KVKK AND PRIVACY NOTICE

Privacy Notice on the Processing of Personal Data Collected Through Forms
https://utocko2026.whr.org.tr/ requests certain personal data (such as your name, surname, password, e-mail address, and mobile phone number) in order to fulfill its legal obligations arising primarily from the Personal Data Protection Law No. 6698 and other relevant legislation, and to carry out necessary operational processes. Your personal data will be processed and stored in a non-public environment, based on your explicit consent, and will not be used outside the purposes and scope specified in this KVKK and Privacy Notice.

Purpose of Processing Personal Data.
Within the scope of https://utocko2026.whr.org.tr/, personal data will be processed for the planning and execution of commercial activities, providing information to authorized institutions as required by law, resolving consumer complaints on matters outside our direct expertise, sending commercial electronic messages upon your explicit consent, planning and conducting audit activities to ensure compliance with our internal procedures and relevant legislation, planning and carrying out corporate sustainability efforts, protecting the reputation of our organization, managing request and complaint processes, and planning and executing corporate governance and communication activities. Your personal data will be processed in accordance with legal and ethical principles, in a manner that is relevant, limited, and proportionate to the purposes for which they are processed, and stored for the period required by relevant legislation or the intended purpose. Personal data may be obtained and processed—fully or partially, by automatic or non- automatic means—through recording, storing, preserving, modifying, reorganizing, and similar operations. Collected information will never be shared with third parties without your knowledge or contrary instructions, will not be used for any purposes outside the scope of our activities, and will not be sold.

Transfer of Personal Data
Your personal data obtained by us may be shared—only to the extent necessary for the fulfillment of the purposes described above and in accordance with legal and ethical principles—with the Ministry of Trade; domestic, international, public, or private institutions and organizations; companies and consultants or business partners from whom we receive services, support, or consultancy; group companies; other authorized institutions; suppliers or subcontractors; persons or entities permitted under the Turkish Commercial Code and other legislation; legally authorized public and/or private institutions within the limits of their authority; and official bodies upon lawful request. Your personal data may be transferred to third parties without your explicit consent under Articles 5 and 8 of the Law on the Protection of Personal Data.

Method of Collecting Personal Data
Your personal data may be collected in written, verbal, or electronic form through our website.

Deletion, Destruction, or Anonymization of Personal Data
In accordance with Article 7 of the Law, even if personal data has been processed lawfully, if the reasons requiring its processing cease to exist, the data shall be deleted, destroyed, or anonymized ex officio or upon the request of the data subject. Procedures and principles regarding this process shall be carried out in accordance with the Regulation on the Deletion, Destruction, or Anonymization of Personal Data published in the Official Gazette on 28.10.2017 (No. 30224). Personal data will be deleted, destroyed, or anonymized within 3 months following the date on which the obligation to do so arises. When you request the deletion or destruction of your personal data by applying to our company: a) If all conditions for processing personal data have ceased: the relevant data will be deleted, destroyed, or anonymized. Your request will be finalized within 30 days, and you will be informed. b) If all conditions for processing have ceased and the data has been transferred to third parties: the situation will be notified to those third parties, and necessary actions will be ensured in accordance with the regulation. c) If all conditions for processing have not ceased: your request may be rejected with justification under Article 13/3 of the Law, and the rejection will be communicated to you in writing or electronically within 30 days.

Your Rights Under the Law on the Protection of Personal Data
According to Article 11 of the Law, as personal data subjects, participants have the right to:
Learn whether their personal data is being processed,
- Request information if personal data has been processed,
- Learn the purpose of processing and whether it is used in accordance with that purpose,
- Know the third parties to whom personal data is transferred, domestically or abroad,
- Request correction if the personal data is incomplete or incorrectly processed,
- Request deletion, destruction, or anonymization of personal data,
- Request that corrections, deletions, or destruction be notified to third parties,
- Object to a result that is unfavorable to them and produced exclusively through automated processing,
- Request compensation if they suffer damage due to unlawful processing of personal data.

Non-Personal Information Non-personal information refers to data that cannot be used to identify you personally. Such information may be used for any purpose and may be shared with third parties without requiring your approval.