Survey
Submit Your Invention
Event Calendar
Whatsapp
BOOK NOW

Personal Data Protection

PERSONAL DATA PROTECTION AND PROCESSING POLICY

PURPOSE

The purpose is to establish a policy that determines the obligations of Mersin Metropolitan Municipality, as the data controller, in processing the personal data of citizens and institutional employees in accordance with the Law No. 6698 on the Protection of Personal Data, which was enacted and published in the Official Gazette No. 29677 on April 7, 2016, to protect individuals’ fundamental rights and freedoms, particularly the privacy of private life.

SCOPE

As per the provisions of the KVKK, the scope includes natural persons whose personal data is processed, third parties accessing the Mersin Metropolitan Municipality network, employees of companies providing services through tenders, and institutional employees, whose data is processed wholly or partially automatically or non-automatically as part of a data recording system.

LEGAL OBLIGATIONS

Under the KVKK, Mersin Metropolitan Municipality has legal obligations regarding the protection and processing of personal data. These obligations are listed as follows:

Disclosure Obligation

Mersin Metropolitan Municipality is obliged to inform the data subject during the collection of personal data and provide information on the following matters:

  • The purposes for which personal data is processed,
  • To whom and for what purposes the processed personal data may be transferred,
  • The legal basis for collecting personal data,
  • The rights of the data subject.

CLASSIFICATION OF PERSONAL DATA

Personal Data

The KVKK defines personal data as any information relating to an identified or identifiable natural person. In this context, the data must be specific or identifiable (leading to the individual when combined with other information). Information such as a person’s name, surname, date and place of birth, identity number, social security number, phone number, address, images, payment details, health information, and similar data fall under the definition of personal data.

The subject of personal data protection is natural persons whose data is processed, and legal entities are excluded from the scope. Therefore, information such as a legal entity’s registration number, trade name, and registry details, which do not contain information about a natural person, is not protected as personal data under the KVKK.

Sensitive Personal Data

Sensitive personal data are types of information that, if disclosed, could cause harm or discrimination to the data subject, and are listed in Article 6, Paragraph 1 of the KVKK as follows: race, ethnic origin, political opinions, philosophical beliefs, religion, sect or other beliefs, appearance and clothing, membership in associations, foundations, or unions, health, sexual life, criminal convictions and security measures, and biometric and genetic data. Processing sensitive personal data without the explicit consent of the data subject is prohibited, except in cases explicitly authorized by law.

In this context, our institution does not process such personal data except where required by law, or processes them in accordance with the conditions specified in Article 6 of the KVKK with the explicit consent of the data subject.

PERSONAL DATA PROCESSING POLICY

Principles for Processing Personal Data

All collected personal data must be processed in accordance with the principles listed in Article 4 of the KVKK and the conditions specified in Articles 5 and 6. Our institution is responsible for processing personal data in compliance with the law and principles of honesty, accurately and up-to-date when necessary, for specific, clear, and legitimate purposes, and in a manner that is relevant, limited, and proportionate to the purpose.

This means that:

  • Mersin Metropolitan Municipality must process personal data in connection with the activities it conducts.
  • Mersin Metropolitan Municipality must process personal data only to the extent necessary. In this regard, the principle of proportionality should be considered, and personal data should not be used beyond what is required for the purpose. Additionally, processing unnecessary or unneeded personal data beyond what is necessary to achieve the purpose should be avoided.

Mersin Metropolitan Municipality’s Purposes for Processing Personal Data

  • Mersin Metropolitan Municipality processes personal data for these and similar purposes in compliance with Articles 5 and 6 of the KVKK.
  • It is processed in connection with municipal activities to provide our institution’s services and to establish communication regarding the services you request/will request.
  • Prepare information and documents that will serve as the basis for transactions conducted on paper or electronically,
  • Comply with information storage, reporting, and notification obligations stipulated by judicial and administrative authorities under relevant legislation,
  • Planning and execution of institutional sustainability activities,
  • Management of relationships with institutional companies and contractors,
  • Execution of personnel recruitment processes,
  • Execution and monitoring of financial reporting and risk management operations,
  • Execution and monitoring of legal affairs,
  • Planning and execution of institutional communication activities,
  • Execution of institutional management activities,
  • Management of HTYS, information requests, and complaints,
  • Providing information to authorized institutions as required by legislation,
  • Creation and tracking of visitor records,
  • Improving services provided through websites and applications,
  • Providing free and wireless internet services,

If the processing activity conducted for purposes other than those mentioned does not meet any of the conditions specified in the KVKK, the explicit consent of the data subject is obtained by the institution for the relevant processing process.

DATA PROCESSING ACTIVITIES AT BUILDING AND FACILITY ENTRANCES AND INSIDE

To ensure security, our institution conducts personal data processing activities for security camera surveillance and tracking guest entries and exits in our buildings and facilities. These activities are carried out through the use of security cameras, identity collection, and recording of guest entries and exits.

The surveillance and recording activities conducted by our institution are carried out in accordance with the Law on Private Security Services and relevant legislation.

In accordance with Article 12 of the KVKK, our institution takes the necessary technical and administrative measures to ensure the security of personal data obtained as a result of camera surveillance activities.

Our institution may provide internet access to visitors upon request during their stay in our buildings and facilities. In such cases, log records related to your internet access are recorded in accordance with Law No. 5651 and the mandatory provisions of the legislation enacted under this law; these records are processed only upon request by authorized public institutions and organizations or to fulfill our legal obligations during internal audit processes.

WEBSITE AND MOBILE APPLICATION VISITORS

Our institution records the visits of individuals to its websites and mobile applications to ensure that these visits are conducted in a manner appropriate to their purposes.

