Privacy Notice
Su Kolektif Platform Privacy Notice
1. Data Controller
As Su Kolektif Eylemi – Gediz Su Yönetimi Uygulamaları, located in Gediz Havzası Yönetimi, Ankara, Türkiye (“Data Controller” or “we”), we process the personal data of website users, platform users, and participants of the activities we conduct. This Privacy Notice has been prepared to inform you about the processing and protection of the personal data obtained from you in accordance with the Personal Data Protection Law (“Law”).
2. Personal Data Collected
Your personal data listed below may be processed by us only in connection with the processes in which you are involved, including but not limited to visiting our website or platforms, contributing as a stakeholder, participating in our events and activities, or contacting us.
For website users, transaction security data, including cookie information, preferences, IP address information, log records, website visit data, duration of visit, and movement information may be processed.
For platform, event, and activity participants and stakeholders, the following data may be processed:
- Identity information including name, surname, date of birth, and where necessary, information contained in identity cards, driver’s licenses, photographs, or copies thereof,
- Contact information including your e-mail address, telephone number, and messages,
- Professional experience information including your affiliated organization or workplace, title, company, role, and projects participated in,
- Visual and audio records including your photographs, videos, and voice recordings,
- Participant transaction information including feedback, comments, projects, content, registration, and invitation information related to our activities,
- Contribution and stakeholder information included in reports, analyses, and publications prepared.
For individuals contacting us, identity and contact data may be processed.
3. Method and Legal Basis for Collecting Personal Data
Your personal data may be collected verbally or in writing from you or third parties, official institutions and organizations, publicly available sources, electronic forms, digital platforms, e- mail, telephone, websites, applications, cameras, and other electronic environments through automated means, or through non-automated means such as mail, courier, physical forms, communications, physical printouts, photocopies, contracts, and business cards.
Your personal data may be processed based on the following legal grounds:
- Explicit consent pursuant to Article 5/1 of the Law:
- Processing and sharing of your visual and audio data during events and projects,
- Sharing of personal data, including identity, participant transaction, visual and audio data within platform content, except for statements and content subject to news reporting,
- Use of optional cookies.
- Necessity for the establishment or performance of a contract pursuant to Article 5/2(c) of the Law:
- Processing of your personal data if you wish to participate in a program or activity,
- Processing of your identity and contact information in order to respond to your questions, requests, complaints, and other communications,
- Provision of activities available on the website.
- Necessity for compliance with a legal obligation pursuant to Article 5/2(ç) of the Law:
- Transfer of your personal data, including identity, contact, and transaction security data, to authorized public institutions and organizations when required,
- Retention of traffic and access logs.
- Necessity for the legitimate interests of the data controller pursuant to Article 5/2(f) of the Law:
- Processing of transaction security information to understand how you use our platforms,
- Reviewing surveys and feedback and carrying out reporting activities.
4. Purposes of Processing
Your personal data are processed solely for the following purposes:
- Processing transaction security information to ensure the secure operation of the website and our platforms, enable users to navigate these environments, benefit from the provided features, analyze users’ platform usage and general trends, improve platform functionality, and personalize the platform according to user preferences,
- Processing identity and contact information in order to respond to questions, requests, complaints, and other communications submitted through the website and communication channels and to maintain communication,
- Processing identity and transaction security information to the extent necessary for fulfilling legal obligations,
- Processing identity, visual and audio, professional experience, participant transaction, and transaction security information for conducting corporate communication, awareness-raising, sustainability, research, survey, and media support activities,
- Processing personal data, including identity, professional experience, and participant transaction information, for reporting activities,
- Conducting loyalty and communication activities for carrying out similar projects,
- Ensuring compliance with legal obligations.
5. Transfer of Personal Data
As the data controller, in order to carry out our awareness activities, provide our website and platforms to you, and fulfill our legal obligations, your personal data may be transferred to third parties located in Türkiye and abroad to the extent necessary. Within the scope of Articles 8 and 9 of the Law, your personal data may be shared with domestic and international suppliers, service providers, project stakeholders, sponsors, and legally authorized persons from whom the data controller receives services, for the purposes specified above.
Transfer of personal data abroad may only be carried out where a standard contractual clause specified under Article 9 of the Law exists or where one of the incidental transfer conditions provided under the Law is satisfied.
6. Your Rights
Pursuant to Article 11 of the Law, you have certain rights regarding your personal data. You may submit your requests concerning these rights to us via the e-mail address info@gedizhavzasi.org in accordance with the Communiqué on the Procedures and Principles of Application to the Data Controller. Your application will be responded to free of charge. However, if the requested process requires an additional cost, the fees set out in the tariff determined by the Personal Data Protection Board may be charged.