IMPACT HUB ANKARA
YARATICI PROJE GELİŞTİRME OFİS HİZMETLERİ A.Ş.

PERSONAL DATA PROTECTION POLICY AND DISCLOSURE TEXT

1. OBJECTIVE

As Impact Hub Ankara Yaratıcı Proje Geliştirme Ofis Hizmetleri A.Ş. (Impact Hub Ankara); we want to ensure that the personal data of our members, visitors and other relevant natural persons are processed in accordance with the relevant legislation, especially the Law No. 6698 on the Protection of Personal Data (“KVKK”), and to protect the rights of the relevant persons whose data are processed.

This Clarification Form has been prepared in order to inform the natural and legal persons whose personal data have been acquired or processed by Impact Hub Ankara within the scope of the provisions of the KVKK, the rules complied with during the processing or sharing of this data and the rights of these persons.

II- DEFINITIONS
Impact Hub Ankara: Impact Hub Ankara Creative Project Development Office Services Inc,
Personal Data: All kinds of information belonging to real persons whose identity is specific or identifiable (Art. 3/1(d) of KVKK),
Processing of Personal Data: All kinds of operations performed on personal data such as obtaining, recording, storing, retaining, modifying, reorganising, disclosing, transferring, taking over, making available, classifying or preventing the use of personal data by fully or partially automatic means or by non-automatic means provided that they are part of any data recording system (Art. 3/1(e) of the LPPD),
Special Categories of Personal Data: Data relating to race, ethnic origin, political opinion, philosophical belief, religion, sect or other beliefs, appearance and dress, membership to associations, foundations or trade unions, health, sexual life, criminal conviction and security measures, and biometric and genetic data are considered as personal data of special nature (Art. 6/1 of the LPPD),
Data Processor: The natural or legal person who processes personal data on behalf of the data controller based on the authorisation granted by the data controller (Art. 3/1(ğ) of the LPPD),
Data Recording System: The recording system in which personal data is structured and processed according to certain criteria (Art. 3/1(h) of the LPPD),
Data Controller: The natural or legal person who determines the purposes and means of processing personal data and is responsible for the establishment and management of the data recording system (Art. 3/1(ı) of the LPPD).

III- DATA RESPONSIBLE
Within the scope of PDPL provisions, Impact Hub Ankara acts as the data controller.

IV- FOR WHAT PURPOSE AND FOR HOW LONG PERSONAL DATA MAY BE PROCESSED
Personal Data obtained by Impact Hub Ankara from written, verbal, visual, audio or written or electronic (including internet) media or from institutions and legal entities with which Impact Hub Ankara has any kind of business relationship (business partner, supplier, agency, agency, subcontractor, contractor, consultant and not limited to these) may be processed within the framework of the conditions specified in Articles 4, 5 and 6 of the KVKK and for the following purposes:
To comply with the information storage, reporting, information obligations stipulated by official institutions, to fulfil the requirements of the contracts and to fulfil the legal obligations to which Impact Hub Ankara is subject in order to benefit from these services and to comply with the legislation,
Determination of company strategies,
Carrying out all legal or technical work required to enter into and execute contractual relationships,
Identification of suitable products, projects and services for customers, their customisation, development and presentation,
Ensuring and improving coordination, co-operation and efficiency between the units of legal entities included in Impact Hub Ankara,
Ensuring the security of the website and other electronic systems used,
Making the necessary notifications to the relevant parties,
Carrying out and developing advertising and marketing activities,
Carrying out audit activities,
Follow-up of legal works or transactions, management of contracts, follow-up of legal processes in order to protect the rights of Impact Hub Ankara before the law
Investigation, detection, prevention and reporting of breaches of contract or law to administrative and judicial authorities,
Keeping internet log records,
Determination of financial risks, execution of relevant processes in the finance and accounting transactions of Impact Hub Ankara,
Other than human resources, the establishment of policies, evaluation of job applications and development of the human resources pool,
Informing the owners of Personal Data by e-mail, SMS and fax, sending printed bulletins, magazines and campaigns to these persons and evaluating their requests, demands and complaints,
Conducting satisfaction, performance and similar measurements and carrying out the necessary operations within this framework.
Personal Data may be retained for the period accepted in the relevant policies of Impact Hub Ankara or stipulated in the legislation.

