KVKK Clarification Text

DATA RESPONSIBLE

As the Scientific and Technological Research Council of Turkey (TÜBİTAK), we attach utmost importance to the security and confidentiality of your personal data. Within the scope of the Law No. 6698 on the Protection of Personal Data (KVKK), acting in the capacity of "Data Controller"; This information text has been prepared in order to clarify that responsibilities such as the collection, storage, processing, transfer of personal data in accordance with the legislation, how long it will be stored, the rights of data owners, etc. are implemented within the framework of the provisions of the legislation.

COLLECTION AND PROCESSING OF PERSONAL DATA, PURPOSES AND MEANS OF PROCESSING

TÜBİTAK may process personal data in order to continue its activities and in line with the principles and procedures stipulated by the LPPD and other relevant laws and regulations. Personal data of our stakeholders may be collected in written, verbal or electronic form both directly and indirectly by means of TÜBİTAK units, website, social media, etc. Personal data obtained within the scope of KVKK may be processed for the following purposes:

• Maintaining activities in line with the founding objectives set out in TÜBİTAK's Law on the Establishment of TÜBİTAK,
• Meeting information and other requests from public institutions and organizations and relevant stakeholders in a timely manner,
• Full and proper performance of contractual and legal obligations,
• Follow-up of financial and/or accounting affairs,
• Execution of legal proceedings and follow-up of legal processes,
• Planning of human resources processes and execution of activities,
• Planning, auditing and execution of informatics and information security processes,
• Conducting quality and standard audits and improvements,
• Ensuring institutional and personnel security,
• Ensuring coordination in processes related to visitors and meeting participants,
• Improving and diversifying the support and services provided,
• To be able to evaluate and respond to suggestions/wishes/complaints and requests to be submitted by the organization's stakeholders and visitors through all kinds of channels and to carry out improvement activities in accordance with the notifications.

METHOD OF COLLECTION OF PERSONAL DATA AND LEGAL GROUNDS 

Articles 5 and 6 of the Law;

• Explicit consent of the person concerned in cases where it is mandatory to obtain his/her explicit consent,
• Explicitly stipulated in the law,
• Provided that it is directly related to the conclusion or performance of a contract, it is necessary to process personal data of the parties to the contract,
• It is mandatory for the data controller to fulfill its legal obligation,
• Data processing is mandatory for the establishment, exercise or protection of a right,
• Provided that it does not harm the fundamental rights and freedoms of the data subject, in cases where data processing is mandatory for the legitimate interests of the data controller, etc. and based on the duty and authority given by paragraph (t) of Article 234 of the Decree No. 4 of the Presidency;

It collects personal data within the framework stipulated in Articles 5, 6 and 8 of the Law through call centers, camera and voice recordings, application forms, website membership and contact forms, internet, mobile applications, websites, e-bulletin registration forms, cookies, social media and other public channels or trainings, meetings, organizations and similar events, provided that they are from the relevant persons, third parties, including solution partners with whom TÜBİTAK cooperates or has a contractual 2 / 3 relationship, and legal authorities, during the establishment of communication and/or legal relationship with TÜBİTAK and during the continuation of the said relationship. It collects personal data within the framework stipulated in Articles 5, 6 and 8 of the Law. Personal data collected by these methods may be processed and transferred for the purposes specified in Article 2 of this text within the framework of the Law's personal data and special categories of personal data processing conditions.

TRANSFER OF PERSONAL DATA

In the event that the collected personal data is transferred domestically and abroad, TÜBİTAK acts in accordance with the provisions defined in Articles 8 and 9 of the Law. These data may be shared with authorized public institutions and organizations, law enforcement agencies, courts and enforcement offices, legally authorized private law persons, third party real and legal persons, service provider companies and their officials, project partners, suppliers and support service providers within the scope of the relevant laws, legislation and protocols in cases where it is mandatory for TÜBİTAK to carry out its services more effectively and to fulfill legal requirements.

RIGHTS OF THE DATA SUBJECT WHOSE PERSONAL DATA IS PROCESSED WITHIN THE SCOPE OF KVKK 

Relevant persons applying to TÜBİTAK pursuant to Article 11 of the Law;

• Learn whether their personal data is being processed,
• Request information if their personal data has been processed,
• Learn the purpose of processing personal data and whether they are used in accordance with their purpose,
• To know the third parties to whom personal data are transferred domestically,
• To request correction of personal data in case of incomplete or incorrect processing and to request notification of the transaction made within this scope to third parties to whom personal data is transferred,
• To request the deletion, destruction or anonymization of personal data in the event that the reasons requiring the processing of personal data disappear, and to request that the transaction made within this scope be notified to third parties to whom personal data is transferred,
• In the event that their processed personal data is analyzed through automated systems, to object to this result in the event that a result arises against them,
• In the event that their personal data is processed in violation of the law and they suffer damage for this reason, they have the right to demand compensation for the damage.

IF YOU WANT TO CONTACT US FOR YOUR REQUESTS

You may submit your requests within the scope of Article 11 of the KVKK "regulating the rights of the data subject" to TÜBİTAK Tunus Caddesi No:80 06100 Kavaklıdere / Ankara address in person by attaching the documents identifying your identity information in accordance with the "Communiqué on the Procedures and Principles of Application to the Data Controller" or tubitak.baskanlik@tubitak.hs03.kep.tr address with secure electronic signature. In the application to exercise the above-mentioned rights, the person concerned must clearly and understandably state the matters requested. Information and documents related to the application must be attached to the application. The applications to be made within this scope will be accepted following the identity verification to be made by us and your requests regarding your rights will be finalized as soon as possible and within 30 (thirty) days at the latest, depending on the nature of the request. In case the application is answered in writing or through recording media such as CD, flash memory, the transaction fee specified in Article 7 of the "Communiqué on the Procedures and Principles of Application to the Data Controller" may be charged. You can reach TUBITAK through the contact information below.

Presidency Address: TÜBİTAK Tunus Caddesi No:80 06100 Kavaklıdere / Ankara

Telephone: 0312 468 5300

Fax: 0 312 427 6817

Email: kvkk@tubitak.gov.tr

Web Address: www.tubitak.gov.tr