Detailed explanations regarding the processing and protection of personal data related to these activities on our institution’s websites and mobile applications are provided in the Website and Mobile Application Privacy Policy on our institution’s website.

PERSONAL DATA TRANSFER POLICY

Domestic Transfer of Personal Data

Mersin Metropolitan Municipality is obliged to act in accordance with the provisions of the KVKK and the decisions and regulations of the KVKK Board regarding the transfer of personal data. Personal and sensitive data belonging to data subjects cannot be transferred to other natural or legal persons without the explicit consent of the data subject. However, in cases mandated by the KVKK and other laws, data may be transferred to authorized administrative or judicial institutions or organizations as stipulated by the legislation without the explicit consent of the data subject.

PERSONAL DATA SECURITY POLICY

Mersin Metropolitan Municipality’s Obligations Regarding Data Security

As per Article 12 of the KVKK, the data security obligations of Mersin Metropolitan Municipality, as the data controller, are as follows:

  • Prevent the unlawful processing of personal data,
  • Prevent unlawful access to personal data,
  • Ensure the protection of personal data,
  • Conduct or have conducted necessary audits within the institution,
  • Take necessary measures to ensure that individuals or authorized personnel processing personal data on its behalf do not disclose or use the personal data learned during their duties in violation of legal provisions, even after leaving their positions,
  • Notify the data subject and the Board in case personal data is unlawfully obtained by others.

Measures Taken by Mersin Metropolitan Municipality Regarding Data Security

To fulfill its obligations regarding personal data security and to act swiftly in situations where security poses a risk, the following measures are taken:

Technical and Administrative Measures to Prevent Unlawful Access to Personal Data

The technical and administrative measures required for the processing, transfer, and storage of personal data are listed in the relevant sections. While the institution is obliged to fully implement these measures and prevent unlawful access, if third parties still unlawfully access personal data, the institution takes all technical and administrative measures in accordance with the relevant legislation and Board decisions to ensure that data subjects are not harmed.

Measures Taken for Personal Data Protection and Their Auditing

The data recording systems used within the institution are periodically monitored and audited to ensure they are created and used in compliance with the KVKK and relevant legislation, and reports are submitted to the authorized person or board.

Measures Taken in Case of Unauthorized Disclosure of Personal Data

The institution is obliged to take measures to prevent the unauthorized disclosure of personal data and to establish an internal policy for this purpose. Additionally, in such cases, the institution, as the data controller, is obliged to inform the individuals whose personal data has been disclosed and the KVKK Board.

RIGHTS OF THE DATA SUBJECT

Right to Access Personal Data

Data subjects have the right to access their personal data without any fee. Therefore, the institution provides the data subject with:

  • The right to learn whether their personal data is being processed;
  • The right to request information regarding the processing of their personal data, if processed;
  • The right to learn the purpose of processing their personal data and whether it is used in accordance with that purpose;
  • The right to request information about the third parties to whom their personal data is transferred, domestically or abroad.

Right to Modify or Delete Personal Data

Data subjects have the right to modify or delete their personal data without any fee.

In this context:

  • The right to request the correction of incomplete or inaccurate personal data,
  • The right to request the deletion or destruction of personal data if the reasons for processing no longer exist,
  • The right to request notification of the correction, deletion, or destruction operations to third parties to whom their personal data has been transferred,
  • The right to object to any adverse outcome resulting from the analysis of processed data solely through automated systems.

COOKIE POLICY

This cookie practices policy applies to websites and mobile platforms operated by or on behalf of Mersin Metropolitan Municipality, or platforms accessed and used through websites.

What Are Cookies?

Cookies are small data files placed on your computer by a web server through your browser, which store information and passwords while browsing websites, allowing the website to recognize you upon subsequent visits. When a connection is established between your browser and the server, the site identifies you through cookies.

The purpose of cookies is to provide convenience to users visiting the website. The lifespan of cookies varies depending on the browser settings configured by the user. Generally, internet browsers are set to accept cookies automatically by default. Browsers can be configured to block cookies or to alert the user when a cookie is sent to the device. You can clear stored cookie data until cookies are disabled.

Managing cookies varies from browser to browser, and detailed information can be found in the browser’s help menu.

PUBLICATION AND STORAGE OF THE DOCUMENT

This data policy will be communicated to users whose personal data is processed, in line with the disclosure obligation under the KVKK, and will also be published on websites affiliated with Mersin Metropolitan Municipality.

ENFORCEMENT

This data policy takes effect on the date of its publication and remains in effect until it is removed from the website.

Cookie Management Panel

We use cookies on our website to provide you with better service. By clicking the "Accept All Cookies" button, you consent to cookie usage. You can reject all cookies except those that are absolutely necessary by clicking on the "Reject All Cookies" option. To partially disable cookies, press the "Manage Cookies" button. For detailed information about our cookies and personal data processing, you can access our Cookie Policy.

Manage Your Cookie Preferences

Strictly Necessary Cookies

These cookies are necessary for the proper and secure functioning of our website, allowing users to navigate on our site and benefit from the services provided. These types of cookies are essential for the operation of our website and cannot be disabled by users.

Performance-Analytics Cookies

Analytics cookies are cookies that collect information about site usage and enable statistical measurement of user behavior. In this way, statistical data can be collected from users to understand the general trend on the site.

Functionality and Preference Cookies

Functionality and preference cookies are used to collect information about users' preferences, customize the site for users, provide functionality, and remember personalization and preferences.

Advertising/Targeting Cookies

Your personal data collected through advertising/targeting cookies is processed to show you relevant advertisements and carry out marketing activities. These cookies are used to identify users' browsers and devices to create profiles of their interests.