V- PERSONS TO WHOM PROCESSED PERSONAL DATA MAY BE TRANSFERRED AND PURPOSES OF TRANSFER

 

Personal Data collected by Impact Hub Ankara, within the framework of Article 9 of the PDPL;

Persons or organisations permitted by the legislation,

Public institutions and organisations authorised by law, administrative or legal authorities

Impact Hub Ankara’s business partners, suppliers, shareholders or affiliates,

Legal entities and consultants whose headquarters, branches, workplaces, activities or data storage units are located in Turkey or abroad and who provide services to Impact Hub Ankara in various fields, especially data storage,

If required by the legislation, it may be shared with public or private organisations or persons within or outside the country.

Personal Data may be shared with Impact Hub Ankara and its shareholders, affiliates and subsidiaries, business partners, suppliers, agencies, agents, agencies, subcontractors, contractors, consultants within the framework of Article 8 of the PDPL in order to benefit from the products and services offered by Impact Hub Ankara, to customise and differentiate and recommend the service offered according to taste, usage habits and needs, to ensure legal, physical and commercial security, to improve the quality of services and to evaluate the audit and services, to formulate business strategies and policies and to comply with the legal legislation.

VI- METHOD AND LEGAL GROUNDS FOR COLLECTING PERSONAL DATA

Personal Data, Impact Hub Ankara’s headquarters, branches, agencies, sales offices or other subcontractors or business partners and other offices and other physical environments, websites, call centres, mobile applications and similar electronic transaction platforms, social media or other public media where the Data Owner can contact, It may be collected from training, conferences and similar environments to be organised or attended by the Data Owner, by research method or through other group companies or other contracted persons and organisations through written, verbal, audio or video recording or other physical or electronic media, partially by automatic means or by non-automatic methods provided that it is part of the data recording system.

Personal Data may be collected, processed, transferred and stored for the purposes specified in Articles IV and V of this text within the scope of the Personal Data processing conditions and purposes specified in Articles 5 and 6 of the PDPL.

VII- RIGHTS OF THE PERSONAL DATA OWNER
The rights of the Personal Data owner within the scope of PDPL provisions and this Clarification Text are as follows:
To learn whether personal data is being processed or not,
Request information if personal data has been processed,
To learn the purpose of processing personal data and whether they are used in accordance with their purpose,
To know the third parties to whom personal data are transferred domestically or abroad,
To request correction of personal data in case of incomplete or incorrect processing,
To request the deletion, destruction or anonymisation of personal data in the event that the reasons requiring the processing of personal data cease to exist within the framework of Article 7 of the PDPL,
To request notification of the correction, deletion, destruction or anonymisation of the information corrected, deleted, destroyed or anonymised upon request to third parties to whom personal data has been transferred, if transferred,
To object to the occurrence of an unfavourable result by analysing the processed data exclusively through automated systems,
In case of damage due to unlawful processing of personal data, to demand compensation for the damage.

In order to exercise the above-mentioned rights, the requester must submit this request in Turkish and in writing in accordance with Art. 13/1 and the provisions of the “Communiqué on the Procedures and Principles of Application to the Data Controller” numbered 30356 and dated 10.03.2018, in Turkish and in writing to the address “Yıldızevler Mahallesi Kişinev Caddesi No:10 Çankaya/ Ankara” or to [email protected] by using the registered e-mail address, secure electronic signature, mobile signature or the e-mail address previously notified to Impact Hub Ankara.

VIII- APPLICATION PROCEDURE
All requests to be made to the written address shown in Article VII within the framework of the matters stipulated in this Clarification Text must be sent through a notary public. Requests to be sent to the e-mail address must be sent by using a secure electronic signature, mobile signature or the e-mail address of the requester registered with Impact Hub Ankara.
In all cases, the applications submitted should be made in Turkish on the form attached to this document and the requests should be written in a way that can be clearly understood. Furthermore, the application must include the name of the person making the request,
(a) his/her name, surname and, if the application is in writing, his/her signature,
(b) If he/she is a citizen of the Republic of Turkey, his/her Turkish Republic identification number; if he/she is a foreigner, his/her nationality, passport number or identification number, if any,
(c) The address of the place of residence or workplace for notification,
(ç) If any, the electronic mail address, telephone and fax number for notification,
(d) The subject of the request
must be included in the application. Furthermore, information and documents related to the subject of the request must also be attached to the application.

