communication channels, and in such cases, Ahbap cannot be held responsible for any transfers that may occur abroad if the data providers are not located in Turkey.

1. THOSE WHO HAVE ACCESS TO PERSONAL DATA:

WHO CAN ACCESS YOUR PERSONAL DATA?

FROM THE ASSOCIATION & PLATFORM;

1. Friends Association Board Members
2. Dude Platform General Coordinatorship
3. Buddy Platform Relevant Board Chairmen and Members
4. Friends Platform City Boards and Members
5. Friends Association & Economic Enterprise Employees

OUTSIDE THE ASSOCIATION AND PLATFORM;

1. Association Consulting Company
2. Company Employees Working on the Association Software
3. Association Legal Consultancy Office & Association Contracted Lawyer
4. Association Accounting Consultancy & Association Contracted SMM

1. TRANSFER OF PERSONAL DATA:

TO WHOM AND FOR WHAT REASONS DO WE TRANSFER YOUR PERSONAL DATA?

1. DOMESTIC TRANSFER OF PERSONAL DATA

As AHBAP, we act in accordance with the regulations stipulated in the KVKK and the decisions taken by the KVK Board regarding the transfer of personal data. Without prejudice to the legal compliance reasons in the legislation, personal data and sensitive data will not be transferred to third parties without the express consent of the relevant person.

1. THIRD PARTIES TO WHICH PERSONAL DATA IS TRANSFERRED BY AHBAP

Personal data may be transferred to the categories of persons listed below within the scope of the rules specified in this Policy:

1. Dude Officials,
2. Dude Business Partners,
3. Dude Suppliers,
4. Ahbap Economic Enterprise Related Persons,
5. Concerned Donors,
6. Friends Collaborators Within the Scope of the Project,
7. Legally Authorized Public Institutions and Organizations,
8. Legally Authorized Private Law Real/Legal Persons
9. Third parties and institutions that can be transferred when deemed appropriate by law.

1. TRANSFER OF PERSONAL DATA ABROAD

As a rule, personal data cannot be transferred abroad without the explicit consent of the relevant person. However, if one of the reasons for compliance with the law stated in this Policy exists, third parties abroad:

1. Being located in countries with adequate protection declared by the KVK Board, or

2. If it is located in countries where there is not sufficient protection, personal data may be transferred abroad without explicit consent, provided that the data controllers in Turkey and the foreign country in question undertake adequate protection in writing and have the permission of the KVK Board.

   If one of the above-mentioned situations does not exist, personal data may be transferred abroad by applying for the express consent of the individuals. However, Ahbap cannot be held responsible for situations arising from the fact that personal data sent via e-mail and/or various online platforms is not under the control of Ahbap and the hosting providers of the said channels are abroad.

1. STORAGE OF PERSONAL DATA
   1. STORAGE PERIOD OF PERSONAL DATA

HOW LONG DO WE PROCESS/STORE YOUR PERSONAL DATA?

 As AHBAP, we do not retain your personal data for the period necessary for the purpose for which they are processed and the minimum period stipulated in all other legal legislation to which our association is subject. In this context, our association first determines whether a period of time is stipulated in the relevant legislation for the storage of personal data, and if a period is determined, it acts in accordance with this period.

If there is no legal period, personal data is stored for the period necessary for the purpose for which they are processed. At the end of the specified storage periods, personal data is destroyed in accordance with the periodic destruction periods or the data owner's application and with the specified destruction methods (deletion and/or destruction and/or anonymization).

1.  STORAGE OF PERSONAL DATA:

HOW DO WE STORE YOUR PERSONAL DATA?         

1. If your personal data is automatically processed data:

The data belonging to Ahbap is stored on the server and database.

1. If your personal data is not processed automatically / processed physically:

It is to hide in specially prepared compartments in the center of the association belonging to Dude. In addition, a separate and highly secure area has been allocated to store your sensitive data. The majority of physical documents are also scanned and stored safely on Ahbap's data server.

1. SECURITY OF PERSONAL DATA:

WHAT PRECAUTIONS DO WE TAKE TO PROTECT YOUR PERSONAL DATA?

 As AHBAP, in accordance with Article 12 of the Law, we take the necessary measures, depending on the nature of the data to be protected, to prevent unlawful disclosure, access, transfer of personal data or security deficiencies that may occur in other ways. In this context, our Bil-Tek Board and legal team working within our association take administrative measures, carry out inspections or have them carried out to ensure the necessary security level in accordance with the guides published by the Personal Data Protection Board.

In addition, technical and administrative measures taken to protect personal data are carefully implemented in terms of special personal data and necessary controls are provided.

