DATA CONTROLLERS REGISTRY INFORMATION SYSTEM (VERBIS) CLARIFICATION TEXT

This clarification text has been prepared by the Personal Data Protection Authority in its capacity as the data controller within the scope of Article 10 of the Personal Data Protection Law No. 6698 (“Law”) and the Communiqué on the Procedures and Principles to be Followed in Fulfilling the Obligation to Inform. Data including the name-surname / title, tax identification number, TR identity number, telephone number, address, e-mail address, and registered electronic mail (KEP) address of the data controllers, data controller representatives, or contact persons entered through the VERBIS application are processed for the purpose of fulfilling the obligation to register with the Data Controllers Registry. Based on the legal ground of being “explicitly stipulated in the laws” as specified in Article 5 of the Law, the personal data in question are processed fully or partially by automatic means through entries made in the VERBIS application, and pursuant to Article 16 of the Law, personal data shall be kept open to the public. You may submit your requests within the scope of Article 11 of the Law, which “regulates the rights of the data subject,” to the Personal Data Protection Authority in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller.

CLARIFICATION TEXT ON COOKIES

This text has been prepared by the Personal Data Protection Authority (Nasuh Akar Mahallesi 1407. Sok. No:4, 06520 Çankaya/Ankara) in its capacity as the data controller within the scope of Article 10 of the Personal Data Protection Law No. 6698 (Law) and the Communiqué on the Procedures and Principles to be Followed in Fulfilling the Obligation to Inform. The purpose of this Cookie Clarification Text is to inform you about the types of cookies we use, the purposes for which they are used, the legal grounds, and your rights regarding the processing of personal data obtained automatically through the placement of cookies on your device on our VERBIS page. In VERBIS, only first-party session and persistent cookies that are strictly necessary for the provision of the service are used.

TYPES OF COOKIES

Types of cookies according to duration of use: Session cookies are used to ensure the continuity of the session and are deleted when the user closes their browser. Persistent cookies, on the other hand, are not deleted when the internet browser is closed and are deleted automatically on a specific date or after a certain period of time. Within this framework, session and persistent cookies are used in VERBIS according to their duration of use. First-party and third-party cookies: First-party cookies are placed directly by the website visited by the user—that is, the address shown in the browser’s address bar. Third-party cookies are placed by a different domain other than the address visited by the user. In this framework, only first-party cookies are used in VERBIS.

Types of cookies according to purpose of use: Cookies can be used for purposes such as strictly necessary, functional, or advertising/marketing according to their intended use. Within this framework, strictly necessary cookies are used in VERBIS to provide information society services. In this context, your personal data are processed by associating your IP information with: A) the first-party persistent cookie named cookiesession1 (stored for one year) to determine whether requests to the website are reliable, B) the first-party session cookie named ASP.NET_SessionId to detect the language in which visitors view the webpage, C) the first-party session cookie named AspNetApplication.Cookie used to verify visitors’ identity data, D) the first-party session cookie named RequestVerificationToken for the prevention of fraud, E) the first-party persistent cookie named cookiepolicy_status (stored for one year) to confirm that the cookie clarification text has been read. Your personal data in question are not transferred to other data controllers.

In the processing of personal data via said cookies, the processing condition of “data processing is mandatory for the legitimate interests of the data controller, provided that it does not harm the fundamental rights and freedoms of the data subject” is relied upon pursuant to clause (f) of the second paragraph of Article 5 of Law No. 6698. You may submit your requests within the scope of Article 11 of Law No. 6698, which “regulates the rights of the data subject,” to the Personal Data Protection Authority in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller.