This is an English translation provided for information. In case of any discrepancy, the Turkish version prevails. Turkish version

In accordance with the Personal Data Protection Law No. 6698 (the “Law”), your personal data is processed by ICON•S Türkiye Community (“ICON•S”), in its capacity as data controller, within the scope described below.

I. Methods of Collecting Personal Data and Legal Grounds
ICON•S collects personal data directly through our website in particular, as well as within the scope of events, trainings, meetings, seminars and other activities, in online and in-person events, and through audio, electronic or written channels. Your personal data is processed on the following legal grounds: where expressly provided for by law (the processing of internet traffic records pursuant to Law No. 5651), the establishment and performance of a contract (within the framework of the rules governing the services offered), compliance with a legal obligation (ensuring compliance with legislation), the establishment, exercise or protection of a right (for evidentiary purposes), the legitimate interests of the data controller (identifying and investigating unlawful acts), and, where you have given your explicit consent, the recording and publication of your photographs and other data during events.

II. Purposes of Processing and Transfer of Personal Data
Your personal data is processed for the purposes of operating the ICON•S website, carrying out information security processes, carrying out audit and ethics activities, managing access authorisations, ensuring that activities are conducted in compliance with legislation, following up and handling legal affairs, carrying out communication activities, organisation and event management, carrying out retention and archiving activities, carrying out social responsibility and civil society activities, ensuring the security of the data controller’s operations, and providing information to authorised persons, institutions and organisations.
Within the framework of the purposes stated above, and limited to the fulfilment of those purposes, your personal data may be transferred to the following, limited to the purposes set out in this privacy notice: our service providers operating in the field of event organisation; relevant parties for the purposes of conducting and auditing business activities, ensuring business continuity and carrying out information security processes; our business partners and service providers that provide, operate or deliver our information technology infrastructure; our business partners and service providers that provide services in quality control, complaint management and risk analysis; public institutions and private persons or organisations authorised by law, and third parties; administrative authorities, judicial authorities or relevant law enforcement agencies where log records are requested for the resolution of legal disputes or under the relevant legislation; experts, law firms and auditing firms for audit and fact-finding activities; public institutions for the fulfilment of regulatory and contractual obligations; and third parties to be specifically designated where the legitimate interests of the data controller so require (such as a digital forensics expert providing evidence-collection services).

III. Rights of the Data Subject
Pursuant to Article 11 of the Law, the data subject has the right to: learn whether personal data is being processed; request information if personal data has been processed; learn the purpose of the processing and whether the data is used in accordance with that purpose; know the third parties to whom personal data is transferred, domestically or abroad; request the correction of personal data if it has been processed incompletely or inaccurately; request the erasure or destruction of personal data within the framework of the conditions laid down in Article 7 of the Law; request that the actions carried out in this respect be notified to the third parties to whom personal data has been transferred; object to the occurrence of a result against the data subject by analysing the processed data exclusively through automated systems; and request compensation for the damage suffered as a result of the unlawful processing of personal data.

You may send us your requests regarding personal data at iconsturkiye@gmail.com.