Ahbap takes appropriate and necessary measures such as firewalls, two-stage passwords, software systems and physical security measures in order to prevent unlawful processing of personal data, to prevent unlawful access, and to ensure their preservation in information systems that contain personal data, in accordance with KVKK Article 12. We prevent the unlawful processing of personal data by third parties. In case personal data is obtained by others through illegal means, KVKK art. The notification specified in 12 will be made by Ahbap in accordance with legal regulations. 

1. DISPOSAL POLICY

The Destruction Policy is operated in the ways stipulated by the Law and secondary legal legislation and your personal data is destroyed in accordance with legally determined situations. To summarize: Data processed automatically and not physically available are destroyed by software means, while data processed non-automatically and physically available are destroyed by burning. 

1. RIGHTS AND REMEDIES OF DATA SUBJECTS
   1. RIGHTS OF THE DATA SUBJECT:

WHAT ARE YOUR RIGHTS?  

Data subjects have the following rights:

1. Learning whether personal data is processed or not,
2. Requesting information if personal data has been processed,
3. Learning the purpose of processing personal data and whether they are used for their intended purpose,
4. Knowing the third parties to whom personal data is transferred at home or abroad,
5. Requesting correction of personal data in case personal data has been processed incompletely or incorrectly and requesting that the action taken in this context be notified to third parties to whom personal data has been transferred,
6. Requesting the deletion or destruction of personal data in case the reasons requiring processing no longer exist, even though it has been processed in accordance with the law and other relevant legal provisions, and requesting that the action taken in this context be notified to third parties to whom personal data has been transferred,
7. Objecting to the emergence of a result that is unfavorable to the individual by analyzing the processed data exclusively through automatic systems,
8. Request compensation for damages in case of damage due to unlawful processing of personal data.

1. APPLICATION WAYS

HOW CAN YOU USE YOUR RIGHTS?

In order to exercise your rights listed above and arising from the law, you can apply to our association by filling out the Ahbap KVK Application Form below and using one of the methods included in the form; https://cdn.ahbap.org/public-contents/kvkk.docx

After filling out the form, you must choose one of the following methods and send your application form to us:

Application Method

Address to Application

Information to be Specified in Application Submission

Apply in person

(The applicant must come to our ASSOCIATION headquarters in person and apply with a document proving his/her identity)

Levent Mah. Krizantem St. NO: 40 BEŞİKTAŞ/İSTANBUL

“Information Request Within the Scope of the Personal Data Protection Law” should be written on the envelope.

Notification via notary

Levent Mah. Krizantem St. NO:40 BEŞİKTAŞ/İSTANBUL

“Information Request Within the Scope of the Personal Data Protection Law” should be written in the notification envelope.

If your application for these purposes requires an additional cost, you will be required to pay the fee determined by the Communiqué on the Procedures and Principles of Application to the Data Controller issued by the Personal Data Protection Board. If your application is answered in writing, no fee will be charged for the first 10 (ten) pages, and the response will be charged by charging the processing fee prescribed by the Personal Data Protection Board for each page over 10 (ten) pages. If the answer to the application is given on a recording medium such as a CD or flash memory, the fee that may be requested by Ahbap will not exceed the cost of the recording medium.

In your application containing your explanations regarding the rights you have as a personal data owner and request to use, to exercise your rights mentioned above; If the matter you request is clear and understandable, if the matter you request relates to you personally or if you are acting on behalf of someone else, you will need to submit your special power of attorney certified by a notary.

In your applications, name-surname, signature, T.R. It is mandatory to have the requested elements such as identity number, residence or workplace address, e-mail address, telephone and fax number, in accordance with the "Communiqué on the Procedures and Principles of Application to the Data Controller". Applications that do not contain the mentioned elements will be rejected by AHBAP.

Your requests in your application will be concluded as soon as possible and within 30 (thirty) days at the latest, depending on the nature of the request.

1. ENFORCEMENT AND CHANGE

The clarification text prepared by Ahbap was first published on the official website of the law within the legal period given by the law, and this clarification text was renewed on 09/03/2021 and announced to the public on the official website of Ahbap.

Ahbap reserves the right to make changes in the disclosure text and all KVK policies in parallel with legal regulations and changing/developing conditions. The updated text will take effect immediately as of the date of publication.

FRIENDS ASSOCIATION

DATA CONTROLLER

COMMUNICATION

You can contact us through the following methods for your opinions, suggestions and requests for the exercise of your rights listed above and arising from the law.

ADDRESS: Levent Mah. Krizantem Sok. NO: 40 BEŞİKTAŞ/İSTANBUL

E-MAİL: kvkk@ahbap.org