PRIVACY POLICY
Sevim SarıoÄŸlu is committed to the utmost care in protecting your personal data, in compliance with Turkey’s Personal Data Protection Law (Law No. 6698, known as “KVKK”), effective April 7, 2016
​
Definitions & Roles:
-
Personal Data: Any information related to an identified or identifiable natural person.
-
KVKK: Turkey’s Personal Data Protection Law No. 6698.
-
Data Controller: Person or entity that determines the purposes and means of data processing.
-
Data Processor: Person or entity processing data on behalf of the controller.
​
1. Data Controller
Sevim Sarıoğlu is the data controller for personal data shared by individuals such as clients, suppliers, visitors, employees, etc.
​
2. Collection, Processing & Purposes
Personal data may be collected—automatically or manually—through various channels (website, social media, apps, verbally, electronically). The data may be created, updated, and processed throughout the duration of the relationship with the organization .
Processing is conducted under KVKK Articles 5 and 6, ensuring data is:
-
Lawful and fair
-
Accurate and up-to-date
-
Specific, clear, and legitimate purpose-based
-
Relevant, limited, and proportionate
-
Retained only as long as necessary.
​
3. Recipients of Data
Collected personal data may be shared with:
-
Business units or partners for service delivery
-
Suppliers and legal entities to ensure legal and commercial security
-
Official authorities as legally required.
​
4. Legal Basis & Collection Methods
Data is collected via verbal, written, or electronic means to fulfill contractual and legal obligations of the organization, aligned with KVKK Articles 5 and 6.
​
5. Rights of Data Subjects (under KVKK Article 11)
You have the right to, free of charge within 30 days (unless a fee is specified by the Personal Data Protection Board):
-
Learn if your data is processed
-
Request information if data is processed
-
Learn the purpose and whether used appropriately
-
Know domestic and international recipients
-
Request correction if data is incomplete or incorrect
-
Request deletion or destruction under KVKK Article 7 conditions
-
Request notification to third parties who've received your data under items 5–6
-
Object to purely automated analyses that cause adverse results
-
Request compensation for damages due to illegal data processing
​
Submission of requests:
Must be in writing or via methods to be announced by the Board (currently in writing). Requests should include identity verification details and state which right(s) you're exercising. They will be processed within 30 days via the email address provided on the site .
