K.V.K.K
KVKK (Personal Data Protection Law)
The KVKK (Law on the Protection of Personal Data), regulates all processes related to personal data, including obtaining, recording, storing, modifying, and transferring data.
Personal data refers to any information related to an identified or identifiable natural person. Examples of personal data include individuals’ names, surnames, identification numbers, contact information, religious or racial information, and blood types. Additionally, IP addresses, audio and visual recordings, and fingerprints that can be associated with a real person are also considered personal data.
The KVKK has been in effect since April 7, 2016. It covers both data processors, whether individuals or legal entities, and the individuals whose data is processed.
Moreover, it imposes an obligation on businesses surpassing certain turnover thresholds or employee counts to register with the “Data Controllers Registry” (VERBİS), which must be fulfilled by the majority of businesses by December 31, 2021.
In case of non-compliance with the KVKK, penalties include imprisonment ranging from 1 to 4 years and administrative fines of up to 1,000,000 Turkish Lira per violation.
Are You Compliant with the Personal Data Protection Law?
- How do you process the personal data of your employees, customers, and suppliers?
- Are you fulfilling your obligation to inform (Aydınlatma yükümlülüğü)?
- Do you obtain explicit consent when deemed necessary?
- How do you secure and store these personal data?
- Do you have a data destruction (imha) policy in place?
- Have you created a personal data processing inventory?
- Have you registered with VERBİS (Data Controllers Registry)?
- Have you adapted your workflows and processes to comply with KVKK?
- Have you raised awareness among your employees regarding this matter?
What are we doing?
- We are examining your business for compliance with the KVKK in its current state.
- We are planning actions to make it compliant and ensuring their implementation.
- We provide training to your business’s employees on KVKK compliance steps.
- Through one-on-one meetings with departments, we analyze the processes of processing personal data.
- We prepare the personal data processing inventory.
- We create documents such as compliant disclosure texts, company policies and procedures, and consent forms in line with the inventory.
- We provide support on how these documents will be used on the website and other platforms.
- We ensure the completion of the VERBİS registration.
- If needed, we continue to provide regular legal consultancy services.