Applications to be made in accordance with the above-mentioned conditions shall be finalised and responded within thirty (30) days at most (excluding the date of application). However, if the information and documents submitted are incomplete, this period starts from the date of submission of complete and accurate information and documents.
These applications are free of charge for today. However, if the transaction requires an additional cost, the fee in the tariff determined by the Personal Data Protection Board may be requested. In this case, the application will not be responded to unless the relevant fee is paid in advance and in full to Impact Hub Ankara.
Responses to applications may be sent in writing to the address of the applicant, e-mail address or received by hand, depending on the preference of the applicant. In cases where it is preferred to receive the result of the request by hand, if the application is to be received by proxy, a notarised power of attorney or authorisation document must be submitted.

 

INFORMATION AND APPLICATION FORM
Information of the Requester:
Name Surname :……………………………………………………………..
TR Identity Number : ……………………………………………………………..
For Non-Turkish Citizens
Nationality, Passport number
or identification number :……………………………………………………………..
Date of Birth : ………………………………………………………………….
Email : ………………………………………………………………….
Notification Address : ………………………………………………………………….
………………………………………………………………………………………….
Mobile Phone : ………………………………………………………………….
Information of the Representative, if any:
Name Surname : …………………………………………………………………..
TR Identity Number : ……………………………………………………………..
For Non-Turkish Citizens
Nationality, Passport number
or identification number :……………………………………………………………..
Date of Birth : ………………………………………………………………….
Email : ………………………………………………………………….
Notification Address : ………………………………………………………………….
…………………………………………………………………………………………..
Mobile Phone : ………………………………………………………………….
Reason for Representation : ………………………………………………………………….
Tale p No
Subject of Request (Please tick the appropriate selection for your request)
Your choice

I would like to know whether your company processes personal data about me.

 

Request No	Subject of Request (Please mark the appropriate selection for your request)	Your choice
1	I would like to know whether your company processes personal data about me.  *Article 11/1 (a) of the Law on the Protection of Personal Data	□
2	If your Company processes personal data about me, I request information about these data processing activities.  *Article 11/1 (b) of the Law on the Protection of Personal Data	□
3	If your Company processes personal data about me, I would like to learn the purpose of their processing and whether they are used in accordance with the purpose of processing.  *Article 11/1 (c) of the Law on the Protection of Personal Data	□
4	If my personal data is transferred to third parties at home or abroad, I would like to know these third parties.  *Article 11/1 (ç) of the Law on the Protection of Personal Data	□
5	I believe that my personal data is incomplete or incorrectly processed and I want them to be corrected.  *Article 11/1 (d) of the Law on the Protection of Personal Data	□
6	I request that my personal data be deleted or destroyed.  *Article 11/1 (e) of the Law on the Protection of Personal Data	☐
7	I want my personal data (Request No. 5), which I believe to be incomplete and incorrectly processed, to be corrected before the third parties to whom they are transferred.  *Article 11/1 (f) of the Law on the Protection of Personal Data	☐
8	I believe that my personal data processed by your company has been analyzed exclusively through automated systems and that as a result of this analysis, a result has arisen against me. I object to this result.  *Article 11/1 (g) of the Law on the Protection of Personal Data	☐
9	I have suffered damage due to unlawful processing of my personal data. I demand compensation for this damage.  *Article 11/1 (h) of the Law on the Protection of Personal Data	☐

 

10

I have suffered damage due to unlawful processing of my personal data. I demand compensation for this damage.  Please write the matter subject to the violation of the law in the “Your Choice” field and send the supporting documents as an attachment (Court decision, Board decision, documents showing the amount of material damage, etc.).  *Article 11/1 (h) of the Law on the Protection of Personal Data

☐

Please explain your request under the Law in detail: