GENERAL INFORMATION TEXT ON THE PROTECTION OF PERSONAL DATA

    (UNDER LAW NO. 6698)

    The First You Be Youth Movement Association (“ASSOCIATION”) takes all necessary technical and legal measures in accordance with the Law No. 6698 on the Protection of Personal Data (“KVKK”) regarding the processing of your personal data during the performance of its activities.

    Your personal data is processed by the Association in its capacity as the Data Controller, acting in accordance with the law and the principle of integrity.

    Our Principles for Data Processing:

    • Within the framework of employment contracts established between us and our supplier employees;

    • Maintaining the accuracy and up-to-date status of the information as provided to us;

    • Processing data for specific, explicit, and legitimate purposes;

    • Processing data in a manner that is relevant, limited, and proportionate to the intended purpose;

    • Retaining data for the period stipulated by relevant legislation or as required for the purpose of processing.

    Data subjects can find detailed information regarding the processing of personal data, the purposes of processing, transfer to third parties, legal grounds for collection, and their rights under the KVKK in the information text below.

    Legal Grounds

    Article 5, Paragraph 2 of the KVKK lists the conditions for processing personal data. A data controller may process personal data lawfully if the purposes for processing fall within these conditions. The Association carries out data processing activities only when they align with the conditions regulated by the KVKK and does not engage in any activity outside this scope.

    The legal conditions for processing personal data under the KVKK are:

    1. Explicit Consent: The data subject has given clear, informed consent (“Art. 5/1”).

    2. Explicitly Provided by Law: The processing is clearly mandated by legislation (“Art. 5/2-a”).

    3. Vital Interests: It is necessary to protect the life or physical integrity of the data subject or another person when the subject is physically or legally unable to give consent (“Art. 5/2-b”).

    4. Contractual Necessity: Processing is necessary for the establishment or performance of a contract to which the data subject is a party (“Art. 5/2-c”).

    5. Legal Obligation: Processing is necessary for the Association to fulfill its legal duties (“Art. 5/2-ç”).

    6. Publicly Available Data: The data has been made public by the data subject themselves (“Art. 5/2-d”).

    7. Establishment of Rights: Processing is mandatory for the establishment, exercise, or protection of a right (“Art. 5/2-e”).

    8. Legitimate Interests: Processing is mandatory for the legitimate interests of the Association, provided it does not harm the fundamental rights and freedoms of the data subject (“Art. 5/2-f”).

    Special Categories of Personal Data: The primary condition for processing special categories of personal data (sensitive data) is explicit consent. The Association does not primarily intend to process sensitive data; however, data that must be processed due to our activities or data provided with your explicit consent is processed proportionately within the framework of the law.

    Conditions for processing sensitive data:

    • Explicit consent of the data subject (“Art. 6/2”).

    • For sensitive data other than health and sexual life, if explicitly provided for by law.

    • Health and sexual life data may only be processed without explicit consent by persons under an obligation of confidentiality or authorized institutions for the purposes of:

      • Protecting public health,

      • Preventive medicine, medical diagnosis, treatment, and care services,

      • Planning and management of health services and their financing (“Art. 6/3”).

    Data Categories and Data Subject Groups

    To fulfill our objectives, the data listed in the table below must be processed. Sometimes, data not intended for processing may be shared with us (e.g., extra info on an ID copy). Within administrative and technical measures, we delete or anonymize such data at the end of the legally required periods.

    Data Subject Group Personal Data Processed
    Donor Name-Surname, T.R. ID number, gender, birth year, phone number, email, address, bank account details, log records.
    Volunteer Name-Surname, ID/Driver’s License/Passport details, gender, nationality, place/date of birth, phone, email, address, blood type, bank account, marital status, military service status, education info, log records, photo, criminal record, emergency contact, health info, certificates, work experience.
    Person in Need Name-Surname, ID/Passport details, gender, nationality, parents’ names, birth year/place, marital status, education info, signature, criminal record, phone, email, photo, address, blood type, bank account, emergency contact, family population registry (for dependents), health info, official documents from judicial/administrative authorities.
    Supplier Representative Name-Surname, phone, email, address, tax number, signature, bank details.
    Visitor Name-Surname, T.R. ID number, phone, email, address, entry-exit logs, security camera records.

     Transfer of Personal Data

    The Association does not transfer any data unrelated to its objectives. Your personal data is not shared with third parties except when mandated by law, required for a criminal investigation, or requested by an official authority based on justified legislation.

    Transfer Abroad: Your personal data is not transferred abroad.

    Rights of the Data Subject

    In accordance with Article 11 of the KVKK, you have the right to:

    1. Learn whether your personal data is being processed;

    2. Request information if your personal data has been processed;

    3. Learn the purpose of the processing and whether the data is used for that purpose;

    4. Know the third parties to whom data is transferred (domestically or abroad);

    5. Request correction if data is incomplete or inaccurate;

    6. Request deletion or destruction of data if the reasons for processing no longer exist;

    7. Request notification of corrections/deletions to third parties to whom data was transferred;

    8. Object to results occurring exclusively through automated analysis that are to your detriment;

    9. Claim compensation for damages arising from unlawful processing.

    How to Exercise Your Rights

    You may prepare an application form regarding your request or complaint and send it to us via email at info@ilksenol.org.tr.

    Your request will be evaluated and finalized within 30 days at the latest, free of charge, in accordance with Article 13/2 of the Privacy Policy. However, if the process requires additional costs, a fee may be charged based on the tariff determined by the Personal Data Protection Board.

    Data Controller: İlk Sen Ol Gençlik Derneği (First You Be Youth Movement Association)

    For detailed information, you can visit the website of the Personal Data Protection Authority.

    CONTACT INFORMATION

    Association Name: İlk Sen Ol Gençlik Hareketi Derneği

    Website: www.ilksenol.org.tr

    Phone: +90 530 613 4472

    Email: info@ilksenol.org.tr

    Address: Fevzi Çakmak Mahallesi, 1110. Sokak, No: 12A, Esenler / İstanbul, Türkiye