Data Controller and Duties Under KVKK
Principles of KVKK on Processing Personal Data
The data controller is the person who determines for what purpose and by what means personal data belonging to individuals is processed, and who manages this data by keeping records. The data controller has obligations regarding data security. You can get more detailed information by visiting . The data controller is obliged to prevent the unlawful processing of individuals' personal data, to prevent unlawful access to individuals' personal data by third parties, and to ensure the storage of individuals' personal data.
How Are Personal Data Deleted or Anonymized?
According to the Law on the Protection of Personal Data (KVKK), the data controller must process data in accordance with law and good faith. There should be no room for doubt when processing data, and data processing must be for specific and clear purposes. Data must be relevant and proportionate to the purpose for which it is processed. Data must be retained in accordance with the relevant legislation. All principles related to the processing of personal data must be objective and reflected in the same way for all data. All data must be included in the processing activity within the framework of these principles. Even if personal data is processed entirely in accordance with the law, it can be deleted, destroyed, or anonymized by the data controller in certain situations. There are reasons for processing each data, and when these reasons cease to exist, the data controller is obliged to delete or anonymize personal data. This situation can occur at the request of the data owner or without their request. If personal data is deleted, the data owner can no longer access the data. If the data is destroyed, no one can access the personal data, and this process cannot be reversed. If personal data is anonymized, the data will in no way be associated with an identified or identifiable natural person. A guide has even been prepared for the processing of personal data.
