5th ISTANBUL INTERNATIONAL WATER FORUM (IIWF)
Personal Data Protection Notice
Article 10 of the Law No. 6698 on the Personal Data Protection (PDPL), titled “Obligation of the Data Controller to Inform”, imposes an obligation on the data controller to inform the data subject about the identity of the data controller and its representative, if any; the purposes for which personal data will be processed; to whom and for what purposes the processed personal data may be transferred; the method and legal grounds for collection of personal data; and the rights set forth in Article 11 of the PDPL. This clarification text has been prepared by the Turkish Water Institute, in its capacity as the data controller, in order to inform and enlighten data subjects within the scope of Article 10 of the Law No. 6698 on the Protection of Personal Data and the Communiqué on the Procedures and Principles to be Followed in Fulfilling the Obligation to Inform.
1. Identity of the Data Controller
Data Controller: Turkish Water Institute
Telephone: +90 216 325 49 92
Website: https://www.suen.gov.tr
Address: Libadiye Caddesi No:52/1 Küçükçamlıca Üsküdar 34696 Istanbul / TÜRKİYE
2. Purposes of Processing Personal Data
Your personal data may be processed for the following purposes:
- Creating and managing participant registrations for the 5th IIWF,
- Conducting evaluation and analysis studies regarding participants within legal limits,
- Resolving complaints related to the services provided to participants and processing data access or correction requests,
- Preparing and updating efficiency reports by obtaining information regarding participant-based developments in the services provided,
- Monitoring and executing legal processes, communication with other official institutions and risk management processes,
- Planning information security processes, establishing and managing information technology infrastructure.
3. Transfer of Personal Data to Third Parties
Within the conditions stipulated in the legislation, and pursuant to Articles 5 and 6 of the PDPL with reference to Article 8 thereof;
- Authorized Public Institutions and Organizations,
- Other Public Institutions and Organizations with which cooperation is carried out,
- Natural Persons or Private Legal Entities with which cooperation is carried out,
your personal data may be shared and transferred.
4. Method and Legal Bases for Collection of Personal Data
Your personal data are collected verbally, in writing and electronically; for the purposes stated under the heading “Purposes of Processing Personal Data” of this clarification text, based on the legal bases of being explicitly stipulated by law, fulfilling the legal obligations of our Institution, and the legitimate interests of the data controller. Your collected personal data are processed based on the legal bases set forth in Article 5/2 of the Law on the Protection of Personal Data;
- It is explicitly stipulated by law,
- It is necessary for the protection of life or physical integrity of the person himself/herself or of any other person, who is unable to explain his/her consent due to the physical disability or whose consent is not deemed legally valid,
- It is necessary for compliance with a legal obligation to which the data controller is subject,
- Personal data have been made public by the data subject himself/herself,
- Data processing is necessary for the establishment, exercise or protection of any right.
- Processing of data is necessary for the legitimate interests pursued by the data controller, provided that this processing shall not violate the fundamental rights and freedoms of the data subject.
5. Access to Personal Data and Your Rights under the PDPL
Under Article 11 of the PDPL, as a personal data owner, you have the following rights;
- To learn whether your personal data are processed or not,
- To demand information if your personal data have been processed,
- To learn the purpose of processing your personal data and whether they are used in compliance with the purpose,
- To know the third parties to whom personal data are transferred domestically,
- To request rectification of the incomplete or in accurate personal data if any,
- To request erasure or destruction of personal data under the conditions referred to in Article 7 and to request notification of such actions to third parties to whom the personal data have been transferred pursuant to subparagraphs (d) and (e),
- To object to the occurrence of a result against you by analyzing the processed data solely through automated systems,
- To claim compensation for the damage arising from unlawful processing of personal data.
Pursuant to Article 13/1 of the PDPL and the Communiqué on the Procedures and Principles of Application to the Data Controller, in order to exercise your rights listed above, you may submit your request, clearly stating and verifying your identity and address information, to our registered electronic mail (KEP) address: t.suen@hs01.kep.tr.
Your applications submitted to us will be responded to in writing or electronically within 30 (thirty) days from the date your request reaches us, depending on the nature of the request, in accordance with Article 13/2 of the PDPL.
You may always follow the changes in the legislation regarding Personal Data and our practices on the relevant page of the 5th IIWF website.