KVKK Disclosure Statement

As Mersin Metropolitan Municipality, we aim to inform you about the Law No. 6698 on the Protection of Personal Data (KVKK), which regulates the protection of fundamental rights and freedoms of individuals, particularly the privacy of private life, in the processing of personal data, as well as the obligations and procedures for natural and legal persons processing personal data.

Data Controller

In accordance with Law No. 6698 on the Protection of Personal Data ("Law No. 6698"), your personal data may be processed by Mersin Metropolitan Municipality ("Municipality") as the data controller within the scope described below.

Purposes and Legal Bases for Processing Your Personal Data

To be used in the services provided to you under the laws and regulations our institution is subject to, to carry out our municipal services, to identify the owner and recipient of all kinds of transactions within this scope, to record your identity information, address, phone number, tax number, and other information classified as personal data under the KVKK, to prepare information and documents that will serve as the basis for transactions conducted on paper or electronically, to comply with information storage, reporting, and notification obligations stipulated by relevant legislation to judicial and administrative authorities, to fulfill our services under the applicable laws, and to provide other services offered or requested by our institution.

Additionally, under the heading "Conditions for processing personal data" in the Law, the conditions allowing the processing of personal data without the explicit consent of the data subject are listed as follows:

• Explicitly stipulated in the laws.
• Necessary due to the impossibility of obtaining consent from a person who is unable to express consent or whose consent is not legally valid, to protect their own life or physical integrity or that of another person.
• Necessary for the processing of personal data of the parties to a contract, provided it is directly related to the establishment or performance of the contract.
• Necessary for the data controller to fulfill its legal obligations.
• Made public by the data subject themselves.
• Necessary for the establishment, exercise, or protection of a right.
• Necessary for the legitimate interests of the data controller, provided it does not harm the fundamental rights and freedoms of the data subject.

HES Code

For purposes such as implementing activities related to the transmission of risk/no-risk information regarding the novel coronavirus for individuals queried via T.C. Identity Number and Hayat Eve Sığar (HES) code, through services provided under protocols with the Ministry of Health, personal data may be processed within the scope of Articles 5 and 6 of the KVKK and the conditions and purposes of personal data processing stipulated by the law.

The HES Code application is a code used within the Controlled Social Life framework to securely share whether you pose any risk regarding Covid-19 with institutions and individuals during activities such as transportation or visits. To obtain an HES Code through the HES application, the data subject must share personal data such as name, surname, age, gender, location information, and contact details, as well as sensitive personal data, including past and current health information. According to Article 6 of the Personal Data Protection Law ("KVKK"), the processing of sensitive personal data requires the informed explicit consent of the data subject or the existence of legal exceptions.

Method of Collecting Personal Data

Your personal data is collected through various methods, including all declarations/information forms and other documents related to municipal transactions issued with your approval and/or signature under Law No. 5216 on Metropolitan Municipalities and other relevant legislation, notifications made with your electronic approval and/or signature, and through channels such as our institution, local service units, websites, mobile applications, and call centers, in verbal, written, or electronic form.

Transfer of Your Personal Data

Your collected personal data may be transferred to our affiliates, businesses, legally authorized public institutions, organizations, private entities, contractors, judicial authorities, and law enforcement agencies within the framework of the personal data processing conditions specified in Articles 8 and 9 of Law No. 6698, to achieve the purposes mentioned above.

Except for exceptional cases stipulated in the legislation, personal data and sensitive personal data are not transferred to other natural or legal persons by our institution without the explicit consent of the data subject.

Rights of the Data Subject under Article 11 of Law No. 6698

As data subjects, if you submit your requests regarding your rights to our Municipality through the methods outlined in the Mersin Metropolitan Municipality Personal Data Protection and Processing Policy, publicly available at www.mersin.bel.tr, the Municipality will process the request as soon as possible and within thirty days at the latest, depending on the nature of the request. However, if the process incurs additional costs, the fee determined by the Personal Data Protection Board may be charged by the Municipality. In this context, data subjects have the following rights:

• Learning whether personal data is being processed,
• Requesting information regarding the processing of personal data, if processed,
• Learning the purpose of processing personal data and whether it is used in accordance with that purpose,
• Knowing the third parties to whom personal data is transferred domestically or abroad,
• Requesting the correction of incomplete or inaccurate personal data and requesting notification of the correction to third parties to whom the data has been transferred,
• Requesting the deletion or destruction of personal data if the reasons for processing no longer exist, despite being processed in accordance with Law No. 6698 and other relevant laws, and requesting notification of the deletion to third parties to whom the data has been transferred,
• Objecting to the occurrence of a result against the individual due to the analysis of processed data solely through automated systems,
• Requesting compensation for damages incurred due to the unlawful processing of personal data.

Pursuant to Article 13, Paragraph 1 of the KVKK, you may submit your requests regarding the above-mentioned rights to our Municipality in writing or electronically with a secure electronic signature via KEP. To exercise your rights, you can fill out the form available at www.mersin.bel.tr, submit a signed copy of the form along with identity-verifying documents in person to the Mersin Metropolitan Municipality Registry Office at Çankaya Mah. Atatürk CD. No:19 Taş Bina Akdeniz/MERSİN, send it via notary, or submit the form to mersinbuyuksehirbelediyebaskanligi@hs01.kep.tr with a secure electronic signature.

Your applications will be accepted following our institution’s reviews and identity verification, and a response will be provided to the data subject in writing or electronically within the legal periods specified in the law.

You can access the Personal Data Application Form from the page.

The data controller to whom you can apply under the law is: