tr1. Purpose and Identity of the Data Controller
This "Personal Data Protection and Processing Clarification Text" ["Clarification Text"] has been prepared by Toplum Gönüllüleri Vakfı ["TOG" or "Foundation"] in accordance with Article 10 of the Personal Data Protection Law No. 6698 ["Law"] and the Communiqué on the Procedures and Principles to be Followed in Fulfilling the Obligation of Clarification, in order to fulfill the obligation of informing regarding the processing of your personal data.
Your personal data may be processed within the scope and for the purposes stated below, in a manner that is relevant, limited, and proportionate, ensuring the accuracy and up-to-dateness of the personal data as received by us.
Which Personal Data Do We Process?
With this Clarification Text, we fulfill our obligation to inform regarding the processing of personal data shared by our Individual Stakeholders, Corporate Stakeholders, and the committees and boards within TOG.
In this context, we generally request data subjects to share personal data within the following categories:
- Name, surname, or title,
- Turkish Citizenship Number (T.C. Kimlik Numarası),
- Signature,
- Address information,
- Email address,
- Phone number,
- Bank account information.
These personal data, with your consent, may be processed in accordance with Article 5 of the Law and in line with the legitimate aims and obligations of our Foundation. This includes the necessity of collecting personal data for the provision of scholarships, the continuity of scholarship-related processes, and the evaluation and execution of these processes.
2. Categories of Personal Data and Processing Purposes
Our Foundation can obtain personal data directly from data subjects, indirectly from third parties, or from publicly available data disclosed by the data subject. In this context, personal data are collected verbally, physically, or electronically and processed accordingly. Below are the details regarding the categories of personal data processed, their sources, and their purposes:
A. Individual Stakeholders (Individuals):
Categories of Personal Data: Identity information and special categories of personal data, including name, surname, Turkish Citizenship Number, signature, contact details, address, social media preferences, education, health and blood group information, family income, and professional details, as well as necessary documents from the Social Security Institution.
Data Collection Source: Written forms, email, business cards, direct data subject input, third parties, and electronic forms.
Processing Purpose: These personal data are processed during the period in which you are affiliated with TOG, including as an employee, volunteer, board/committee member, or scholarship recipient. They are used for executing Foundation activities and fulfilling legitimate purposes.
B. Individual Stakeholders (Donors and Supporters):
Categories of Personal Data: Identity and contact details, along with other financial information such as name, surname, bank account details, payment preferences, donation details, purchased product (if any), and supported campaign details.
Data Collection Source: TOG website donation page, written forms, emails, business cards, direct data subject input, third parties, and electronic forms.
Processing Purpose: These personal data are processed for ensuring the provision of scholarships and financial support, without violating fundamental rights and freedoms.
C. Corporate Stakeholders:
Categories of Personal Data: Name of the organization, contact details, bank account information, project details, and financial support information.
Data Collection Source: Written forms, email, and direct data subject input.
Processing Purpose: These personal data are processed to manage procurement, ensure compliance with regulations, fulfill legal obligations, and execute financial and accounting transactions related to donations and scholarships.
D. TOG Committees and Boards:
Categories of Personal Data: Personal details of committee members, including name, surname, Turkish Citizenship Number, contact information, expertise, education, and professional background.
Data Collection Source: Written forms, email, and direct data subject input.
Processing Purpose: These personal data are processed for the establishment, exercise, or protection of a legal right.
3. Transfer of Personal Data and Purposes of Transfer
Your collected personal data may be transferred, in compliance with the fundamental principles stipulated by the Law and within the framework of the conditions specified in Articles 8 and 9 of the Law, to:
Persons or organizations authorized by the Foundations Law and other regulations,
Universities, schools, and non-governmental organizations that we collaborate with to fulfill the Foundation's purposes,
Judicial authorities and notaries where required by law,
Public institutions and private sector entities, including donors and supporters, as long as fundamental rights and freedoms are not violated,
Companies providing IT, server security, and website hosting services for secure digital infrastructure,
Banks for processing scholarship and aid payments, and to foreign countries where required for digital infrastructure hosting, subject to data protection adequacy requirements.
For more detailed information, you may contact us through the rights outlined in Section 5.
4. Methods and Legal Basis for Collecting Personal Data
TOG collects personal data based on:
Legal requirements,
The necessity of processing personal data for establishing or fulfilling a contract,
Compliance with legal obligations,
Legitimate interests of the data controller, provided that fundamental rights and freedoms are not violated.
Personal data are collected electronically via email, websites, social media, phone, SMS, and call centers, or physically through mail and direct submission. Personal data are deleted, destroyed, or anonymized when the purpose of processing is no longer applicable or when legally required retention periods expire.
5. Rights of Data Subjects under Article 11 of the Law
According to Article 11 of the Law, data subjects have the following rights:
To learn whether personal data are processed,
To request information if personal data have been processed,
To learn the purpose of processing and whether personal data are used for the intended purpose,
To know third parties to whom personal data are transferred domestically or abroad,
To request correction if personal data are processed incompletely or inaccurately,
To request deletion or destruction of personal data under legal conditions,
To request notification of correction, deletion, or destruction to third parties to whom data have been transferred,
To object to adverse consequences arising from automated processing,
To seek compensation for damages due to unlawful processing of personal data.
To exercise these rights, you can send a written and signed request to our headquarters at "Ata Apartmanı +Plus, Atatürk Caddesi, Omca Sk. No:2 Kat:1 Daire:2, 34736 Kadıköy/Istanbul," submit via notary, or email [email protected]. Requests will be processed free of charge within 30 days, except in cases requiring additional costs as determined by the Personal Data Protection Board.