DATA CONTROLLER
As the Scientific and Technological Research Council of Turkey (TUBITAK), we attach utmost importance to the protection and privacy of your personal data. Acting as “Data Controller” within the scope of the KVKK (Law on the Protection of Personal Data ) No. 6698; this information text has been prepared in order to clarify that our responsibilities such as collection, storage, processing of personal data, transfer in accordance with the legislation, how long it will be stored, rights of data owners, etc. are implemented in accordance with the provisions of the legislation.
PROCESSED PERSONAL DATA
While carrying out its activities, TUBİTAK may process the personal data listed below, in accordance with the principles and procedures stipulated by the KVKK and other relevant laws and regulations.
· Identity (Name, surname, father's name, date of birth, place of birth, T.R. ID number, ID card serial number, gender, nationality, passport information, blue card information, foreigner ID number, username)
· Contact (Address information, phone number, e-mail address)
· Professional Experience (Education, courses, certificates, workplace information, foreign languages, project information, awards, products, patents, models, publications)
· Physical Space Security (Entry-exit logs, CCTV/camera footage)
· Visual and Auditory Records (Photographs, camera and voice recordings)
· Transaction Security (Website login-logout details, IP address information, password and credential information)
· Customer Transaction Records (Call center records, order and request information)
· Financial Information (Bank account and payment information, balance sheets, financial performance, credit and risk information)
· Marketing (Shopping history, surveys, cookie records, and campaign information).
PURPOSES OF PROCESSING PERSONAL DATA
Personal data obtained within the scope of Law on the Protection of Personal Data can be processed for the following purposes:
- Conducting activities in accordance with the objectives stipulated in the Establishment Law of TÜBİTAK
- Executing the duties assigned by Article 584 of the Presidential Decree No. 4,
- Ensuring the timely fullfilment of information and other requests from public institutions and organizations and relevant stakeholders
- Ensuring the effective use of public resources in compliance with the applicable legislation
- Ensuring the full and properly performance of contractual and legal obligations
- Monitoring financial and/or accounting operations
- Executing legal transactions and following up on legal proceedings
- Planning and executing human resources processes and activities
- Planning of recruitment processes and execution of related activities
- Planning, auditing and execution of information and information security processes
- Conducting quality and standards audits and improvements
- Ensuring the security of the institution and personnel
- Ensuring coordination in processes related to visitors and meeting participants
- Developing and diversifying the grants and services provided
- Planning and executing sale processes for products and/or services
- Planning and execution of after-sales support services
- Identification and/or evaluation of individuals to be subject to marketing activities, in accordance with consumer behavior criteria
- Design and execution of personalized marketing and/or promotional activities
- Design and execution of advertising and/or promotion and/or marketing activities in digital and/or other media
- Design and execution of activities to be developed for customer acquisition and/or value creation for existing customers in digital and/or other media
- Planning and execution of data analytics studies for marketing purposes
- Planning and execution of marketing processes for products and/or services
- Evaluating and responding to suggestions/wishes/complaints and requests submitted by stakeholders and visitors through all kinds of channels and carrying out improvement activities in accordance with such notifications
METHOD AND LEGAL BASIS FOR THE COLLECTION OF PERSONAL DATA
As Stated in Article 5 and 6;
- Explicit consent of the person concerned, in cases where explicit consent is compulsory,
- It is explicitly provided by the laws,
- Processing of personal data of the parties of a contract is necessary, provided that it is directly related to the establishment or performance of the contract
- It is necessary for compliance with a legal obligation to which the data controller is subject.
- Data processing is necessary for the establishment, exercise or protection of any right,
- Processing of data is necessary for the legitimate interests pursued by the data controller, provided that this processing shall not violate the fundamental rights and freedoms of the data subject;
personal data are collected from data subjects at the time of contacting TÜBİTAK and/or during the establishment of a legal relationship and throughout the continuation of such relationship; from third parties including business partners with whom TÜBİTAK cooperates or has a contractual relationship, and from legal authorities through channels such as; call center, camera and voice recordings, application forms, website membership and contact forms, the internet, mobile applications, websites, and e-newsletter registration forms, cookies, social media, and other publicly available media, trainings, meetings, organizations, and similar events.
Personal data collected through these methods can be processed and transferred for the purposes specified in this document within the framework of the processing conditions of personal data and personal data of special nature of the Law.
TRANSFER OF PERSONAL DATA
In the event of the transfer of collected personal data within the country or abroad, TUBITAK acts in accordance with the provisions defined in Articles 8 and 9 of the Law. These data may be shared with; authorized public institutions and organizations, law enforcement agencies, courts, and enforcement offices within the country, legally authorized private law entities, related third-party real persons and legal entities, service provider firms and their officials, project partners, suppliers, and support service providers within the scope of the relevant laws, legislation, and protocols, in cases of necessity, to ensure that TÜBİTAK carries out its services more effectively and fulfills its legal requirements.
RIGHTS OF THE DATA SUBJECT WITHIN THE SCOPE OF THE LAW
You may send your requests within the scope of Article 11 of the Law "regulating the rights of the data subject" to the address of TUBITAK Tunus Caddesi No: 80 06680 Kavaklıdere / Ankara, by adding the documents identifying the identity information in accordance with the "Comminuque on the Principles and Procedures for the Request to Data Controller". Alternatively, you can send your request via the TÜBİTAK Communication Center (TUBİMER) or to the email address tubitak.baskanlik@tubitak.hs03.kep.tr with a secure electronic signature.
The data subject must clearly and comprehensibly state the subject requested in the application to be made to use the rights mentioned above. Information and documents related to the application must be attached to the application.
You can reach TUBITAK via the contact information given below:
Address: TÜBİTAK Tunus Caddesi No:80 06680 Kavaklıdere / Ankara
Phone: +90 312 468 5300
Fax: +90 312 427 6817
Web Page: www.tubitak.gov.tr