KVKK Application Procedures and Principles

General Description

According to Article 11 of the Personal Data Protection Law No. 6698 ("Law"), the natural person whose personal data is processed is granted the right to apply to the data controller and make requests on the matters specified in the relevant article. Under the relevant article of the Law, every individual has the right to:

a. Learn whether personal data is processed, 
b. Request information about personal data if it has been processed, 
c. Learn the purpose of processing personal data and whether these data are used in accordance with the purpose, 
d. Know the third parties to whom personal data has been transferred, both domestically and abroad, 
e. Request the correction of personal data if it is incomplete or incorrect, 
f. Request the deletion or destruction of personal data under the conditions specified in Article 7 of the Law, 
g. Request that the actions taken under subparagraphs (e) and (f) above be communicated to the third parties to whom personal data has been transferred, 
h. Object to any adverse outcome arising from the analysis of processed data solely through automated systems, 
i. Request compensation for damages in case of harm resulting from the unlawful processing of personal data.

According to Article 13 of the Law, the natural person whose personal data is processed may submit his/her application to the data controller in writing or by other methods to be determined by the Personal Data Protection Board. The procedures and principles regarding the application process are regulated by the Communiqué on the Procedures and Principles of Application to the Data Controller (‘Communiqué’).
According to the relevant articles of the Communiqué and the Law, applications to our Company, as the Data Controller, must be made:

  • In writing, or,
  • Using the registered electronic mail (KEP) address, secure electronic signature, mobile signature, or the electronic mail address previously notified to our Company by the data subject and recorded in our Company’s system.


In the event that the Personal Data Protection Board determines other methods regarding the application procedures, the Company will announce how applications will be received through these methods, after the announcement of such methods. Our Company reserves the right to change the method of application and add new application channels according to these methods.

Application Language and Content

According to Article 4 of the Communiqué, the natural person whose personal data is processed may exercise this right by submitting their application in Turkish. According to Article 5 of the Communiqué, the following information must be included in the application:

  • The applicant’s name, surname, and signature if the application is made in writing,
  • For Turkish citizens, the Turkish ID number; for foreigners, nationality, passport number, or if available, ID number,
  • The address of the residential or business place for notification purposes,
  • If available, the electronic mail address, phone number, and fax number for notification,
  • The subject of the request.


In addition to the above, information and documents related to the subject of the application must be attached to the application.

Written Application Procedure

Written applications to our Company may be made by the natural person whose personal data is processed in person, by registered letter with return receipt or by Notary Public. Written applications should be made to our Company's address ‘Eski Büyükdere Caddesi No:14 Park Plaza K:4, Maslak, Sarıyer, Istanbul’. In the applications to be made, it is necessary to write ‘Information Request within the Scope of Protection of Personal Data’ on the envelope to be sent.

Electronic Application Procedure

Applications to be made to our Company electronically can be made by using the registered electronic mail address, secure electronic signature, mobile signature or the electronic mail address previously notified to our Company by the natural person whose personal data is processed and registered in our Company's system.
It must be sent electronically to the address ‘bdo@bdo.com.tr’ or to the address ‘Eski Büyükdere Caddesi No:14 Park Plaza K:4, Maslak, Sarıyer, Istanbul’ of our Company by signing with a secure electronic signature defined in the Electronic Signature Law No. 5070 or with a mobile signature, with the expression ‘Information Request within the Scope of Protection of Personal Data’ in the subject section.

Evaluation of Applications

In written applications, the date when the application documents are delivered to our Company by the natural person whose personal data is processed is considered the application date. For applications made through other methods, the date when the application reaches our Company is considered the application date.
According to Article 13 of the Law, applications are evaluated according to the nature of the request and are concluded as soon as possible, and no later than thirty (30) days from the application date. Responses to the application are communicated to the natural person whose personal data is processed, either in writing or electronically.

In order to eliminate legal risks that may arise from unlawful and unjust data sharing, and to ensure the security of your personal data, our Company reserves the right to request additional documents (such as a copy of ID card or driver's license) and information for identity and authorization verification. If the information provided in the form is incorrect or outdated, or if an unauthorized application is made, our Company does not accept liability for any requests arising from incorrect information or unauthorized applications.

Fees

No fee will be charged for providing a written response to applications up to ten (10) pages. For every page exceeding ten pages, a processing fee of one Turkish Lira may be charged. If the process requires additional costs, the fee determined by the Personal Data Protection Board, according to the tariff, may be applied.

Personal Data Owner Application Form  (This form is only available in English for your information)