Data Owner Application, Evaluation and Response Procedure

DATA OWNER APPLICATION, EVALUATION AND RESPONSE PROCEDURE

I. Definitions

A. The Form of the Application

In matters related to the processing of your personal data, you can submit your application by filling out the application form located at the Company’s internet address or by submitting your Application to the Data Controller in accordance with Article 5 of the Communiqué on Procedures and Principles. provided that you comply with the conditions in the article, you can do it in the following ways:

● Mail with a written and wet signed petition to our address listed above 

● info@atakoygoruntuleme.com by e-mail you will send to the address,

● Petition signed with a secure electronic signature or mobile signature 

We may request additional verifications (such as telephone confirmation, request for proof of identity document) by the Company in order to determine whether the application belongs to you according to the nature of your request and your application method, to prevent Oct violation of your personal rights and thus to protect your rights. According to the nature of your request, information and documents must be provided to us completely and accurately.

Information that should be related to the Data Owner in the application text;

a) Name, surname, signature,

b) T for citizens of the Republic of Turkey.C. identification number, nationality if foreign, passport number or identification number if any,

c) The address of the place of residence or place of business based on the notification,

ç) If any, the electronic mail address, telephone and fax number based on the notification,

d)The subject of the request 

B. Content of the Application

Identification of the Applicant: In order for the Data Owner’s requests to be evaluated, it is first determined whether the person making the application is the owner of the personal data processed by the Company. In order to meet the software requirement for applications made via electronic media, a secure electronic signature should be used in the Data Owner’s applications. 

Information about the conditional requests, information about how this condition is realized and documents that will prove its claim should be requested. If an application is received from non-valid channels, warning and forwarding texts should be created that will direct the data subject to valid application channels.

For applications that are not received by the means determined in the procedure, if the applicant’s identity has been determined and the requested information has been provided with the form, applications made by such means can also be evaluated. Applications that do not have this qualification should also be evaluated and communicated with the applicant until the requested information is obtained on the form; it should be stated that the application was rejected on the grounds that the procedure was not followed.

C. Other Cases

1. An Application Made by a Proxy or Legal Representative

The existence of the applicant’s authority to apply should be checked. For requests concerning Children’s Personal Data, the application can be made by a legal representative. In such a case, copies of the documents determining the authority of the legal representative should definitely be requested.

2. Making a Collective Application

In the case of a collective application, after confirming the identity of the Data Owner, the authorization status of the third party applying is determined. The Company is required to separate the application for each person and make an evaluation separately. 

3. Application Fee

Your requests contained in your application will be finalized free of charge within thirty days at the latest, depending on the nature of the request. However, if the transaction requires an additional cost for the Company, the fee in the tariff specified in the Communiqué on the Procedures and Principles of Application to the Data Controller by the Personal Data Protection Board may be charged. If the answer to the application is given in a recording medium such as CD, flash memory, the fee that will be charged from the Data Subject person or persons will not exceed the cost of the recording medium.

III. Application Evaluation Process

In cases where incomplete information, information belonging to third parties, or the application should be rejected for various reasons, among the requests contained in the applications made by the Data Subject Dec, the evaluation is performed by the Company according to the concrete event.

In cases where it is not possible to respond to a request for information without sharing personal data belonging to third parties, it should be tried to respond to a request for information without sharing personal data belonging to a third party first. If this cannot be done, it should be checked whether the third party has explicit consent to the sharing of personal data about him. If the explicit consent of the third party cannot be obtained, the reasonableness of sharing personal data without explicit consent should be questioned. Explicit consent should be sought from the Data Subject whose Personal Data is subject to disclosure, and if the third party does not consent to the sharing of their data, the information of the third party should be completely extracted and the application should be responded to. 

Evaluation Periods of Applications

Application for personal data claims are evaluated and answered within 30 days at the latest from the date they reach the company. If no answer is given within this period, the applicant may file a complaint with the Board.

In order for the applications to be answered on time; After the application is received, the application is reviewed and a maximum period of 2 days is given for the submission of information and requests related to the application by the authorized person in the relevant department. A maximum period of 2 weeks should be taken into account by the said authorized person to respond to the request received. After that, information will be provided to the applicant within 30 days. 

IV. Answering of Applications

All applications are answered by the Company within 30 days. The information written below should be included in the reply letter.

Information of the data controller,
Information of the applicant,
The Subject of the Request, the Date of receipt,
Transactions related to the request,
The Company’s Responses to Requests,
Request Response Date
Authorized Signature

The event records, documents and results related to the relevant application are stored in the electronic index created on this subject, and the written shipment record is stored in the archive as a copy.